last executing test programs: 4m11.837600235s ago: executing program 0 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffff}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m11.706224762s ago: executing program 0 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) 4m11.241652319s ago: executing program 0 (id=1343): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250300000020010180240002800800030000020000080004002c0b00000800020007"], 0x2bc}}, 0x4080) 4m11.198201602s ago: executing program 0 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000800)='./file0/../file0/../file0/../file0/file0\x00') 4m11.111772077s ago: executing program 0 (id=1346): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x4006d1c, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 4m10.471421694s ago: executing program 0 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x3, {0x2, 0x1, 0x4}, {0x2, 0xb25f81e830ee96fb, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x2}, 0x1, 0x1}, {0x0, 0x0, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 4m10.440080736s ago: executing program 32 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x3, {0x2, 0x1, 0x4}, {0x2, 0xb25f81e830ee96fb, 0x1}, 0x0, 0xfe}, {0x1, 0x1, {0x1, 0xff}, {0x2}, 0x1, 0x1}, {0x0, 0x0, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x3}, 0xff, 0x1}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3m57.338495763s ago: executing program 3 (id=1623): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000005440)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x45833af92e4b38ff, 0x0) 3m57.173451232s ago: executing program 3 (id=1628): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f0000000000)=0x84) 3m56.916854707s ago: executing program 3 (id=1630): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() prlimit64(r0, 0x7, &(0x7f0000000040)={0x3, 0xfd}, 0x0) keyctl$session_to_parent(0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m56.610333715s ago: executing program 3 (id=1632): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000600), 0x4) 3m55.743040746s ago: executing program 3 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 3m55.722643337s ago: executing program 3 (id=1648): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 3m40.61965369s ago: executing program 33 (id=1648): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 3m34.334946008s ago: executing program 5 (id=2002): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4004000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ac, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m34.265443881s ago: executing program 5 (id=2005): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m34.179810926s ago: executing program 5 (id=2010): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((()') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11896f, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0x170, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x4000, 0x92be}, {0x0, 0x40000, 0x0, 0x2}, {0xfffffffb, 0x0, 0xca09}, 0x70bd29, 0x3502, 0xa, 0x0, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@empty}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) 3m34.021753896s ago: executing program 5 (id=2011): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file1', [], 0xa, "b6448f14476c994ed2cc148ced5724c826ba2371e68b7e0fffd8a8d96029c08c08812f5f6f386e1b8ca128"}, 0x36) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x1cb) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 3m33.94991719s ago: executing program 5 (id=2012): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r2 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 3m33.370656184s ago: executing program 5 (id=2022): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJKmTauJIPjjFBA0ULoxNbYKHioeRLBQ0LPtstmGmk22ZDelCQEtIngRVDwIeunZH/Xm1R9X/S88iKVqWqx4kMhsZtpts5smbZKt7ucD07w3b7bvfffNvHm7M8wG0LNG038KEY9FxAdJxHC2PomIgWaqP+LY2nbXV5bL6ZLE6uprvyfNba6tLJej5TWp/Vnm0Yj4/t2Ig4X19dYXl2ZK1Wplfi3bFxFnx+uLS4fOzJamK9OVuSMTk5OHjz579Mj2xfrnT0sHLn/48lNfHfv7nUcuvf9DEsfiQFbWGsd2GY3R7D0ZSN/CW7y03ZV1WdLtBnBXCtnB1x/pGDAcfc0UAPB/9lZErAIAPSZx/geAHpN/D3BtZbmcL939RmJ3XXkxIvauxZ9f31wr6c+u2e1tXgcdupbccmUkiYiRbah/NCI+++aNL9Ildug6JEA7b1+IiFMjo+vH/2TdPQtb9fQGZXuyv6O3rTf+we75Np3/PNdu/le4Mf+JNvOfwTbH7t244/G/bxsq2UA6/3uh5d626y3xZ0b6stwDzTnfQHL6TLWSjm0PRsRYDAym+YkN6hi7+s/VTmWt878/Pnrz87T+9O/NLQq/9g/e+pqpUqN0LzG3unIh4vH+dvEnN/o/6TD/PbHJOl55/r1PO5Wl8afx5sv6+CO7O2lnrF6MeLJt/9+8oy1NjTdmO9yfON7cHcbznaKNr3/+ZKhT/a39ny5p/flngd2Q9v/QxvGPJK33a9bXjv2t+PHi8Hedyu4cf/v9f0/yejOdzyPOlxqN+YmIPcmr69cfvvnaPJ9vn8Y/9kT743+j/T/9THhqk/H3X/7tyw3j39/d/p/aUv+3S6SDdIeimVL10vWZvk71b67/J5upsWzNZsa/Ti29PXEv7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFYhIg5EUijeSBcKxeLab3g/HEOFaq3eOHi6tjA3Fc3fyh6JgUL+qMvhluehTmTPw8/zh2/LPxMRD0XEx4P7kvw5ilNdjh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvs7/P5/6pfBbrcOANgxe7vdAABg1zn/A0Dvcf4HgN7j/A8Avcf5HwB6j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zE8ePpsvrXynI5zU+dW1yYqZ07NFWpzxRnF8rFcm3+bHG6VpuuVorl2uyd/r9qrXZ2MuYWzo83KvXGeH1x6eRsbWGucfLMbGm6crIysCtRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW1BeXZkrVamVe4i4Sq/dHM7qf6Mt2p/ulPbuaSO6PZmxzossDEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/xL8BAAD//7KsH7I=") r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10005}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x40000d, 0x4) creat(&(0x7f0000000000)='./file2\x00', 0x90) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000d80)={0x5, 0x7fffffff, 0x2, 0x7}) 3m33.347219435s ago: executing program 34 (id=2022): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10005}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000040)=0x40000d, 0x4) creat(&(0x7f0000000000)='./file2\x00', 0x90) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000d80)={0x5, 0x7fffffff, 0x2, 0x7}) 3.311738737s ago: executing program 6 (id=5325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x20000084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000340)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@mb_optimize_scan}]}, 0x6, 0x659, &(0x7f00000013c0)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJffjUjW1d2EXBgl2IuGhokho6/UGTgq2FJuBCQUHEbZFu/Ae6l+5dCCKoO9dCFalY0NKR+2OayWQmM/k10+R+PjCZc+85N+d8c+fknjt3ztwAKms2+5FGvB/x+moSMd2SNxVF5mxZ7sW/Hl7LHkk0Gt/9ZxJJua5ZPimfT5UL4xHxxwsRn67trHft/oMbi/VG4VHEmfWbd86s3X/w0erNxevL15dvLZz92sefzH994eOFlobu36ny+eKl73z+Fz/54VdX/lT/KIlzcWX0x0vRFsdhmY3ZeF2G2Lp+JCI+yRId/i7HzQkIodJq5etxNCI+G9NRy5cK07H686E2DjhSjVpEY3dJrwLAcaV7Q1U1xwHNc/v+zoOvHPGoZHCeny9OgHbGP1K+5TCenxtNvkhazoyK9zZOH0L9WR2vHo4/fvVw5nFsex/i5Zu9M3II9XSzsRkRn+sUf5K37XQeaRZ/uu1cP4mI+YgYK9v3rQO0IWlJH8X7MLvpM/5aFn/rfkgj4lz5nK2/sM/629/WGnT8AFTTs/PlgXwjW9o6/mVjj+b4J7bGP4+a200d/JJMbtjHv+7jv+bxfjwf96Rt47BszHK5868cbV/xt59d/FW3+ovx38zj5iOrvzkWHITnmxEzbfH/NAu2HP9k8Scdxr9Zkavn+qvj23/+x8VuecOOv/Ek4oOO5z9bo9Istcv1yTMrq/Xl+eJnxzp+9/sf/LZb/Z3jf+cIIu0s2/+TXeJv2f9p+3bZ3+RO51+52b7i6eUnN7vVP9Vz/6d/H0uK882xcs2PNtfX7y5EjCWXyiLl+sX19btnd4+3KPOykT8vFPF/+KXO/X/b678tqonmv8w+3PnejRfd8vbz+m+5mPy60WcbusniX+q9/7f6/0QzN+KXfdbxn+/f+0K3vM7xJweMCgAAAAAAAKopza/BJuncm3Sazs0V82U/E5Np/fba+pdXbt+7tRTxYf55yNE00iT/yMh0sZysrNaXF8rPwzaXz7YtfyUi3ouIX9cm8uW5a7frS8MOHgAAAAAAAAAAAAAAAAAAAN4Sp8r5/837VP+7Vsz/Byqi9w3mdtz/ATghjvIGk8DbLe//ux3i3x1cW4DBcvyH6tL/obr0f6gu/R+qS/+H6tL/obr0f6gu/R8AAAAATqT3vvjsr0lEbHxjIn9kxso8k37hZBvdU+nakbUDGDw9GqrrzaV/g32onL7G//8tvxzw6JsDDEHSaWU+OGjs3vmfddxyy+bB2wYAAAAAAAAAAAAAFD54v/v8/73NDQaOG9P+oLoOMP/fVwfAMbfvr/4fO9x2AIPnHB/oMYs/xrtl9Jr/DwAAAAAAAAAAAAAcmqn8kaRz5VzgqUjTubmIT0XE6RhNVlbry/MR8W5E/KU2+k62vDDsRgMAAAAAAAAAAAAAAAAAAMAJs3b/wY3Fen35bmvifzvWnOxE8y6ovQs3+iiza+KbscetIhn8n2UiIoa+U7Ylnpa3m93z5n8oX+ctWSMtZZKIjSx76AEWiXg7mpEnhvUfCQAAAAAAAAAAAAAAAAAAqqtl7nFnM78ZcIsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYPC27v/fI7E0WWzQV+HtiWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcT/8PAAD//4RxNqU=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x48000) 2.75020548s ago: executing program 2 (id=5329): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.240211349s ago: executing program 6 (id=5332): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f00000047c0)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x92e8, 0x1000, 0x1, 0x85}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.914533628s ago: executing program 2 (id=5340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) read(r8, &(0x7f0000000340)=""/209, 0xd1) 1.893527379s ago: executing program 7 (id=5342): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 1.777401026s ago: executing program 2 (id=5343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 1.738883429s ago: executing program 6 (id=5344): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xf}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1.649868004s ago: executing program 2 (id=5345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 1.648355764s ago: executing program 7 (id=5355): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 1.574341238s ago: executing program 2 (id=5347): openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 1.569751799s ago: executing program 1 (id=5348): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x600, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 1.505930853s ago: executing program 7 (id=5349): socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg(r1, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.457452405s ago: executing program 1 (id=5350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0x4}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1.343211402s ago: executing program 1 (id=5352): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.167864702s ago: executing program 4 (id=5353): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 889.353738ms ago: executing program 4 (id=5354): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000004, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") 754.416236ms ago: executing program 6 (id=5356): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) eventfd2(0x0, 0x0) io_setup(0x81, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 724.208928ms ago: executing program 6 (id=5357): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) fcntl$lock(r2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920500024000000002080004400000008308000140000000110800034000000002080002400000008408000140"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000003c0)={0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 627.296984ms ago: executing program 4 (id=5358): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x183cc9, 0x0, 0x82, 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@multicast1, @private}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x1, 0xb, 0x79, @mcast2, @local, 0x10, 0x7, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x0, 0x400, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40, 0x1, 0x1000, 0x7ff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x7}, {0x3, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 626.401274ms ago: executing program 1 (id=5368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 493.670451ms ago: executing program 2 (id=5359): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) r1 = open(0x0, 0x4c27e, 0x2) faccessat(r1, 0x0, 0x6) r2 = dup2(r0, 0xffffffffffffffff) bind$inet6(r2, 0x0, 0x0) mknod(0x0, 0x20, 0xbc3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0x2, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) 484.874442ms ago: executing program 4 (id=5360): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) 443.257905ms ago: executing program 1 (id=5361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703", 0x0, 0x0, 0x0, 0x6, r0}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x46e}, @generic={0xb9, 0x4, 0x3, 0x401, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @generic={0x3, 0x8, 0x3, 0x4, 0xffff37f1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x1, 0x8}, 0x2c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000480)={{0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x3, 'lc\x00', 0x23, 0x81, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x1, 0x1cb, 0xa, 0x12d58}}, 0x44) 441.691625ms ago: executing program 4 (id=5362): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x3, r3}, 0x38) 378.471498ms ago: executing program 4 (id=5363): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x109}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) socket(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x8045}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000001fc0)={0x8, 0x6000, 0x9557, 0x68, 0x3908, 0xfffffffffffffff7, 0x8, 0x5}, 0x0, 0x0, 0x0, 0x0) 358.345649ms ago: executing program 1 (id=5364): io_uring_setup(0x4e60, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x210}, &(0x7f0000ff0000), &(0x7f00000013c0)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = msgget$private(0x0, 0x7ac) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) msgrcv(r1, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="c883d87afd02cb7a"], 0x8, 0x8fa2496c381b7ad5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x221}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x74, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) readv(r3, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='sched\x00') syz_io_uring_setup(0x57f9, &(0x7f0000000400)={0x0, 0xf801, 0x2, 0x1, 0xbd7f7fff}, &(0x7f0000000480), &(0x7f0000000200)) 307.299182ms ago: executing program 7 (id=5365): syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x2, 0x349}, &(0x7f0000000500), &(0x7f0000000600)) 306.014233ms ago: executing program 7 (id=5366): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[], 0xfd, 0x36e, &(0x7f0000000c00)="$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") r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x210, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd34, 0x5}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0x20, 0x0, @random="aa685452be554546a5bce18e7c0d28fbfc08c339c0786d24d42c3b10"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0xc26d}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x154, 0x84, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3c7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="93fe8b6b81b5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="dd9fbecb6dce"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf14}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8f5}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="6fe2ab6f581048294865"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="1bd2341d40b7d1a03c7788155e043beed7"}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}]}, 0x210}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 64.091677ms ago: executing program 6 (id=5367): socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7fffc00000001, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xf}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 0s ago: executing program 7 (id=5369): syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x94cc3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) kernel console output (not intermixed with test programs): [ T29] audit: type=1326 audit(1770115614.946:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.751854][ T29] audit: type=1326 audit(1770115614.946:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.775404][ T29] audit: type=1326 audit(1770115614.946:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.799768][ T29] audit: type=1326 audit(1770115614.946:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.823300][ T29] audit: type=1326 audit(1770115614.946:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.847206][ T29] audit: type=1326 audit(1770115614.946:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.872397][ T29] audit: type=1326 audit(1770115614.946:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14696 comm="syz.2.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f739037aeb9 code=0x7ffc0000 [ 232.942169][T14699] wg1 speed is unknown, defaulting to 1000 [ 232.948477][T14699] lo speed is unknown, defaulting to 1000 [ 232.954633][T14699] lo speed is unknown, defaulting to 1000 [ 233.590145][T14761] netlink: 'syz.6.3917': attribute type 1 has an invalid length. [ 233.629785][T14761] bond6: entered promiscuous mode [ 233.634945][T14761] bond6: entered allmulticast mode [ 233.641264][T14761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.662412][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3917'. [ 233.704364][T14761] bond6 (unregistering): Released all slaves [ 233.803286][T14776] netlink: 'syz.6.3922': attribute type 1 has an invalid length. [ 233.820400][T14776] bond6: entered promiscuous mode [ 233.825900][T14776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.857926][T14776] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.867947][T14776] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 233.878643][T14776] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 233.913373][T14776] bond6: (slave wireguard0): making interface the new active one [ 233.921349][T14776] wireguard0: entered promiscuous mode [ 233.945272][T14776] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 233.959703][T14784] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 233.984227][T14784] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 234.032078][T14791] batadv_slave_0: Caught tx_queue_len zero misconfig [ 234.366087][T14800] wg1 speed is unknown, defaulting to 1000 [ 234.372890][T14800] lo speed is unknown, defaulting to 1000 [ 234.379598][T14800] lo speed is unknown, defaulting to 1000 [ 234.452242][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 234.461395][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 234.706515][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 234.726438][T14804] hsr_slave_1 (unregistering): left promiscuous mode [ 234.780764][T14823] loop7: detected capacity change from 0 to 512 [ 234.792636][T14823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.829182][T14823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.852577][T14823] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.042080][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.918770][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3950'. [ 236.198056][T14874] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3955'. [ 236.207353][T14874] netlink: 'syz.7.3955': attribute type 2 has an invalid length. [ 236.795528][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3969'. [ 236.806111][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 236.895654][T14919] wg1 speed is unknown, defaulting to 1000 [ 236.995953][T14919] lo speed is unknown, defaulting to 1000 [ 237.013552][T14919] lo speed is unknown, defaulting to 1000 [ 237.233014][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 237.521941][T14959] loop7: detected capacity change from 0 to 4096 [ 237.542276][T14959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.632755][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.765043][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3992'. [ 237.805097][T14967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14967 comm=syz.7.3992 [ 238.158513][T14976] netem: unknown loss type 12 [ 238.163408][T14976] netem: change failed [ 238.565631][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 238.565763][ T29] audit: type=1326 audit(1770115620.886:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.596602][ T29] audit: type=1326 audit(1770115620.886:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.635871][ T29] audit: type=1326 audit(1770115620.886:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.660210][ T29] audit: type=1326 audit(1770115620.886:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.684197][ T29] audit: type=1326 audit(1770115620.926:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.708520][ T29] audit: type=1326 audit(1770115620.926:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 238.732246][ T29] audit: type=1326 audit(1770115620.926:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0e153ac22 code=0x7ffc0000 [ 238.756641][ T29] audit: type=1326 audit(1770115620.926:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc0e153acb7 code=0x7ffc0000 [ 238.781026][ T29] audit: type=1326 audit(1770115620.926:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc0e14f7c51 code=0x7ffc0000 [ 238.804616][ T29] audit: type=1326 audit(1770115620.926:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14984 comm="syz.1.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc0e153bcc9 code=0x7ffc0000 [ 238.938267][T14996] wg1 speed is unknown, defaulting to 1000 [ 238.944562][T14996] lo speed is unknown, defaulting to 1000 [ 238.955706][T14996] lo speed is unknown, defaulting to 1000 [ 239.253181][T14985] __nla_validate_parse: 2 callbacks suppressed [ 239.253200][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 239.807254][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.646889][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 240.736068][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4037'. [ 240.769130][T15092] net_ratelimit: 12 callbacks suppressed [ 240.769147][T15092] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 240.809435][T15087] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15087 comm=syz.1.4037 [ 241.501913][T15148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.552348][T15153] ip_vti0: entered promiscuous mode [ 241.558499][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4061'. [ 241.723995][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4072'. [ 241.819978][T15185] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15185 comm=syz.4.4075 [ 241.897951][T15191] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=15191 comm=syz.4.4077 [ 241.952135][T15193] netlink: 'syz.1.4078': attribute type 39 has an invalid length. [ 241.963974][T15191] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4077'. [ 242.081423][T15201] wg1 speed is unknown, defaulting to 1000 [ 242.088041][T15201] lo speed is unknown, defaulting to 1000 [ 242.094204][T15201] lo speed is unknown, defaulting to 1000 [ 242.279717][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4085'. [ 242.645784][T15234] syzkaller0: entered promiscuous mode [ 242.651460][T15234] syzkaller0: entered allmulticast mode [ 242.683507][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 242.713467][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 242.795719][T15242] siw: device registration error -23 [ 243.018057][T15254] syzkaller0: entered promiscuous mode [ 243.023591][T15254] syzkaller0: entered allmulticast mode [ 243.059584][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4104'. [ 243.092247][T15258] netlink: 'syz.1.4105': attribute type 142 has an invalid length. [ 243.173878][T15264] netlink: 'syz.7.4108': attribute type 33 has an invalid length. [ 243.913028][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 243.913047][ T29] audit: type=1326 audit(1770115626.236:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 243.943445][ T29] audit: type=1326 audit(1770115626.236:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 243.969187][ T29] audit: type=1326 audit(1770115626.286:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 243.992990][ T29] audit: type=1326 audit(1770115626.286:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.016651][ T29] audit: type=1326 audit(1770115626.286:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.040180][ T29] audit: type=1326 audit(1770115626.286:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.063984][ T29] audit: type=1326 audit(1770115626.286:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.087641][ T29] audit: type=1326 audit(1770115626.286:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.111327][ T29] audit: type=1326 audit(1770115626.286:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.135397][ T29] audit: type=1326 audit(1770115626.286:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.1.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 244.285499][T15298] tipc: Enabling of bearer rejected, failed to enable media [ 244.726155][T15324] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.776241][T15335] bond5: left promiscuous mode [ 244.786653][T15335] bond6: left promiscuous mode [ 244.791657][T15335] wireguard0: left promiscuous mode [ 244.799162][T15335] geneve3: left promiscuous mode [ 244.805100][T15335] bond7: left allmulticast mode [ 244.810317][T15335] ip6gretap1: left allmulticast mode [ 244.817633][T15335] hsr0: left allmulticast mode [ 244.823117][T15335] dummy0: left allmulticast mode [ 244.828302][T15335] bond0: left allmulticast mode [ 244.833781][ T5179] lo speed is unknown, defaulting to 1000 [ 244.839724][ T5179] syz2: Port: 1 Link DOWN [ 244.854911][T15324] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.890115][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 32948 - 0 [ 244.899860][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 32948 - 0 [ 244.908552][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 32948 - 0 [ 244.917383][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 32948 - 0 [ 245.015754][T15324] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.092478][T15324] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.408071][ T3326] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.590815][T15346] can: request_module (can-proto-0) failed. [ 245.613243][T15349] __nla_validate_parse: 4 callbacks suppressed [ 245.613263][T15349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4137'. [ 245.628819][T15349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4137'. [ 245.637928][T15349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4137'. [ 245.647623][T15349] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4137'. [ 245.767973][T15346] wireguard0: entered promiscuous mode [ 245.774471][T15346] wireguard0: entered allmulticast mode [ 245.870128][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.882373][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.912712][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.201177][T15375] uprobe: syz.4.4148:15375 failed to unregister, leaking uprobe [ 246.297353][T15383] IPVS: sed: FWM 3 0x00000003 - no destination available [ 246.306259][T15384] netlink: 'syz.2.4151': attribute type 83 has an invalid length. [ 246.358356][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4152'. [ 246.549245][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4157'. [ 246.695158][T15406] netlink: 'syz.2.4161': attribute type 33 has an invalid length. [ 246.703938][T15406] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4161'. [ 246.717403][T15406] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4161'. [ 246.726720][T15406] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.747706][T15406] batman_adv: batadv0: Removing interface: dummy0 [ 246.954202][T15425] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4170'. [ 246.988412][T15425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.060148][T15425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.081171][T15425] bond0 (unregistering): Released all slaves [ 247.248662][T15435] netlink: 'syz.6.4173': attribute type 1 has an invalid length. [ 247.269070][T15435] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.400700][T15435] bond7: (slave gretap1): making interface the new active one [ 247.410378][T15435] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 247.850029][T15455] netlink: 'syz.4.4177': attribute type 33 has an invalid length. [ 247.858660][T15455] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4177'. [ 247.925135][T15457] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 247.940848][T15457] bond0: entered promiscuous mode [ 247.946023][T15457] bridge9: entered promiscuous mode [ 247.951589][T15457] bond0: entered allmulticast mode [ 247.956814][T15457] bridge9: entered allmulticast mode [ 248.289131][T15471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.297843][T15471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.822811][T15474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.987181][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 248.987197][ T29] audit: type=1326 audit(1770115632.312:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 249.025927][ T29] audit: type=1326 audit(1770115632.312:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.4183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 249.200799][T15492] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 249.431624][T15501] bridge_slave_0 (unregistering): left promiscuous mode [ 249.438843][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.533033][T15506] vlan0: entered promiscuous mode [ 249.538169][T15506] ip6gretap0: entered promiscuous mode [ 249.823236][T15517] macsec0: entered allmulticast mode [ 249.852054][T15519] team1: entered promiscuous mode [ 249.858007][T15519] team1: entered allmulticast mode [ 249.866643][T15519] 8021q: adding VLAN 0 to HW filter on device team1 [ 249.878178][T15517] veth1_macvtap: entered allmulticast mode [ 249.887869][T15517] macsec0: entered promiscuous mode [ 250.564373][T15540] syz.4.4210 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 250.579508][T15540] CPU: 1 UID: 0 PID: 15540 Comm: syz.4.4210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.579589][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.579604][T15540] Call Trace: [ 250.579612][T15540] [ 250.579621][T15540] __dump_stack+0x1d/0x30 [ 250.579648][T15540] dump_stack_lvl+0x95/0xd0 [ 250.579674][T15540] dump_stack+0x15/0x1b [ 250.579700][T15540] dump_header+0x80/0x240 [ 250.579765][T15540] oom_kill_process+0x295/0x350 [ 250.579800][T15540] out_of_memory+0x97d/0xb80 [ 250.579830][T15540] try_charge_memcg+0x62e/0xa10 [ 250.579869][T15540] obj_cgroup_charge_pages+0x23/0xc0 [ 250.579920][T15540] __memcg_kmem_charge_page+0x9e/0x170 [ 250.579966][T15540] __alloc_frozen_pages_noprof+0x18a/0x350 [ 250.580110][T15540] alloc_pages_mpol+0xb3/0x260 [ 250.580202][T15540] alloc_pages_noprof+0x8f/0x130 [ 250.580248][T15540] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 250.580324][T15540] __kvmalloc_node_noprof+0x471/0x680 [ 250.580365][T15540] ? ip_set_alloc+0x24/0x30 [ 250.580493][T15540] ? ip_set_alloc+0x24/0x30 [ 250.580563][T15540] ip_set_alloc+0x24/0x30 [ 250.580598][T15540] hash_netiface_create+0x282/0x740 [ 250.580631][T15540] ? __pfx_hash_netiface_create+0x10/0x10 [ 250.580754][T15540] ip_set_create+0x3cf/0x970 [ 250.580794][T15540] ? __nla_parse+0x40/0x60 [ 250.580824][T15540] nfnetlink_rcv_msg+0x509/0x5d0 [ 250.580948][T15540] netlink_rcv_skb+0x123/0x220 [ 250.580983][T15540] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.581032][T15540] nfnetlink_rcv+0x167/0x1720 [ 250.581144][T15540] ? event_sched_in+0xebd/0xf90 [ 250.581173][T15540] ? __list_add_valid_or_report+0x38/0xe0 [ 250.581198][T15540] ? merge_sched_in+0x5db/0xbe0 [ 250.581260][T15540] ? rb_next+0x5c/0x80 [ 250.581288][T15540] ? visit_groups_merge+0xf7e/0xfd0 [ 250.581322][T15540] ? event_sched_out+0x896/0x8f0 [ 250.581358][T15540] ? _raw_spin_lock_bh+0x56/0xb0 [ 250.581483][T15540] ? should_fail_ex+0x30/0x280 [ 250.581544][T15540] ? selinux_nlmsg_lookup+0x99/0x890 [ 250.581574][T15540] ? __rcu_read_unlock+0x33/0x70 [ 250.581619][T15540] ? __netlink_lookup+0x276/0x2b0 [ 250.581647][T15540] netlink_unicast+0x5c0/0x690 [ 250.581692][T15540] netlink_sendmsg+0x5c8/0x6f0 [ 250.581722][T15540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.581772][T15540] ____sys_sendmsg+0x5af/0x600 [ 250.581804][T15540] ___sys_sendmsg+0x195/0x1e0 [ 250.581852][T15540] __x64_sys_sendmsg+0xd4/0x160 [ 250.581881][T15540] x64_sys_call+0x17ba/0x3000 [ 250.581980][T15540] do_syscall_64+0xc0/0x2a0 [ 250.582071][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.582133][T15540] RIP: 0033:0x7f94de04aeb9 [ 250.582150][T15540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.582175][T15540] RSP: 002b:00007f94dcaa7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.582202][T15540] RAX: ffffffffffffffda RBX: 00007f94de2c5fa0 RCX: 00007f94de04aeb9 [ 250.582237][T15540] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 250.582255][T15540] RBP: 00007f94de0b8c1f R08: 0000000000000000 R09: 0000000000000000 [ 250.582274][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.582292][T15540] R13: 00007f94de2c6038 R14: 00007f94de2c5fa0 R15: 00007ffdf52971a8 [ 250.582318][T15540] [ 250.582329][T15540] memory: usage 307200kB, limit 307200kB, failcnt 959 [ 250.923545][T15540] memory+swap: usage 335856kB, limit 9007199254740988kB, failcnt 0 [ 250.931704][T15540] kmem: usage 267092kB, limit 9007199254740988kB, failcnt 0 [ 250.939204][T15540] Memory cgroup stats for /syz4: [ 250.957454][T15540] cache 40501248 [ 250.966139][T15540] rss 557056 [ 250.969532][T15540] shmem 39968768 [ 250.973110][T15540] mapped_file 139264 [ 250.977082][T15540] dirty 98304 [ 250.980471][T15540] writeback 0 [ 250.983777][T15540] workingset_refault_anon 1162 [ 250.988607][T15540] workingset_refault_file 113 [ 250.993749][T15540] swap 29343744 [ 250.997284][T15540] swapcached 0 [ 251.000782][T15540] pgpgin 405105 [ 251.004266][T15540] pgpgout 395078 [ 251.007911][T15540] pgfault 310791 [ 251.011489][T15540] pgmajfault 154 [ 251.015186][T15540] inactive_anon 40337408 [ 251.019540][T15540] active_anon 200704 [ 251.023550][T15540] inactive_file 0 [ 251.027289][T15540] active_file 532480 [ 251.031271][T15540] unevictable 0 [ 251.034802][T15540] hierarchical_memory_limit 314572800 [ 251.040272][T15540] hierarchical_memsw_limit 9223372036854771712 [ 251.046548][T15540] total_cache 40501248 [ 251.050700][T15540] total_rss 557056 [ 251.054448][T15540] total_shmem 39968768 [ 251.058623][T15540] total_mapped_file 139264 [ 251.063063][T15540] total_dirty 98304 [ 251.066897][T15540] total_writeback 0 [ 251.070786][T15540] total_workingset_refault_anon 1162 [ 251.076175][T15540] total_workingset_refault_file 113 [ 251.081613][T15540] total_swap 29343744 [ 251.085626][T15540] total_swapcached 0 [ 251.089583][T15540] total_pgpgin 405105 [ 251.093650][T15540] total_pgpgout 395078 [ 251.097792][T15540] total_pgfault 310791 [ 251.101898][T15540] total_pgmajfault 154 [ 251.106067][T15540] total_inactive_anon 40337408 [ 251.110964][T15540] total_active_anon 200704 [ 251.115422][T15540] total_inactive_file 0 [ 251.119720][T15540] total_active_file 532480 [ 251.124266][T15540] total_unevictable 0 [ 251.128300][T15540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4210,pid=15539,uid=0 [ 251.143075][T15540] Memory cgroup out of memory: Killed process 15539 (syz.4.4210) total-vm:94000kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 251.213350][T15550] netlink: 'syz.1.4213': attribute type 1 has an invalid length. [ 251.339498][T15550] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.347964][T15550] bond8: (slave bond9): making interface the new active one [ 251.355634][T15550] bond8: (slave bond9): Enslaving as an active interface with an up link [ 251.426410][T15550] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 251.438932][T15550] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 251.565312][T15558] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.745031][T15558] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.932666][T15558] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.339390][T15558] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.404280][ T31] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.422008][ T31] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.452191][ T31] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.483547][ T31] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.648165][T15585] SELinux: failed to load policy [ 253.199030][ T29] audit: type=1326 audit(1770115636.512:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.223380][ T29] audit: type=1326 audit(1770115636.512:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.247005][ T29] audit: type=1326 audit(1770115636.512:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.270575][ T29] audit: type=1326 audit(1770115636.512:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.294015][ T29] audit: type=1326 audit(1770115636.512:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.317685][ T29] audit: type=1326 audit(1770115636.512:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.341357][ T29] audit: type=1326 audit(1770115636.512:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.364930][ T29] audit: type=1326 audit(1770115636.512:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15593 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb49450aeb9 code=0x7ffc0000 [ 253.404070][T15597] wg1 speed is unknown, defaulting to 1000 [ 253.410636][T15597] lo speed is unknown, defaulting to 1000 [ 253.426874][T15597] lo speed is unknown, defaulting to 1000 [ 253.500231][T15605] netlink: 'syz.4.4231': attribute type 1 has an invalid length. [ 253.518810][T15605] Unknown options in mask 20 [ 253.817620][T15608] __nla_validate_parse: 8 callbacks suppressed [ 253.817641][T15608] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4232'. [ 253.834132][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4233'. [ 254.001582][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4235'. [ 254.014074][T15615] dummy0 (unregistering): left promiscuous mode [ 254.214915][T15624] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 254.285225][T15624] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 254.644391][T15637] netlink: 'syz.1.4244': attribute type 4 has an invalid length. [ 254.768470][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'. [ 255.057640][T15649] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4247'. [ 255.107923][T15649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15649 comm=syz.7.4247 [ 255.134870][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 255.134891][ T29] audit: type=1326 audit(1770115638.452:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.188729][T15649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15649 comm=syz.7.4247 [ 255.224181][ T29] audit: type=1326 audit(1770115638.452:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.248068][ T29] audit: type=1326 audit(1770115638.452:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.271494][ T29] audit: type=1326 audit(1770115638.452:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.295090][ T29] audit: type=1326 audit(1770115638.452:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.318638][ T29] audit: type=1326 audit(1770115638.462:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.342276][ T29] audit: type=1326 audit(1770115638.462:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.365861][ T29] audit: type=1326 audit(1770115638.462:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.389532][ T29] audit: type=1326 audit(1770115638.462:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 255.413146][ T29] audit: type=1326 audit(1770115638.462:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15652 comm="syz.1.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0e153ac22 code=0x7ffc0000 [ 256.312826][T15688] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4263'. [ 256.342131][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4265'. [ 256.451326][T15706] loop7: detected capacity change from 0 to 1024 [ 256.479903][T15706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.499352][T15706] netlink: 'syz.7.4268': attribute type 11 has an invalid length. [ 256.539899][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.579253][T15743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4279'. [ 257.778395][T15751] netlink: 'syz.1.4280': attribute type 13 has an invalid length. [ 258.093229][T15762] loop7: detected capacity change from 0 to 512 [ 258.168995][T15765] wg1 speed is unknown, defaulting to 1000 [ 258.175786][T15765] lo speed is unknown, defaulting to 1000 [ 258.182424][T15765] lo speed is unknown, defaulting to 1000 [ 258.326673][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4284'. [ 258.537747][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4286'. [ 258.600805][T15768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15768 comm=syz.1.4286 [ 258.659705][T15762] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.4285: inode has both inline data and extents flags [ 258.673593][T15762] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4285: couldn't read orphan inode 15 (err -117) [ 258.694801][T15762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.729847][T15773] lo: Caught tx_queue_len zero misconfig [ 258.914448][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.977996][T15783] wg1 speed is unknown, defaulting to 1000 [ 259.000388][T15783] lo speed is unknown, defaulting to 1000 [ 259.006815][T15783] lo speed is unknown, defaulting to 1000 [ 259.312709][T15799] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.388437][T15799] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.478574][T15799] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.577654][T15799] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.626866][T15804] netlink: 'syz.1.4298': attribute type 1 has an invalid length. [ 259.634871][T15804] netlink: 668 bytes leftover after parsing attributes in process `syz.1.4298'. [ 259.765040][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.966410][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.145430][ T29] kauditd_printk_skb: 689 callbacks suppressed [ 260.145449][ T29] audit: type=1326 audit(1770115899.461:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.175453][ T29] audit: type=1326 audit(1770115899.461:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.199064][ T29] audit: type=1326 audit(1770115899.461:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.222624][ T29] audit: type=1326 audit(1770115899.461:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.246281][ T29] audit: type=1326 audit(1770115899.461:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.324032][ T3984] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.335002][ T3984] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.371352][ T29] audit: type=1326 audit(1770115899.491:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15816 comm="syz.2.4304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f739037aeb9 code=0x0 [ 260.394418][ T29] audit: type=1326 audit(1770115899.531:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.418275][ T29] audit: type=1326 audit(1770115899.531:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.441904][ T29] audit: type=1326 audit(1770115899.531:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.465664][ T29] audit: type=1326 audit(1770115899.531:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15822 comm="syz.6.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 260.496386][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4308'. [ 260.525819][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 260.534874][T15835] netlink: 'syz.4.4310': attribute type 30 has an invalid length. [ 260.547395][ T5176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.558546][ T52] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.566856][ T52] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.588583][ T52] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.596873][ T52] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.617361][ T5176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.787513][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4321'. [ 260.841473][T15861] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15861 comm=syz.7.4321 [ 260.970612][T15865] wg1 speed is unknown, defaulting to 1000 [ 260.977182][T15865] lo speed is unknown, defaulting to 1000 [ 260.985424][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4317'. [ 261.029872][T15865] lo speed is unknown, defaulting to 1000 [ 261.131071][ T5176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.722186][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4331'. [ 261.837406][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4331'. [ 262.486854][T15943] wg1 speed is unknown, defaulting to 1000 [ 262.520117][T15943] lo speed is unknown, defaulting to 1000 [ 262.555997][T15943] lo speed is unknown, defaulting to 1000 [ 262.959809][T15951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4351'. [ 262.977553][T15951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15951 comm=syz.4.4351 [ 262.992006][T15951] netlink: 'syz.4.4351': attribute type 1 has an invalid length. [ 263.345508][T15966] geneve3: entered promiscuous mode [ 263.425987][T15970] xt_hashlimit: size too large, truncated to 1048576 [ 263.714565][T15980] netlink: 'syz.2.4360': attribute type 1 has an invalid length. [ 263.781714][T15980] bond6: (slave gretap1): making interface the new active one [ 263.835111][T15990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4360'. [ 263.862423][T15980] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 263.898586][T15990] bond6: entered promiscuous mode [ 263.903727][T15990] gretap1: entered promiscuous mode [ 263.909271][T15990] bond6: entered allmulticast mode [ 263.914428][T15990] gretap1: entered allmulticast mode [ 263.968788][T15990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.006551][T15995] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4364'. [ 264.563996][T16014] netlink: 'syz.2.4369': attribute type 13 has an invalid length. [ 265.178892][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 265.178911][ T29] audit: type=1326 audit(1770116160.487:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.208866][ T29] audit: type=1326 audit(1770116160.487:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.232482][ T29] audit: type=1326 audit(1770116160.487:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.256035][ T29] audit: type=1326 audit(1770116160.487:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.279672][ T29] audit: type=1326 audit(1770116160.487:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.303135][ T29] audit: type=1326 audit(1770116160.487:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.326929][ T29] audit: type=1326 audit(1770116160.487:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.350666][ T29] audit: type=1326 audit(1770116160.487:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.374402][ T29] audit: type=1326 audit(1770116160.487:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 265.398059][ T29] audit: type=1326 audit(1770116160.487:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16033 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 267.448245][T16084] uprobe: syz.2.4393:16084 failed to unregister, leaking uprobe [ 267.585797][T16087] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 268.153245][T16095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4398'. [ 268.775866][T16124] netlink: 'syz.4.4412': attribute type 13 has an invalid length. [ 268.790521][T16126] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4413'. [ 269.081462][T16140] ipip0: entered promiscuous mode [ 269.384344][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4425'. [ 269.445049][T16161] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.508714][T16161] bond2: (slave dummy0): Releasing active interface [ 269.515561][T16161] dummy0: left allmulticast mode [ 269.530601][T16161] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 269.564817][T16170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4428'. [ 269.656842][T16180] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4429'. [ 269.987127][T16199] netlink: 'syz.1.4438': attribute type 1 has an invalid length. [ 270.002117][T16199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.022367][T16199] bond10: (slave gretap1): making interface the new active one [ 270.032751][T16199] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 270.049655][T16199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16199 comm=syz.1.4438 [ 270.358709][T16215] syzkaller0: entered promiscuous mode [ 270.364216][T16215] syzkaller0: entered allmulticast mode [ 270.431726][T16217] wg1 speed is unknown, defaulting to 1000 [ 270.438422][T16217] lo speed is unknown, defaulting to 1000 [ 270.447794][T16217] lo speed is unknown, defaulting to 1000 [ 270.560837][T16226] netlink: 'syz.2.4449': attribute type 46 has an invalid length. [ 270.639986][T16217] netlink: 'syz.1.4445': attribute type 2 has an invalid length. [ 270.803140][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 270.803216][ T29] audit: type=1400 audit(1770116166.127:4369): avc: denied { listen } for pid=16234 comm="syz.2.4454" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 270.867863][ T29] audit: type=1400 audit(1770116166.177:4370): avc: denied { accept } for pid=16234 comm="syz.2.4454" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 271.337284][T16217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4445'. [ 271.725277][T16228] syz.6.4450 (16228) used greatest stack depth: 6008 bytes left [ 271.734531][ T5176] kernel write not supported for file bpf-prog (pid: 5176 comm: kworker/0:7) [ 271.751233][T16262] loop7: detected capacity change from 0 to 512 [ 271.781000][T16262] EXT4-fs (loop7): 1 orphan inode deleted [ 271.797556][ T31] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 271.807624][ T31] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 271.827887][T16262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.876710][T16262] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.936462][ T29] audit: type=1400 audit(1770116167.257:4371): avc: denied { ioctl } for pid=16260 comm="syz.7.4464" path="/436/file1/cpu.stat" dev="loop7" ino=16 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.058673][T16279] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 272.072091][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.438310][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4474'. [ 272.497700][T16290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16290 comm=syz.2.4474 [ 273.498709][T16339] loop7: detected capacity change from 0 to 512 [ 273.519738][T16339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 273.532430][T16339] ext4 filesystem being mounted at /438/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.565222][ T29] audit: type=1400 audit(1770116168.887:4372): avc: denied { append } for pid=16338 comm="syz.7.4490" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.587669][ T29] audit: type=1400 audit(1770116168.887:4373): avc: denied { ioctl } for pid=16338 comm="syz.7.4490" path="/438/file2/file2" dev="loop7" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.637288][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 273.707789][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4495'. [ 273.759869][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4495'. [ 273.812822][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 273.821889][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 273.886416][T16352] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.977098][T16363] tipc: Failed to remove unknown binding: 66,0,0/16966:3589148410/3589148411 [ 273.986361][T16363] tipc: Failed to remove unknown binding: 66,0,0/16966:3589148410/3589148411 [ 274.037313][T16369] loop7: detected capacity change from 0 to 512 [ 274.045837][T16369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.072592][T16369] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.085946][T16369] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.191430][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4506'. [ 274.943127][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.023746][T16405] -1: renamed from syzkaller0 [ 275.353980][T16435] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=16435 comm=syz.6.4521 [ 275.698051][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4528'. [ 275.760064][T16473] netlink: 'syz.6.4530': attribute type 4 has an invalid length. [ 275.811928][T16479] netlink: 'syz.6.4530': attribute type 4 has an invalid length. [ 275.963076][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4533'. [ 276.053249][T16483] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 276.127335][T16483] macvlan2: entered promiscuous mode [ 276.132754][T16483] macvlan2: entered allmulticast mode [ 276.177475][T16483] bond9: entered promiscuous mode [ 276.182578][T16483] bridge5: entered promiscuous mode [ 276.211425][T16483] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.241261][T16483] bond9: left promiscuous mode [ 276.246126][T16483] bridge5: left promiscuous mode [ 276.734656][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 276.961227][T16525] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4549'. [ 277.286629][ T29] audit: type=1400 audit(1770116428.608:4374): avc: denied { lock } for pid=16552 comm="syz.7.4559" path="socket:[53099]" dev="sockfs" ino=53099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 277.390587][T16561] wg1 speed is unknown, defaulting to 1000 [ 277.404751][T16561] lo speed is unknown, defaulting to 1000 [ 277.413099][T16561] lo speed is unknown, defaulting to 1000 [ 277.650811][T16577] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 277.681664][T16577] 8021q: adding VLAN 0 to HW filter on device bond12 [ 277.698713][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4566'. [ 277.721771][T16580] ip6gre3: entered allmulticast mode [ 277.734059][T16581] macvlan2: entered promiscuous mode [ 277.748831][T16581] bond12: entered promiscuous mode [ 277.762232][T16581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.861027][T16581] bond12: left promiscuous mode [ 277.923216][ T29] audit: type=1326 audit(1770116685.232:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 277.952135][ T29] audit: type=1326 audit(1770116685.272:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 277.975954][ T29] audit: type=1326 audit(1770116685.272:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 277.999589][ T29] audit: type=1326 audit(1770116685.272:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.023141][ T29] audit: type=1326 audit(1770116685.272:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.046753][ T29] audit: type=1326 audit(1770116685.272:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.070391][ T29] audit: type=1326 audit(1770116685.272:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.093921][ T29] audit: type=1326 audit(1770116685.272:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.117487][ T29] audit: type=1326 audit(1770116685.272:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 278.312320][T16599] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.323006][T16601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.357799][T16601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.962619][T16627] loop7: detected capacity change from 0 to 512 [ 278.982532][T16627] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.014766][T16627] EXT4-fs (loop7): 1 truncate cleaned up [ 279.031177][T16627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.194704][T16649] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4592'. [ 279.209624][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.247295][T16653] loop7: detected capacity change from 0 to 764 [ 279.257313][T16653] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.278810][T16649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16649 comm=syz.6.4592 [ 279.686303][T16680] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 279.695100][T16680] ref_ctr increment failed for inode: 0x1485 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104a7e540 [ 279.708357][T16680] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 279.717349][T16680] ref_ctr decrement failed for inode: 0x1485 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104a7e540 [ 279.732262][T16680] uprobe: syz.1.4605:16680 failed to unregister, leaking uprobe [ 280.225002][T16702] wg1 speed is unknown, defaulting to 1000 [ 280.231565][T16702] lo speed is unknown, defaulting to 1000 [ 280.239901][T16702] lo speed is unknown, defaulting to 1000 [ 280.255038][T16706] can: request_module (can-proto-0) failed. [ 280.379719][T16706] wireguard0: entered promiscuous mode [ 280.385920][T16706] wireguard0: entered allmulticast mode [ 280.535916][T16715] loop7: detected capacity change from 0 to 512 [ 280.584187][T16710] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4616'. [ 280.715034][T16721] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 280.769727][T16715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.789046][T16715] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.565692][T16739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4624'. [ 281.568542][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.586531][T16738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16738 comm=syz.1.4623 [ 281.607629][T16738] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 281.628470][T16738] 8021q: adding VLAN 0 to HW filter on device bond13 [ 282.672136][T16783] netlink: 'syz.4.4638': attribute type 4 has an invalid length. [ 282.714111][T16791] netlink: 'syz.1.4643': attribute type 1 has an invalid length. [ 282.730284][T16791] 8021q: adding VLAN 0 to HW filter on device bond14 [ 282.746017][T16791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4643'. [ 282.755896][T16791] bond14: entered allmulticast mode [ 283.105599][T16809] loop7: detected capacity change from 0 to 512 [ 283.154839][T16809] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4649: invalid indirect mapped block 256 (level 2) [ 283.191110][T16809] EXT4-fs (loop7): 2 truncates cleaned up [ 283.201378][T16809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.215628][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4649'. [ 283.224821][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4649'. [ 283.243285][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4649'. [ 283.243267][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.252466][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4649'. [ 283.267981][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.278565][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.287227][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.323529][ T9286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.363086][T16820] sctp: [Deprecated]: syz.7.4653 (pid 16820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.363086][T16820] Use struct sctp_sack_info instead [ 283.437423][T16824] syz_tun: entered allmulticast mode [ 283.545773][T16828] wg1 speed is unknown, defaulting to 1000 [ 283.552251][T16828] lo speed is unknown, defaulting to 1000 [ 283.558713][T16828] lo speed is unknown, defaulting to 1000 [ 284.500414][T16839] wireguard0: entered promiscuous mode [ 284.506044][T16839] wireguard0: entered allmulticast mode [ 284.844346][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 284.844367][ T29] audit: type=1400 audit(1770116692.162:4418): avc: denied { read write } for pid=16844 comm="syz.7.4661" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 284.875247][ T29] audit: type=1400 audit(1770116692.162:4419): avc: denied { open } for pid=16844 comm="syz.7.4661" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 285.120875][ T29] audit: type=1400 audit(1770116692.332:4420): avc: denied { ioctl } for pid=16844 comm="syz.7.4661" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.146590][ T29] audit: type=1326 audit(1770116692.362:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.170274][ T29] audit: type=1326 audit(1770116692.362:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.194007][ T29] audit: type=1326 audit(1770116692.362:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.217570][ T29] audit: type=1326 audit(1770116692.372:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.241346][ T29] audit: type=1326 audit(1770116692.372:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.265161][ T29] audit: type=1326 audit(1770116692.372:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.4.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 285.288670][ T29] audit: type=1400 audit(1770116692.372:4427): avc: denied { create } for pid=16848 comm="syz.4.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.837649][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4668'. [ 287.131132][T16906] wg1 speed is unknown, defaulting to 1000 [ 287.137658][T16906] lo speed is unknown, defaulting to 1000 [ 287.159555][T16906] lo speed is unknown, defaulting to 1000 [ 287.303071][T16926] loop7: detected capacity change from 0 to 164 [ 287.309892][T16926] iso9660: Unknown parameter '18446744073709551615' [ 287.668014][T16929] Set syz1 is full, maxelem 65536 reached [ 287.732553][T16937] netlink: 'syz.2.4690': attribute type 13 has an invalid length. [ 287.747174][T16937] gretap0: refused to change device tx_queue_len [ 287.754029][T16937] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 287.779437][T16937] netlink: 'syz.2.4690': attribute type 4 has an invalid length. [ 288.134967][ T3422] Process accounting resumed [ 288.178774][T16967] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.224406][T16971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4702'. [ 288.373744][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 288.404166][T16980] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 288.413211][ T3973] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.423051][ T3973] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.432796][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 288.444811][T16980] bond7 (unregistering): (slave geneve2): Releasing backup interface [ 288.457500][T16980] bond7 (unregistering): Released all slaves [ 288.484331][ T3973] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.493602][ T3973] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.590600][ T3402] Process accounting resumed [ 288.650538][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4715'. [ 288.664399][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4715'. [ 288.735818][T16996] vlan0: entered promiscuous mode [ 288.741026][T16996] bridge13: entered promiscuous mode [ 288.746659][T16996] vlan0: entered allmulticast mode [ 288.751939][T16996] bridge13: entered allmulticast mode [ 289.672755][T17035] wg1 speed is unknown, defaulting to 1000 [ 289.695952][T17035] lo speed is unknown, defaulting to 1000 [ 289.702696][T17035] lo speed is unknown, defaulting to 1000 [ 290.163829][T17046] wg1 speed is unknown, defaulting to 1000 [ 290.172599][T17046] lo speed is unknown, defaulting to 1000 [ 290.181204][T17046] lo speed is unknown, defaulting to 1000 [ 290.631081][T17057] netlink: 'syz.6.4737': attribute type 1 has an invalid length. [ 290.683163][T17057] 8021q: adding VLAN 0 to HW filter on device bond10 [ 290.756384][T17057] macvlan2: entered promiscuous mode [ 290.761855][T17057] macvlan2: entered allmulticast mode [ 290.827116][T17057] bond10: entered allmulticast mode [ 290.832410][T17057] bond10: entered promiscuous mode [ 290.861621][T17057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.895867][T17057] team0: Port device macvlan2 added [ 291.129079][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 291.129131][ T29] audit: type=1326 audit(1770116698.452:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.195598][ T29] audit: type=1326 audit(1770116698.512:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.253948][ T29] audit: type=1326 audit(1770116698.542:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.277858][ T29] audit: type=1326 audit(1770116698.542:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.301719][ T29] audit: type=1326 audit(1770116698.552:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.325644][ T29] audit: type=1326 audit(1770116698.552:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.349947][ T29] audit: type=1326 audit(1770116698.552:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.373789][ T29] audit: type=1326 audit(1770116698.552:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.397385][ T29] audit: type=1326 audit(1770116698.552:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 291.421030][ T29] audit: type=1326 audit(1770116698.552:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.1.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 292.122996][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 292.154000][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4755'. [ 292.451818][T17119] wg1 speed is unknown, defaulting to 1000 [ 292.472478][T17119] lo speed is unknown, defaulting to 1000 [ 292.490971][T17119] lo speed is unknown, defaulting to 1000 [ 292.589813][T17126] xt_hashlimit: size too large, truncated to 1048576 [ 292.853177][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4762'. [ 292.872982][T17130] hsr_slave_1 (unregistering): left promiscuous mode [ 292.919101][T17132] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.181703][T17141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4764'. [ 293.285430][T17153] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.742125][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4774'. [ 294.120538][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4778'. [ 294.129699][T17179] netlink: 31 bytes leftover after parsing attributes in process `syz.7.4778'. [ 294.138904][T17179] netlink: 'syz.7.4778': attribute type 3 has an invalid length. [ 294.146740][T17179] netlink: 'syz.7.4778': attribute type 2 has an invalid length. [ 294.154584][T17179] netlink: 31 bytes leftover after parsing attributes in process `syz.7.4778'. [ 294.375086][T17195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=500 sclass=netlink_route_socket pid=17195 comm=syz.4.4785 [ 295.340157][T17219] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 295.380596][T17219] SET target dimension over the limit! [ 295.412562][T17219] netlink: 'syz.7.4794': attribute type 4 has an invalid length. [ 295.420547][T17219] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4794'. [ 295.977437][T17249] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4800'. [ 296.280624][T17267] 9p: Bad value for 'rfdno' [ 297.136040][T17292] __nla_validate_parse: 1 callbacks suppressed [ 297.136086][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4824'. [ 297.261732][T17299] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4824'. [ 297.609479][T17299] ip6gre1: entered promiscuous mode [ 297.614858][T17299] ip6gre1: entered allmulticast mode [ 297.837732][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 297.837752][ T29] audit: type=1326 audit(2000000001.520:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 297.878998][T17316] netlink: 'syz.7.4822': attribute type 1 has an invalid length. [ 297.906346][T17315] veth1_macvtap: left allmulticast mode [ 297.915302][ T29] audit: type=1326 audit(2000000001.550:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 297.938965][ T29] audit: type=1326 audit(2000000001.550:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 297.962689][ T29] audit: type=1326 audit(2000000001.550:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 297.986486][ T29] audit: type=1326 audit(2000000001.550:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.010534][ T29] audit: type=1326 audit(2000000001.550:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.034245][ T29] audit: type=1326 audit(2000000001.550:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.057897][ T29] audit: type=1326 audit(2000000001.550:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.081905][ T29] audit: type=1326 audit(2000000001.550:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.105621][ T29] audit: type=1326 audit(2000000001.550:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17311 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 298.654185][T17316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.696649][T17326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.718131][T17326] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 298.734612][T17326] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 298.752102][T17330] gretap1: entered promiscuous mode [ 298.760513][T17330] bond4: (slave gretap1): making interface the new active one [ 298.769969][T17330] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 298.782521][T17333] macvlan4: entered promiscuous mode [ 298.787931][T17333] macvlan4: entered allmulticast mode [ 298.793886][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4830'. [ 298.795301][T17333] bond4: entered promiscuous mode [ 298.809110][T17333] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 298.819468][T17333] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 298.831459][T17333] bond4: left promiscuous mode [ 298.865108][T17350] bond10: option mode: unable to set because the bond device has slaves [ 298.875608][T17350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4833'. [ 298.884657][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 298.922722][T17354] futex_wake_op: syz.7.4835 tries to shift op by -1; fix this program [ 298.938098][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.946384][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.956118][T17350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.130081][T17365] wg1 speed is unknown, defaulting to 1000 [ 299.137704][T17365] lo speed is unknown, defaulting to 1000 [ 299.144594][T17365] lo speed is unknown, defaulting to 1000 [ 299.575272][T17381] netlink: 'syz.6.4843': attribute type 4 has an invalid length. [ 299.627237][T17382] netlink: 'syz.6.4843': attribute type 4 has an invalid length. [ 299.826532][T17389] netlink: 'syz.7.4846': attribute type 1 has an invalid length. [ 299.835318][T17384] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4844'. [ 299.857829][T17389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.895347][T17389] vlan4: entered promiscuous mode [ 299.900566][T17389] bond5: entered promiscuous mode [ 299.905770][T17389] vlan4: entered allmulticast mode [ 299.910969][T17389] bond5: entered allmulticast mode [ 299.998576][T17389] bond5: (slave bridge10): making interface the new active one [ 300.006296][T17389] bridge10: entered promiscuous mode [ 300.011908][T17389] bridge10: entered allmulticast mode [ 300.036643][T17389] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 300.067381][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4847'. [ 300.208352][T17395] netlink: 'syz.2.4848': attribute type 3 has an invalid length. [ 300.216151][T17395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4848'. [ 300.344203][T17406] wg1 speed is unknown, defaulting to 1000 [ 300.351698][T17406] lo speed is unknown, defaulting to 1000 [ 300.358492][T17406] lo speed is unknown, defaulting to 1000 [ 300.683849][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4852'. [ 300.703906][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4857'. [ 302.218966][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4869'. [ 302.228005][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4869'. [ 302.237031][T17457] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4869'. [ 302.368502][T17467] netlink: 'syz.1.4875': attribute type 1 has an invalid length. [ 302.438072][T17467] bond15: entered promiscuous mode [ 302.443289][T17467] bond15: entered allmulticast mode [ 302.471051][T17467] 8021q: adding VLAN 0 to HW filter on device bond15 [ 302.482310][T17472] erspan2: entered allmulticast mode [ 302.515754][T17472] bond15: (slave erspan2): making interface the new active one [ 302.523494][T17472] erspan2: entered promiscuous mode [ 302.560284][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4875'. [ 302.585961][T17472] bond15: (slave erspan2): Enslaving as an active interface with an up link [ 302.598702][T17467] bond15 (unregistering): (slave erspan2): Releasing active interface [ 302.627073][T17467] erspan2: left promiscuous mode [ 302.635517][T17467] bond15 (unregistering): Released all slaves [ 303.049137][T17506] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4886'. [ 303.085739][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 303.149323][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 303.149342][ T29] audit: type=1400 audit(2000000006.830:4622): avc: denied { bind } for pid=17515 comm="syz.2.4891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 303.946029][ T29] audit: type=1326 audit(2000000007.610:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 303.970315][ T29] audit: type=1326 audit(2000000007.610:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 303.994191][ T29] audit: type=1326 audit(2000000007.610:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.018014][ T29] audit: type=1326 audit(2000000007.610:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.041611][ T29] audit: type=1326 audit(2000000007.610:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.065301][ T29] audit: type=1326 audit(2000000007.610:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.089198][ T29] audit: type=1326 audit(2000000007.610:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.112918][ T29] audit: type=1326 audit(2000000007.610:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.136727][ T29] audit: type=1326 audit(2000000007.610:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17543 comm="syz.6.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9a5aeb9 code=0x7ffc0000 [ 304.431522][T17563] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4905'. [ 304.448315][T17563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.829562][T17569] vlan4: entered allmulticast mode [ 304.834797][T17569] bond0: entered allmulticast mode [ 304.875526][T17569] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4908'. [ 304.941637][T17569] bond0 (unregistering): left promiscuous mode [ 304.972027][T17569] bond0 (unregistering): Released all slaves [ 306.518282][T17625] netlink: 'syz.7.4922': attribute type 1 has an invalid length. [ 306.579679][T17625] bond6: entered promiscuous mode [ 306.584881][T17625] bond6: entered allmulticast mode [ 306.686641][T17625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 306.717618][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4922'. [ 306.727938][T17629] erspan1: entered allmulticast mode [ 306.739447][T17629] bond6: (slave erspan1): making interface the new active one [ 306.747117][T17629] erspan1: entered promiscuous mode [ 306.753736][T17629] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 306.782516][T17625] bond6 (unregistering): (slave erspan1): Releasing active interface [ 306.795871][T17625] erspan1: left promiscuous mode [ 306.802790][T17625] bond6 (unregistering): Released all slaves [ 306.968372][T17641] netlink: 'syz.6.4926': attribute type 27 has an invalid length. [ 306.982068][T17641] lo: left allmulticast mode [ 307.005537][T17641] tunl0: left allmulticast mode [ 307.010600][T17641] gre0: left allmulticast mode [ 307.015520][T17641] gretap0: left allmulticast mode [ 307.020821][T17641] erspan0: left allmulticast mode [ 307.025984][T17641] ip_vti0: left allmulticast mode [ 307.031295][T17641] ip6_vti0: left allmulticast mode [ 307.036522][T17641] sit0: left allmulticast mode [ 307.041444][T17641] ip6tnl0: left allmulticast mode [ 307.046767][T17641] ip6gre0: left allmulticast mode [ 307.074164][T17641] ip6gretap0: left allmulticast mode [ 307.079629][T17641] bridge0: left allmulticast mode [ 307.084971][T17641] bond0: left allmulticast mode [ 307.089975][T17641] team0: left allmulticast mode [ 307.106393][T17641] nlmon0: left allmulticast mode [ 307.111609][T17641] caif0: left allmulticast mode [ 307.116575][T17641] batadv0: left allmulticast mode [ 307.121976][T17641] veth0: left allmulticast mode [ 307.127007][T17641] veth1: left allmulticast mode [ 307.132098][T17641] wg1: left allmulticast mode [ 307.137124][T17641] wg2: left allmulticast mode [ 307.142092][T17641] veth1_to_bridge: left allmulticast mode [ 307.148180][T17641] veth0_to_bond: left allmulticast mode [ 307.153938][T17641] bond_slave_0: left allmulticast mode [ 307.159808][T17641] veth1_to_bond: left allmulticast mode [ 307.165505][T17641] bond_slave_1: left allmulticast mode [ 307.171154][T17641] veth0_to_team: left allmulticast mode [ 307.176788][T17641] team_slave_0: left allmulticast mode [ 307.182394][T17641] veth1_to_team: left allmulticast mode [ 307.188144][T17641] team_slave_1: left allmulticast mode [ 307.193752][T17641] veth0_to_batadv: left allmulticast mode [ 307.199757][T17641] batadv_slave_0: left allmulticast mode [ 307.205578][T17641] veth1_to_batadv: left allmulticast mode [ 307.211485][T17641] batadv_slave_1: left allmulticast mode [ 307.217336][T17641] xfrm0: left allmulticast mode [ 307.222423][T17641] veth0_to_hsr: left allmulticast mode [ 307.228067][T17641] hsr_slave_0: left allmulticast mode [ 307.233613][T17641] veth1_to_hsr: left allmulticast mode [ 307.239302][T17641] hsr_slave_1: left allmulticast mode [ 307.244757][T17641] veth1_virt_wifi: left allmulticast mode [ 307.250837][T17641] veth0_virt_wifi: left allmulticast mode [ 307.256730][T17641] veth1_vlan: left allmulticast mode [ 307.262302][T17641] vlan0: left allmulticast mode [ 307.267518][T17641] vlan1: left allmulticast mode [ 307.272656][T17641] macvlan0: left allmulticast mode [ 307.277957][T17641] macvlan1: left allmulticast mode [ 307.283292][T17641] ipvlan0: left allmulticast mode [ 307.288607][T17641] ipvlan1: left allmulticast mode [ 307.294027][T17641] veth0_vlan: left allmulticast mode [ 307.299588][T17641] veth1_macvtap: left allmulticast mode [ 307.305220][T17641] veth0_macvtap: left allmulticast mode [ 307.310916][T17641] macvtap0: left allmulticast mode [ 307.316265][T17641] macsec0: left allmulticast mode [ 307.321443][T17641] geneve0: left allmulticast mode [ 307.326633][T17641] geneve1: left allmulticast mode [ 307.331963][T17641] bond1: left allmulticast mode [ 307.337266][T17641] bond2: left allmulticast mode [ 307.342251][T17641] syztnl2: left allmulticast mode [ 307.347592][T17641] 0x0000000000000: left allmulticast mode [ 307.353427][T17641] ip6tnl1: left allmulticast mode [ 307.358778][T17641] veth2: left allmulticast mode [ 307.363741][T17641] veth3: left allmulticast mode [ 307.368816][T17641] ip6gre1: left allmulticast mode [ 307.396734][T17641] bond3: left promiscuous mode [ 307.401761][T17641] bridge3: left promiscuous mode [ 307.406863][T17641] bond3: left allmulticast mode [ 307.411874][T17641] bridge3: left allmulticast mode [ 307.497877][T17641] bond6: left promiscuous mode [ 307.502958][T17641] wireguard0: left promiscuous mode [ 307.549821][T17641] ip6gre3: left allmulticast mode [ 307.559921][T17641] bond10: left allmulticast mode [ 307.564980][T17641] bond10: left promiscuous mode [ 307.570451][T17641] macvlan2: left promiscuous mode [ 307.575566][T17641] macvlan2: left allmulticast mode [ 307.603456][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.612152][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.622268][T17648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.654808][T17656] team0 (unregistering): Port device team_slave_0 removed [ 307.663121][T17656] team0 (unregistering): Port device team_slave_1 removed [ 307.676058][T17649] wg1 speed is unknown, defaulting to 1000 [ 307.698090][T17649] lo speed is unknown, defaulting to 1000 [ 307.707877][T17649] lo speed is unknown, defaulting to 1000 [ 307.914260][T17677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4938'. [ 308.506489][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4945'. [ 308.535713][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4946'. [ 308.765455][T17716] ref_ctr increment failed for inode: 0x15ff offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104a79b00 [ 309.264462][T17738] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4957'. [ 309.273962][T17738] netlink: zone id is out of range [ 309.279153][T17738] netlink: zone id is out of range [ 309.284649][T17738] netlink: zone id is out of range [ 309.309645][T17738] netlink: set zone limit has 8 unknown bytes [ 309.614705][T17740] netlink: 'syz.4.4959': attribute type 1 has an invalid length. [ 309.717240][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4959'. [ 309.764759][T17740] bond11: entered promiscuous mode [ 309.772512][T17740] 8021q: adding VLAN 0 to HW filter on device bond11 [ 309.787094][T17745] bond11: entered allmulticast mode [ 309.858362][T17740] bond11: (slave bridge10): making interface the new active one [ 309.866463][T17740] bridge10: entered promiscuous mode [ 309.871927][T17740] bridge10: entered allmulticast mode [ 309.913515][T17740] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 309.924959][T17751] tipc: Enabling of bearer rejected, failed to enable media [ 310.236345][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 310.591453][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 310.591472][ T29] audit: type=1326 audit(2000000014.270:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.621384][ T29] audit: type=1326 audit(2000000014.270:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.645205][ T29] audit: type=1326 audit(2000000014.270:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.668900][ T29] audit: type=1326 audit(2000000014.270:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.693258][ T29] audit: type=1326 audit(2000000014.270:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.716994][ T29] audit: type=1326 audit(2000000014.270:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.740961][ T29] audit: type=1326 audit(2000000014.270:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0e153ab4b code=0x7ffc0000 [ 310.765242][ T29] audit: type=1326 audit(2000000014.270:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.788960][ T29] audit: type=1326 audit(2000000014.270:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.812617][ T29] audit: type=1326 audit(2000000014.270:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17781 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 310.901872][T17789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17789 comm=syz.2.4974 [ 311.128044][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4976'. [ 311.137264][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4976'. [ 311.269252][T17834] netlink: 'syz.7.4987': attribute type 1 has an invalid length. [ 311.296091][T17834] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 311.306872][T17834] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 311.338803][T17834] bond6: (slave vxcan1): making interface the new active one [ 311.359306][T17834] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 311.427647][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4987'. [ 311.461060][T17843] ip_vti0: left promiscuous mode [ 311.496031][T17843] .70ˇ: left allmulticast mode [ 311.501004][T17843] hsr_slave_0: left allmulticast mode [ 311.508627][T17843] bond1: left promiscuous mode [ 311.513611][T17843] ip6gre1: left promiscuous mode [ 311.518707][T17843] ip6gre1: left allmulticast mode [ 311.524314][T17843] gretap1: left promiscuous mode [ 311.529670][T17843] bond3: left promiscuous mode [ 311.534863][T17843] bond3: left allmulticast mode [ 311.540399][T17843] macsec1: left promiscuous mode [ 311.545374][T17843] macsec1: left allmulticast mode [ 311.552058][T17843] geneve2: left promiscuous mode [ 311.563365][T17843] bond9: left allmulticast mode [ 311.568487][T17843] bond9: left promiscuous mode [ 311.574048][T17843] macvlan3: left promiscuous mode [ 311.579206][T17843] macvlan3: left allmulticast mode [ 311.588817][T17843] team1: left promiscuous mode [ 311.593824][T17843] team1: left allmulticast mode [ 311.601062][T17843] geneve3: left promiscuous mode [ 311.606376][T17843] ipip0: left promiscuous mode [ 311.613070][T17843] bond11: left promiscuous mode [ 311.618238][T17843] bridge10: left promiscuous mode [ 311.623468][T17843] bond11: left allmulticast mode [ 311.628558][T17843] bridge10: left allmulticast mode [ 311.637359][T17841] bond6 (unregistering): (slave vxcan1): Releasing backup interface [ 311.663701][T17841] bond6 (unregistering): Released all slaves [ 311.674514][ T3973] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.683059][ T3973] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.692092][ T3973] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.700564][ T3973] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.709360][ T3973] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.717928][ T3973] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.727944][ T3973] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.736490][ T3973] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.368021][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5002'. [ 312.937425][T17940] tipc: Enabling of bearer rejected, failed to enable media [ 313.116422][T17952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17952 comm=syz.1.5026 [ 313.130343][T17952] netlink: 'syz.1.5026': attribute type 1 has an invalid length. [ 313.146293][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.422377][T17975] __nla_validate_parse: 1 callbacks suppressed [ 314.422401][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5031'. [ 314.714758][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 314.725882][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 314.725916][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.725929][ T3316] Call Trace: [ 314.725936][ T3316] [ 314.725945][ T3316] __dump_stack+0x1d/0x30 [ 314.725978][ T3316] dump_stack_lvl+0x95/0xd0 [ 314.726069][ T3316] dump_stack+0x15/0x1b [ 314.726126][ T3316] dump_header+0x80/0x240 [ 314.726148][ T3316] oom_kill_process+0x295/0x350 [ 314.726182][ T3316] out_of_memory+0x97d/0xb80 [ 314.726217][ T3316] try_charge_memcg+0x62e/0xa10 [ 314.726298][ T3316] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 314.726447][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 314.726488][ T3316] swap_cluster_readahead+0x262/0x3c0 [ 314.726557][ T3316] swapin_readahead+0xde/0x840 [ 314.726670][ T3316] ? __perf_event_task_sched_in+0xa65/0xad0 [ 314.726696][ T3316] ? update_load_avg+0x1da/0x810 [ 314.726785][ T3316] ? __rcu_read_unlock+0x4e/0x70 [ 314.726820][ T3316] ? swap_cache_get_folio+0x26f/0x280 [ 314.726856][ T3316] do_swap_page+0x59b/0x2a50 [ 314.726889][ T3316] ? finish_task_switch+0x79/0x280 [ 314.726940][ T3316] ? __schedule+0x82d/0xc90 [ 314.726961][ T3316] ? __rcu_read_lock+0x36/0x50 [ 314.726998][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 314.727110][ T3316] handle_mm_fault+0xb40/0x3030 [ 314.727149][ T3316] ? vma_start_read+0x1c7/0x2c0 [ 314.727193][ T3316] do_user_addr_fault+0x62f/0x1050 [ 314.727277][ T3316] exc_page_fault+0x62/0xa0 [ 314.727302][ T3316] asm_exc_page_fault+0x26/0x30 [ 314.727328][ T3316] RIP: 0033:0x7f94de0060d7 [ 314.727349][ T3316] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 314.727372][ T3316] RSP: 002b:00007ffdf52974a0 EFLAGS: 00010202 [ 314.727395][ T3316] RAX: 0000000000000000 RBX: 00005555710e2500 RCX: 00007f94de0060d7 [ 314.727420][ T3316] RDX: 00007ffdf52974e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.727433][ T3316] RBP: 00007ffdf529754c R08: 0000000000000000 R09: 0000000000000000 [ 314.727446][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 314.727459][ T3316] R13: 00000000000927c0 R14: 000000000004c6ee R15: 00007ffdf52975a0 [ 314.727509][ T3316] [ 314.951210][ T3316] memory: usage 307008kB, limit 307200kB, failcnt 1788 [ 314.958162][ T3316] memory+swap: usage 378568kB, limit 9007199254740988kB, failcnt 0 [ 314.966084][ T3316] kmem: usage 306996kB, limit 9007199254740988kB, failcnt 0 [ 314.973703][ T3316] Memory cgroup stats for /syz4: [ 314.974571][T17981] netlink: 'syz.2.5034': attribute type 39 has an invalid length. [ 314.993204][T17981] bond0: (slave syz_tun): Releasing backup interface [ 315.030746][ T3316] cache 0 [ 315.033931][ T3316] rss 0 [ 315.036769][ T3316] shmem 0 [ 315.039822][ T3316] mapped_file 0 [ 315.043329][ T3316] dirty 0 [ 315.046383][ T3316] writeback 0 [ 315.049780][ T3316] workingset_refault_anon 1201 [ 315.054568][ T3316] workingset_refault_file 2799 [ 315.059606][ T3316] swap 73273344 [ 315.063086][ T3316] swapcached 16384 [ 315.066826][ T3316] pgpgin 488289 [ 315.070358][ T3316] pgpgout 488285 [ 315.073951][ T3316] pgfault 385298 [ 315.077661][ T3316] pgmajfault 188 [ 315.081226][ T3316] inactive_anon 0 [ 315.084942][ T3316] active_anon 12288 [ 315.088889][ T3316] inactive_file 0 [ 315.092638][ T3316] active_file 0 [ 315.096121][ T3316] unevictable 0 [ 315.099676][ T3316] hierarchical_memory_limit 314572800 [ 315.105125][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 315.111390][ T3316] total_cache 0 [ 315.114915][ T3316] total_rss 0 [ 315.118253][ T3316] total_shmem 0 [ 315.121794][ T3316] total_mapped_file 0 [ 315.125831][ T3316] total_dirty 0 [ 315.129343][ T3316] total_writeback 0 [ 315.133205][ T3316] total_workingset_refault_anon 1201 [ 315.138532][ T3316] total_workingset_refault_file 2799 [ 315.143833][ T3316] total_swap 73273344 [ 315.147879][ T3316] total_swapcached 16384 [ 315.152241][ T3316] total_pgpgin 488289 [ 315.156417][ T3316] total_pgpgout 488285 [ 315.160606][ T3316] total_pgfault 385298 [ 315.164722][ T3316] total_pgmajfault 188 [ 315.168846][ T3316] total_inactive_anon 0 [ 315.173116][ T3316] total_active_anon 12288 [ 315.177492][ T3316] total_inactive_file 0 [ 315.181673][ T3316] total_active_file 0 [ 315.185671][ T3316] total_unevictable 0 [ 315.189797][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4799,pid=17251,uid=0 [ 315.204614][ T3316] Memory cgroup out of memory: Killed process 17251 (syz.4.4799) total-vm:94264kB, anon-rss:1352kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 315.591950][T17947] syz.4.5024 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 315.603185][T17947] CPU: 1 UID: 0 PID: 17947 Comm: syz.4.5024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.603271][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.603289][T17947] Call Trace: [ 315.603354][T17947] [ 315.603413][T17947] __dump_stack+0x1d/0x30 [ 315.603440][T17947] dump_stack_lvl+0x95/0xd0 [ 315.603462][T17947] dump_stack+0x15/0x1b [ 315.603542][T17947] dump_header+0x80/0x240 [ 315.603581][T17947] oom_kill_process+0x295/0x350 [ 315.603645][T17947] out_of_memory+0x97d/0xb80 [ 315.603672][T17947] try_charge_memcg+0x62e/0xa10 [ 315.603706][T17947] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 315.603835][T17947] __read_swap_cache_async+0x17b/0x2d0 [ 315.603884][T17947] swap_cluster_readahead+0x362/0x3c0 [ 315.603942][T17947] swapin_readahead+0xde/0x840 [ 315.603979][T17947] ? __rcu_read_unlock+0x33/0x70 [ 315.604086][T17947] ? __rcu_read_unlock+0x4e/0x70 [ 315.604120][T17947] ? swap_cache_get_folio+0x26f/0x280 [ 315.604184][T17947] do_swap_page+0x59b/0x2a50 [ 315.604284][T17947] ? enqueue_task_fair+0x35b/0x960 [ 315.604355][T17947] ? __rcu_read_unlock+0x4e/0x70 [ 315.604386][T17947] ? __rcu_read_lock+0x36/0x50 [ 315.604415][T17947] ? __pfx_default_wake_function+0x10/0x10 [ 315.604472][T17947] handle_mm_fault+0xb40/0x3030 [ 315.604514][T17947] ? vma_start_read+0x1c7/0x2c0 [ 315.604551][T17947] do_user_addr_fault+0x62f/0x1050 [ 315.604658][T17947] ? arch_exit_work+0x30/0x40 [ 315.604691][T17947] ? irqentry_exit+0x3c/0x510 [ 315.604723][T17947] exc_page_fault+0x62/0xa0 [ 315.604747][T17947] asm_exc_page_fault+0x26/0x30 [ 315.604790][T17947] RIP: 0033:0x7f94ddf1b4b9 [ 315.604883][T17947] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 315.604913][T17947] RSP: 002b:00007ffdf5297160 EFLAGS: 00010212 [ 315.604936][T17947] RAX: 00007f94ddbe43f8 RBX: 00007f94ddbe4400 RCX: ffffffff817f64cc [ 315.604954][T17947] RDX: 0000000000000013 RSI: 00007f94ddbe5bd0 RDI: 00007f94ddbe4400 [ 315.604972][T17947] RBP: 00007f94ddbe3940 R08: 00007f94de2b0000 R09: 00007f94de2c6038 [ 315.604987][T17947] R10: 0000000000000001 R11: 000000000000000d R12: 00007f94ddbe5bd0 [ 315.605021][T17947] R13: 0000000000000013 R14: 0000000000000452 R15: 0000000000000001 [ 315.605069][T17947] ? walk_pud_range+0x108c/0x1310 [ 315.605102][T17947] [ 315.605111][T17947] memory: usage 307200kB, limit 307200kB, failcnt 2020 [ 315.845124][T17947] memory+swap: usage 375528kB, limit 9007199254740988kB, failcnt 0 [ 315.853260][T17947] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 315.860589][T17947] Memory cgroup stats for /syz4: [ 315.898953][T17947] cache 0 [ 315.906894][T17947] rss 0 [ 315.909733][T17947] shmem 0 [ 315.912691][T17947] mapped_file 0 [ 315.916266][T17947] dirty 0 [ 315.919265][T17947] writeback 0 [ 315.922578][T17947] workingset_refault_anon 1205 [ 315.927391][T17947] workingset_refault_file 2799 [ 315.932208][T17947] swap 69967872 [ 315.935691][T17947] swapcached 12288 [ 315.939481][T17947] pgpgin 488293 [ 315.942965][T17947] pgpgout 488290 [ 315.946613][T17947] pgfault 385303 [ 315.950355][T17947] pgmajfault 192 [ 315.953930][T17947] inactive_anon 0 [ 315.957652][T17947] active_anon 12288 [ 315.961477][T17947] inactive_file 0 [ 315.965131][T17947] active_file 0 [ 315.968685][T17947] unevictable 0 [ 315.972168][T17947] hierarchical_memory_limit 314572800 [ 315.977576][T17947] hierarchical_memsw_limit 9223372036854771712 [ 315.983760][T17947] total_cache 0 [ 315.987365][T17947] total_rss 0 [ 315.990675][T17947] total_shmem 0 [ 315.994183][T17947] total_mapped_file 0 [ 315.998253][T17947] total_dirty 0 [ 316.001751][T17947] total_writeback 0 [ 316.005580][T17947] total_workingset_refault_anon 1205 [ 316.010933][T17947] total_workingset_refault_file 2799 [ 316.016231][T17947] total_swap 69967872 [ 316.020270][T17947] total_swapcached 12288 [ 316.024525][T17947] total_pgpgin 488293 [ 316.028562][T17947] total_pgpgout 488290 [ 316.032644][T17947] total_pgfault 385303 [ 316.036738][T17947] total_pgmajfault 192 [ 316.040939][T17947] total_inactive_anon 0 [ 316.045118][T17947] total_active_anon 12288 [ 316.049507][T17947] total_inactive_file 0 [ 316.053685][T17947] total_active_file 0 [ 316.057728][T17947] total_unevictable 0 [ 316.061731][T17947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5024,pid=17947,uid=0 [ 316.076562][T17947] Memory cgroup out of memory: Killed process 17947 (syz.4.5024) total-vm:96048kB, anon-rss:1332kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 316.440780][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 316.440805][ T29] audit: type=1400 audit(2000000020.120:4750): avc: denied { connect } for pid=17998 comm="syz.4.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.467357][ T29] audit: type=1400 audit(2000000020.120:4751): avc: denied { read } for pid=17998 comm="syz.4.5041" path="socket:[58651]" dev="sockfs" ino=58651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.427036][ T29] audit: type=1400 audit(2000000020.170:4752): avc: denied { write } for pid=17998 comm="syz.4.5041" path="socket:[58652]" dev="sockfs" ino=58652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 317.715041][T18033] tipc: Enabled bearer , priority 10 [ 318.032247][T18048] netlink: 'syz.2.5055': attribute type 10 has an invalid length. [ 318.053133][T18048] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.077601][T18048] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 318.086629][T18048] bond7: (slave macvlan4): Enslaving as a backup interface with a down link [ 318.297879][T18066] IPVS: Unknown mcast interface: pim6reg [ 318.578458][ T29] audit: type=1326 audit(2000000022.260:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.625243][ T29] audit: type=1326 audit(2000000022.280:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.649053][ T29] audit: type=1326 audit(2000000022.280:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.672899][ T29] audit: type=1326 audit(2000000022.280:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.696889][ T29] audit: type=1326 audit(2000000022.280:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.720985][ T29] audit: type=1326 audit(2000000022.280:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.744853][ T29] audit: type=1326 audit(2000000022.280:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18073 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 318.899702][T18086] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 319.053275][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5075'. [ 319.062522][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5075'. [ 319.182571][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5078'. [ 319.707961][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5089'. [ 320.583211][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5097'. [ 320.605965][T18182] team0: Port device team_slave_0 removed [ 321.517357][T18200] siw: device registration error -23 [ 321.632601][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 321.632621][ T29] audit: type=1400 audit(2000000025.310:4786): avc: denied { checkpoint_restore } for pid=18196 comm="syz.7.5102" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap2_userns permissive=1 [ 321.661237][ T29] audit: type=1400 audit(2000000025.310:4787): avc: denied { checkpoint_restore } for pid=18196 comm="syz.7.5102" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.750448][T18209] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5107'. [ 321.877007][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5110'. [ 321.893754][T18219] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 322.001940][ T57] tipc: Subscription rejected, illegal request [ 322.897677][ T29] audit: type=1326 audit(2000000026.570:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 322.921330][ T29] audit: type=1326 audit(2000000026.580:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 322.945113][ T29] audit: type=1326 audit(2000000026.580:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 322.968808][ T29] audit: type=1326 audit(2000000026.580:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 322.992343][ T29] audit: type=1326 audit(2000000026.580:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 323.016117][ T29] audit: type=1326 audit(2000000026.580:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 323.039799][ T29] audit: type=1326 audit(2000000026.580:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 323.063406][ T29] audit: type=1326 audit(2000000026.580:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.1.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x7ffc0000 [ 323.282537][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5131'. [ 323.292465][T18284] 8021q: VLANs not supported on vcan0 [ 323.334883][T18288] tipc: Enabling of bearer rejected, failed to enable media [ 323.491141][T18301] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 323.604902][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5134'. [ 323.639980][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5134'. [ 323.675883][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5134'. [ 323.695624][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5134'. [ 323.716290][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5134'. [ 324.092197][T18308] wg1 speed is unknown, defaulting to 1000 [ 324.103927][T18308] lo speed is unknown, defaulting to 1000 [ 324.117543][T18308] lo speed is unknown, defaulting to 1000 [ 324.543603][T18343] wg1 speed is unknown, defaulting to 1000 [ 324.558565][T18343] lo speed is unknown, defaulting to 1000 [ 324.591013][T18343] lo speed is unknown, defaulting to 1000 [ 324.832483][T18372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.930318][T18376] __nla_validate_parse: 3 callbacks suppressed [ 324.930337][T18376] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5158'. [ 324.983641][T18376] team0 (unregistering): Port device team_slave_1 removed [ 325.056582][T18386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18386 comm=syz.6.5162 [ 325.233016][T18405] SET target dimension over the limit! [ 325.288233][T18407] 9p: Bad value for 'rfdno' [ 325.314811][T18412] tipc: Enabling of bearer rejected, failed to enable media [ 325.346588][T18417] ref_ctr increment failed for inode: 0xc05 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811b036540 [ 325.523890][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5173'. [ 326.309303][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5183'. [ 326.334675][T18455] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5184'. [ 326.343813][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5184'. [ 326.353087][T18455] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5184'. [ 326.362161][T18455] netlink: 'syz.4.5184': attribute type 2 has an invalid length. [ 326.370073][T18455] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5184'. [ 327.326124][T18489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5196'. [ 327.335232][T18489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5196'. [ 327.668147][T18510] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2173122852/2173122853 [ 327.678158][T18510] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2173122852/2173122853 [ 327.825965][T18512] Set syz1 is full, maxelem 65536 reached [ 327.866697][T18520] tipc: Enabling of bearer rejected, failed to enable media [ 328.191869][T18539] netlink: 'syz.6.5216': attribute type 1 has an invalid length. [ 328.217364][T18539] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 328.239369][ T12] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 328.239919][T18539] 8021q: adding VLAN 0 to HW filter on device bond11 [ 328.278733][T18539] veth9: entered promiscuous mode [ 328.287601][T18539] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 328.357157][ T52] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 328.720114][T18549] wg1 speed is unknown, defaulting to 1000 [ 328.733462][T18549] lo speed is unknown, defaulting to 1000 [ 328.744674][T18549] lo speed is unknown, defaulting to 1000 [ 328.854906][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 328.854930][ T29] audit: type=1400 audit(2000000032.530:4894): avc: denied { recv } for pid=18546 comm="syz.6.5219" saddr=10.128.0.163 src=36904 daddr=10.128.1.75 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.193368][ T29] audit: type=1326 audit(2000000032.870:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 329.217093][ T29] audit: type=1326 audit(2000000032.870:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 329.297576][ T29] audit: type=1326 audit(2000000032.870:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 329.321167][ T29] audit: type=1326 audit(2000000032.870:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 329.344994][ T29] audit: type=1326 audit(2000000032.870:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94de04aeb9 code=0x7ffc0000 [ 329.368763][ T29] audit: type=1326 audit(2000000032.950:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94de00b78e code=0x7ffc0000 [ 329.392405][ T29] audit: type=1326 audit(2000000032.950:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94de00b78e code=0x7ffc0000 [ 329.416412][ T29] audit: type=1326 audit(2000000032.960:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94de00b78e code=0x7ffc0000 [ 329.440180][ T29] audit: type=1326 audit(2000000032.960:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.4.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94de00b78e code=0x7ffc0000 [ 330.278334][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5227'. [ 330.301825][T18576] bridge11: port 1(veth27) entered blocking state [ 330.308443][T18576] bridge11: port 1(veth27) entered disabled state [ 330.315135][T18576] veth27: entered allmulticast mode [ 330.321196][T18576] veth27: entered promiscuous mode [ 330.351642][T18576] vlan3: entered allmulticast mode [ 330.356826][T18576] veth1: entered allmulticast mode [ 330.378177][T18576] bridge11: port 2(vlan3) entered blocking state [ 330.384629][T18576] bridge11: port 2(vlan3) entered disabled state [ 330.405973][T18576] vlan3: entered promiscuous mode [ 330.411103][T18576] veth1: entered promiscuous mode [ 330.468892][T18578] wg1 speed is unknown, defaulting to 1000 [ 330.479214][T18578] lo speed is unknown, defaulting to 1000 [ 330.485415][T18578] lo speed is unknown, defaulting to 1000 [ 330.598680][T18588] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5231'. [ 330.644197][T18588] bond10: (slave macvlan4): Releasing active interface [ 330.751596][T18588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.796508][T18588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.809630][T18588] bond0 (unregistering): Released all slaves [ 330.837451][T18578] ip6gretap0: entered allmulticast mode [ 330.933567][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5235'. [ 331.056420][T18602] wireguard1: entered promiscuous mode [ 331.065672][T18602] wireguard1: entered allmulticast mode [ 331.398681][T18627] netlink: 'syz.4.5238': attribute type 4 has an invalid length. [ 331.430144][T18627] netlink: 'syz.4.5238': attribute type 4 has an invalid length. [ 332.171885][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.205694][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.215454][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.242820][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.253709][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.291637][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.300959][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5247'. [ 332.434460][T18657] wg1 speed is unknown, defaulting to 1000 [ 332.444602][T18657] lo speed is unknown, defaulting to 1000 [ 332.454542][T18657] lo speed is unknown, defaulting to 1000 [ 335.997296][T18714] __nla_validate_parse: 7 callbacks suppressed [ 335.997320][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 336.536811][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.547635][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.557143][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.566298][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.576824][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.588069][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 336.775546][T18736] xt_hashlimit: size too large, truncated to 1048576 [ 337.107023][T18743] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5277'. [ 337.666746][T18761] xt_policy: output policy not valid in PREROUTING and INPUT [ 337.714828][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 337.714854][ T29] audit: type=1326 audit(2000000041.390:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.1.5285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0e153aeb9 code=0x0 [ 338.489302][T18795] bridge0: entered promiscuous mode [ 338.504452][T18795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.542810][T18795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.766011][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5296'. [ 338.788286][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5296'. [ 338.837907][T18820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18820 comm=syz.7.5297 [ 339.049860][T18823] team_slave_1: Caught tx_queue_len zero misconfig [ 339.457057][ T29] audit: type=1400 audit(2000000043.120:4967): avc: denied { accept } for pid=18830 comm="syz.4.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.507632][T18850] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 340.584113][T18862] tmpfs: Unknown parameter 'context' [ 342.037799][T18911] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 342.044841][T18908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49550 sclass=netlink_route_socket pid=18908 comm=syz.7.5322 [ 342.777763][T18914] __nla_validate_parse: 8 callbacks suppressed [ 342.777784][T18914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5324'. [ 342.847263][T18923] ip6tnl0: Caught tx_queue_len zero misconfig [ 343.195871][T18938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18938 comm=syz.7.5341 [ 343.658301][T18957] netlink: 'syz.7.5337': attribute type 10 has an invalid length. [ 343.684359][T18957] 9pnet_fd: Insufficient options for proto=fd [ 344.007605][T18984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18984 comm=syz.2.5345 [ 344.081931][T18986] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2689350504/2689350505 [ 344.091635][T18986] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2689350504/2689350505 [ 345.066756][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5358'. [ 345.076055][ T29] audit: type=1400 audit(2000000048.740:4968): avc: denied { ioctl } for pid=19024 comm="syz.4.5358" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65058 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.224719][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5362'. [ 345.255287][T19044] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 345.416638][T19059] netlink: 'syz.7.5366': attribute type 16 has an invalid length. [ 345.424586][T19059] netlink: 'syz.7.5366': attribute type 17 has an invalid length. [ 345.463511][T19059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.606991][ T9] lo speed is unknown, defaulting to 1000 [ 345.612813][ T9] syz: Port: 1 Link ACTIVE [ 346.331123][T19063] ================================================================== [ 346.339270][T19063] BUG: KCSAN: data-race in cleanup_glue_dir / kernfs_unlink_sibling [ 346.347306][T19063] [ 346.349663][T19063] read-write to 0xffff8881481887b0 of 8 bytes by task 19064 on cpu 0: [ 346.357848][T19063] kernfs_unlink_sibling+0xbb/0x160 [ 346.363113][T19063] __kernfs_remove+0x3a4/0x4c0 [ 346.367929][T19063] kernfs_remove+0x58/0x70 [ 346.372396][T19063] sysfs_remove_dir+0x7d/0xa0 [ 346.377111][T19063] __kobject_del+0x97/0x190 [ 346.381654][T19063] kobject_del+0x2e/0x50 [ 346.386450][T19063] device_del+0x724/0x790 [ 346.390830][T19063] device_unregister+0x15/0x40 [ 346.395633][T19063] wakeup_source_sysfs_remove+0x25/0x30 [ 346.401227][T19063] wakeup_source_unregister+0xdf/0x330 [ 346.406733][T19063] ep_clear_and_put+0x2d5/0x320 [ 346.411638][T19063] ep_eventpoll_release+0x2c/0x40 [ 346.416710][T19063] __fput+0x29b/0x650 [ 346.421340][T19063] ____fput+0x1c/0x30 [ 346.425366][T19063] task_work_run+0x130/0x1a0 [ 346.430003][T19063] do_exit+0x466/0x1590 [ 346.434201][T19063] do_group_exit+0xfe/0x140 [ 346.438741][T19063] get_signal+0xe4f/0xf60 [ 346.443717][T19063] arch_do_signal_or_restart+0x96/0x450 [ 346.449309][T19063] exit_to_user_mode_loop+0x6a/0x6f0 [ 346.454636][T19063] do_syscall_64+0x1d3/0x2a0 [ 346.459909][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.465843][T19063] [ 346.468194][T19063] read to 0xffff8881481887b0 of 8 bytes by task 19063 on cpu 1: [ 346.475937][T19063] cleanup_glue_dir+0xe9/0x170 [ 346.480758][T19063] device_del+0x72f/0x790 [ 346.485124][T19063] device_unregister+0x15/0x40 [ 346.489946][T19063] wakeup_source_sysfs_remove+0x25/0x30 [ 346.495543][T19063] wakeup_source_unregister+0xdf/0x330 [ 346.501040][T19063] ep_clear_and_put+0x2d5/0x320 [ 346.505935][T19063] ep_eventpoll_release+0x2c/0x40 [ 346.511018][T19063] __fput+0x29b/0x650 [ 346.515044][T19063] ____fput+0x1c/0x30 [ 346.519068][T19063] task_work_run+0x130/0x1a0 [ 346.523704][T19063] get_signal+0xe09/0xf60 [ 346.528057][T19063] arch_do_signal_or_restart+0x96/0x450 [ 346.533684][T19063] exit_to_user_mode_loop+0x6a/0x6f0 [ 346.539150][T19063] do_syscall_64+0x1d3/0x2a0 [ 346.543788][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.549719][T19063] [ 346.552074][T19063] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 346.559212][T19063] [ 346.561561][T19063] Reported by Kernel Concurrency Sanitizer on: [ 346.567733][T19063] CPU: 1 UID: 0 PID: 19063 Comm: syz.4.5363 Not tainted syzkaller #0 PREEMPT(voluntary) [ 346.577571][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.587746][T19063] ==================================================================