last executing test programs: 9m54.322376396s ago: executing program 2 (id=212): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x4000150}, 0x0) 9m54.223450822s ago: executing program 2 (id=214): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 9m54.186069704s ago: executing program 2 (id=217): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) 9m54.08772549s ago: executing program 2 (id=220): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 9m53.705528542s ago: executing program 2 (id=227): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, 0x4000001) r0 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9m52.945230307s ago: executing program 2 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="5ad558645074ff", 0x7}], 0x1}}], 0x2, 0x41) 9m52.936602347s ago: executing program 32 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="5ad558645074ff", 0x7}], 0x1}}], 0x2, 0x41) 8m42.701370473s ago: executing program 3 (id=1612): ftruncate(0xffffffffffffffff, 0x51a9497) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x501e01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0x5}) 8m42.523325073s ago: executing program 3 (id=1615): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x80, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000082}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x24004800) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 8m41.610231997s ago: executing program 3 (id=1630): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) poll(0x0, 0x0, 0xb3d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x2000775) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400)) 8m40.612676435s ago: executing program 3 (id=1650): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m40.35145211s ago: executing program 3 (id=1652): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 8m39.683129329s ago: executing program 3 (id=1661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) 8m39.648612061s ago: executing program 33 (id=1661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) 2m15.718077515s ago: executing program 0 (id=10371): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x1, @perf_bp={0x0, 0x4}, 0x1028, 0x10000, 0x8, 0x1, 0x2, 0x2020005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) clock_gettime(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "b15937", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0xf, 0x6, "1eb270", 0x1, 0x3a, 0x1, @empty, @local, [@routing={0x32}]}}}}}}}, 0x0) 2m15.581085844s ago: executing program 0 (id=10383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7ff, 0xad04, 0xffffffff, 0x101, 0x9, 0x40, 0x1b12, 0x2, 0x2, 0x6, 0xe, 0x9e, 0x10001, 0x0, 0x4, 0x5, 0x1800000, 0x3, 0x0, 0x6, 0x5, 0x7fffffff, 0x3, 0x80e2b7, 0xffff, 0xffffffa9, 0x200, 0xf, 0xfffff758, 0x0, 0x2, 0x80, 0x200, 0xbe, 0x3, 0x800, 0x5, 0x100, 0x0, 0xb5, 0xb, 0x2, 0x8, 0x0, 0x6, 0x0, 0x5, 0x5, 0x200, 0x2, 0x1, 0x1ff, 0x3, 0x0, 0x4, 0xa, 0x3, 0x8, 0x7, 0x401, 0x74, 0x4, 0xfff, 0x5, 0x7, 0x7a, 0x50, 0xfffffae9, 0x8, 0x91, 0x10000, 0x9, 0x7, 0x3, 0x9, 0xfffffffe, 0x5, 0x6, 0xffffffff, 0x7, 0x2, 0x2, 0x1, 0x3, 0x3, 0x7613, 0x7ff, 0x4, 0x0, 0x9, 0x5, 0x7, 0xda5d, 0x4, 0x101, 0x7, 0xe, 0x101, 0x10, 0x5, 0x62b39d84, 0x1, 0x4, 0x4, 0x788c, 0xd7, 0xc0d9, 0x3, 0x4, 0x3, 0xffff, 0x400, 0x500000, 0x6, 0x445f, 0xffff, 0x2323da5a, 0x5, 0x3, 0x2, 0x7, 0x6, 0x9, 0x3, 0x2, 0xe, 0x5, 0x81, 0x200000, 0x81, 0x9, 0xb50, 0x9, 0x9, 0xffffff81, 0x9, 0x4, 0x1, 0x200, 0x7, 0x8, 0x4, 0x7fffffff, 0x1, 0x1, 0xb, 0x1, 0xfffffbed, 0x8, 0xffff, 0x8, 0x0, 0x1, 0x7, 0xa220, 0x0, 0x4, 0x8, 0x4, 0x9, 0xea8a, 0x54c, 0x2, 0xfffffff7, 0x7, 0x8, 0x80000000, 0x4, 0x0, 0x0, 0xb, 0x4, 0x5, 0x604, 0x0, 0xfffffff7, 0x2, 0x8, 0x5, 0xfff, 0x1, 0xf, 0x1, 0x1, 0x3, 0xef2, 0x4, 0x8001, 0xf2d8, 0x6, 0x7, 0x7, 0x62d, 0x0, 0x2555, 0x6, 0xd, 0x8, 0x32f4, 0x8, 0x6, 0x7, 0x0, 0xd981, 0x7f, 0x63, 0x1, 0x8, 0xfff, 0xffff, 0xc, 0x3ff, 0x4, 0x2, 0x1000, 0x4, 0x3ff, 0x7ff, 0x4, 0xe, 0xe, 0xffffff05, 0x4, 0x2, 0xffffffff, 0x4, 0x8, 0x5, 0x101, 0x9, 0x4, 0x5, 0xfffffffd, 0x400002ae, 0x0, 0x9, 0x4, 0xffffffff, 0x2, 0xe, 0x1, 0x401, 0x3, 0x9, 0x6, 0x11, 0x7, 0x0, 0x1, 0x6, 0x1, 0x7, 0x2, 0x2, 0x1000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x1, 0x1, 0x4000006, 0x5, 0x465ed2bd, 0x7, 0x98, 0x2, 0x8e, 0x7, 0x6, 0x8, 0x800, 0x2, 0x6, 0x6, 0x2, 0x3, 0x1, 0x3, 0x2, 0x4, 0x8, 0x2, 0x5, 0x0, 0x9, 0x3, 0xc8, 0x3, 0x8, 0x5, 0xfffffff9, 0x7, 0x81, 0x0, 0x2, 0x10000, 0xa, 0xfffffffe, 0x1, 0x0, 0x7fffffff, 0xfe1, 0x8001, 0x5, 0x40, 0xffffffff, 0x4, 0x7fff, 0x3ff, 0x7, 0x3, 0x8, 0x0, 0x2, 0x7, 0x27, 0x6, 0x2, 0x6, 0x6, 0xe, 0x80000001, 0x4, 0x9, 0x1, 0x1, 0x3, 0x9, 0x3, 0x9, 0x0, 0x81, 0xe585, 0x0, 0x64, 0x3, 0x800, 0x3, 0x80000001, 0x1, 0x6, 0xffffffd8, 0xffffff1e, 0x3ff, 0x0, 0x8, 0x8, 0x9, 0x2, 0xf8f9, 0x2, 0x7f, 0xfffffd43, 0xfffffffa, 0x5, 0x1, 0xffffffff, 0x5, 0x2, 0x3, 0x2, 0x9, 0x0, 0x4, 0x5, 0xffffffff, 0x6, 0x7fffffff, 0x4, 0x8, 0xa8, 0x7, 0x1, 0x6, 0x71, 0x7, 0x0, 0x10, 0x1, 0x400, 0x4, 0x100, 0xffffffec, 0x6, 0x7, 0x83, 0x101, 0x0, 0x9, 0x6, 0x80000001, 0x4, 0x4, 0x0, 0x9, 0x8, 0x2, 0x7, 0x2, 0xff, 0x7fffffff, 0x82, 0x3, 0x4, 0xd, 0x3, 0x6, 0x7fff, 0x2, 0x7ff, 0x88, 0x7, 0x5, 0x0, 0x1, 0x7, 0x8, 0x6, 0x2, 0x800, 0x9, 0x0, 0x2, 0x3, 0x0, 0x9, 0x8, 0xb0, 0x2b88, 0xfffffc00, 0x61, 0x800000, 0x2, 0x4, 0x3, 0x2, 0xfffffff8, 0x8, 0x8, 0x7, 0x1, 0x2, 0xffff, 0xec, 0x6, 0x0, 0x30a, 0x6, 0x5, 0x3, 0x1, 0xc, 0x6, 0x1, 0x5, 0x80000000, 0x0, 0x1ff, 0x0, 0xffffff7f, 0x6, 0xca9e, 0xaf0, 0x1c40, 0x3, 0x3, 0x5, 0x0, 0x1, 0x5, 0xfffffffe, 0x7, 0x80000001, 0x0, 0x6f6, 0x5, 0x98, 0x1, 0x1600, 0x80000000, 0x6, 0x0, 0x57, 0x7, 0x8, 0x24, 0x8, 0x7fff, 0x5, 0x1, 0x4, 0x1, 0x3, 0x7, 0x1, 0xffffffff, 0xa412, 0x15, 0x400, 0x0, 0xf, 0x4fd9, 0x9, 0x0, 0x4, 0x0, 0xc7, 0x0, 0x80, 0x0, 0x7fffffff, 0x1ec, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x4, 0x89, 0x4, {0x10, 0x0, 0x4, 0xc, 0xf000, 0x4}, {0x6, 0x0, 0x1, 0xff4f, 0x10, 0xa}, 0x400, 0xfffffffd, 0xc}}]}]}}]}, 0x87c}}, 0x0) 2m15.502853758s ago: executing program 0 (id=10376): r0 = io_uring_setup(0x79bf, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.320361289s ago: executing program 0 (id=10384): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x1) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2m15.254766193s ago: executing program 0 (id=10387): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) r2 = dup(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r1, 0xfff7}, &(0x7f00000001c0)=0x8) 2m15.043880635s ago: executing program 0 (id=10391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041083}, 0x0) 2m15.001879767s ago: executing program 34 (id=10391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041083}, 0x0) 1m28.963140762s ago: executing program 7 (id=11620): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000026c0)=@newtaction={0xc0, 0x30, 0x871a15abc695fb3d, 0x3, 0x0, {}, [{0xac, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800000, 0xffff25d8, 0x0, 0xfffffffd, 0x3ec}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24040081}, 0x20000890) 1m28.960233572s ago: executing program 7 (id=11621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m28.795655842s ago: executing program 7 (id=11622): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m28.733932976s ago: executing program 7 (id=11623): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x103000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 1m28.65814147s ago: executing program 7 (id=11624): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1m27.983242829s ago: executing program 7 (id=11631): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 1m27.959047971s ago: executing program 35 (id=11631): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 5.203172085s ago: executing program 5 (id=12921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.683131986s ago: executing program 4 (id=12927): r0 = add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000880)={0xa, 0x4e24, 0x9, @local, 0x7}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = io_uring_setup(0x1169, &(0x7f0000000240)={0x0, 0x5b60, 0x1, 0x0, 0x3aa}) io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000180), 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x96}) 4.647515678s ago: executing program 5 (id=12928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054) getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) umount2(&(0x7f00000003c0)='./file3\x00', 0xb) 3.270829398s ago: executing program 6 (id=12935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) 3.255052969s ago: executing program 6 (id=12936): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, 0x0}) open_tree(0xffffffffffffff9c, 0x0, 0x1801) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpid() r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0), 0x0, 0x106, 0xfffffffd, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) 2.700230652s ago: executing program 5 (id=12937): socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fefbfff30000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.621139756s ago: executing program 4 (id=12938): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044800) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r6, 0x402, 0x91ea6c12f182534) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xdffffffc}}}}}}, 0x0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="360000001000000000000000", @ANYRES32=r8, @ANYBLOB="de1d97a5fbf866164e8f9605174eb74a6881243b9021d799df814762caef6ceccc595faf387a5e", @ANYRES64=0x0], 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004870, 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 2.5507028s ago: executing program 1 (id=12939): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = fsopen(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) fchdir(0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f00000001c0), 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, 0x0, 0x800) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) 2.487024674s ago: executing program 6 (id=12940): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) r1 = socket(0x11, 0x3, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(r1, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8, 0x4}, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb4}}, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2.347030852s ago: executing program 4 (id=12941): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x119e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, @in=@rand_addr=0x64010100, 0x0, 0x6, 0x4e23, 0x0, 0xa, 0x1a0, 0xa0, 0x3c}, {0x0, 0x200000000000004, 0x8000000000000001, 0x0, 0x8, 0x0, 0x7fffffffffffffff, 0x10}, {0x6, 0x1000000c99, 0x401, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000300000003000000580001800d0001007564713a7379"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="40029f75243e7b9131f234bf0000000000000000", @ANYRES16=r3, @ANYBLOB="000129bd7000ffdbdf2507000000b40005800800010075647000140002800800040001000000080002000000000024000280080004000000000008000100190000000800010005000000080002008100000008000100756470000800010075647000340002800800020081000000080004000700000008000100080000000800040001000000080004000500000008000200ef000000240002800800020001000000080001001800000008000200fdffffff08000300040000000800010075647000680005801c000280080003000600000008000300a30e000008000300008000000c0002800800030002000000080001007564700008000100657468000700010069620000240002800800030087000000080002000400000008000400800000000800030001800000180004801300010062726f6164636173742d6c696e6b00006c00018008000300fdffffff080003000700000038000400200001000a004e210000fb5b00000000000000000000ffffe0000001000000001400020002004e20ac1e000100000000000000000d0001007564703a73797a30000000001000010069623a6d6163766c616e31007800058008000100657468002c000280080003000500000008000300060000000800040007000000080002000900000008000400b368ffff14000280080003000000000108000300020000002c00028008000300fffeffff08000400740c00000800010003000000080001000100000008000200280300001400058007000100696200000800010065746800"], 0x240}, 0x1, 0x0, 0x0, 0x20044000}, 0x4c001) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x110, r1, 0xd502c000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8040084}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x4084) 2.070735028s ago: executing program 1 (id=12943): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2.03576222s ago: executing program 1 (id=12944): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) 2.020887472s ago: executing program 6 (id=12945): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$eJzs3M1vFOUfAPDvzG7L+6/8EF9A0CoaiS8tLS9y8ILRxIMmJnrAeKptIchCDa2JEKLoAY+GxLvxaOJf4EkvRj2ZeNW7ISGGC+hpzezOlKXdbbvtlq3M55MMPM/Os3me78w8u888z04DKK3h7J8kYntE/B4RQ83s3QWGm//dvnl58u+blyeTqNff+itplLt18/JkUbR437Zmpl7P85va1Hv13YiJWm36Qp4fnTv3wejsxUsvnDk3cXr69PT58ePHjxzeP3hs/GhP4sziurX345l9e15759obkyevvffzt1l7t+f7W+NYkXT5IsPNo9vW011VtvHtaEkn1T42hK5UIiI7XQON/j8Uldgyv28oXv2sr40D1lW9Xq+3+37OXakD97Ek+t0CoD+KL/rs/rfY7tHQY0O4caJ5A5TFfTvfmnuq87f4Awvub3tpOCJOXvnnq2yL1cxDAAB06fts/PN8u/FfGg+1lPtfvoayMyL+HxG7IuKBiNgdEQ9GNMo+HBGPdFn/whWSxeOf9PqqAluhbPz3Ur62dff4L22M+7KQK/lyz45G/APJqTO16UP5MTkYA5uy/NgSdfzwym9fdNrXOv7Ltqz+YiyYt+N6dcEE3dTE3MTaor7jxqcRe6vt4k+iWMZJImJPROxdZR1nnv1mX6d9y8e/hB6sM9W/jnimef6vxIL4C0nH9cmxF4+NHx3dHLXpQ6PFVbHYL79efbNT/WuKvwey87+17fU/H//OZHPE7MVLZxvrtbPd13H1j8873tOs9vofTN5upAfz1z6amJu7MBYxmLy++PXxO+8t8kX5LP6DB9r3/13VO0fi0YjILuL9EfFYRDyet/2JiHgyIg4sEf9PLz/1fvfxLzEr30NZ/FPLnf9oPf/dJypnf/yu+/gL2fk/0kgdzF9ZyeffShu4lmMHAAAA/xVp4zfwSToyn07TkZHmb/h3x9a0NjM799ypmQ/PTzV/K78zBtJipmuoZT50LJ8bLvLjC/KH83njLytbGvmRyZnaVL+Dh5Lb1qH/Z/6s9Lt1wLrzvBaUl/4P5aX/Q3np/1Be+j+UV7v+/0kf2gHce77/obz0fygv/R/KS/+HUur4bHy6pkf+1z1RfGRtlPbcD4kTXb0r0o3Q5hIkqiv+YxarTGxqu6vPH0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA98m8AAAD//0Fo4Oc=") r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000000880), 0x2, 0x60, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "a664494a51"}, 0x10) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000301, r6, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r7 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'sit0\x00', 0x1000}) readahead(r8, 0x6, 0xfffffffffffffffa) sendfile(r7, r7, 0x0, 0x1000000201005) ftruncate(r7, 0x6) 2.018060512s ago: executing program 8 (id=12946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) 1.922517807s ago: executing program 8 (id=12947): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x2afcb7a8, 0x8282) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0), 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0xe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, 0x0, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}, {0x0}], 0x2}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0xd9, 0x0, 0x0, 0x0, 0x4}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x3}}, 0x10) mq_open(&(0x7f00000001c0)=':\\{%\xee!\x00', 0x40, 0x15a, &(0x7f0000000280)={0x8000000000000001, 0x2, 0xffff, 0x7fffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8470}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x101, 0x20750, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x10012c, 0x80, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0x4000, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r7 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r7}]) 1.86981269s ago: executing program 5 (id=12948): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) acct(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_delete(r2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2112c92, &(0x7f00000004c0)=ANY=[], 0x81, 0xa63, &(0x7f0000000840)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x7, 0x7fff, 0x0, 'queue0\x00', 0xa}) semtimedop(r3, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r3, 0x4, 0xf, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.561013698s ago: executing program 8 (id=12949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 1.18817406s ago: executing program 4 (id=12950): syz_read_part_table(0x105c, &(0x7f0000000000)="$eJzsz7uNAkEQBNC6vbmfcSIRUkCQAyISLKy1IADCwCUBIiAbXAYNWjYEwHjPmVGrqqUOr9XlfzZ8fx6T5NInKUnOpySLLqm11t16MvY+P+7B5i/ZtPd3XNmamSdZlv7rO8m1ZNrix+y3ZYiVZHV41pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8M5uAQAA//+4TQ5Z") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) shutdown(r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x8000000006) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001900)={0x0, 0x1, 0x0, &(0x7f0000001880), &(0x7f00000018c0)=[0x5, 0x1e8]}, 0x20) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r6, 0x3}, &(0x7f0000000040)=0x8) 868.751899ms ago: executing program 5 (id=12951): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a80)={r3, 0xfca804a0, 0x10, 0xf, &(0x7f0000001b40)="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"/266, &(0x7f0000001a40)=""/15, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff8}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000040)=[{0x4, 0xffff, 0x1000}], 0x1, 0x0) semtimedop(r5, &(0x7f0000000000)=[{0x4, 0x8000}, {0x1, 0x5, 0x1400}], 0x2, 0x0) semctl$GETZCNT(r5, 0x4, 0xf, 0x0) statx(r4, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000007c0)={0x1d, r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x20000, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x27}, 0x0, 0x0, &(0x7f0000000100)=""/49, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x58) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="010000006b0300000100000000000000", @ANYRES32=r6, @ANYRES64=r7, @ANYRES8=r6, @ANYBLOB='\x00\x00\x00', @ANYRESDEC=r4, @ANYRES32=r4], 0x48}}, 0x20000000) 856.111299ms ago: executing program 6 (id=12952): r0 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) unshare(0x20040400) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) 663.669561ms ago: executing program 8 (id=12953): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x8, 0x2, 0x80000a8}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a30000000"], 0xbc}}, 0xc0) r6 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x2, 0x4, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r6) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x1e1242, 0xfe) sendfile(r7, r7, 0x0, 0x6) getsockname(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) 663.115881ms ago: executing program 1 (id=12954): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000080000000500000001"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 602.899074ms ago: executing program 6 (id=12955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xb}, &(0x7f00000001c0)=0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x57, [{{0x9, 0x2, 0xfffffffffffffd1e}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0xfffffffffffffc2c, 'BBBB'}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 560.419947ms ago: executing program 8 (id=12956): r0 = syz_open_dev$sg(0x0, 0x0, 0x68241) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x0, 0x3, @scatter={0x0, 0x12, 0xfffffffffffffffd}, &(0x7f0000000240), 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ptrace$setregs(0x1a, 0x0, 0xc, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa8000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0x1, 0xfff, 0x0, 0xe, 0x0, "e317cf889d64825dbe9c2bdaa063d1ede0d79b", 0x11, 0xc}) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x4d420e55) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="160dbb", 0x3}, {0x0}], 0x2) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@mb_optimize_scan}, {@lazytime}, {@nombcache}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x440, &(0x7f0000000280)="$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") pipe2(0x0, 0x80800) r6 = fsopen(&(0x7f00000011c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0xc) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) open(0x0, 0x145142, 0x50) 552.255507ms ago: executing program 1 (id=12957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) 417.408065ms ago: executing program 1 (id=12958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3b00, 0x300, 0x8}}}}}}, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 214.295337ms ago: executing program 4 (id=12959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)="c8ac65a9fd17e04d5b", 0x9}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 12.562739ms ago: executing program 8 (id=12960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001090500000000000000000007300002000000008014000300fe8d000000000000000000000000010114000400fc000000000000000000000000eee8ca2385e8388a0a96f7aa0d230852370c566e19bf5e9757d875dbca9b203ad97f95958a002859c71545afb016b803d934d7790eee94c5843a6de0af2109d62ad1e83e9c63836bed9af1b534e60e3627e1213b48083f334bb7ce497e10fc7af6cca51fd62ffa180310ecea0c756cdd4992429a8484360dd6a537db14eeac96a8920c023cfbbce350e48e6420d24daef0107c8264be155b1ee628ed14245fb20d01906a15c3631ad0cd35f34a1cbc10e3e573f5f025af50"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x48801) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x2a, 0x9, 0x40, {0xa, @ah_ip4_spec={@multicast1, @broadcast, 0x4, 0x5}, {0x0, @link_local, 0xff, 0x0, [0x1, 0x4]}, @hdata="cdbbf34f55a6d18320a994bb1799c44ced3a2aa5ed3b8b393aa148fd50df08b342c92d7ce79eb759735dd71f172467e76b97122d", {0x0, @empty, 0x7, 0x8f, [0x4, 0x8]}, 0xffffffffdaed86cb, 0x1}}}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffffffffffc, 0x6, 0x8e, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="43f417ab10d7", 0x0, 0x7, 0x0, 0x1, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 10.441009ms ago: executing program 4 (id=12961): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 0s ago: executing program 5 (id=12962): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000000)=""/118, 0xbb, 0x76, 0x1, 0x6}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x18}, 0x8810) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): 7/0x510 [ 563.124075][ T2048] asm_exc_page_fault+0x26/0x30 [ 563.124103][ T2048] RIP: 0033:0x7fa8461414f7 [ 563.124168][ T2048] Code: e8 8e fa ff ff 89 f2 48 8d 3d 15 38 1b 00 48 8d 35 01 38 1b 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 563.124195][ T2048] RSP: 002b:00007fa844cc0120 EFLAGS: 00010202 [ 563.124219][ T2048] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa84628aeb9 [ 563.124278][ T2048] RDX: 00007fa844cc0140 RSI: 00007fa844cc0270 RDI: 000000000000000b [ 563.124298][ T2048] RBP: 00007fa8462f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 563.124317][ T2048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.124334][ T2048] R13: 00007fa846506038 R14: 00007fa846505fa0 R15: 00007ffe32656748 [ 563.124363][ T2048] [ 563.408602][ T2048] memory: usage 307200kB, limit 307200kB, failcnt 8523 [ 563.416750][ T2048] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 563.425850][ T2048] kmem: usage 284768kB, limit 9007199254740988kB, failcnt 0 [ 563.434336][ T2048] Memory cgroup stats for /syz5: [ 563.477488][ T2048] cache 21225472 [ 563.486079][ T2048] rss 1536000 [ 563.489399][ T2048] shmem 11821056 [ 563.492989][ T2048] mapped_file 0 [ 563.496473][ T2048] dirty 0 [ 563.499439][ T2048] writeback 0 [ 563.502752][ T2048] workingset_refault_anon 128 [ 563.507645][ T2048] workingset_refault_file 0 [ 563.512171][ T2048] swap 0 [ 563.515185][ T2048] swapcached 204800 [ 563.519033][ T2048] pgpgin 841956 [ 563.522516][ T2048] pgpgout 836349 [ 563.526121][ T2048] pgfault 648473 [ 563.529766][ T2048] pgmajfault 42 [ 563.533274][ T2048] inactive_anon 217088 [ 563.537363][ T2048] active_anon 13344768 [ 563.541448][ T2048] inactive_file 0 [ 563.545218][ T2048] active_file 0 [ 563.548785][ T2048] unevictable 9404416 [ 563.552794][ T2048] hierarchical_memory_limit 314572800 [ 563.558220][ T2048] hierarchical_memsw_limit 9223372036854771712 [ 563.564449][ T2048] total_cache 21225472 [ 563.568544][ T2048] total_rss 1536000 [ 563.572461][ T2048] total_shmem 11821056 [ 563.576659][ T2048] total_mapped_file 0 [ 563.580721][ T2048] total_dirty 0 [ 563.584411][ T2048] total_writeback 0 [ 563.588248][ T2048] total_workingset_refault_anon 128 [ 563.593528][ T2048] total_workingset_refault_file 0 [ 563.598646][ T2048] total_swap 0 [ 563.602065][ T2048] total_swapcached 204800 [ 563.606456][ T2048] total_pgpgin 841956 [ 563.610497][ T2048] total_pgpgout 836349 [ 563.614620][ T2048] total_pgfault 648473 [ 563.618760][ T2048] total_pgmajfault 42 [ 563.622769][ T2048] total_inactive_anon 217088 [ 563.627414][ T2048] total_active_anon 13344768 [ 563.632028][ T2048] total_inactive_file 0 [ 563.636220][ T2048] total_active_file 0 [ 563.640333][ T2048] total_unevictable 9404416 [ 563.644893][ T2048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11760,pid=2048,uid=0 [ 563.659648][ T2048] Memory cgroup out of memory: Killed process 2048 (syz.5.11760) total-vm:94012kB, anon-rss:1380kB, file-rss:29824kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 563.671098][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 563.748225][ T2120] 9p: Bad value for 'wfdno' [ 564.311647][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11789'. [ 564.354230][ T2150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11789'. [ 564.703324][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 565.070913][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 565.070930][ T29] audit: type=1326 audit(2033555885.686:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.101943][ T29] audit: type=1326 audit(2033555885.686:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.211530][ T29] audit: type=1326 audit(2033555885.756:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.236459][ T29] audit: type=1326 audit(2033555885.756:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.261204][ T29] audit: type=1326 audit(2033555885.756:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.284884][ T29] audit: type=1326 audit(2033555885.756:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.309613][ T29] audit: type=1326 audit(2033555885.756:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.334326][ T29] audit: type=1326 audit(2033555885.756:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.359004][ T29] audit: type=1326 audit(2033555885.756:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 565.366892][ T2188] lo speed is unknown, defaulting to 1000 [ 565.385133][ T29] audit: type=1326 audit(2033555885.756:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2183 comm="syz.1.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90f03cac22 code=0x7ffc0000 [ 565.438978][ T2188] lo speed is unknown, defaulting to 1000 [ 565.505457][ T2191] veth1_to_bond: entered allmulticast mode [ 565.513192][ T2190] veth1_to_bond: left allmulticast mode [ 565.743010][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 565.805324][ T2201] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11810'. [ 566.146874][ T2233] lo: entered allmulticast mode [ 566.160960][ T2233] tunl0: entered allmulticast mode [ 566.183559][ T2233] gre0: entered allmulticast mode [ 566.195423][ T2233] 0ªX¹¦Dö»: entered allmulticast mode [ 566.202790][ T2233] erspan0: entered allmulticast mode [ 566.219887][ T2233] ip_vti0: entered allmulticast mode [ 566.235969][ T2233] ip6_vti0: entered allmulticast mode [ 566.249388][ T2233] sit0: entered allmulticast mode [ 566.355947][ T2233] ip6tnl0: entered allmulticast mode [ 566.362518][ T2233] ip6gre0: entered allmulticast mode [ 566.369913][ T2233] ip6gretap0: entered allmulticast mode [ 566.376516][ T2233] žÿ: entered allmulticast mode [ 566.382612][ T2233] nlmon0: entered allmulticast mode [ 566.388854][ T2233] caif0: entered allmulticast mode [ 566.394194][ T2233] vxcan0: entered allmulticast mode [ 566.399484][ T2233] vxcan1: entered allmulticast mode [ 566.404895][ T2233] veth0: entered allmulticast mode [ 566.410085][ T2233] veth1: entered allmulticast mode [ 566.415381][ T2233] wg1: entered allmulticast mode [ 566.420429][ T2233] wg2: entered allmulticast mode [ 566.425562][ T2233] veth1_to_bridge: entered allmulticast mode [ 566.431670][ T2233] bridge_slave_1: entered allmulticast mode [ 566.437695][ T2233] veth0_to_bond: entered allmulticast mode [ 566.443808][ T2233] bond_slave_0: entered allmulticast mode [ 566.449764][ T2233] veth1_to_bond: entered allmulticast mode [ 566.455717][ T2233] bond_slave_1: entered allmulticast mode [ 566.461564][ T2233] veth0_to_team: entered allmulticast mode [ 566.467607][ T2233] team_slave_0: entered allmulticast mode [ 566.473594][ T2233] veth1_to_team: entered allmulticast mode [ 566.479581][ T2233] team_slave_1: entered allmulticast mode [ 566.485450][ T2233] veth0_to_batadv: entered allmulticast mode [ 566.491558][ T2233] batadv_slave_0: entered allmulticast mode [ 566.497681][ T2233] xfrm0: entered allmulticast mode [ 566.502998][ T2233] veth0_to_hsr: entered allmulticast mode [ 566.508819][ T2233] hsr_slave_0: entered allmulticast mode [ 566.514938][ T2233] veth1_to_hsr: entered allmulticast mode [ 566.520757][ T2233] hsr_slave_1: entered allmulticast mode [ 566.526536][ T2233] veth1_virt_wifi: entered allmulticast mode [ 566.532755][ T2233] veth0_virt_wifi: entered allmulticast mode [ 566.538968][ T2233] veth1_macvtap: entered allmulticast mode [ 566.545073][ T2233] veth0_macvtap: entered allmulticast mode [ 566.550983][ T2233] macsec0: entered allmulticast mode [ 566.556480][ T2233] geneve1: entered allmulticast mode [ 566.561974][ T2233] team1: entered allmulticast mode [ 566.567220][ T2233] sit1: entered allmulticast mode [ 566.572375][ T2233] bond1: entered allmulticast mode [ 566.577699][ T2233] @: entered allmulticast mode [ 566.582579][ T2233] bridge1: entered allmulticast mode [ 566.588073][ T2233] erspan1: entered allmulticast mode [ 566.593587][ T2233] veth2: entered allmulticast mode [ 566.598836][ T2233] veth3: entered allmulticast mode [ 566.604091][ T2233] sit2: entered allmulticast mode [ 566.609294][ T2233] bridge2: entered allmulticast mode [ 566.614940][ T2233] veth4: entered allmulticast mode [ 566.620135][ T2233] veth5: entered allmulticast mode [ 566.625441][ T2233] bridge3: entered allmulticast mode [ 566.630915][ T2233] bond2: entered allmulticast mode [ 566.636206][ T2233] veth6: entered allmulticast mode [ 566.641555][ T2233] veth7: entered allmulticast mode [ 566.646819][ T2233] bridge4: entered allmulticast mode [ 566.652483][ T2233] bridge5: entered allmulticast mode [ 566.657994][ T2233] veth8: entered allmulticast mode [ 566.663376][ T2233] veth9: entered allmulticast mode [ 566.668578][ T2233] veth10: entered allmulticast mode [ 566.673977][ T2233] veth11: entered allmulticast mode [ 566.679346][ T2233] sit3: entered allmulticast mode [ 566.684543][ T2233] bridge6: entered allmulticast mode [ 566.689983][ T2233] veth12: entered allmulticast mode [ 566.695426][ T2233] veth13: entered allmulticast mode [ 566.700719][ T2233] bridge7: entered allmulticast mode [ 566.706318][ T2233] bridge8: entered allmulticast mode [ 566.711838][ T2233] gtp0: entered allmulticast mode [ 566.717066][ T2233] bond3: entered allmulticast mode [ 566.722287][ T2233] bridge9: entered allmulticast mode [ 566.727761][ T2233] veth14: entered allmulticast mode [ 566.733147][ T2233] veth15: entered allmulticast mode [ 566.738514][ T2233] bond4: entered allmulticast mode [ 566.743764][ T2233] veth16: entered allmulticast mode [ 566.749046][ T2233] veth17: entered allmulticast mode [ 566.754396][ T2233] bond5: entered allmulticast mode [ 566.759702][ T2233] vlan2: entered allmulticast mode [ 566.765287][ T2233] bond6: entered allmulticast mode [ 566.770601][ T2233] bridge10: entered allmulticast mode [ 566.776190][ T2233] bond7: entered allmulticast mode [ 566.781542][ T2233] ip6gretap1: entered allmulticast mode [ 566.783221][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 566.787624][ T2233] bridge11: entered allmulticast mode [ 566.799612][ T2233] veth18: entered allmulticast mode [ 566.804937][ T2233] veth19: entered allmulticast mode [ 566.810224][ T2233] bridge12: entered allmulticast mode [ 566.815795][ T2233] bond8: entered allmulticast mode [ 566.821026][ T2233] macvlan2: entered allmulticast mode [ 566.826597][ T2233] bond9: entered allmulticast mode [ 566.831917][ T2233] ip6gretap2: entered allmulticast mode [ 566.837610][ T2233] veth20: entered allmulticast mode [ 566.843254][ T2233] veth21: entered allmulticast mode [ 566.848696][ T2233] bridge0: entered allmulticast mode [ 566.854244][ T2233] bridge13: entered allmulticast mode [ 566.859746][ T2233] bridge14: entered allmulticast mode [ 566.865528][ T2233] : entered allmulticast mode [ 566.870647][ T2233] vxlan0: entered allmulticast mode [ 566.875964][ T2233] bridge15: entered allmulticast mode [ 566.881461][ T2233] veth22: entered allmulticast mode [ 566.886900][ T2233] veth23: entered allmulticast mode [ 566.892254][ T2233] gre1: entered allmulticast mode [ 566.897492][ T2233] wireguard0: entered allmulticast mode [ 566.903177][ T2233] bond0: entered allmulticast mode [ 566.908451][ T2233] ip6erspan0: entered allmulticast mode [ 566.914187][ T2233] ip6gre1: entered allmulticast mode [ 566.919599][ T2233] veth24: entered allmulticast mode [ 566.924981][ T2233] veth25: entered allmulticast mode [ 566.930437][ T2233] veth26: entered allmulticast mode [ 566.935797][ T2233] veth27: entered allmulticast mode [ 566.941097][ T2233] ip6tnl1: entered allmulticast mode [ 566.946579][ T2233] ipvlan0: entered allmulticast mode [ 566.952095][ T2233] ip6tnl2: entered allmulticast mode [ 566.957822][ T2233] netdevsim netdevsim4 eth0: entered allmulticast mode [ 566.964887][ T2233] netdevsim netdevsim4 eth1: entered allmulticast mode [ 566.971958][ T2233] netdevsim netdevsim4 eth2: entered allmulticast mode [ 566.986299][ T2233] netdevsim netdevsim4 eth3: entered allmulticast mode [ 567.269509][ T2266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11832'. [ 567.823084][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 568.177936][ T2341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11864'. [ 568.465252][ T2365] lo speed is unknown, defaulting to 1000 [ 568.471961][ T2365] lo speed is unknown, defaulting to 1000 [ 568.863037][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 568.900496][ T2394] netlink: 'syz.6.11885': attribute type 4 has an invalid length. [ 568.909294][ T2391] netlink: 'syz.6.11885': attribute type 4 has an invalid length. [ 568.964809][ T6867] lo speed is unknown, defaulting to 1000 [ 568.970603][ T6867] syz0: Port: 1 Link ACTIVE [ 568.991471][T21782] lo speed is unknown, defaulting to 1000 [ 568.998620][T21782] syz0: Port: 1 Link DOWN [ 569.001021][ T6869] lo speed is unknown, defaulting to 1000 [ 569.108938][ T2420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11895'. [ 569.215521][ T2420] bond12: entered promiscuous mode [ 569.229863][ T2420] 8021q: adding VLAN 0 to HW filter on device bond12 [ 569.903069][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 570.575564][ T2526] ipvlan1: entered allmulticast mode [ 570.580954][ T2526] veth0_vlan: entered allmulticast mode [ 570.943027][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 571.014771][ T2541] lo speed is unknown, defaulting to 1000 [ 571.021471][ T2541] lo speed is unknown, defaulting to 1000 [ 571.135596][ T2548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11922'. [ 571.170850][ T2552] netlink: 'syz.8.11924': attribute type 3 has an invalid length. [ 571.501885][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 571.501903][ T29] audit: type=1326 audit(2033555892.106:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.533922][ T29] audit: type=1326 audit(2033555892.106:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.558532][ T29] audit: type=1326 audit(2033555892.106:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.583120][ T29] audit: type=1326 audit(2033555892.106:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.607802][ T29] audit: type=1326 audit(2033555892.106:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.632383][ T29] audit: type=1326 audit(2033555892.106:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.657040][ T29] audit: type=1326 audit(2033555892.106:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.681947][ T29] audit: type=1326 audit(2033555892.106:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.706717][ T29] audit: type=1326 audit(2033555892.106:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.731535][ T29] audit: type=1326 audit(2033555892.106:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2577 comm="syz.6.11934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 571.870715][ T2589] bond10: entered promiscuous mode [ 571.907229][ T2589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.974357][ T2589] bridge14: entered promiscuous mode [ 571.983041][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 572.326158][ T2627] batman_adv: batadv0: Adding interface: dummy0 [ 572.332480][ T2627] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.361408][ T2627] batman_adv: batadv0: Interface activated: dummy0 [ 572.391435][ T2627] batadv0: mtu less than device minimum [ 572.398986][ T2627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.410201][ T2627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.421172][ T2627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.432139][ T2627] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 572.821500][ T2674] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11970'. [ 573.023019][ C1] net_ratelimit: 15 callbacks suppressed [ 573.023040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 573.048748][ T52] tipc: Subscription rejected, illegal request [ 573.456761][ T2747] ref_ctr increment failed for inode: 0x133 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881a9785e80 [ 573.472744][ T2746] uprobe: syz.8.12001:2746 failed to unregister, leaking uprobe [ 573.782044][ T2785] lo speed is unknown, defaulting to 1000 [ 573.803930][ T2785] lo speed is unknown, defaulting to 1000 [ 573.830704][ T2792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12021'. [ 574.052490][ T2820] xt_hashlimit: size too large, truncated to 1048576 [ 574.063005][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 574.434375][ T2867] lo speed is unknown, defaulting to 1000 [ 574.441607][ T2867] lo speed is unknown, defaulting to 1000 [ 574.455090][ T2869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12049'. [ 574.484638][ T2869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12049'. [ 574.612712][ T2886] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12053'. [ 574.654640][ T2882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12052'. [ 575.006511][ T2932] VFS: Mount too revealing [ 575.103028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 575.168262][ T2944] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12072'. [ 576.143012][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 577.183026][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 577.307736][ T3037] netlink: 'syz.4.12103': attribute type 4 has an invalid length. [ 578.223016][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 578.415333][ T3137] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 578.856209][ T3188] ref_ctr increment failed for inode: 0x2a7d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881366a6c00 [ 578.943041][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.263023][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 579.555755][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 579.555770][ T29] audit: type=1326 audit(2033555900.176:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.635921][ T3206] netlink: 'syz.6.12158': attribute type 4 has an invalid length. [ 579.689613][ T3206] netlink: 'syz.6.12158': attribute type 4 has an invalid length. [ 579.729049][ T29] audit: type=1326 audit(2033555900.216:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.753146][ T29] audit: type=1326 audit(2033555900.216:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.759712][ T6867] lo speed is unknown, defaulting to 1000 [ 579.779458][ T29] audit: type=1326 audit(2033555900.216:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.782462][ T6867] syz0: Port: 1 Link ACTIVE [ 579.793139][ T9] lo speed is unknown, defaulting to 1000 [ 579.808641][ T29] audit: type=1326 audit(2033555900.216:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.842303][ T29] audit: type=1326 audit(2033555900.216:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.865861][ T29] audit: type=1326 audit(2033555900.216:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.890321][ T3213] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.890350][ T3213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.919875][ T29] audit: type=1326 audit(2033555900.216:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.944640][ T29] audit: type=1326 audit(2033555900.216:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 579.969321][ T29] audit: type=1326 audit(2033555900.216:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3201 comm="syz.4.12157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 580.110327][ T3232] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12166'. [ 580.250813][ T3253] tipc: Enabling of bearer rejected, failed to enable media [ 580.261273][ T3249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12171'. [ 580.303034][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 580.950835][ T3242] syz.5.12169 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 580.964976][ T3242] CPU: 0 UID: 0 PID: 3242 Comm: syz.5.12169 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 580.965017][ T3242] Tainted: [W]=WARN [ 580.965028][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 580.965045][ T3242] Call Trace: [ 580.965055][ T3242] [ 580.965067][ T3242] __dump_stack+0x1d/0x30 [ 580.965106][ T3242] dump_stack_lvl+0x95/0xd0 [ 580.965136][ T3242] dump_stack+0x15/0x1b [ 580.965163][ T3242] dump_header+0x80/0x240 [ 580.965190][ T3242] oom_kill_process+0x295/0x350 [ 580.965226][ T3242] out_of_memory+0x97d/0xb80 [ 580.965300][ T3242] try_charge_memcg+0x62e/0xa10 [ 580.965333][ T3242] obj_cgroup_charge_pages+0x23/0xc0 [ 580.965420][ T3242] __memcg_kmem_charge_page+0x9e/0x170 [ 580.965480][ T3242] __alloc_frozen_pages_noprof+0x18a/0x350 [ 580.965523][ T3242] alloc_pages_mpol+0xb3/0x260 [ 580.965577][ T3242] alloc_pages_noprof+0x8f/0x130 [ 580.965649][ T3242] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 580.965697][ T3242] __kvmalloc_node_noprof+0x471/0x680 [ 580.965759][ T3242] ? ip_set_alloc+0x24/0x30 [ 580.965791][ T3242] ? ip_set_alloc+0x24/0x30 [ 580.965832][ T3242] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 580.965924][ T3242] ip_set_alloc+0x24/0x30 [ 580.965955][ T3242] hash_netiface_create+0x282/0x740 [ 580.965988][ T3242] ? __pfx_hash_netiface_create+0x10/0x10 [ 580.966046][ T3242] ip_set_create+0x3cf/0x970 [ 580.966098][ T3242] ? __nla_parse+0x40/0x60 [ 580.966125][ T3242] nfnetlink_rcv_msg+0x509/0x5d0 [ 580.966231][ T3242] netlink_rcv_skb+0x123/0x220 [ 580.966307][ T3242] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 580.966355][ T3242] nfnetlink_rcv+0x167/0x1720 [ 580.966394][ T3242] ? __list_del_entry_valid_or_report+0x65/0x130 [ 580.966479][ T3242] ? __rmqueue_pcplist+0x9b6/0xb80 [ 580.966589][ T3242] ? _raw_spin_lock_bh+0x56/0xb0 [ 580.966635][ T3242] ? should_fail_ex+0x30/0x280 [ 580.966719][ T3242] ? selinux_nlmsg_lookup+0x99/0x890 [ 580.966745][ T3242] ? __rcu_read_unlock+0x33/0x70 [ 580.966777][ T3242] ? __netlink_lookup+0x276/0x2b0 [ 580.966866][ T3242] netlink_unicast+0x5c0/0x690 [ 580.966949][ T3242] netlink_sendmsg+0x5c8/0x6f0 [ 580.966972][ T3242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.967015][ T3242] ____sys_sendmsg+0x5af/0x600 [ 580.967052][ T3242] ___sys_sendmsg+0x195/0x1e0 [ 580.967093][ T3242] __x64_sys_sendmsg+0xd4/0x160 [ 580.967119][ T3242] x64_sys_call+0x17ba/0x3000 [ 580.967173][ T3242] do_syscall_64+0xc0/0x2a0 [ 580.967214][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.967238][ T3242] RIP: 0033:0x7fa84628aeb9 [ 580.967254][ T3242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.967307][ T3242] RSP: 002b:00007fa844cdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.967335][ T3242] RAX: ffffffffffffffda RBX: 00007fa846505fa0 RCX: 00007fa84628aeb9 [ 580.967355][ T3242] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 580.967373][ T3242] RBP: 00007fa8462f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 580.967391][ T3242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.967404][ T3242] R13: 00007fa846506038 R14: 00007fa846505fa0 R15: 00007ffe32656748 [ 580.967440][ T3242] [ 580.967448][ T3242] memory: usage 307200kB, limit 307200kB, failcnt 8691 [ 581.292144][ T3242] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 581.300106][ T3242] kmem: usage 269584kB, limit 9007199254740988kB, failcnt 0 [ 581.307484][ T3242] Memory cgroup stats for /syz5: [ 581.308016][ T3242] cache 28663808 [ 581.316599][ T3242] rss 9650176 [ 581.319940][ T3242] shmem 28663808 [ 581.323548][ T3242] mapped_file 0 [ 581.327052][ T3242] dirty 0 [ 581.330014][ T3242] writeback 0 [ 581.333403][ T3242] workingset_refault_anon 128 [ 581.338132][ T3242] workingset_refault_file 0 [ 581.342655][ T3242] swap 0 [ 581.343180][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 581.345772][ T3242] swapcached 204800 [ 581.356330][ T3242] pgpgin 901003 [ 581.359841][ T3242] pgpgout 891599 [ 581.363469][ T3242] pgfault 670622 [ 581.367032][ T3242] pgmajfault 42 [ 581.370509][ T3242] inactive_anon 217088 [ 581.374634][ T3242] active_anon 38301696 [ 581.378757][ T3242] inactive_file 0 [ 581.382448][ T3242] active_file 0 [ 581.385962][ T3242] unevictable 0 [ 581.389441][ T3242] hierarchical_memory_limit 314572800 [ 581.394917][ T3242] hierarchical_memsw_limit 9223372036854771712 [ 581.401097][ T3242] total_cache 28663808 [ 581.405249][ T3242] total_rss 9650176 [ 581.409168][ T3242] total_shmem 28663808 [ 581.413303][ T3242] total_mapped_file 0 [ 581.417303][ T3242] total_dirty 0 [ 581.420783][ T3242] total_writeback 0 [ 581.424673][ T3242] total_workingset_refault_anon 128 [ 581.429897][ T3242] total_workingset_refault_file 0 [ 581.434969][ T3242] total_swap 0 [ 581.438408][ T3242] total_swapcached 204800 [ 581.442853][ T3242] total_pgpgin 901003 [ 581.447259][ T3242] total_pgpgout 891599 [ 581.451616][ T3242] total_pgfault 670622 [ 581.455762][ T3242] total_pgmajfault 42 [ 581.459758][ T3242] total_inactive_anon 217088 [ 581.464397][ T3242] total_active_anon 38301696 [ 581.469010][ T3242] total_inactive_file 0 [ 581.473227][ T3242] total_active_file 0 [ 581.477228][ T3242] total_unevictable 0 [ 581.481257][ T3242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.12169,pid=3241,uid=0 [ 581.496322][ T3242] Memory cgroup out of memory: Killed process 3241 (syz.5.12169) total-vm:96324kB, anon-rss:9536kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 581.586532][ T3267] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12175'. [ 581.623300][ T3267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.630765][ T3267] batadv0: mtu less than device minimum [ 581.637073][ T3267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.648137][ T3267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.659216][ T3267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.670303][ T3267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 581.691125][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.714957][ T3267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.734537][ T3267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.747208][ T3267] batman_adv: batadv0: Interface deactivated: dummy0 [ 581.753980][ T3267] batman_adv: batadv0: Removing interface: dummy0 [ 581.797154][ T3274] xt_hashlimit: size too large, truncated to 1048576 [ 582.022309][ T3284] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 582.167192][ T3304] netlink: 'syz.1.12188': attribute type 4 has an invalid length. [ 582.188153][ T3304] netlink: 'syz.1.12188': attribute type 4 has an invalid length. [ 582.204126][ T3306] netlink: 'syz.8.12189': attribute type 4 has an invalid length. [ 582.215799][T21778] lo speed is unknown, defaulting to 1000 [ 582.221592][T21778] syz2: Port: 1 Link ACTIVE [ 582.235872][T21780] lo speed is unknown, defaulting to 1000 [ 582.241668][T21780] syz2: Port: 1 Link DOWN [ 582.254033][ T404] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.256497][ T3307] netlink: 'syz.8.12189': attribute type 4 has an invalid length. [ 582.268416][ T404] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.292313][ T404] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.307423][ T404] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.402270][ T3316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12191'. [ 583.027305][ T3385] lo speed is unknown, defaulting to 1000 [ 583.036979][ T3385] lo speed is unknown, defaulting to 1000 [ 583.279166][ T3404] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12216'. [ 583.391062][ T3404] 0ªX¹¦À: renamed from caif0 [ 583.398346][ T3404] net_ratelimit: 36 callbacks suppressed [ 583.398359][ T3404] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 583.422997][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 583.506055][ T3398] syz.1.12214 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 583.520189][ T3398] CPU: 0 UID: 0 PID: 3398 Comm: syz.1.12214 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.520231][ T3398] Tainted: [W]=WARN [ 583.520241][ T3398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 583.520259][ T3398] Call Trace: [ 583.520268][ T3398] [ 583.520277][ T3398] __dump_stack+0x1d/0x30 [ 583.520304][ T3398] dump_stack_lvl+0x95/0xd0 [ 583.520402][ T3398] dump_stack+0x15/0x1b [ 583.520423][ T3398] dump_header+0x80/0x240 [ 583.520493][ T3398] oom_kill_process+0x295/0x350 [ 583.520525][ T3398] out_of_memory+0x97d/0xb80 [ 583.520552][ T3398] try_charge_memcg+0x62e/0xa10 [ 583.520586][ T3398] obj_cgroup_charge_pages+0x23/0xc0 [ 583.520684][ T3398] __memcg_kmem_charge_page+0x9e/0x170 [ 583.520725][ T3398] __alloc_frozen_pages_noprof+0x18a/0x350 [ 583.520815][ T3398] alloc_pages_bulk_noprof+0x4a1/0x520 [ 583.520906][ T3398] ? policy_nodemask+0x417/0x5e0 [ 583.520938][ T3398] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 583.521018][ T3398] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 583.521067][ T3398] ? alloc_pages_mpol+0x217/0x260 [ 583.521164][ T3398] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 583.521274][ T3398] __kvmalloc_node_noprof+0x471/0x680 [ 583.521314][ T3398] ? ip_set_alloc+0x24/0x30 [ 583.521355][ T3398] ? ip_set_alloc+0x24/0x30 [ 583.521464][ T3398] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 583.521503][ T3398] ip_set_alloc+0x24/0x30 [ 583.521560][ T3398] hash_netiface_create+0x282/0x740 [ 583.521599][ T3398] ? __pfx_hash_netiface_create+0x10/0x10 [ 583.521710][ T3398] ip_set_create+0x3cf/0x970 [ 583.521813][ T3398] ? __nla_parse+0x40/0x60 [ 583.521835][ T3398] nfnetlink_rcv_msg+0x509/0x5d0 [ 583.521970][ T3398] netlink_rcv_skb+0x123/0x220 [ 583.522004][ T3398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 583.522110][ T3398] nfnetlink_rcv+0x167/0x1720 [ 583.522152][ T3398] ? obj_cgroup_charge_account+0x122/0x1a0 [ 583.522190][ T3398] ? __rcu_read_unlock+0x4e/0x70 [ 583.522251][ T3398] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 583.522301][ T3398] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 583.522377][ T3398] ? __d_alloc+0x37/0x340 [ 583.522413][ T3398] ? __d_lookup_rcu+0x28b/0x2d0 [ 583.522506][ T3398] ? __d_alloc+0x2c7/0x340 [ 583.522536][ T3398] ? __rcu_read_unlock+0x4e/0x70 [ 583.522575][ T3398] ? rcu_segcblist_enqueue+0x92/0xb0 [ 583.522607][ T3398] ? __account_obj_stock+0x211/0x350 [ 583.522637][ T3398] ? truncate_inode_pages_range+0x2bc/0x7e0 [ 583.522700][ T3398] ? _raw_spin_lock_bh+0x56/0xb0 [ 583.522738][ T3398] ? should_fail_ex+0x30/0x280 [ 583.522830][ T3398] ? selinux_nlmsg_lookup+0x99/0x890 [ 583.522859][ T3398] ? __rcu_read_unlock+0x33/0x70 [ 583.522902][ T3398] ? __netlink_lookup+0x276/0x2b0 [ 583.522995][ T3398] netlink_unicast+0x5c0/0x690 [ 583.523041][ T3398] netlink_sendmsg+0x5c8/0x6f0 [ 583.523070][ T3398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.523107][ T3398] ____sys_sendmsg+0x5af/0x600 [ 583.523144][ T3398] ___sys_sendmsg+0x195/0x1e0 [ 583.523243][ T3398] __x64_sys_sendmsg+0xd4/0x160 [ 583.523277][ T3398] x64_sys_call+0x17ba/0x3000 [ 583.523314][ T3398] do_syscall_64+0xc0/0x2a0 [ 583.523366][ T3398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.523392][ T3398] RIP: 0033:0x7f90f03caeb9 [ 583.523413][ T3398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.523439][ T3398] RSP: 002b:00007f90eee27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.523467][ T3398] RAX: ffffffffffffffda RBX: 00007f90f0645fa0 RCX: 00007f90f03caeb9 [ 583.523484][ T3398] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 583.523567][ T3398] RBP: 00007f90f0438c1f R08: 0000000000000000 R09: 0000000000000000 [ 583.523586][ T3398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.523603][ T3398] R13: 00007f90f0646038 R14: 00007f90f0645fa0 R15: 00007fff15a33188 [ 583.523633][ T3398] [ 583.904037][ T3398] memory: usage 307200kB, limit 307200kB, failcnt 12762 [ 583.911077][ T3398] memory+swap: usage 339704kB, limit 9007199254740988kB, failcnt 0 [ 583.919303][ T3398] kmem: usage 272228kB, limit 9007199254740988kB, failcnt 0 [ 583.926693][ T3398] Memory cgroup stats for /syz1: [ 583.927009][ T3398] cache 34291712 [ 583.935569][ T3398] rss 1347584 [ 583.938881][ T3398] shmem 34242560 [ 583.942451][ T3398] mapped_file 12288 [ 583.946330][ T3398] dirty 0 [ 583.949358][ T3398] writeback 0 [ 583.952691][ T3398] workingset_refault_anon 202 [ 583.957411][ T3398] workingset_refault_file 6084 [ 583.962238][ T3398] swap 33284096 [ 583.965740][ T3398] swapcached 151552 [ 583.969561][ T3398] pgpgin 862994 [ 583.973070][ T3398] pgpgout 854251 [ 583.976641][ T3398] pgfault 737799 [ 583.980252][ T3398] pgmajfault 84 [ 583.983853][ T3398] inactive_anon 26431488 [ 583.988175][ T3398] active_anon 9330688 [ 583.992178][ T3398] inactive_file 12288 [ 583.996261][ T3398] active_file 36864 [ 584.000108][ T3398] unevictable 0 [ 584.003617][ T3398] hierarchical_memory_limit 314572800 [ 584.009012][ T3398] hierarchical_memsw_limit 9223372036854771712 [ 584.015239][ T3398] total_cache 34291712 [ 584.019355][ T3398] total_rss 1347584 [ 584.023241][ T3398] total_shmem 34242560 [ 584.027412][ T3398] total_mapped_file 12288 [ 584.031786][ T3398] total_dirty 0 [ 584.035404][ T3398] total_writeback 0 [ 584.039345][ T3398] total_workingset_refault_anon 202 [ 584.044717][ T3398] total_workingset_refault_file 6084 [ 584.050021][ T3398] total_swap 33284096 [ 584.054062][ T3398] total_swapcached 151552 [ 584.058414][ T3398] total_pgpgin 862994 [ 584.062455][ T3398] total_pgpgout 854251 [ 584.066749][ T3398] total_pgfault 737799 [ 584.070859][ T3398] total_pgmajfault 84 [ 584.074904][ T3398] total_inactive_anon 26431488 [ 584.079691][ T3398] total_active_anon 9330688 [ 584.084334][ T3398] total_inactive_file 12288 [ 584.088944][ T3398] total_active_file 36864 [ 584.093333][ T3398] total_unevictable 0 [ 584.097341][ T3398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.40,pid=3598,uid=0 [ 584.111889][ T3398] Memory cgroup out of memory: Killed process 3598 (syz.1.40) total-vm:95988kB, anon-rss:1208kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 584.463044][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 584.891651][ T3459] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 584.907696][ T3459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12230'. [ 585.503043][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 585.746266][ T3496] netlink: 'syz.6.12244': attribute type 4 has an invalid length. [ 585.809634][T21780] lo speed is unknown, defaulting to 1000 [ 585.816635][T21780] syz0: Port: 1 Link DOWN [ 585.821554][ T3496] netlink: 'syz.6.12244': attribute type 4 has an invalid length. [ 585.852618][T21782] lo speed is unknown, defaulting to 1000 [ 585.858474][T21782] syz0: Port: 1 Link ACTIVE [ 585.863178][T21778] lo speed is unknown, defaulting to 1000 [ 585.990378][ T3505] netlink: 'syz.6.12246': attribute type 4 has an invalid length. [ 586.362397][ T3476] Set syz1 is full, maxelem 65536 reached [ 586.543047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 586.545155][ T3527] tipc: Can't bind to reserved service type 1 [ 587.145832][ T3560] netlink: 'syz.6.12264': attribute type 10 has an invalid length. [ 587.155096][ T3560] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12264'. [ 587.169269][ T3560] ipvlan0: entered promiscuous mode [ 587.177134][ T3560] bridge0: port 1(ipvlan0) entered blocking state [ 587.185067][ T3560] bridge0: port 1(ipvlan0) entered disabled state [ 587.192854][ T3560] ipvlan0: entered allmulticast mode [ 587.199472][ T3560] bridge0: entered allmulticast mode [ 587.206785][ T3560] ipvlan0: left allmulticast mode [ 587.212077][ T3560] bridge0: left allmulticast mode [ 587.583991][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 587.782465][ T3586] VFS: Mount too revealing [ 588.623021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 588.845790][ T3606] batadv0: entered promiscuous mode [ 588.866381][ T3606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.245774][ T3625] xt_hashlimit: size too large, truncated to 1048576 [ 589.369695][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12284'. [ 589.461665][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12286'. [ 589.471864][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12286'. [ 589.496459][T10279] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.506511][T10279] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.516782][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12286'. [ 589.526897][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12286'. [ 589.537833][T10279] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.552596][T10279] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.568773][ T3635] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.579136][ T3635] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.663018][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 589.684272][ T3643] rdma_rxe: rxe_newlink: failed to add team0 [ 589.695611][ T3635] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.707214][ T3635] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.768237][ T3635] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.778679][ T3635] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.868667][ T3635] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.879119][ T3635] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.962074][ T12] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.971595][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.986213][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.995586][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.031634][ T52] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.040037][ T52] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.065404][ T3669] 9p: Bad value for 'rfdno' [ 590.083063][ T52] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.091308][ T52] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.236917][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12303'. [ 590.374652][ T3689] tipc: Enabling of bearer rejected, failed to enable media [ 590.621284][ T3699] netlink: 'syz.4.12309': attribute type 6 has an invalid length. [ 590.703004][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 591.139459][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 591.139478][ T29] audit: type=1400 audit(2033555911.756:6964): avc: denied { create } for pid=3731 comm="syz.8.12318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 591.293206][ T3736] batadv_slave_1: entered promiscuous mode [ 591.313640][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12319'. [ 591.334143][ T3738] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=3738 comm=syz.4.12320 [ 591.357795][ T3736] batadv_slave_1 (unregistering): left promiscuous mode [ 591.385789][ T3739] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12320'. [ 591.743155][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 592.783004][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 592.987223][ T29] audit: type=1326 audit(2033555913.606:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.031353][ T29] audit: type=1326 audit(2033555913.606:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.056451][ T29] audit: type=1326 audit(2033555913.636:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.081077][ T29] audit: type=1326 audit(2033555913.636:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.105897][ T29] audit: type=1326 audit(2033555913.636:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.130714][ T29] audit: type=1326 audit(2033555913.636:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.155488][ T29] audit: type=1326 audit(2033555913.636:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.180110][ T29] audit: type=1326 audit(2033555913.636:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.204849][ T29] audit: type=1326 audit(2033555913.646:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.6.12329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f764ac8aeb9 code=0x7ffc0000 [ 593.421961][ T3782] tipc: Failed to remove unknown binding: 66,0,0/16966:1834982083/1834982084 [ 593.440944][ T3782] tipc: Failed to remove unknown binding: 66,0,0/16966:1834982083/1834982084 [ 593.743902][ T3769] syz.5.12331 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 593.758181][ T3769] CPU: 0 UID: 0 PID: 3769 Comm: syz.5.12331 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 593.758216][ T3769] Tainted: [W]=WARN [ 593.758223][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 593.758238][ T3769] Call Trace: [ 593.758245][ T3769] [ 593.758268][ T3769] __dump_stack+0x1d/0x30 [ 593.758304][ T3769] dump_stack_lvl+0x95/0xd0 [ 593.758379][ T3769] dump_stack+0x15/0x1b [ 593.758411][ T3769] dump_header+0x80/0x240 [ 593.758492][ T3769] oom_kill_process+0x295/0x350 [ 593.758530][ T3769] out_of_memory+0x97d/0xb80 [ 593.758598][ T3769] try_charge_memcg+0x62e/0xa10 [ 593.758643][ T3769] obj_cgroup_charge_pages+0x23/0xc0 [ 593.758686][ T3769] __memcg_kmem_charge_page+0x9e/0x170 [ 593.758777][ T3769] __alloc_frozen_pages_noprof+0x18a/0x350 [ 593.758826][ T3769] alloc_pages_mpol+0xb3/0x260 [ 593.758870][ T3769] alloc_pages_noprof+0x8f/0x130 [ 593.758934][ T3769] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 593.758992][ T3769] __kvmalloc_node_noprof+0x471/0x680 [ 593.759094][ T3769] ? ip_set_alloc+0x24/0x30 [ 593.759132][ T3769] ? ip_set_alloc+0x24/0x30 [ 593.759223][ T3769] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 593.759263][ T3769] ip_set_alloc+0x24/0x30 [ 593.759304][ T3769] hash_netiface_create+0x282/0x740 [ 593.759359][ T3769] ? __pfx_hash_netiface_create+0x10/0x10 [ 593.759478][ T3769] ip_set_create+0x3cf/0x970 [ 593.759529][ T3769] ? __mutex_lock_slowpath+0xa/0x10 [ 593.759560][ T3769] nfnetlink_rcv_msg+0x509/0x5d0 [ 593.759639][ T3769] netlink_rcv_skb+0x123/0x220 [ 593.759686][ T3769] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 593.759743][ T3769] nfnetlink_rcv+0x167/0x1720 [ 593.759795][ T3769] ? __list_add_valid_or_report+0x38/0xe0 [ 593.759913][ T3769] ? merge_sched_in+0x5db/0xbe0 [ 593.760101][ T3769] ? rb_next+0x5c/0x80 [ 593.760147][ T3769] ? visit_groups_merge+0xf7e/0xfd0 [ 593.760183][ T3769] ? event_sched_out+0x896/0x8f0 [ 593.760220][ T3769] ? _raw_spin_lock_bh+0x56/0xb0 [ 593.760328][ T3769] ? should_fail_ex+0x30/0x280 [ 593.760447][ T3769] ? selinux_nlmsg_lookup+0x99/0x890 [ 593.760473][ T3769] ? __rcu_read_unlock+0x33/0x70 [ 593.760505][ T3769] ? __netlink_lookup+0x276/0x2b0 [ 593.760529][ T3769] netlink_unicast+0x5c0/0x690 [ 593.760617][ T3769] netlink_sendmsg+0x5c8/0x6f0 [ 593.760646][ T3769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.760675][ T3769] ____sys_sendmsg+0x5af/0x600 [ 593.760744][ T3769] ___sys_sendmsg+0x195/0x1e0 [ 593.760792][ T3769] __x64_sys_sendmsg+0xd4/0x160 [ 593.760831][ T3769] x64_sys_call+0x17ba/0x3000 [ 593.760864][ T3769] do_syscall_64+0xc0/0x2a0 [ 593.760897][ T3769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.760993][ T3769] RIP: 0033:0x7fa84628aeb9 [ 593.761014][ T3769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.761039][ T3769] RSP: 002b:00007fa844cdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.761073][ T3769] RAX: ffffffffffffffda RBX: 00007fa846505fa0 RCX: 00007fa84628aeb9 [ 593.761098][ T3769] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 593.761222][ T3769] RBP: 00007fa8462f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 593.761234][ T3769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.761258][ T3769] R13: 00007fa846506038 R14: 00007fa846505fa0 R15: 00007ffe32656748 [ 593.761279][ T3769] [ 593.761286][ T3769] memory: usage 307200kB, limit 307200kB, failcnt 8915 [ 593.823192][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 593.825287][ T3769] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 594.116522][ T3769] kmem: usage 218148kB, limit 9007199254740988kB, failcnt 0 [ 594.123882][ T3769] Memory cgroup stats for /syz5: [ 594.124274][ T3769] cache 81330176 [ 594.133066][ T3769] rss 9654272 [ 594.136625][ T3769] shmem 11886592 [ 594.140201][ T3769] mapped_file 0 [ 594.143717][ T3769] dirty 0 [ 594.146733][ T3769] writeback 0 [ 594.150187][ T3769] workingset_refault_anon 128 [ 594.154911][ T3769] workingset_refault_file 0 [ 594.159447][ T3769] swap 0 [ 594.162324][ T3769] swapcached 204800 [ 594.166244][ T3769] pgpgin 952205 [ 594.169721][ T3769] pgpgout 929942 [ 594.173405][ T3769] pgfault 676568 [ 594.177024][ T3769] pgmajfault 42 [ 594.180698][ T3769] inactive_anon 217088 [ 594.184876][ T3769] active_anon 21528576 [ 594.188968][ T3769] inactive_file 0 [ 594.192617][ T3769] active_file 0 [ 594.196126][ T3769] unevictable 69443584 [ 594.200241][ T3769] hierarchical_memory_limit 314572800 [ 594.205667][ T3769] hierarchical_memsw_limit 9223372036854771712 [ 594.212009][ T3769] total_cache 81330176 [ 594.216147][ T3769] total_rss 9654272 [ 594.220198][ T3769] total_shmem 11886592 [ 594.224396][ T3769] total_mapped_file 0 [ 594.228412][ T3769] total_dirty 0 [ 594.231941][ T3769] total_writeback 0 [ 594.235811][ T3769] total_workingset_refault_anon 128 [ 594.241050][ T3769] total_workingset_refault_file 0 [ 594.246230][ T3769] total_swap 0 [ 594.249699][ T3769] total_swapcached 204800 [ 594.254074][ T3769] total_pgpgin 952205 [ 594.258079][ T3769] total_pgpgout 929942 [ 594.262261][ T3769] total_pgfault 676568 [ 594.266461][ T3769] total_pgmajfault 42 [ 594.270487][ T3769] total_inactive_anon 217088 [ 594.275133][ T3769] total_active_anon 21528576 [ 594.279757][ T3769] total_inactive_file 0 [ 594.283973][ T3769] total_active_file 0 [ 594.288049][ T3769] total_unevictable 69443584 [ 594.292659][ T3769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.12331,pid=3768,uid=0 [ 594.307446][ T3769] Memory cgroup out of memory: Killed process 3768 (syz.5.12331) total-vm:96324kB, anon-rss:9536kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 594.386027][ T3813] netlink: 182 bytes leftover after parsing attributes in process `syz.1.12344'. [ 594.581445][ T3831] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12351'. [ 594.617472][ T3837] bond7: option mode: unable to set because the bond device has slaves [ 594.651231][ T3837] vlan2: entered allmulticast mode [ 594.656555][ T3837] bond7: entered allmulticast mode [ 594.661783][ T3837] bond0: entered allmulticast mode [ 594.666982][ T3837] bridge10: entered allmulticast mode [ 594.687388][ T3837] bond7: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of bond0 [ 594.807682][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12356'. [ 594.820326][ T3846] vlan0: entered promiscuous mode [ 594.825524][ T3846] ip6gretap0: entered promiscuous mode [ 594.863013][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 594.896444][ T3851] netlink: 'syz.4.12358': attribute type 3 has an invalid length. [ 595.114932][ T3869] bond1: entered promiscuous mode [ 595.120278][ T3869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.145590][ T3869] bridge1: entered promiscuous mode [ 595.358714][ T3887] netlink: 'syz.8.12371': attribute type 13 has an invalid length. [ 595.903014][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 596.011791][ T3929] geneve0: entered promiscuous mode [ 596.019734][T10279] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.031206][T10279] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.040371][T10279] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.048975][T10279] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.611042][ T6869] kernel write not supported for file bpf-prog (pid: 6869 comm: kworker/0:13) [ 596.943061][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 597.488026][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12400'. [ 597.546201][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12400'. [ 597.938210][ T4005] tipc: Enabling of bearer rejected, failed to enable media [ 597.982991][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 598.918514][ T4050] lo speed is unknown, defaulting to 1000 [ 598.928266][ T4050] lo speed is unknown, defaulting to 1000 [ 599.023010][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 599.036784][ T4058] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12426'. [ 599.527987][ T4070] netlink: 'syz.5.12431': attribute type 1 has an invalid length. [ 599.543588][ T4070] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.559903][ T4070] bond11: (slave gretap1): making interface the new active one [ 599.568866][ T4070] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 599.580142][ T4070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4070 comm=syz.5.12431 [ 599.656802][ T4077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12434'. [ 599.719181][ T4082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.063019][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 600.152151][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12442'. [ 600.168892][ T4099] 8021q: adding VLAN 0 to HW filter on device bond12 [ 600.184924][ T4099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12442'. [ 600.194817][ T4099] bond12: entered allmulticast mode [ 600.203319][ T4099] dummy0: entered allmulticast mode [ 600.209098][ T4099] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 600.467879][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12447'. [ 600.486041][ T4121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.777660][ T12] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.788591][ T12] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.807252][ T12] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.821722][ T12] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.087165][ T4143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12457'. [ 601.103008][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 601.278955][ T4151] ref_ctr increment failed for inode: 0x2f94 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100059440 [ 601.291222][ T4150] uprobe: syz.1.12458:4150 failed to unregister, leaking uprobe [ 601.547369][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 601.547384][ T29] audit: type=1326 audit(2033555923.170:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.581143][ T29] audit: type=1326 audit(2033555923.200:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.604970][ T29] audit: type=1326 audit(2033555923.200:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.628728][ T29] audit: type=1326 audit(2033555923.200:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.652347][ T29] audit: type=1326 audit(2033555923.200:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.676053][ T29] audit: type=1326 audit(2033555923.200:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.699502][ T29] audit: type=1326 audit(2033555923.200:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.723129][ T29] audit: type=1326 audit(2033555923.200:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.746730][ T29] audit: type=1326 audit(2033555923.200:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 601.770359][ T29] audit: type=1326 audit(2033555923.200:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4164 comm="syz.1.12462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f90f03caeb9 code=0x7ffc0000 [ 602.143021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 602.817539][ T4207] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12476'. [ 602.904498][ T4207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4207 comm=syz.8.12476 [ 603.182996][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 603.267921][ T4226] ip6gre3: entered promiscuous mode [ 603.273429][ T4226] ip6gre3: entered allmulticast mode [ 603.295222][ T4226] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 603.553320][T10279] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 603.561023][T10279] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 603.584311][T21780] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.122626][T21780] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.224315][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 604.359851][T21780] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 604.395494][ T4294] netlink: 'syz.6.12498': attribute type 1 has an invalid length. [ 604.403443][ T4294] netlink: 'syz.6.12498': attribute type 2 has an invalid length. [ 604.666994][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12506'. [ 604.689966][ T4316] netlink: 80 bytes leftover after parsing attributes in process `syz.6.12506'. [ 605.090273][ T4349] netlink: 'syz.4.12514': attribute type 1 has an invalid length. [ 605.124936][ T4349] bond10: entered promiscuous mode [ 605.130140][ T4349] bond10: entered allmulticast mode [ 605.147852][ T4356] bond10: (slave ip6gretap3): making interface the new active one [ 605.156979][ T4356] ip6gretap3: entered promiscuous mode [ 605.162638][ T4356] ip6gretap3: entered allmulticast mode [ 605.262989][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 605.298111][ T4356] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link [ 605.336333][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12514'. [ 605.353716][ T4349] bond10: left promiscuous mode [ 605.358688][ T4349] ip6gretap3: left promiscuous mode [ 605.364087][ T4349] bond10: left allmulticast mode [ 605.369062][ T4349] ip6gretap3: left allmulticast mode [ 605.389717][ T4349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.920083][ T4396] netlink: 'syz.8.12525': attribute type 4 has an invalid length. [ 606.045107][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.052412][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.157558][ T4410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12539'. [ 606.250730][ T4401] tipc: Enabling of bearer rejected, failed to enable media [ 606.271015][ T12] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.279863][ T12] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.302998][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 606.425550][ T12] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.435134][ T12] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.464144][ T12] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.472601][ T12] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.484554][ T12] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.493083][ T12] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.546178][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12532'. [ 606.702358][ T4435] lo speed is unknown, defaulting to 1000 [ 606.709140][ T4435] lo speed is unknown, defaulting to 1000 [ 606.869030][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 606.869089][ T29] audit: type=1326 audit(2033555928.470:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 606.898995][ T29] audit: type=1326 audit(2033555928.470:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 606.922444][ T29] audit: type=1326 audit(2033555928.470:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 606.946079][ T29] audit: type=1326 audit(2033555928.470:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 606.969795][ T29] audit: type=1326 audit(2033555928.480:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 606.993492][ T29] audit: type=1326 audit(2033555928.480:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 607.017031][ T29] audit: type=1326 audit(2033555928.480:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 607.040772][ T29] audit: type=1326 audit(2033555928.480:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 607.064304][ T29] audit: type=1326 audit(2033555928.480:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 607.087922][ T29] audit: type=1326 audit(2033555928.480:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.8.12538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 607.319149][ T4457] ip6gre2: entered promiscuous mode [ 607.325753][ T4457] ip6gre2: entered allmulticast mode [ 607.338626][ T4457] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 607.346308][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 607.456022][ T4466] vlan2: entered allmulticast mode [ 607.461404][ T4466] vlan0: entered allmulticast mode [ 607.467770][ T4466] gretap0: entered allmulticast mode [ 607.525537][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12549'. [ 607.644260][T10279] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 607.651912][T10279] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 607.683232][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 607.712103][ T4481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12551'. [ 607.742809][ T4487] netlink: 'syz.5.12554': attribute type 4 has an invalid length. [ 607.752877][ T4487] netlink: 'syz.5.12554': attribute type 4 has an invalid length. [ 607.793422][ T4483] lo speed is unknown, defaulting to 1000 [ 607.810755][ T4483] lo speed is unknown, defaulting to 1000 [ 607.957547][ T4503] ip6gre2: entered promiscuous mode [ 607.962845][ T4503] ip6gre2: entered allmulticast mode [ 608.036518][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12560'. [ 608.236218][ T4510] lo speed is unknown, defaulting to 1000 [ 608.255131][ T4510] lo speed is unknown, defaulting to 1000 [ 608.382999][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 608.653136][ T6869] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 608.653156][ T6869] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.033962][ T6869] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.207385][ T4554] ip6gre2: entered promiscuous mode [ 609.212683][ T4554] ip6gre2: entered allmulticast mode [ 609.220252][T17213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.229230][T17213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.240969][ T4554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.249768][T21782] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.410038][ T4573] lo: Caught tx_queue_len zero misconfig [ 609.438228][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 609.492051][ T4573] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12576'. [ 609.515068][ T4575] lo speed is unknown, defaulting to 1000 [ 609.523703][ T4575] lo speed is unknown, defaulting to 1000 [ 609.791597][ T4529] syz.6.12565 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 609.806981][ T4529] CPU: 1 UID: 0 PID: 4529 Comm: syz.6.12565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 609.807025][ T4529] Tainted: [W]=WARN [ 609.807102][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 609.807119][ T4529] Call Trace: [ 609.807130][ T4529] [ 609.807141][ T4529] __dump_stack+0x1d/0x30 [ 609.807218][ T4529] dump_stack_lvl+0x95/0xd0 [ 609.807242][ T4529] dump_stack+0x15/0x1b [ 609.807263][ T4529] dump_header+0x80/0x240 [ 609.807289][ T4529] oom_kill_process+0x295/0x350 [ 609.807397][ T4529] out_of_memory+0x97d/0xb80 [ 609.807431][ T4529] try_charge_memcg+0x62e/0xa10 [ 609.807493][ T4529] obj_cgroup_charge_pages+0x23/0xc0 [ 609.807529][ T4529] __memcg_kmem_charge_page+0x9e/0x170 [ 609.807611][ T4529] __alloc_frozen_pages_noprof+0x18a/0x350 [ 609.807694][ T4529] alloc_pages_mpol+0xb3/0x260 [ 609.807735][ T4529] alloc_pages_noprof+0x8f/0x130 [ 609.807768][ T4529] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 609.807861][ T4529] __kvmalloc_node_noprof+0x471/0x680 [ 609.807901][ T4529] ? ip_set_alloc+0x24/0x30 [ 609.807979][ T4529] ? ip_set_alloc+0x24/0x30 [ 609.808010][ T4529] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 609.808076][ T4529] ip_set_alloc+0x24/0x30 [ 609.808107][ T4529] hash_netiface_create+0x282/0x740 [ 609.808222][ T4529] ? __pfx_hash_netiface_create+0x10/0x10 [ 609.808261][ T4529] ip_set_create+0x3cf/0x970 [ 609.808319][ T4529] ? __nla_parse+0x40/0x60 [ 609.808423][ T4529] nfnetlink_rcv_msg+0x509/0x5d0 [ 609.808483][ T4529] netlink_rcv_skb+0x123/0x220 [ 609.808607][ T4529] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 609.808698][ T4529] nfnetlink_rcv+0x167/0x1720 [ 609.808752][ T4529] ? __list_del_entry_valid_or_report+0x65/0x130 [ 609.808856][ T4529] ? __rmqueue_pcplist+0x9b6/0xb80 [ 609.808901][ T4529] ? _raw_spin_lock_bh+0x56/0xb0 [ 609.808936][ T4529] ? should_fail_ex+0x30/0x280 [ 609.809019][ T4529] ? selinux_nlmsg_lookup+0x99/0x890 [ 609.809046][ T4529] ? __rcu_read_unlock+0x33/0x70 [ 609.809093][ T4529] ? __netlink_lookup+0x276/0x2b0 [ 609.809119][ T4529] netlink_unicast+0x5c0/0x690 [ 609.809293][ T4529] netlink_sendmsg+0x5c8/0x6f0 [ 609.809355][ T4529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.809376][ T4529] ____sys_sendmsg+0x5af/0x600 [ 609.809404][ T4529] ___sys_sendmsg+0x195/0x1e0 [ 609.809475][ T4529] __x64_sys_sendmsg+0xd4/0x160 [ 609.809510][ T4529] x64_sys_call+0x17ba/0x3000 [ 609.809539][ T4529] do_syscall_64+0xc0/0x2a0 [ 609.809633][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.809658][ T4529] RIP: 0033:0x7f764ac8aeb9 [ 609.809734][ T4529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.809825][ T4529] RSP: 002b:00007f76496e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.809846][ T4529] RAX: ffffffffffffffda RBX: 00007f764af05fa0 RCX: 00007f764ac8aeb9 [ 609.809885][ T4529] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 609.809904][ T4529] RBP: 00007f764acf8c1f R08: 0000000000000000 R09: 0000000000000000 [ 609.809925][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.809943][ T4529] R13: 00007f764af06038 R14: 00007f764af05fa0 R15: 00007fffb56ec398 [ 609.809969][ T4529] [ 609.809977][ T4529] memory: usage 307200kB, limit 307200kB, failcnt 9539 [ 610.171330][ T4529] memory+swap: usage 341320kB, limit 9007199254740988kB, failcnt 0 [ 610.180529][ T4529] kmem: usage 248236kB, limit 9007199254740988kB, failcnt 0 [ 610.188976][ T4529] Memory cgroup stats for /syz6: [ 610.189386][T21782] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 610.209549][T21782] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 610.218525][ T4529] cache 49061888 [ 610.222111][ T4529] rss 11137024 [ 610.226711][ T4529] shmem 49061888 [ 610.230303][ T4529] mapped_file 0 [ 610.235030][ T4529] dirty 0 [ 610.238023][ T4529] writeback 0 [ 610.241327][ T4529] workingset_refault_anon 63 [ 610.247213][ T4529] workingset_refault_file 32 [ 610.251884][ T4529] swap 35033088 [ 610.256579][ T4529] swapcached 77824 [ 610.260409][ T4529] pgpgin 810192 [ 610.265260][ T4529] pgpgout 795474 [ 610.268853][ T4529] pgfault 691432 [ 610.272416][ T4529] pgmajfault 389 [ 610.277218][ T4529] inactive_anon 34729984 [ 610.281516][ T4529] active_anon 25546752 [ 610.286845][ T4529] inactive_file 8192 [ 610.290823][ T4529] active_file 0 [ 610.295537][ T4529] unevictable 0 [ 610.299068][ T4529] hierarchical_memory_limit 314572800 [ 610.305961][ T4529] hierarchical_memsw_limit 9223372036854771712 [ 610.312150][ T4529] total_cache 49061888 [ 610.317505][ T4529] total_rss 11137024 [ 610.321473][ T4529] total_shmem 49061888 [ 610.325827][ T4529] total_mapped_file 0 [ 610.329838][ T4529] total_dirty 0 [ 610.333434][ T4529] total_writeback 0 [ 610.337353][ T4529] total_workingset_refault_anon 63 [ 610.342534][ T4529] total_workingset_refault_file 32 [ 610.347739][ T4529] total_swap 35033088 [ 610.351741][ T4529] total_swapcached 77824 [ 610.357184][ T4529] total_pgpgin 810192 [ 610.361254][ T4529] total_pgpgout 795474 [ 610.366545][ T4529] total_pgfault 691432 [ 610.370649][ T4529] total_pgmajfault 389 [ 610.375921][ T4529] total_inactive_anon 34729984 [ 610.380737][ T4529] total_active_anon 25546752 [ 610.386667][ T4529] total_inactive_file 8192 [ 610.391154][ T4529] total_active_file 0 [ 610.396373][ T4529] total_unevictable 0 [ 610.400379][ T4529] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.12565,pid=4528,uid=0 [ 610.416580][ T4529] Memory cgroup out of memory: Killed process 4529 (syz.6.12565) total-vm:96324kB, anon-rss:9488kB, file-rss:22176kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 610.463004][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 611.191702][ T4620] netlink: 'syz.8.12591': attribute type 4 has an invalid length. [ 611.273065][ T4621] netlink: 'syz.8.12591': attribute type 4 has an invalid length. [ 611.312394][ T4622] netlink: 'syz.6.12590': attribute type 4 has an invalid length. [ 611.320332][ T4622] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12590'. [ 611.503020][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 611.663050][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 611.804013][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12607'. [ 611.854575][ T4651] netlink: 'syz.8.12600': attribute type 10 has an invalid length. [ 612.143012][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 612.294238][ T4671] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 612.302810][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12602'. [ 612.326213][ T4670] netlink: 'syz.6.12604': attribute type 4 has an invalid length. [ 612.336767][ T4606] syz.5.12587 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 612.350952][ T4606] CPU: 0 UID: 0 PID: 4606 Comm: syz.5.12587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 612.350999][ T4606] Tainted: [W]=WARN [ 612.351009][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 612.351028][ T4606] Call Trace: [ 612.351038][ T4606] [ 612.351110][ T4606] __dump_stack+0x1d/0x30 [ 612.351150][ T4606] dump_stack_lvl+0x95/0xd0 [ 612.351181][ T4606] dump_stack+0x15/0x1b [ 612.351209][ T4606] dump_header+0x80/0x240 [ 612.351248][ T4606] oom_kill_process+0x295/0x350 [ 612.351283][ T4606] out_of_memory+0x97d/0xb80 [ 612.351319][ T4606] try_charge_memcg+0x62e/0xa10 [ 612.351414][ T4606] obj_cgroup_charge_pages+0x23/0xc0 [ 612.351462][ T4606] __memcg_kmem_charge_page+0x9e/0x170 [ 612.351503][ T4606] __alloc_frozen_pages_noprof+0x18a/0x350 [ 612.351553][ T4606] alloc_pages_mpol+0xb3/0x260 [ 612.351631][ T4606] alloc_pages_noprof+0x8f/0x130 [ 612.351673][ T4606] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 612.351729][ T4606] __kvmalloc_node_noprof+0x471/0x680 [ 612.351847][ T4606] ? ip_set_alloc+0x24/0x30 [ 612.351931][ T4606] ? ip_set_alloc+0x24/0x30 [ 612.351969][ T4606] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 612.352051][ T4606] ip_set_alloc+0x24/0x30 [ 612.352089][ T4606] hash_netiface_create+0x282/0x740 [ 612.352174][ T4606] ? __pfx_hash_netiface_create+0x10/0x10 [ 612.352215][ T4606] ip_set_create+0x3cf/0x970 [ 612.352297][ T4606] ? __nla_parse+0x40/0x60 [ 612.352330][ T4606] nfnetlink_rcv_msg+0x509/0x5d0 [ 612.352397][ T4606] netlink_rcv_skb+0x123/0x220 [ 612.352439][ T4606] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 612.352554][ T4606] nfnetlink_rcv+0x167/0x1720 [ 612.352590][ T4606] ? obj_cgroup_charge_account+0x122/0x1a0 [ 612.352698][ T4606] ? __rcu_read_unlock+0x4e/0x70 [ 612.352738][ T4606] ? __memcg_slab_post_alloc_hook+0x44a/0x530 [ 612.352786][ T4606] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 612.352851][ T4606] ? __d_alloc+0x37/0x340 [ 612.352886][ T4606] ? __d_lookup_rcu+0x28b/0x2d0 [ 612.352930][ T4606] ? __d_alloc+0x2c7/0x340 [ 612.353029][ T4606] ? __rcu_read_unlock+0x4e/0x70 [ 612.353068][ T4606] ? rcu_segcblist_enqueue+0x92/0xb0 [ 612.353099][ T4606] ? __account_obj_stock+0x211/0x350 [ 612.353208][ T4606] ? truncate_inode_pages_range+0x2bc/0x7e0 [ 612.353254][ T4606] ? _raw_spin_lock_bh+0x56/0xb0 [ 612.353293][ T4606] ? should_fail_ex+0x30/0x280 [ 612.353378][ T4606] ? selinux_nlmsg_lookup+0x99/0x890 [ 612.353479][ T4606] ? __rcu_read_unlock+0x33/0x70 [ 612.353526][ T4606] ? __netlink_lookup+0x276/0x2b0 [ 612.353557][ T4606] netlink_unicast+0x5c0/0x690 [ 612.353600][ T4606] netlink_sendmsg+0x5c8/0x6f0 [ 612.353664][ T4606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.353688][ T4606] ____sys_sendmsg+0x5af/0x600 [ 612.353860][ T4606] ___sys_sendmsg+0x195/0x1e0 [ 612.353904][ T4606] __x64_sys_sendmsg+0xd4/0x160 [ 612.353997][ T4606] x64_sys_call+0x17ba/0x3000 [ 612.354033][ T4606] do_syscall_64+0xc0/0x2a0 [ 612.354072][ T4606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.354112][ T4606] RIP: 0033:0x7fa84628aeb9 [ 612.354142][ T4606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.354171][ T4606] RSP: 002b:00007fa844cdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.354282][ T4606] RAX: ffffffffffffffda RBX: 00007fa846505fa0 RCX: 00007fa84628aeb9 [ 612.354301][ T4606] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 612.354319][ T4606] RBP: 00007fa8462f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 612.354360][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.354379][ T4606] R13: 00007fa846506038 R14: 00007fa846505fa0 R15: 00007ffe32656748 [ 612.354407][ T4606] [ 612.716908][ T4606] memory: usage 307200kB, limit 307200kB, failcnt 9094 [ 612.723995][ T4606] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 612.725906][T21782] lo speed is unknown, defaulting to 1000 [ 612.731908][ T4606] kmem: usage 294092kB, limit 9007199254740988kB, failcnt 0 [ 612.740143][T21782] syz0: Port: 1 Link DOWN [ 612.745000][ T4606] Memory cgroup stats for /syz5: [ 612.749731][ T4676] netlink: 'syz.6.12604': attribute type 4 has an invalid length. [ 612.756166][ T4606] cache 11943936 [ 612.767225][ T4606] rss 1273856 [ 612.768301][ T6859] lo speed is unknown, defaulting to 1000 [ 612.770598][ T4606] shmem 11907072 [ 612.776430][ T6859] syz0: Port: 1 Link ACTIVE [ 612.786959][ T4606] mapped_file 0 [ 612.790442][ T4606] dirty 0 [ 612.794433][ T4606] writeback 0 [ 612.797721][ T4606] workingset_refault_anon 128 [ 612.802404][ T4606] workingset_refault_file 0 [ 612.806954][ T4606] swap 0 [ 612.809826][ T4606] swapcached 204800 [ 612.814832][ T4606] pgpgin 961866 [ 612.818400][ T4606] pgpgout 958589 [ 612.821972][ T4606] pgfault 689457 [ 612.826554][ T4606] pgmajfault 42 [ 612.830016][ T4606] inactive_anon 217088 [ 612.835058][ T4606] active_anon 13168640 [ 612.839135][ T4606] inactive_file 16384 [ 612.844321][ T4606] active_file 20480 [ 612.848173][ T4606] unevictable 0 [ 612.851712][ T4606] hierarchical_memory_limit 314572800 [ 612.858281][ T4606] hierarchical_memsw_limit 9223372036854771712 [ 612.865739][ T4606] total_cache 11943936 [ 612.869835][ T4606] total_rss 1273856 [ 612.874806][ T4606] total_shmem 11907072 [ 612.878900][ T4606] total_mapped_file 0 [ 612.884190][ T4606] total_dirty 0 [ 612.887677][ T4606] total_writeback 0 [ 612.891482][ T4606] total_workingset_refault_anon 128 [ 612.897732][ T4606] total_workingset_refault_file 0 [ 612.902770][ T4606] total_swap 0 [ 612.907284][ T4606] total_swapcached 204800 [ 612.911640][ T4606] total_pgpgin 961866 [ 612.916680][ T4606] total_pgpgout 958589 [ 612.920783][ T4606] total_pgfault 689457 [ 612.925858][ T4606] total_pgmajfault 42 [ 612.929893][ T4606] total_inactive_anon 217088 [ 612.935616][ T4606] total_active_anon 13168640 [ 612.940208][ T4606] total_inactive_file 16384 [ 612.945757][ T4606] total_active_file 20480 [ 612.950091][ T4606] total_unevictable 0 [ 612.955103][ T4606] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.12587,pid=4604,uid=0 [ 612.970143][ T4606] Memory cgroup out of memory: Killed process 4606 (syz.5.12587) total-vm:96228kB, anon-rss:1344kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 613.078402][ T6859] lo speed is unknown, defaulting to 1000 [ 613.084351][ T6859] syz0: Port: 1 Link DOWN [ 613.114474][ T4681] netlink: 'syz.1.12608': attribute type 4 has an invalid length. [ 613.154292][T21782] lo speed is unknown, defaulting to 1000 [ 613.187299][ T4681] netlink: 'syz.1.12608': attribute type 4 has an invalid length. [ 613.215781][ T9] lo speed is unknown, defaulting to 1000 [ 613.221943][ T9] syz2: Port: 1 Link ACTIVE [ 613.389004][ T4699] tipc: Enabling of bearer rejected, failed to enable media [ 613.583000][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 613.840483][ T4721] netlink: 'syz.1.12619': attribute type 1 has an invalid length. [ 613.943986][ T4721] 8021q: adding VLAN 0 to HW filter on device bond13 [ 613.960005][ T4726] macvlan3: entered promiscuous mode [ 613.966612][ T4726] macvlan3: entered allmulticast mode [ 613.972284][ T4726] bond13: entered allmulticast mode [ 613.978788][ T4726] bond13: entered promiscuous mode [ 613.989243][ T4726] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 614.002886][ T4726] team0: Port device macvlan3 added [ 614.475758][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12633'. [ 614.500891][ T4770] netlink: 'syz.1.12631': attribute type 4 has an invalid length. [ 614.623019][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 614.746135][ T4786] 8021q: adding VLAN 0 to HW filter on device bond13 [ 614.962268][ T4786] bond13: (slave ip6gretap3): making interface the new active one [ 614.995224][ T4786] bond13: (slave ip6gretap3): Enslaving as an active interface with an up link [ 615.269629][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12641'. [ 615.319091][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12643'. [ 615.437863][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12645'. [ 615.487847][ T4818] xt_hashlimit: size too large, truncated to 1048576 [ 615.663007][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 615.696501][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12647'. [ 616.037769][ T4862] VFS: Mount too revealing [ 616.159256][ T4874] xt_hashlimit: size too large, truncated to 1048576 [ 616.167746][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12663'. [ 616.275380][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12662'. [ 616.684473][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12671'. [ 616.693580][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12671'. [ 616.702990][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 616.709694][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12671'. [ 616.710811][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 616.719645][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12671'. [ 616.751290][ T4904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12670'. [ 616.811247][ T4912] VFS: Mount too revealing [ 617.742989][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 617.896757][ T4934] validate_nla: 1 callbacks suppressed [ 617.896837][ T4934] netlink: 'syz.1.12677': attribute type 10 has an invalid length. [ 617.985339][ T4934] bond12: (slave dummy0): Releasing backup interface [ 618.003241][ T4934] dummy0: left allmulticast mode [ 618.060821][ T4934] team0: Port device dummy0 added [ 618.303865][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12680'. [ 618.782992][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.147458][ T4966] netlink: 'syz.4.12687': attribute type 10 has an invalid length. [ 619.155553][ T4966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12687'. [ 619.165097][ T4966] geneve1: left allmulticast mode [ 619.170462][ T4966] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 619.398659][ T4982] lo speed is unknown, defaulting to 1000 [ 619.439513][ T4982] lo speed is unknown, defaulting to 1000 [ 619.823015][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.871413][ T9] IPVS: starting estimator thread 0... [ 619.902984][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 619.911696][ T5025] netlink: 7 bytes leftover after parsing attributes in process `syz.8.12701'. [ 619.963190][ T5023] IPVS: using max 2208 ests per chain, 110400 per kthread [ 620.026074][ T5031] tipc: Enabling of bearer rejected, failed to enable media [ 620.065747][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12704'. [ 620.095636][T17213] IPVS: stop unused estimator thread 0... [ 620.661490][ T5077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12714'. [ 620.862999][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 621.127383][ T5093] tipc: Enabling of bearer rejected, failed to enable media [ 621.182986][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 621.502250][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 621.502264][ T29] audit: type=1326 audit(2033555943.120:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.511563][ T5116] tipc: Enabling of bearer rejected, failed to enable media [ 621.566276][ T29] audit: type=1326 audit(2033555943.160:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.590120][ T29] audit: type=1326 audit(2033555943.160:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.615081][ T29] audit: type=1326 audit(2033555943.160:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.639926][ T29] audit: type=1326 audit(2033555943.160:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.664579][ T29] audit: type=1326 audit(2033555943.160:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.689231][ T29] audit: type=1326 audit(2033555943.160:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.713934][ T29] audit: type=1326 audit(2033555943.160:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.738736][ T29] audit: type=1326 audit(2033555943.160:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.763327][ T29] audit: type=1326 audit(2033555943.160:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.8.12736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x7ffc0000 [ 621.903047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 622.055005][ T5144] lo speed is unknown, defaulting to 1000 [ 622.087165][ T5144] lo speed is unknown, defaulting to 1000 [ 622.154193][ T5162] netlink: 'syz.5.12739': attribute type 3 has an invalid length. [ 622.218722][ T5166] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 622.430045][ T5152] syz.1.12734 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 622.444502][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: syz.1.12734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 622.444542][ T5152] Tainted: [W]=WARN [ 622.444551][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 622.444629][ T5152] Call Trace: [ 622.444637][ T5152] [ 622.444648][ T5152] __dump_stack+0x1d/0x30 [ 622.444681][ T5152] dump_stack_lvl+0x95/0xd0 [ 622.444710][ T5152] dump_stack+0x15/0x1b [ 622.444736][ T5152] dump_header+0x80/0x240 [ 622.444776][ T5152] oom_kill_process+0x295/0x350 [ 622.444876][ T5152] out_of_memory+0x97d/0xb80 [ 622.444909][ T5152] try_charge_memcg+0x62e/0xa10 [ 622.444946][ T5152] obj_cgroup_charge_pages+0x23/0xc0 [ 622.445001][ T5152] __memcg_kmem_charge_page+0x9e/0x170 [ 622.445046][ T5152] __alloc_frozen_pages_noprof+0x18a/0x350 [ 622.445092][ T5152] alloc_pages_mpol+0xb3/0x260 [ 622.445223][ T5152] alloc_pages_noprof+0x8f/0x130 [ 622.445265][ T5152] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 622.445323][ T5152] __kvmalloc_node_noprof+0x471/0x680 [ 622.445411][ T5152] ? ip_set_alloc+0x24/0x30 [ 622.445457][ T5152] ? ip_set_alloc+0x24/0x30 [ 622.445526][ T5152] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 622.445566][ T5152] ip_set_alloc+0x24/0x30 [ 622.445677][ T5152] hash_netiface_create+0x282/0x740 [ 622.445792][ T5152] ? __pfx_hash_netiface_create+0x10/0x10 [ 622.445836][ T5152] ip_set_create+0x3cf/0x970 [ 622.445944][ T5152] ? __nla_parse+0x40/0x60 [ 622.445966][ T5152] nfnetlink_rcv_msg+0x509/0x5d0 [ 622.446023][ T5152] netlink_rcv_skb+0x123/0x220 [ 622.446162][ T5152] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 622.446210][ T5152] nfnetlink_rcv+0x167/0x1720 [ 622.446249][ T5152] ? perf_prepare_sample+0xe50/0x1280 [ 622.446361][ T5152] ? trace_event_reg+0xe0/0x190 [ 622.446417][ T5152] ? perf_trace_add+0x176/0x1a0 [ 622.446504][ T5152] ? event_sched_in+0xebd/0xf90 [ 622.446538][ T5152] ? perf_swevent_event+0x22f/0x450 [ 622.446587][ T5152] ? perf_tp_event+0x161f/0x1660 [ 622.446635][ T5152] ? _raw_spin_lock_bh+0x56/0xb0 [ 622.446739][ T5152] ? should_fail_ex+0x30/0x280 [ 622.446843][ T5152] ? selinux_nlmsg_lookup+0x99/0x890 [ 622.446868][ T5152] ? __rcu_read_unlock+0x33/0x70 [ 622.446901][ T5152] ? __netlink_lookup+0x276/0x2b0 [ 622.446927][ T5152] netlink_unicast+0x5c0/0x690 [ 622.447017][ T5152] netlink_sendmsg+0x5c8/0x6f0 [ 622.447048][ T5152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.447075][ T5152] ____sys_sendmsg+0x5af/0x600 [ 622.447138][ T5152] ___sys_sendmsg+0x195/0x1e0 [ 622.447182][ T5152] __x64_sys_sendmsg+0xd4/0x160 [ 622.447209][ T5152] x64_sys_call+0x17ba/0x3000 [ 622.447242][ T5152] do_syscall_64+0xc0/0x2a0 [ 622.447290][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.447361][ T5152] RIP: 0033:0x7f90f03caeb9 [ 622.447385][ T5152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.447411][ T5152] RSP: 002b:00007f90eee27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.447439][ T5152] RAX: ffffffffffffffda RBX: 00007f90f0645fa0 RCX: 00007f90f03caeb9 [ 622.447466][ T5152] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 622.447533][ T5152] RBP: 00007f90f0438c1f R08: 0000000000000000 R09: 0000000000000000 [ 622.447550][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.447567][ T5152] R13: 00007f90f0646038 R14: 00007f90f0645fa0 R15: 00007fff15a33188 [ 622.447595][ T5152] [ 622.447605][ T5152] memory: usage 307200kB, limit 307200kB, failcnt 13338 [ 622.791831][ T5152] memory+swap: usage 339536kB, limit 9007199254740988kB, failcnt 0 [ 622.799824][ T5152] kmem: usage 264080kB, limit 9007199254740988kB, failcnt 0 [ 622.807234][ T5152] Memory cgroup stats for /syz1: [ 622.821785][ T5152] cache 34230272 [ 622.831488][ T5152] rss 9752576 [ 622.835985][ T5152] shmem 34222080 [ 622.839649][ T5152] mapped_file 4096 [ 622.844599][ T5152] dirty 0 [ 622.847556][ T5152] writeback 0 [ 622.850858][ T5152] workingset_refault_anon 202 [ 622.856751][ T5152] workingset_refault_file 8511 [ 622.861535][ T5152] swap 33112064 [ 622.866224][ T5152] swapcached 151552 [ 622.870051][ T5152] pgpgin 930797 [ 622.874665][ T5152] pgpgout 920017 [ 622.878240][ T5152] pgfault 780853 [ 622.881829][ T5152] pgmajfault 87 [ 622.886480][ T5152] inactive_anon 32370688 [ 622.890838][ T5152] active_anon 11776000 [ 622.896138][ T5152] inactive_file 8192 [ 622.900085][ T5152] active_file 0 [ 622.904839][ T5152] unevictable 0 [ 622.908340][ T5152] hierarchical_memory_limit 314572800 [ 622.914874][ T5152] hierarchical_memsw_limit 9223372036854771712 [ 622.921058][ T5152] total_cache 34230272 [ 622.926489][ T5152] total_rss 9752576 [ 622.930330][ T5152] total_shmem 34222080 [ 622.935633][ T5152] total_mapped_file 4096 [ 622.939903][ T5152] total_dirty 0 [ 622.943509][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 622.950724][ T5152] total_writeback 0 [ 622.954682][ T5152] total_workingset_refault_anon 202 [ 622.959907][ T5152] total_workingset_refault_file 8511 [ 622.965394][ T5152] total_swap 33112064 [ 622.969400][ T5152] total_swapcached 151552 [ 622.974982][ T5152] total_pgpgin 930797 [ 622.978992][ T5152] total_pgpgout 920017 [ 622.984246][ T5152] total_pgfault 780853 [ 622.988476][ T5152] total_pgmajfault 87 [ 622.992569][ T5152] total_inactive_anon 32370688 [ 622.997464][ T5152] total_active_anon 11776000 [ 623.002080][ T5152] total_inactive_file 8192 [ 623.007705][ T5152] total_active_file 0 [ 623.011713][ T5152] total_unevictable 0 [ 623.016916][ T5152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.12734,pid=5151,uid=0 [ 623.033087][ T5152] Memory cgroup out of memory: Killed process 5151 (syz.1.12734) total-vm:96324kB, anon-rss:9492kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 623.067269][ T5179] bridge_slave_0: left allmulticast mode [ 623.073128][ T5179] bridge_slave_0: left promiscuous mode [ 623.078789][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.107992][ T5181] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.137880][ T5184] __nla_validate_parse: 1 callbacks suppressed [ 623.137902][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12744'. [ 623.144288][ T5179] bridge_slave_1: left allmulticast mode [ 623.144360][ T5179] bridge_slave_1: left promiscuous mode [ 623.144457][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.176253][ T5184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12744'. [ 623.196423][ T5185] netlink: 'syz.8.12745': attribute type 39 has an invalid length. [ 623.234414][ T5179] bond0: (slave bond_slave_0): Releasing backup interface [ 623.259991][ T5179] bond0: (slave bond_slave_1): Releasing backup interface [ 623.272108][ T5179] team0: Port device team_slave_0 removed [ 623.279295][ T5179] team0: Port device team_slave_1 removed [ 623.286754][ T5179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.304780][ T5192] siw: device registration error -23 [ 623.313169][ T5178] lo speed is unknown, defaulting to 1000 [ 623.333324][ T5178] lo speed is unknown, defaulting to 1000 [ 623.352536][ T5185] hsr_slave_1 (unregistering): left promiscuous mode [ 623.374012][ T5195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5195 comm=syz.1.12751 [ 623.411452][ T5197] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12750'. [ 623.762041][ T5215] tipc: Enabling of bearer rejected, failed to enable media [ 623.918228][ T5219] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12757'. [ 623.935481][ T5219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12757'. [ 623.945794][ T5219] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12757'. [ 623.955997][ T5219] netlink: 'syz.4.12757': attribute type 2 has an invalid length. [ 623.965113][ T5219] netlink: 31 bytes leftover after parsing attributes in process `syz.4.12757'. [ 623.983018][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 624.101305][ T5234] tipc: Enabling of bearer rejected, failed to enable media [ 624.165833][ T5240] bond7: left allmulticast mode [ 624.177326][ T5240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 624.225702][ T5240] vlan0: entered allmulticast mode [ 624.230925][ T5240] bond7: entered allmulticast mode [ 624.367341][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12762'. [ 624.496160][ T5262] team0: Port device dummy0 removed [ 624.582709][ T5266] tipc: Enabling of bearer rejected, failed to enable media [ 624.728133][ T5274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.787400][ T5274] netlink: 'syz.1.12774': attribute type 39 has an invalid length. [ 624.807903][ T5274] hsr_slave_1 (unregistering): left promiscuous mode [ 624.833052][ T5280] tipc: Enabling of bearer rejected, failed to enable media [ 625.023017][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 625.348222][ T5317] tipc: Enabling of bearer rejected, failed to enable media [ 625.435731][ T5323] lo speed is unknown, defaulting to 1000 [ 625.442527][ T5323] lo speed is unknown, defaulting to 1000 [ 625.876840][ T5354] netlink: 56 bytes leftover after parsing attributes in process `syz.8.12807'. [ 625.896465][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12807'. [ 625.905688][ T5354] netlink: 'syz.8.12807': attribute type 2 has an invalid length. [ 626.063000][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 626.447376][ T5359] batadv_slave_1: entered promiscuous mode [ 626.459247][ T5359] batadv_slave_1 (unregistering): left promiscuous mode [ 626.508917][ T5363] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 627.103004][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 627.115229][ T5365] syz.8.12804 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 627.129319][ T5365] CPU: 1 UID: 0 PID: 5365 Comm: syz.8.12804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 627.129359][ T5365] Tainted: [W]=WARN [ 627.129369][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 627.129387][ T5365] Call Trace: [ 627.129406][ T5365] [ 627.129439][ T5365] __dump_stack+0x1d/0x30 [ 627.129469][ T5365] dump_stack_lvl+0x95/0xd0 [ 627.129502][ T5365] dump_stack+0x15/0x1b [ 627.129530][ T5365] dump_header+0x80/0x240 [ 627.129566][ T5365] oom_kill_process+0x295/0x350 [ 627.129687][ T5365] out_of_memory+0x97d/0xb80 [ 627.129723][ T5365] try_charge_memcg+0x62e/0xa10 [ 627.129762][ T5365] obj_cgroup_charge_pages+0x23/0xc0 [ 627.129882][ T5365] __memcg_kmem_charge_page+0x9e/0x170 [ 627.129998][ T5365] __alloc_frozen_pages_noprof+0x18a/0x350 [ 627.130040][ T5365] alloc_pages_mpol+0xb3/0x260 [ 627.130149][ T5365] alloc_pages_noprof+0x8f/0x130 [ 627.130189][ T5365] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 627.130273][ T5365] __kvmalloc_node_noprof+0x471/0x680 [ 627.130310][ T5365] ? ip_set_alloc+0x24/0x30 [ 627.130346][ T5365] ? ip_set_alloc+0x24/0x30 [ 627.130455][ T5365] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 627.130495][ T5365] ip_set_alloc+0x24/0x30 [ 627.130589][ T5365] hash_netiface_create+0x282/0x740 [ 627.130624][ T5365] ? __pfx_hash_netiface_create+0x10/0x10 [ 627.130656][ T5365] ip_set_create+0x3cf/0x970 [ 627.130795][ T5365] ? __nla_parse+0x40/0x60 [ 627.130822][ T5365] nfnetlink_rcv_msg+0x509/0x5d0 [ 627.130898][ T5365] netlink_rcv_skb+0x123/0x220 [ 627.130935][ T5365] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 627.131015][ T5365] nfnetlink_rcv+0x167/0x1720 [ 627.131065][ T5365] ? __list_add_valid_or_report+0x38/0xe0 [ 627.131106][ T5365] ? merge_sched_in+0x5db/0xbe0 [ 627.131144][ T5365] ? rb_next+0x5c/0x80 [ 627.131178][ T5365] ? visit_groups_merge+0xf7e/0xfd0 [ 627.131240][ T5365] ? event_sched_out+0x896/0x8f0 [ 627.131268][ T5365] ? _raw_spin_lock_bh+0x56/0xb0 [ 627.131346][ T5365] ? should_fail_ex+0x30/0x280 [ 627.131379][ T5365] ? selinux_nlmsg_lookup+0x99/0x890 [ 627.131466][ T5365] ? __rcu_read_unlock+0x33/0x70 [ 627.131501][ T5365] ? __netlink_lookup+0x276/0x2b0 [ 627.131528][ T5365] netlink_unicast+0x5c0/0x690 [ 627.131603][ T5365] netlink_sendmsg+0x5c8/0x6f0 [ 627.131634][ T5365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.131661][ T5365] ____sys_sendmsg+0x5af/0x600 [ 627.131693][ T5365] ___sys_sendmsg+0x195/0x1e0 [ 627.131765][ T5365] __x64_sys_sendmsg+0xd4/0x160 [ 627.131792][ T5365] x64_sys_call+0x17ba/0x3000 [ 627.131825][ T5365] do_syscall_64+0xc0/0x2a0 [ 627.131858][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.131951][ T5365] RIP: 0033:0x7fae4905aeb9 [ 627.131970][ T5365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.131996][ T5365] RSP: 002b:00007fae47ab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.132023][ T5365] RAX: ffffffffffffffda RBX: 00007fae492d5fa0 RCX: 00007fae4905aeb9 [ 627.132149][ T5365] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 627.132164][ T5365] RBP: 00007fae490c8c1f R08: 0000000000000000 R09: 0000000000000000 [ 627.132178][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.132237][ T5365] R13: 00007fae492d6038 R14: 00007fae492d5fa0 R15: 00007ffd58163898 [ 627.132266][ T5365] [ 627.132276][ T5365] memory: usage 307200kB, limit 307200kB, failcnt 159 [ 627.508402][ T5365] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 627.517609][ T5365] kmem: usage 227764kB, limit 9007199254740988kB, failcnt 0 [ 627.526099][ T5365] Memory cgroup stats for /syz8: [ 627.529339][ T5365] cache 69558272 [ 627.539128][ T5365] rss 11784192 [ 627.542684][ T5365] shmem 131072 [ 627.547392][ T5365] mapped_file 0 [ 627.550898][ T5365] dirty 0 [ 627.555026][ T5365] writeback 0 [ 627.558390][ T5365] workingset_refault_anon 56 [ 627.564097][ T5365] workingset_refault_file 0 [ 627.568735][ T5365] swap 0 [ 627.571616][ T5365] swapcached 0 [ 627.576344][ T5365] pgpgin 155101 [ 627.579827][ T5365] pgpgout 135242 [ 627.584603][ T5365] pgfault 84911 [ 627.588090][ T5365] pgmajfault 10 [ 627.591609][ T5365] inactive_anon 4096 [ 627.596729][ T5365] active_anon 11911168 [ 627.600868][ T5365] inactive_file 0 [ 627.605744][ T5365] active_file 0 [ 627.609311][ T5365] unevictable 69427200 [ 627.614583][ T5365] hierarchical_memory_limit 314572800 [ 627.620064][ T5365] hierarchical_memsw_limit 9223372036854771712 [ 627.627417][ T5365] total_cache 69558272 [ 627.631519][ T5365] total_rss 11784192 [ 627.636598][ T5365] total_shmem 131072 [ 627.640533][ T5365] total_mapped_file 0 [ 627.645656][ T5365] total_dirty 0 [ 627.649138][ T5365] total_writeback 0 [ 627.654119][ T5365] total_workingset_refault_anon 56 [ 627.659261][ T5365] total_workingset_refault_file 0 [ 627.665618][ T5365] total_swap 0 [ 627.669032][ T5365] total_swapcached 0 [ 627.674163][ T5365] total_pgpgin 155101 [ 627.678167][ T5365] total_pgpgout 135242 [ 627.682252][ T5365] total_pgfault 84911 [ 627.687440][ T5365] total_pgmajfault 10 [ 627.691470][ T5365] total_inactive_anon 4096 [ 627.696986][ T5365] total_active_anon 11911168 [ 627.701626][ T5365] total_inactive_file 0 [ 627.706039][ T5365] total_active_file 0 [ 627.710054][ T5365] total_unevictable 69427200 [ 627.714786][ T5365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.12804,pid=5364,uid=0 [ 627.729597][ T5365] Memory cgroup out of memory: Killed process 5364 (syz.8.12804) total-vm:96324kB, anon-rss:9404kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 627.822263][ T5387] lo speed is unknown, defaulting to 1000 [ 627.843825][ T5387] lo speed is unknown, defaulting to 1000 [ 627.970483][ T5392] tipc: Enabling of bearer rejected, failed to enable media [ 628.143903][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 628.304943][ T5402] lo speed is unknown, defaulting to 1000 [ 628.311497][ T5402] lo speed is unknown, defaulting to 1000 [ 628.352179][ T5408] netlink: 'syz.1.12820': attribute type 13 has an invalid length. [ 628.514072][T21778] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 628.664154][ T5408] tipc: Enabling of bearer rejected, failed to enable media [ 628.934161][ T6867] IPVS: starting estimator thread 0... [ 629.024079][ T5427] IPVS: using max 1680 ests per chain, 84000 per kthread [ 629.183011][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 629.191326][T21778] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 629.207428][ T12] IPVS: stop unused estimator thread 0... [ 629.371109][ T5449] __nla_validate_parse: 7 callbacks suppressed [ 629.371126][ T5449] netlink: 56 bytes leftover after parsing attributes in process `syz.8.12831'. [ 629.402218][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12831'. [ 629.411368][ T5449] netlink: 31 bytes leftover after parsing attributes in process `syz.8.12831'. [ 629.420467][ T5449] netlink: 'syz.8.12831': attribute type 2 has an invalid length. [ 629.428400][ T5449] netlink: 31 bytes leftover after parsing attributes in process `syz.8.12831'. [ 629.494160][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 629.494182][ T29] audit: type=1326 audit(2033555951.120:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.8.12834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4905aeb9 code=0x0 [ 629.658615][ T5468] lo speed is unknown, defaulting to 1000 [ 629.666234][ T5468] lo speed is unknown, defaulting to 1000 [ 629.884748][ T5478] netlink: 'syz.6.12839': attribute type 27 has an invalid length. [ 629.895909][ T5478] team1: left promiscuous mode [ 629.900713][ T5478] team1: left allmulticast mode [ 629.905844][ T5478] team2: left promiscuous mode [ 629.910642][ T5478] team2: left allmulticast mode [ 629.915768][ T5478] bond1: left promiscuous mode [ 629.921670][ T5478] vlan2: left promiscuous mode [ 629.926549][ T5478] bond3: left promiscuous mode [ 629.931366][ T5478] geneve2: left promiscuous mode [ 629.937437][ T5478] bond6: left allmulticast mode [ 629.942328][ T5478] ip6gretap1: left allmulticast mode [ 629.948088][ T5478] ipip0: left promiscuous mode [ 629.953205][ T5478] team0: left promiscuous mode [ 629.958118][ T5478] team3: left promiscuous mode [ 629.962942][ T5478] team3: left allmulticast mode [ 629.967928][ T5478] geneve3: left promiscuous mode [ 629.973612][ T5478] vlan1: left promiscuous mode [ 629.978427][ T5478] bond10: left promiscuous mode [ 629.983540][ T5478] bridge5: left promiscuous mode [ 629.988753][ T5478] vlan1: left allmulticast mode [ 629.993866][ T5478] bond10: left allmulticast mode [ 629.998849][ T5478] bridge5: left allmulticast mode [ 630.003991][ T5478] bond0: left promiscuous mode [ 630.008778][ T5478] bridge6: left promiscuous mode [ 630.013831][ T5478] bond0: left allmulticast mode [ 630.018713][ T5478] bridge6: left allmulticast mode [ 630.024216][ T5478] ip6gre1: left promiscuous mode [ 630.029187][ T5478] ip6gre1: left allmulticast mode [ 630.034333][ T5478] macvtap0: left promiscuous mode [ 630.039615][ T5478] macvtap1: left promiscuous mode [ 630.044726][ T5478] macvtap1: left allmulticast mode [ 630.050011][ T5478] bond12: left promiscuous mode [ 630.223042][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 630.432452][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12847'. [ 630.452162][ T5497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12847'. [ 630.485256][ T5507] netlink: 'syz.8.12850': attribute type 12 has an invalid length. [ 630.494902][T21778] IPVS: starting estimator thread 0... [ 630.557690][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12853'. [ 630.583226][ T5504] IPVS: using max 2160 ests per chain, 108000 per kthread [ 630.590512][ T5515] 8021q: adding VLAN 0 to HW filter on device bond14 [ 630.687043][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12865'. [ 630.696115][ T5521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12865'. [ 630.705786][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12865'. [ 631.224497][ T5538] bond10: (slave ip6gretap3): Releasing active interface [ 631.263022][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 631.271115][T21778] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.278685][ T29] audit: type=1326 audit(2033555952.890:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.302777][ T29] audit: type=1326 audit(2033555952.910:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.326481][ T29] audit: type=1326 audit(2033555952.910:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.350174][ T29] audit: type=1326 audit(2033555952.910:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.373787][ T29] audit: type=1326 audit(2033555952.910:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.397394][ T29] audit: type=1326 audit(2033555952.910:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.420986][ T29] audit: type=1326 audit(2033555952.910:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.444706][ T29] audit: type=1326 audit(2033555952.910:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.468335][ T29] audit: type=1326 audit(2033555952.910:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.4.12861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 631.551714][ T5551] netlink: 'syz.5.12866': attribute type 4 has an invalid length. [ 631.565588][ T5551] netlink: 'syz.5.12866': attribute type 4 has an invalid length. [ 631.984078][T21778] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.303005][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 632.494706][ T5562] lo speed is unknown, defaulting to 1000 [ 632.508076][ T5562] lo speed is unknown, defaulting to 1000 [ 632.784154][ T5584] netlink: 'syz.4.12879': attribute type 4 has an invalid length. [ 632.793793][ T5584] netlink: 'syz.4.12879': attribute type 4 has an invalid length. [ 632.805339][ T5584] lo: left allmulticast mode [ 633.342979][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.917646][ T5616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5616 comm=syz.1.12888 [ 633.994601][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 634.382984][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 634.998976][ T5670] __nla_validate_parse: 3 callbacks suppressed [ 634.998998][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12905'. [ 635.014365][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12905'. [ 635.039092][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12905'. [ 635.049263][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12905'. [ 635.059725][ T409] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.071900][ T409] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.101622][ T409] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.120971][ T409] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.131391][ T5676] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.167233][ T5668] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 635.205606][ T5676] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.333748][ T5676] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.366065][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12910'. [ 635.375349][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12910'. [ 635.423014][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 635.454974][ T5676] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.344392][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.398304][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.421202][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.463025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 636.543074][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 637.425925][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.502986][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 638.282268][ T5722] netlink: 'syz.5.12921': attribute type 1 has an invalid length. [ 638.316279][ T5722] bond12: entered promiscuous mode [ 638.321494][ T5722] bond12: entered allmulticast mode [ 638.330973][ T5727] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 638.371413][ T5729] bond12: (slave ip6gretap1): making interface the new active one [ 638.380478][ T5729] ip6gretap1: entered promiscuous mode [ 638.387230][ T5729] ip6gretap1: entered allmulticast mode [ 638.404845][ T5729] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 638.429744][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12926'. [ 638.455536][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12921'. [ 638.467919][ T5734] 8021q: adding VLAN 0 to HW filter on device bond11 [ 638.505515][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12926'. [ 638.515712][ T5738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12926'. [ 638.530023][ T5722] bond12: left promiscuous mode [ 638.536084][ T5722] ip6gretap1: left promiscuous mode [ 638.541372][ T5722] bond12: left allmulticast mode [ 638.546471][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 638.555922][ T5722] ip6gretap1: left allmulticast mode [ 638.584816][ T5722] 8021q: adding VLAN 0 to HW filter on device bond12 [ 638.609404][ T5741] xt_hashlimit: size too large, truncated to 1048576 [ 638.652624][ T5711] lo speed is unknown, defaulting to 1000 [ 638.698554][ T5711] lo speed is unknown, defaulting to 1000 [ 638.942686][ T404] tipc: Resetting bearer [ 639.112997][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 639.135407][ T404] tipc: Disabling bearer [ 639.300184][ T404] dvmrp6 (unregistering): left allmulticast mode [ 639.585494][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 640.345711][ T404] bond1 (unregistering): Released all slaves [ 640.357213][ T404] bond2 (unregistering): Released all slaves [ 640.367589][ T404] smc: removing net device bond0 with user defined pnetid SYZ2 [ 640.376799][ T404] žÿ (unregistering): Released all slaves [ 640.386467][ T404] bond3 (unregistering): Released all slaves [ 640.397106][ T404] bond4 (unregistering): Released all slaves [ 640.407241][ T404] bond5 (unregistering): Released all slaves [ 640.417810][ T404] bond6 (unregistering): Released all slaves [ 640.431062][ T404] bond7 (unregistering): Released all slaves [ 640.445221][ T404] bond0 (unregistering): Released all slaves [ 640.456243][ T404] bond8 (unregistering): Released all slaves [ 640.467878][ T404] bond9 (unregistering): Released all slaves [ 640.478341][ T404] bond10 (unregistering): Released all slaves [ 640.489527][ T404] bond11 (unregistering): Released all slaves [ 640.500100][ T404] bond12 (unregistering): Released all slaves [ 640.510881][ T404] bond13 (unregistering): Released all slaves [ 640.521255][ T5747] –: renamed from veth0_to_batadv [ 640.530445][ T5751] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 640.541052][ T5751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 640.622976][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 640.738471][ T404] tipc: Left network mode [ 640.806772][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 640.806791][ T29] audit: type=1400 audit(2033555962.430:7188): avc: denied { connect } for pid=5788 comm="syz.6.12940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 640.957256][ T29] audit: type=1400 audit(2033555962.490:7189): avc: denied { prog_load } for pid=5786 comm="syz.1.12939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.047316][ T5797] SET target dimension over the limit! [ 641.123020][ T29] audit: type=1400 audit(2033555962.740:7190): avc: denied { map_create } for pid=5801 comm="syz.8.12942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.186494][ T5795] __nla_validate_parse: 2 callbacks suppressed [ 641.186523][ T5795] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12941'. [ 641.201897][ T5795] tipc: Enabling of bearer rejected, media not registered [ 641.303172][ T29] audit: type=1400 audit(2033555962.930:7191): avc: denied { map } for pid=5793 comm="syz.4.12941" path="socket:[130962]" dev="sockfs" ino=130962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 641.372479][ T29] audit: type=1400 audit(2033555962.990:7192): avc: denied { prog_run } for pid=5824 comm="syz.8.12947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.398123][ T404] IPVS: stop unused estimator thread 0... [ 641.615185][ T5826] netlink: 'syz.8.12947': attribute type 21 has an invalid length. [ 641.633993][ T5826] netlink: 132 bytes leftover after parsing attributes in process `syz.8.12947'. [ 641.644197][ T5826] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12947'. [ 641.663018][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 642.391678][ T29] audit: type=1400 audit(2033555964.010:7193): avc: denied { map_read map_write } for pid=5862 comm="syz.5.12951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 642.435765][ T29] audit: type=1326 audit(2033555964.030:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.5.12951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa84628aeb9 code=0x0 [ 642.479641][ T29] audit: type=1326 audit(2033555964.100:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.4.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 642.503311][ T29] audit: type=1326 audit(2033555964.100:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.4.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 642.527851][ T29] audit: type=1326 audit(2033555964.150:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.4.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d6a2aeb9 code=0x7ffc0000 [ 642.703009][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 642.788542][ T5884] SET target dimension over the limit! [ 642.893587][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12958'. [ 643.162562][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12959'. [ 643.301404][ T5918] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12960'. [ 643.327350][ T7825] ================================================================== [ 643.335514][ T7825] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 643.343480][ T7825] [ 643.345858][ T7825] read-write to 0xffff88816eddd3b8 of 8 bytes by task 5893 on cpu 1: [ 643.353948][ T7825] shmem_add_to_page_cache+0x4b2/0x5b0 [ 643.359470][ T7825] shmem_get_folio_gfp+0x4f3/0xd60 [ 643.364624][ T7825] shmem_write_begin+0xfc/0x1f0 [ 643.369701][ T7825] generic_perform_write+0x183/0x490 [ 643.375041][ T7825] shmem_file_write_iter+0xc5/0xf0 [ 643.380208][ T7825] __kernel_write_iter+0x319/0x590 [ 643.385396][ T7825] dump_user_range+0xa7d/0xdb0 [ 643.390200][ T7825] elf_core_dump+0x21a2/0x2330 [ 643.395008][ T7825] coredump_write+0xacf/0xdf0 [ 643.399721][ T7825] vfs_coredump+0x26bc/0x3120 [ 643.404436][ T7825] get_signal+0xd7b/0xf60 [ 643.408800][ T7825] arch_do_signal_or_restart+0x96/0x450 [ 643.414386][ T7825] irqentry_exit+0xf7/0x510 [ 643.418921][ T7825] asm_exc_page_fault+0x26/0x30 [ 643.423807][ T7825] [ 643.426154][ T7825] read to 0xffff88816eddd3b8 of 8 bytes by task 7825 on cpu 0: [ 643.433725][ T7825] shmem_getattr+0x68/0x200 [ 643.438282][ T7825] vfs_getattr_nosec+0x146/0x1e0 [ 643.443266][ T7825] vfs_getattr+0x48/0x60 [ 643.447552][ T7825] vfs_statx_path+0x28/0x140 [ 643.452181][ T7825] vfs_statx+0xc4/0x170 [ 643.456409][ T7825] vfs_fstatat+0x115/0x170 [ 643.460922][ T7825] __se_sys_newfstatat+0x55/0x3e0 [ 643.465995][ T7825] __x64_sys_newfstatat+0x55/0x70 [ 643.471077][ T7825] x64_sys_call+0x111f/0x3000 [ 643.475800][ T7825] do_syscall_64+0xc0/0x2a0 [ 643.480350][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.486276][ T7825] [ 643.488623][ T7825] value changed: 0x000000000000360b -> 0x000000000000360c [ 643.495759][ T7825] [ 643.498107][ T7825] Reported by Kernel Concurrency Sanitizer on: [ 643.504282][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.515782][ T7825] Tainted: [W]=WARN [ 643.519615][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 643.529701][ T7825] ================================================================== [ 643.742973][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 643.863320][ T404] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.873163][ T404] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.892998][ T404] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.916984][ T404] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.783194][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 645.823036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 646.863036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 647.903125][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 648.953055][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 649.983028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 651.023025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 652.063028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 653.103017][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available