last executing test programs: 9m52.180548143s ago: executing program 32 (id=444): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208143) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) close(r2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x110) socket$nl_route(0x10, 0x3, 0x0) 9m50.432115356s ago: executing program 33 (id=466): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f00000003c0)=""/128, 0x80, 0x5b) 9m20.981445724s ago: executing program 3 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 9m20.03280235s ago: executing program 3 (id=1022): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0009000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 9m19.828331551s ago: executing program 3 (id=1024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 9m18.99700769s ago: executing program 3 (id=1034): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x467, &(0x7f0000000240)="$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") sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 9m18.864135178s ago: executing program 3 (id=1035): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m18.019407667s ago: executing program 3 (id=1044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x17, 0x1c, 0x1f, 0x5, 0x8, 0x40}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m17.998315758s ago: executing program 34 (id=1044): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x17, 0x1c, 0x1f, 0x5, 0x8, 0x40}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m48.36622629s ago: executing program 4 (id=1717): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_create_resource$binfmt(&(0x7f0000000700)='./file0\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3c209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x8}, 0x2184, 0x3, 0x3ef2, 0x3, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000001400030007000000000000000800000000000800140001000000000000000000000020"], 0x44}}, 0x8000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x2}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) 8m47.804437293s ago: executing program 4 (id=1744): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m47.650038832s ago: executing program 4 (id=1746): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="0f400000", @ANYRES16, @ANYBLOB="200025bd7000fcdbdf250d000000f8"], 0x1fc}, 0x1, 0x0, 0x0, 0x8800}, 0x64008010) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "ea1ee06e4a675d1c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 8m47.567984527s ago: executing program 4 (id=1748): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) truncate(&(0x7f0000000040)='./file2\x00', 0x5) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) syz_clone(0x300000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 8m47.567548657s ago: executing program 4 (id=1749): socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x80, 0x1000}, 0x0, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_getfd(r1, r1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 8m47.358560529s ago: executing program 4 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 8m47.34445611s ago: executing program 35 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 4m0.734987941s ago: executing program 7 (id=6891): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xd, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x7fffffff, 0x40, 0xb6, 0x4, 0x0, 0x0, 0x400, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 4m0.734630101s ago: executing program 7 (id=6892): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba", 0x1}], 0x1}}], 0x3, 0x2400c0a2) writev(r0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="0507f75271c0474f31af79eea33b0488be7b0eacd98ee7770ee634a8299f087bb75f4cfa930f1dadb25b2f0a37c382c02b83ff6c4b72bb250ff561c918625e05be60e239d25a5c2a0e81efccf5bd91fe01b92220fb7b3337c1128bc83b131eda935338c13e86e8bdab946204444e48e2bcf7abb5e17b887f4e182633b88a2a708500ee8087af74890ffc431ee9a509c2d5a498f41e52767ca6e99241b853f9f7ab0506c11fd9f268cb357ddd0cd65975fe0a66f597f19146bd2bab6eb39c38284c024327fe0ac00d4f21c6622685d5e4a58ebeb8f6f41eab1373", 0xda}, {&(0x7f00000007c0)="a6486cb3e795378ba54ed2b416aa7e9470082717825498a42af7b2d895531d9f4cd88209d46874bdef89e7d8f70cfc71eaedb22c5989361645f615de7eb736dd5cd4c3ce71f650220e48e5af9b5d94cdd9c24bf551e4c954ab7dd8fe210dae5200d60e7f98b20c3fb849002f454cff42161f3de24669952f6ee9484fdf8d80f7fd0f871b13553bdfc97f116bd4cf9e3a2fddac376f6379f823e1ee4b49c4a688df1e88e8ed2a9e7264507b24e6cf4a3dce33f283e089f68de8902ab87ac4a5108bad9f466404687e5ec0c9b82ec487b6501fac554583a23ba8b09a61572628f98a735d8bbe0f16e82a059141266e7bb297d1b19ad7bcf387c671a6906c4b4ac26bf6577d2d641c04b3feb43361c11f938520d9677097d68c6189297a0db0b10c10304e1d1cdd26712452382ceb3d6a4339ed6aadeabdf94911a6ed3dc39dcaa59d8501c7b3851c5e1f989e579e23beb47f34c18efa051eeb511fa26a3ca240897e0762375fc30a2254cfc89de50b0c1fe3bebf1b578debc9f4cfbcd51930052eb7f02545da98db5677be1af7c8ce31bbfc85ce022ac02ecac6418ef7a07df83d43ab950c8469f68916d193497a53fb6a0a9f4a0ce75975112d89607086afe7ac9cd3f15365195c50e9129eaca847ba63a289ae586885ffe4b19582db44f6009bd42bb3008e07c12823655b2ec45c6a77416c30553774f09271a954a967592706dd0857b2885743a3fb4f80a2d48b35f0cb2dccfc1521826f7a30a59ec5a37a728c7cccde6d32b7af7eca545ef8ebbd8865852f5983117417036b0f64d759f1067c61396cf012bc030a1ff60e0425c34f7a812a90866c7c117dcbab111a206165fdebe7a9243291c33923d4b814ba36b192a61fe48cf868351906a85ef003aa59f866c89384cb4adb53dca7b4e116a1ef1b691c7ecf11af214d8c9c99affeac8d90c05340f97be23d12acf12a54354ad2ff8fa0e7f14dbea206eed0b55728a6fc40181fe2bef4982d5b2eb9a5bd85f2fecbd9b638bcfb49cb3932617e3a283fb77329a5c2ada464c964c20156abe2312f798163226307ffe50912b0a5f26be54a96c9551d7fd5e654e3ecce3a79b297f539cf8b373c7fe42b332607fa66799cc09d6b7431007e9fe03044e8d3624d59cb9238d212610f6e6060182cac8521e447fcc311ed6899fa9e1d94ac36d3520c89d82efb1128e4998275b0af635a4ee72f46d1ff57f4a3702f1032fe0cd33ab3e786d6525841fabef24d629ee269c6c747e2e0c33bc2b3698c875232939b5a47e3466313b2517d145c8240196a51abbb3f751c31d003eb6fceb9ebe43bbc6db22bc1524e4e451766335db5162dcd95bfc9d962c700abfb6f1372cf8cb6c064488abaff347670aabd8dfd1703d3d6c2b3a9eef01f90d09852c089542a294c6be43b3d412cd083dc6e2b0bf2baa2d3a42074da0e8ee78c5a9016b79d5c2bf9eed5efe9e0d53c77f5e614de435d54ea615e33c92a22f15098cfce3dd2d2b04221dd3e4a4cc3ddb600625176b2202cca62e92ef646386119233791c5bb47f009f09825b42d194862582c6b48723e1490fa59e9912fe084686c8795d1f65284ef8f3fb35c12ce14787612eb5fb5d0c4b04dad3f6452b5c08af9aa3cbca1c196cd264f2dcd113a464d37cb6cf797b70aed8d61c34480cf04c40d811e7b784f1d9015fb36c1a0acb83c7ffced9a65fdfe5b1ed3b016a9fb7280d7dba056316e2be80446516ff84754f81330891a1a2d7cb96bbe41", 0x4e0}], 0x2) 4m0.686451584s ago: executing program 7 (id=6893): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xd50, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) 4m0.685783264s ago: executing program 7 (id=6894): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000280), 0x1, 0x5a9, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 4m0.663789745s ago: executing program 7 (id=6895): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000280)=0x100ec, 0x4) 4m0.535990103s ago: executing program 7 (id=6897): get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x141a82, 0x14f) sendfile(r0, r0, 0x0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 4m0.518504124s ago: executing program 36 (id=6897): get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x141a82, 0x14f) sendfile(r0, r0, 0x0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 3m31.32269305s ago: executing program 9 (id=7607): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3m31.196082277s ago: executing program 9 (id=7612): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 3m31.181751868s ago: executing program 9 (id=7616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x80000000, 0x1, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xd}, {}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff9, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 3m31.101035043s ago: executing program 9 (id=7620): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 3m31.059642185s ago: executing program 9 (id=7622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) 3m30.760039543s ago: executing program 9 (id=7627): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control\x00') 3m30.759727743s ago: executing program 37 (id=7627): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x31a1802, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control\x00') 14.388201439s ago: executing program 1 (id=11307): prctl$PR_SET_SECUREBITS(0x1c, 0xc) setfsuid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='wchan\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 14.387783149s ago: executing program 1 (id=11308): syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7FtwkAABdB/tmMnRaR0abNU5gEKr0DHAqxAwxLMQmUdAuyGHiGk95r/75900oWXOtTV3Jr01/hOjmWdZOp/d7WZL0+fyaYkXYbkp53XjyR/Y5bjkJTu4f1yj7pdhm5sp3pr56/875/5NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4F5cAAAD//0W9Dps=") r0 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c6966"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000001240)='./file2\x00', 0x1a2b552, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="549af24628b11f702ed94fc9ab87fe77d120a6b19ebce0594fd48e9feeb00823d49808177f5e4b8eaa", @ANYRES32, @ANYBLOB="725e5f60d2d0080cd31a7e63b84a5c1f54f1af6d76739f87f9daf2cfe4edd5f2740dab52011c9be4dc720bfa2c908051a8b43fc39feee673ebed4d92e0c27b1fd0d4c8a4d63964b2108f34a3a6a7888a2d11c666e0adf84cf85f01b5311a10d113c9791027973220d8950d4afd212a4e57905c25af9236ba7d9fc6cc83d40a63fd3e8fc882a1a071271b32dda732dc7a699a5a4f0f8f48f50da908702d25573c80e47bf89f0d382644118974b552196c309f51d4e444ee48e9c187581c7f83fa9fa5745b22e992040198945238211da6cfb937945f459388a476c794d727b8"], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") 14.286422455s ago: executing program 1 (id=11309): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 14.235025389s ago: executing program 1 (id=11310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 14.179975602s ago: executing program 1 (id=11311): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getpid() r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000000)=0x970) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x106, 0xfffffffd, 0x2b) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x38, 0x6a}) 14.051758169s ago: executing program 1 (id=11312): rename(0x0, &(0x7f0000000180)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 14.03862615s ago: executing program 38 (id=11312): rename(0x0, &(0x7f0000000180)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 4.11905961s ago: executing program 8 (id=11476): syz_open_dev$usbmon(&(0x7f0000000240), 0x401, 0x8802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) syz_emit_ethernet(0x41c, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, 0x0, 0x0) epoll_create(0x4) syz_open_procfs(0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, &(0x7f0000000080)) 3.187945314s ago: executing program 8 (id=11492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de85000000040000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000808000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034080000002080001400000000f08000240000000120900010073797a"], 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r2) setgroups(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000200)="8d0507e595bd6b0c2b6103201b9b854d232b002784c2c46adf8eac5f6d3657c0737129d1b08f6d09906d07eb208c35bfa2b36772aa6558a14aac048f4a25b9ecd12debbde03e173ea3b1df8ef3cc593ce45428ec262fcf7a8b5e4d62ad4ee8c33fe9a34eaf37280040e8c7afb93d61318ad5839c1c4bcbc16044fb2e87cbcc939116bd805d1a35d9e19bf4433fd2f11f6b42602acfc2d72aefc4323be9316c52eeb9317084032c871a216130505b423785a5c5f6d5ca72373953d7b7d8f974c36c45f980258fa9bd091b1f5909659d486d8c786cdebbea8067a81834c309ba37a183247f115d332c22e48b823d", 0xed, r3) keyctl$read(0xb, r5, &(0x7f0000000300)=""/208, 0xd0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000c80500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000004e000000f3c79705dd133101adfded0000010040000002000000009500000000000000941d3407bb8c207edfd052d9f7455edb952589c0352fc6f81768b13cae32a709d03bb60f3b1fc505c9efc53fc30822c9828a9031d60fffb90fa9deced493ef15efd07b4fa37af695b7b93e6083980fb9686b4ce2"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) 2.470993526s ago: executing program 8 (id=11499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4c000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="89e7ee2c21fe50a3b47380c988ca4b5eaa78e8b1ccb387f73ab9ff3a7517f8a77a89b28718d4cbaf0989bce332b798197feb0c3a7b82", 0x36}], 0x1) 2.371402722s ago: executing program 8 (id=11501): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) 1.510397882s ago: executing program 8 (id=11521): r0 = socket$inet6(0xa, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd1796, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x10000, 0x10003, 0xc, 0x9, 0x5, 0x9, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 1.435170196s ago: executing program 6 (id=11523): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000003"], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4a041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.389010199s ago: executing program 6 (id=11534): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x80800) signalfd4(r3, &(0x7f0000001180)={[0x8]}, 0x8, 0x0) 1.274306886s ago: executing program 5 (id=11527): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000808000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034080000002080001400000000f0800"], 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x700, 0x0, [@sadb_key={0x3, 0x9, 0x50, 0x0, "53bb467d04f14562c5f4"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_usb_disconnect(r2) setgroups(0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="8d0507e595bd6b0c2b6103201b9b854d232b002784c2c46adf8eac5f6d3657c0737129d1b08f6d09906d07eb208c35bfa2b36772aa6558a14aac048f4a25b9ecd12debbde03e173ea3b1df8ef3cc593ce45428ec262fcf7a8b5e4d62ad4ee8c33fe9a34eaf37280040e8c7afb93d61318ad5839c1c4bcbc16044fb2e87cbcc939116bd805d1a35d9e19bf4433fd2f11f6b42602acfc2d72aefc4323be9316c52eeb9317084032c871a216130505b423785a5c5f6d5ca72373953d7b7d8f974c36c45f980258fa9bd091b1f5909659d486d8c786cdebbea8067a81834c309ba37a183247f115d332c22e48b823d", 0xed, r4) keyctl$read(0xb, r6, &(0x7f0000000300)=""/208, 0xd0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000c80500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400"], 0x60}}, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) 1.20914296s ago: executing program 0 (id=11529): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x1003, &(0x7f0000001640)=""/4099}, &(0x7f0000000240)="ceaae3aaec50", 0x0, 0xfffffff9, 0x4, 0x3, 0x0}) 1.099374226s ago: executing program 2 (id=11532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[], 0x0) 1.083014087s ago: executing program 2 (id=11533): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xffe) 1.044431239s ago: executing program 0 (id=11535): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0xe0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc, 0x0, 0x0}) 920.058877ms ago: executing program 2 (id=11536): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getpid() ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x970) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x106, 0xfffffffd, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x38, 0x6a}) 897.378308ms ago: executing program 0 (id=11537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 857.036691ms ago: executing program 0 (id=11538): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de85000000040000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000808000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034080000002080001400000000f08000240000000120900010073797a"], 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(r2) setgroups(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = add_key$user(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$read(0xb, r5, &(0x7f0000000300)=""/208, 0xd0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000c80500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000004e000000f3c79705dd133101adfded0000010040000002000000009500000000000000941d3407bb8c207edfd052d9f7455edb952589c0352fc6f81768b13cae32a709d03bb60f3b1fc505c9efc53fc30822c9828a9031d60fffb90fa9deced493ef15efd07b4fa37af695b7b93e6083980fb9686b4ce2"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) 609.719605ms ago: executing program 2 (id=11539): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x1e, &(0x7f0000000000), 0x4) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 566.324527ms ago: executing program 2 (id=11540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0), 0xff, 0x55c, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0xe60d, 0x5, 0x5, 0x7f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 565.819987ms ago: executing program 8 (id=11541): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000808000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034080000002080001400000000f08000240000000120900010073797a30"], 0x100}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_usb_disconnect(r2) setgroups(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, r3) keyctl$read(0xb, r5, &(0x7f0000000300)=""/208, 0xd0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000c80500010007000000050005000a000000140007800800114000000001080012400000ffff11000300686173683a69702c706f727400"], 0x60}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x1, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) 565.279167ms ago: executing program 2 (id=11542): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000004000000000000000001d8900"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40800) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) listen(0xffffffffffffffff, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16fbde45676fc87d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000240), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$inet6(0xa, 0x3, 0x5) 483.626282ms ago: executing program 5 (id=11543): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fchown(r0, 0x0, 0x0) 458.091753ms ago: executing program 6 (id=11544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 457.784984ms ago: executing program 5 (id=11545): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101442, 0x142) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x10, 0x37eb, 0x683) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0x8}]}) sendfile(r0, r0, 0x0, 0xe3aa6ea) getsockname$netlink(r0, 0x0, 0x0) 457.481903ms ago: executing program 6 (id=11546): syz_open_dev$usbmon(&(0x7f0000000240), 0x401, 0x8802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) syz_emit_ethernet(0x41c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, 0x0, 0x0) epoll_create(0x4) syz_open_procfs(0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, &(0x7f0000000080)) 412.943436ms ago: executing program 5 (id=11547): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0xe0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc, 0x0, 0x0}) 267.265615ms ago: executing program 6 (id=11548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 266.922785ms ago: executing program 6 (id=11549): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xffffffff, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x110) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x102, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 191.928809ms ago: executing program 5 (id=11550): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getpid() ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x970) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x106, 0xfffffffd, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x38, 0x6a}) 107.287594ms ago: executing program 5 (id=11551): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) 69.433666ms ago: executing program 0 (id=11552): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) shmget(0x2, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 0s ago: executing program 0 (id=11553): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0xa78) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 514.978998][ T29] audit: type=1326 audit(2000000184.836:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.002848][ T29] audit: type=1326 audit(2000000184.836:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.026695][ T29] audit: type=1326 audit(2000000184.836:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.050742][ T29] audit: type=1326 audit(2000000184.836:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.074448][ T29] audit: type=1326 audit(2000000184.836:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.098472][ T29] audit: type=1326 audit(2000000184.836:18995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.122259][ T29] audit: type=1326 audit(2000000184.836:18996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.145907][ T29] audit: type=1326 audit(2000000184.836:18997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30412 comm="syz.6.9127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 515.465231][T30456] tipc: Enabling of bearer rejected, failed to enable media [ 515.550344][T30460] lo speed is unknown, defaulting to 1000 [ 515.557012][T30460] wg1 speed is unknown, defaulting to 1000 [ 515.564003][T30460] lo speed is unknown, defaulting to 1000 [ 515.922152][T30485] tipc: Enabling of bearer rejected, failed to enable media [ 516.605310][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9157'. [ 516.650559][T30504] syzkaller0: entered promiscuous mode [ 516.656277][T30504] syzkaller0: entered allmulticast mode [ 516.984992][T30521] tipc: Enabled bearer , priority 0 [ 517.036217][T30521] syzkaller0: entered promiscuous mode [ 517.041791][T30521] syzkaller0: entered allmulticast mode [ 517.048855][T30521] tipc: Resetting bearer [ 517.062086][T30517] lo speed is unknown, defaulting to 1000 [ 517.069287][T30520] tipc: Resetting bearer [ 517.093975][T30520] tipc: Disabling bearer [ 517.101479][T30517] wg1 speed is unknown, defaulting to 1000 [ 517.107955][T30517] lo speed is unknown, defaulting to 1000 [ 517.124214][T30530] bridge0: entered allmulticast mode [ 517.159671][T30529] lo speed is unknown, defaulting to 1000 [ 517.166625][T30529] wg1 speed is unknown, defaulting to 1000 [ 517.207757][T30537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9171'. [ 517.221291][T30529] lo speed is unknown, defaulting to 1000 [ 517.225081][T30540] netlink: 'syz.0.9179': attribute type 7 has an invalid length. [ 517.234915][T30540] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9179'. [ 517.310224][T30530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9179'. [ 518.067458][T30573] netlink: 'syz.5.9183': attribute type 46 has an invalid length. [ 518.203991][T30580] syzkaller0: entered promiscuous mode [ 518.209490][T30580] syzkaller0: entered allmulticast mode [ 518.644759][T30590] netlink: 'syz.1.9189': attribute type 7 has an invalid length. [ 518.652744][T30590] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9189'. [ 518.692401][T30590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9189'. [ 519.038241][T30613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30613 comm=syz.8.9196 [ 519.053708][T30613] netlink: 'syz.8.9196': attribute type 1 has an invalid length. [ 519.521354][T30640] netlink: 'syz.6.9201': attribute type 7 has an invalid length. [ 519.529148][T30640] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9201'. [ 519.634848][T30655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9201'. [ 519.665555][T30614] bond1: left promiscuous mode [ 519.674532][T30614] dummy0: left promiscuous mode [ 519.809465][T30613] 8021q: adding VLAN 0 to HW filter on device bond13 [ 519.827711][T10062] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.838737][T10062] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.850305][T10062] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.858821][T10062] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.945283][T30668] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 521.272352][T30708] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9219'. [ 521.283331][T30708] netlink: 'syz.1.9219': attribute type 10 has an invalid length. [ 521.340404][T30714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9221'. [ 521.356781][T30714] 8021q: adding VLAN 0 to HW filter on device bond10 [ 521.371862][T30714] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9221'. [ 521.381846][T30714] bond10: entered allmulticast mode [ 521.400612][T30717] syzkaller0: entered promiscuous mode [ 521.406112][T30717] syzkaller0: entered allmulticast mode [ 522.085779][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 522.085843][ T29] audit: type=1326 audit(2000000191.976:19282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.115908][ T29] audit: type=1326 audit(2000000191.976:19283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.142937][ T29] audit: type=1326 audit(2000000191.976:19284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.166708][ T29] audit: type=1326 audit(2000000191.976:19285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.190940][ T29] audit: type=1326 audit(2000000191.976:19286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.214808][ T29] audit: type=1326 audit(2000000191.976:19287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.238513][ T29] audit: type=1326 audit(2000000191.976:19288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.262177][ T29] audit: type=1326 audit(2000000191.976:19289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.286810][ T29] audit: type=1326 audit(2000000191.976:19290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.310663][ T29] audit: type=1326 audit(2000000191.976:19291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.0.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 522.376438][T30737] bond12: left allmulticast mode [ 522.381625][T30737] bond12: left promiscuous mode [ 522.389203][T10062] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.398270][T10062] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.407178][T10062] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.415954][T10062] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.433790][T30747] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9232'. [ 522.459625][T30749] ªªªªªª: renamed from vlan0 [ 522.590354][T30771] netlink: 'syz.8.9240': attribute type 1 has an invalid length. [ 522.604612][T30771] 8021q: adding VLAN 0 to HW filter on device bond14 [ 522.617069][T30771] vlan5: entered allmulticast mode [ 522.620115][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 522.622259][T30771] veth0_to_bond: entered allmulticast mode [ 522.636656][T30771] bond14: (slave vlan5): Opening slave failed [ 522.737622][T30790] lo speed is unknown, defaulting to 1000 [ 522.744163][T30790] wg1 speed is unknown, defaulting to 1000 [ 522.752405][T30790] lo speed is unknown, defaulting to 1000 [ 523.660148][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 523.692933][T30858] netlink: 'syz.0.9261': attribute type 13 has an invalid length. [ 523.794401][T30858] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 523.877447][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9264'. [ 524.700096][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.828889][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9278'. [ 525.329061][T30930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9285'. [ 525.587892][T30954] tipc: Enabling of bearer rejected, failed to enable media [ 525.740122][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.483175][T30988] netlink: 'syz.6.9302': attribute type 10 has an invalid length. [ 526.765021][T31005] tipc: Enabling of bearer rejected, failed to enable media [ 526.780147][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.820088][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.977109][T31041] 8021q: adding VLAN 0 to HW filter on device bond9 [ 527.998469][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9319'. [ 528.007399][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9319'. [ 528.016778][T31041] bond9: (slave bond0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 528.030893][T31041] 8021q: adding VLAN 0 to HW filter on device bond9 [ 528.065357][T31041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.076142][T31041] bond9: (slave bond0): making interface the new active one [ 528.085514][T31041] bond9: (slave bond0): Enslaving as an active interface with an up link [ 528.098596][T31048] bond0: (slave lo): Releasing backup interface [ 528.113798][T31048] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 528.134193][T31048] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 528.153451][T10075] bond9: (slave bond0): link status definitely down, disabling slave [ 528.162769][T10075] bond9: now running without any active interface! [ 528.169300][ T3384] lo speed is unknown, defaulting to 1000 [ 528.175059][ T3384] syz: Port: 1 Link DOWN [ 528.180784][T30651] lo speed is unknown, defaulting to 1000 [ 528.278940][T31061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9324'. [ 528.860098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.037345][T31106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9334'. [ 529.629250][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 529.629269][ T29] audit: type=1326 audit(2000000199.516:19565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.664356][ T29] audit: type=1326 audit(2000000199.516:19566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.688255][ T29] audit: type=1326 audit(2000000199.556:19567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.711901][ T29] audit: type=1326 audit(2000000199.556:19568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.735666][ T29] audit: type=1326 audit(2000000199.556:19569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.759289][ T29] audit: type=1326 audit(2000000199.556:19570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.782958][ T29] audit: type=1326 audit(2000000199.556:19571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.806486][ T29] audit: type=1326 audit(2000000199.556:19572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.830165][ T29] audit: type=1326 audit(2000000199.556:19573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.854042][ T29] audit: type=1326 audit(2000000199.556:19574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31157 comm="syz.1.9350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 529.900145][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 530.381944][T31177] bond10: left allmulticast mode [ 530.940116][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 531.375825][T31204] À: port 1(vlan1) entered blocking state [ 531.381878][T31204] À: port 1(vlan1) entered disabled state [ 531.413631][T31204] vlan1: entered allmulticast mode [ 531.419214][T31204] veth0_vlan: entered allmulticast mode [ 531.434679][T31204] vlan1: entered promiscuous mode [ 531.536536][T31217] netlink: 'syz.5.9365': attribute type 7 has an invalid length. [ 531.544567][T31217] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9365'. [ 531.578686][T31217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9365'. [ 531.980075][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.725182][T31298] tipc: Enabled bearer , priority 0 [ 532.732755][T31298] syzkaller0: entered promiscuous mode [ 532.738256][T31298] syzkaller0: entered allmulticast mode [ 532.753485][T31298] tipc: Resetting bearer [ 532.761571][T31297] tipc: Resetting bearer [ 532.773871][T31297] tipc: Disabling bearer [ 532.829103][T31303] tipc: Enabling of bearer rejected, failed to enable media [ 533.015052][T31329] SELinux: security_context_str_to_sid () failed with errno=-22 [ 533.022833][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 533.099140][T31329] SELinux: Context is not valid (left unmapped). [ 533.870795][T31363] tipc: Enabling of bearer rejected, failed to enable media [ 533.965863][T31377] 9p: Bad value for 'wfdno' [ 534.060098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 534.257855][T31403] bond1: option mode: unable to set because the bond device has slaves [ 534.267025][T31403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9415'. [ 534.276030][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9415'. [ 534.296334][T31403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.305404][T31403] bond1: (slave bond0): Enslaving as a backup interface with a down link [ 534.322867][T31406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31406 comm=syz.6.9416 [ 534.341133][T31403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.356823][T30656] lo speed is unknown, defaulting to 1000 [ 534.362650][T30656] syz2: Port: 1 Link ACTIVE [ 534.368285][T31406] netlink: 'syz.6.9416': attribute type 1 has an invalid length. [ 534.398604][T31406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 535.044900][T31426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9421'. [ 535.059064][T31426] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 535.100112][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 535.172719][T31439] tipc: Enabling of bearer rejected, failed to enable media [ 535.181782][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 535.181798][ T29] audit: type=1326 audit(2000000205.066:19763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.211686][ T29] audit: type=1326 audit(2000000205.066:19764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.235668][ T29] audit: type=1326 audit(2000000205.066:19765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.259538][ T29] audit: type=1326 audit(2000000205.066:19766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.283366][ T29] audit: type=1326 audit(2000000205.066:19767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.306960][ T29] audit: type=1326 audit(2000000205.066:19768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.331860][ T29] audit: type=1326 audit(2000000205.126:19769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 535.355678][ T29] audit: type=1326 audit(2000000205.126:19770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77bb03ac22 code=0x7ffc0000 [ 535.379388][ T29] audit: type=1326 audit(2000000205.126:19771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f77bb03acb7 code=0x7ffc0000 [ 535.403381][ T29] audit: type=1326 audit(2000000205.126:19772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31438 comm="syz.1.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f77baff7c51 code=0x7ffc0000 [ 535.475564][T31454] netlink: 'syz.8.9429': attribute type 1 has an invalid length. [ 535.545209][T31454] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 535.566407][T31454] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 535.602523][T31459] bond15: (slave gretap2): making interface the new active one [ 535.638357][T31459] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 535.699460][T31466] netlink: 'syz.1.9434': attribute type 10 has an invalid length. [ 535.708154][T31466] bond1: (slave dummy0): Releasing active interface [ 535.717671][T31466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 535.743854][T31454] macvlan2: entered promiscuous mode [ 535.749206][T31454] macvlan2: entered allmulticast mode [ 535.768035][T31454] bond15: entered promiscuous mode [ 535.773254][T31454] gretap2: entered promiscuous mode [ 535.781762][T31454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.795491][T31454] bond15: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 535.827225][T31454] bond15: left promiscuous mode [ 535.832207][T31454] gretap2: left promiscuous mode [ 535.842704][T31453] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9430'. [ 535.888394][T31475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.912501][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9437'. [ 535.921609][T31475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 535.934411][T31475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.943522][T31475] bond2: (slave bond0): making interface the new active one [ 535.952607][T31475] bond2: (slave bond0): Enslaving as an active interface with an up link [ 536.000914][T31475] bond2: (slave bond0): Releasing active interface [ 536.021944][T31475] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.048103][T31475] bond0: (slave dummy0): Releasing backup interface [ 536.076222][T31475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.150126][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 536.226400][T31503] tipc: Enabling of bearer rejected, failed to enable media [ 536.382952][T31520] tipc: Enabling of bearer rejected, failed to enable media [ 536.688559][T31550] netlink: 'syz.6.9458': attribute type 10 has an invalid length. [ 536.701449][T31550] bond1: option mode: unable to set because the bond device has slaves [ 536.729472][T31554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9459'. [ 537.180121][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.292819][T31561] lo speed is unknown, defaulting to 1000 [ 537.299353][T31561] wg1 speed is unknown, defaulting to 1000 [ 537.305693][T31561] lo speed is unknown, defaulting to 1000 [ 537.514349][T31584] tipc: Enabled bearer , priority 0 [ 537.521455][T31584] syzkaller0: entered promiscuous mode [ 537.526920][T31584] syzkaller0: entered allmulticast mode [ 537.560876][T31584] tipc: Resetting bearer [ 537.670791][T31583] tipc: Resetting bearer [ 537.692462][T31583] tipc: Disabling bearer [ 537.751671][T31590] netlink: 'syz.6.9470': attribute type 7 has an invalid length. [ 537.760600][T31590] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9470'. [ 538.027713][T31582] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9469'. [ 538.135758][T31602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.145954][T31602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.230073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 538.361578][T31608] bridge_slave_0: Caught tx_queue_len zero misconfig [ 538.722466][T31617] syzkaller0: entered promiscuous mode [ 538.728025][T31617] syzkaller0: entered allmulticast mode [ 538.880861][T31621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9480'. [ 539.260831][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 539.309212][T31650] __nla_validate_parse: 1 callbacks suppressed [ 539.309307][T31650] netlink: 92 bytes leftover after parsing attributes in process `syz.6.9489'. [ 539.432958][T31661] lo speed is unknown, defaulting to 1000 [ 539.439895][T31661] wg1 speed is unknown, defaulting to 1000 [ 539.446358][T31661] lo speed is unknown, defaulting to 1000 [ 539.603541][T31681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9497'. [ 539.613749][T31681] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 539.683634][T31689] netlink: 'syz.6.9501': attribute type 7 has an invalid length. [ 539.691847][T31689] netlink: 140 bytes leftover after parsing attributes in process `syz.6.9501'. [ 539.693664][T31692] IPVS: rr: FWM 3 0x00000003 - no destination available [ 539.737167][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9501'. [ 539.745739][T31696] netlink: 92 bytes leftover after parsing attributes in process `syz.8.9502'. [ 539.972049][T31723] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9508'. [ 540.038925][T31723] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.052348][T31723] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.065089][T31723] .` (unregistering): Released all slaves [ 540.171517][T31744] netlink: 'syz.0.9515': attribute type 7 has an invalid length. [ 540.179072][T31752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9517'. [ 540.179377][T31744] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9515'. [ 540.197633][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 540.197646][ T29] audit: type=1326 audit(2000000210.096:20091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.222654][T31744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9515'. [ 540.238656][ T29] audit: type=1326 audit(2000000210.116:20092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.262385][ T29] audit: type=1326 audit(2000000210.116:20093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.286231][ T29] audit: type=1326 audit(2000000210.116:20094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.310093][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 540.317181][ T29] audit: type=1326 audit(2000000210.116:20095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.340912][ T29] audit: type=1326 audit(2000000210.116:20096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.364468][ T29] audit: type=1326 audit(2000000210.116:20097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.388215][ T29] audit: type=1326 audit(2000000210.116:20098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.411843][ T29] audit: type=1326 audit(2000000210.116:20099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 540.435514][ T29] audit: type=1326 audit(2000000210.116:20100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31751 comm="syz.1.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77baffb78e code=0x7ffc0000 [ 540.717879][T31781] netlink: 'syz.0.9526': attribute type 10 has an invalid length. [ 541.340060][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.816209][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9534'. [ 542.380127][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 542.903690][T30638] lo speed is unknown, defaulting to 1000 [ 542.909581][T30638] syz2: Port: 1 Link DOWN [ 543.335296][T31893] lo speed is unknown, defaulting to 1000 [ 543.343895][T31893] wg1 speed is unknown, defaulting to 1000 [ 543.350835][T31893] lo speed is unknown, defaulting to 1000 [ 543.374105][T31900] netlink: 'syz.8.9559': attribute type 5 has an invalid length. [ 543.382085][T31900] netlink: 'syz.8.9559': attribute type 6 has an invalid length. [ 543.420091][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 543.839830][T31912] tipc: Enabling of bearer rejected, failed to enable media [ 543.921952][T31921] tipc: Enabling of bearer rejected, failed to enable media [ 544.319573][T31939] __nla_validate_parse: 4 callbacks suppressed [ 544.319592][T31939] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.9573'. [ 544.425024][T31939] No such timeout policy "syz1" [ 544.460100][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 544.757345][T31955] tipc: Enabling of bearer rejected, failed to enable media [ 544.981834][T31976] lo speed is unknown, defaulting to 1000 [ 544.988473][T31976] wg1 speed is unknown, defaulting to 1000 [ 544.995357][T31976] lo speed is unknown, defaulting to 1000 [ 545.261381][T31993] 9p: Bad value for 'rfdno' [ 545.500083][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 545.827027][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 545.827045][ T29] audit: type=1326 audit(2000000215.716:20330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32007 comm="syz.0.9591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x0 [ 545.920682][T32012] netlink: 'syz.1.9592': attribute type 7 has an invalid length. [ 545.928468][T32012] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9592'. [ 545.938452][T31988] 9pnet_fd: p9_fd_create_tcp (31988): problem connecting socket to 127.0.0.1 [ 546.062747][T32022] mmap: syz.5.9603 (32022): VmData 29188096 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 546.132382][T32025] tipc: Enabling of bearer rejected, failed to enable media [ 546.142855][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9592'. [ 546.540088][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 546.591105][T32055] netlink: 'syz.8.9595': attribute type 10 has an invalid length. [ 546.599117][T32055] veth0_vlan: entered allmulticast mode [ 546.646249][T32058] hub 8-0:1.0: USB hub found [ 546.661247][T32058] hub 8-0:1.0: 8 ports detected [ 546.871821][ T29] audit: type=1326 audit(2000000216.766:20331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 546.926981][ T29] audit: type=1326 audit(2000000216.766:20332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 546.950848][ T29] audit: type=1326 audit(2000000216.766:20333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 546.975313][ T29] audit: type=1326 audit(2000000216.796:20334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 546.999165][ T29] audit: type=1326 audit(2000000216.796:20335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 547.022792][ T29] audit: type=1326 audit(2000000216.796:20336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 547.046655][ T29] audit: type=1326 audit(2000000216.796:20337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 547.070336][ T29] audit: type=1326 audit(2000000216.796:20338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 547.093999][ T29] audit: type=1326 audit(2000000216.796:20339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32063 comm="syz.0.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 547.377013][T32085] bridge0: entered allmulticast mode [ 547.471680][T32090] netlink: 'syz.8.9609': attribute type 7 has an invalid length. [ 547.479453][T32090] netlink: 140 bytes leftover after parsing attributes in process `syz.8.9609'. [ 547.550133][T32091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9609'. [ 547.572635][T32098] delete_channel: no stack [ 547.580111][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 547.626873][T32102] 9p: Bad value for 'rfdno' [ 547.764681][T32111] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9617'. [ 547.875541][T32119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9620'. [ 547.926825][T32124] tipc: Enabling of bearer rejected, failed to enable media [ 548.355904][T32165] netlink: 'syz.6.9634': attribute type 4 has an invalid length. [ 548.514131][T32185] Ÿë: port 1(veth0_to_team) entered blocking state [ 548.521028][T32185] Ÿë: port 1(veth0_to_team) entered disabled state [ 548.528050][T32185] veth0_to_team: entered allmulticast mode [ 548.534965][T32185] veth0_to_team: left allmulticast mode [ 548.620089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 548.713897][T32208] cgroup: fork rejected by pids controller in /syz5 [ 549.217297][ T529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9656'. [ 549.660166][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 549.973281][ T568] xt_hashlimit: size too large, truncated to 1048576 [ 550.529483][ T576] –: renamed from vxcan1 [ 550.599115][ T608] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9682'. [ 550.609469][ T608] 8021q: adding VLAN 0 to HW filter on device bond9 [ 550.620606][ T608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9682'. [ 550.629583][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9682'. [ 550.646668][ T608] netlink: 'syz.5.9682': attribute type 10 has an invalid length. [ 550.700115][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 550.886247][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 550.886338][ T29] audit: type=1326 audit(2000000004.341:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=623 comm="syz.8.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 550.940453][ T29] audit: type=1326 audit(2000000004.401:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=594 comm="syz.8.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f01bbdac2d9 code=0x7ffc0000 [ 550.963905][ T29] audit: type=1326 audit(2000000004.401:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=594 comm="syz.8.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 551.740077][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 552.719299][ T662] tipc: New replicast peer: 255.255.255.255 [ 552.726114][ T662] tipc: Enabled bearer , priority 10 [ 552.780114][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.316627][ T29] audit: type=1326 audit(2000000006.771:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.344727][ T29] audit: type=1326 audit(2000000006.801:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.368373][ T29] audit: type=1326 audit(2000000006.801:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.377316][ T674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9703'. [ 553.391837][ T29] audit: type=1326 audit(2000000006.801:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.391920][ T29] audit: type=1326 audit(2000000006.801:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.391962][ T29] audit: type=1326 audit(2000000006.801:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.391989][ T29] audit: type=1326 audit(2000000006.801:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.8.9699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 553.820099][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 553.840118][T30656] tipc: Node number set to 2675460260 [ 554.250584][ T701] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9709'. [ 554.278548][ T701] netlink: 'syz.1.9709': attribute type 13 has an invalid length. [ 554.356995][ T703] tipc: Enabling of bearer rejected, already enabled [ 554.369861][ T705] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 554.860074][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.885993][ T726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9717'. [ 554.942057][ T722] netlink: 'syz.0.9717': attribute type 298 has an invalid length. [ 555.066754][ T736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9722'. [ 555.119454][ T736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.135043][T30656] lo speed is unknown, defaulting to 1000 [ 555.140851][T30656] syz2: Port: 1 Link ACTIVE [ 555.157318][ T736] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.264779][ T748] netlink: 'syz.1.9725': attribute type 1 has an invalid length. [ 555.329751][ T753] kernel profiling enabled (shift: 16) [ 555.486879][ T757] lo speed is unknown, defaulting to 1000 [ 555.496420][ T757] wg1 speed is unknown, defaulting to 1000 [ 555.504114][ T757] lo speed is unknown, defaulting to 1000 [ 555.747692][ T767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9731'. [ 555.900069][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 555.956638][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 555.956655][ T29] audit: type=1400 audit(2000000009.411:20741): avc: denied { ioctl } for pid=771 comm="syz.8.9733" path="socket:[109664]" dev="sockfs" ino=109664 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 556.017258][ T29] audit: type=1326 audit(2000000009.471:20742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.6.9735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 556.042577][ T29] audit: type=1326 audit(2000000009.501:20743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.6.9735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 556.066478][ T29] audit: type=1326 audit(2000000009.501:20744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.6.9735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 556.090887][ T29] audit: type=1326 audit(2000000009.501:20745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.6.9735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 556.114476][ T29] audit: type=1326 audit(2000000009.501:20746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 556.138240][ T29] audit: type=1326 audit(2000000009.501:20747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 556.161878][ T29] audit: type=1326 audit(2000000009.501:20748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.6.9735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 556.185536][ T29] audit: type=1326 audit(2000000009.501:20749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 556.209339][ T29] audit: type=1326 audit(2000000009.501:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=769 comm="syz.5.9732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 556.285421][ T788] 9p: Bad value for 'rfdno' [ 556.666253][ T805] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9743'. [ 556.940100][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 556.985431][ T809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=809 comm=syz.5.9744 [ 557.262788][ T813] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9745'. [ 557.536985][ T817] geneve2: entered promiscuous mode [ 557.813476][ T852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9758'. [ 557.947637][ T857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9759'. [ 557.973822][ T857] netlink: 'syz.5.9759': attribute type 298 has an invalid length. [ 557.990085][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 558.344977][ T898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9777'. [ 559.021470][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 559.349996][ T956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9799'. [ 559.359581][ T956] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 559.613866][ T1004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9817'. [ 559.796300][ T1024] netlink: 'syz.0.9825': attribute type 10 has an invalid length. [ 559.935058][ T1041] Timeout policy `syz1' can only be used by L3 protocol number 512 [ 559.982231][ T1043] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9835'. [ 560.060072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 560.179818][ T1052] netlink: 'syz.0.9839': attribute type 4 has an invalid length. [ 560.187668][ T1052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9839'. [ 560.437945][ T1076] netlink: 'syz.0.9850': attribute type 7 has an invalid length. [ 561.110092][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 561.932071][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 561.932089][ T29] audit: type=1326 audit(2000000015.391:21044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 561.962026][ T29] audit: type=1326 audit(2000000015.401:21045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 561.985577][ T29] audit: type=1326 audit(2000000015.401:21046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.009131][ T29] audit: type=1326 audit(2000000015.401:21047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.032717][ T29] audit: type=1326 audit(2000000015.401:21048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.056578][ T29] audit: type=1326 audit(2000000015.401:21049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.080475][ T29] audit: type=1326 audit(2000000015.401:21050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.103946][ T29] audit: type=1326 audit(2000000015.401:21051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.127502][ T29] audit: type=1326 audit(2000000015.401:21052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.151082][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 562.158089][ T29] audit: type=1326 audit(2000000015.401:21053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1179 comm="syz.1.9894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f77bb03aeb9 code=0x7ffc0000 [ 562.286955][ T1200] __nla_validate_parse: 2 callbacks suppressed [ 562.286978][ T1200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9904'. [ 562.599000][ T1195] syz.0.9902 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 562.609987][ T1195] CPU: 1 UID: 0 PID: 1195 Comm: syz.0.9902 Not tainted syzkaller #0 PREEMPT(voluntary) [ 562.610088][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.610103][ T1195] Call Trace: [ 562.610111][ T1195] [ 562.610120][ T1195] __dump_stack+0x1d/0x30 [ 562.610151][ T1195] dump_stack_lvl+0x95/0xd0 [ 562.610174][ T1195] dump_stack+0x15/0x1b [ 562.610294][ T1195] dump_header+0x80/0x240 [ 562.610318][ T1195] oom_kill_process+0x295/0x350 [ 562.610349][ T1195] out_of_memory+0x97d/0xb80 [ 562.610379][ T1195] try_charge_memcg+0x62e/0xa10 [ 562.610411][ T1195] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 562.610444][ T1195] __read_swap_cache_async+0x17b/0x2d0 [ 562.610488][ T1195] swap_cluster_readahead+0x262/0x3c0 [ 562.610601][ T1195] swapin_readahead+0xde/0x840 [ 562.610651][ T1195] ? __rcu_read_unlock+0x33/0x70 [ 562.610683][ T1195] ? __rcu_read_unlock+0x4e/0x70 [ 562.610768][ T1195] ? swap_cache_get_folio+0x26f/0x280 [ 562.610797][ T1195] do_swap_page+0x59b/0x2a50 [ 562.610835][ T1195] ? __rcu_read_lock+0x36/0x50 [ 562.610929][ T1195] ? __pfx_default_wake_function+0x10/0x10 [ 562.610961][ T1195] handle_mm_fault+0xb40/0x3030 [ 562.611068][ T1195] ? vma_start_read+0x1c7/0x2c0 [ 562.611098][ T1195] do_user_addr_fault+0x62f/0x1050 [ 562.611126][ T1195] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 562.611216][ T1195] ? irqentry_exit+0x3c/0x510 [ 562.611240][ T1195] exc_page_fault+0x62/0xa0 [ 562.611264][ T1195] asm_exc_page_fault+0x26/0x30 [ 562.611288][ T1195] RIP: 0033:0x7f70e571897e [ 562.611355][ T1195] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 f4 3a 00 85 c0 0f 8e 53 fd ff ff 2d 88 fe ff 49 39 c4 73 88 48 8d 1d 11 d6 3a 00 83 3d 16 f4 3a [ 562.611376][ T1195] RSP: 002b:00007ffca41b5060 EFLAGS: 00010202 [ 562.611397][ T1195] RAX: 0000000000000001 RBX: 00007f70e5ac7da0 RCX: 0000555556138808 [ 562.611411][ T1195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.611424][ T1195] RBP: 00007f70e5ac7da0 R08: 0000000000000000 R09: 0000000000000000 [ 562.611444][ T1195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000089782 [ 562.611457][ T1195] R13: 00007f70e5ac5fac R14: 0000000000089479 R15: 00007ffca41b5160 [ 562.611476][ T1195] [ 562.830182][ T1195] memory: usage 307200kB, limit 307200kB, failcnt 8561 [ 562.837033][ T1195] memory+swap: usage 308104kB, limit 9007199254740988kB, failcnt 0 [ 562.845003][ T1195] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 562.852435][ T1195] Memory cgroup stats for /syz0: [ 562.920511][ T1195] cache 0 [ 562.928579][ T1195] rss 4096 [ 562.931896][ T1195] shmem 0 [ 562.934913][ T1195] mapped_file 0 [ 562.938391][ T1195] dirty 0 [ 562.941385][ T1195] writeback 8192 [ 562.944916][ T1195] workingset_refault_anon 1220 [ 562.949663][ T1195] workingset_refault_file 14862 [ 562.954542][ T1195] swap 925696 [ 562.957980][ T1195] swapcached 8192 [ 562.961726][ T1195] pgpgin 895968 [ 562.965252][ T1195] pgpgout 895966 [ 562.968828][ T1195] pgfault 692136 [ 562.972392][ T1195] pgmajfault 358 [ 562.975944][ T1195] inactive_anon 8192 [ 562.979889][ T1195] active_anon 0 [ 562.983354][ T1195] inactive_file 0 [ 562.986977][ T1195] active_file 0 [ 562.990575][ T1195] unevictable 0 [ 562.994197][ T1195] hierarchical_memory_limit 314572800 [ 562.999597][ T1195] hierarchical_memsw_limit 9223372036854771712 [ 563.005859][ T1195] total_cache 0 [ 563.009404][ T1195] total_rss 4096 [ 563.012976][ T1195] total_shmem 0 [ 563.016425][ T1195] total_mapped_file 0 [ 563.020511][ T1195] total_dirty 0 [ 563.024089][ T1195] total_writeback 8192 [ 563.028153][ T1195] total_workingset_refault_anon 1220 [ 563.033514][ T1195] total_workingset_refault_file 14862 [ 563.039019][ T1195] total_swap 925696 [ 563.042908][ T1195] total_swapcached 8192 [ 563.047069][ T1195] total_pgpgin 895968 [ 563.051170][ T1195] total_pgpgout 895966 [ 563.055226][ T1195] total_pgfault 692136 [ 563.059275][ T1195] total_pgmajfault 358 [ 563.063407][ T1195] total_inactive_anon 8192 [ 563.067806][ T1195] total_active_anon 0 [ 563.071823][ T1195] total_inactive_file 0 [ 563.076085][ T1195] total_active_file 0 [ 563.080185][ T1195] total_unevictable 0 [ 563.084152][ T1195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9902,pid=1195,uid=0 [ 563.098989][ T1195] Memory cgroup out of memory: Killed process 1195 (syz.0.9902) total-vm:96048kB, anon-rss:1204kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 563.131232][ T1250] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9924'. [ 563.156355][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9926'. [ 563.165300][ T1252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9926'. [ 563.180075][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 563.479261][ T1325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9952'. [ 564.157425][ T1395] ./file0: Can't lookup blockdev [ 564.220656][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 564.358896][ T1418] xt_hashlimit: size too large, truncated to 1048576 [ 564.637664][ T1446] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10001'. [ 564.692899][ T1452] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.10004'. [ 564.820358][ T1465] netlink: 'syz.8.10010': attribute type 1 has an invalid length. [ 565.047905][ T1491] xt_hashlimit: size too large, truncated to 1048576 [ 565.201794][ T1521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10031'. [ 565.260058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 565.366755][ T1536] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10036'. [ 565.417829][ T1536] netlink: 'syz.6.10036': attribute type 298 has an invalid length. [ 565.468863][ T1561] xt_hashlimit: size too large, truncated to 1048576 [ 566.111804][ T1617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10067'. [ 566.300079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 566.357837][ T1665] netlink: 'syz.8.10087': attribute type 10 has an invalid length. [ 566.403163][ T1672] netlink: 'syz.8.10090': attribute type 2 has an invalid length. [ 567.266403][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 567.266453][ T29] audit: type=1326 audit(2000000020.721:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.297742][ T1737] __nla_validate_parse: 1 callbacks suppressed [ 567.297758][ T1737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10116'. [ 567.303053][ T29] audit: type=1326 audit(2000000020.751:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.330726][ T1740] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10115'. [ 567.336582][ T29] audit: type=1326 audit(2000000020.751:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.359557][ T1740] netlink: 'syz.0.10115': attribute type 13 has an invalid length. [ 567.369211][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 567.384179][ T29] audit: type=1326 audit(2000000020.751:21198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.408230][ T29] audit: type=1326 audit(2000000020.751:21199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.431850][ T29] audit: type=1326 audit(2000000020.751:21200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.455456][ T29] audit: type=1326 audit(2000000020.751:21201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.479098][ T29] audit: type=1326 audit(2000000020.751:21202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.530155][ T29] audit: type=1326 audit(2000000020.961:21203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.553803][ T29] audit: type=1326 audit(2000000020.961:21204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz.6.10116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 567.629813][ T1035] lo speed is unknown, defaulting to 1000 [ 567.635599][ T1035] syz2: Port: 1 Link DOWN [ 568.380097][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 568.608263][ T1827] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10156'. [ 568.841626][ T1851] geneve1: Caught tx_queue_len zero misconfig [ 569.120963][ T1879] hub 8-0:1.0: USB hub found [ 569.137822][ T1879] hub 8-0:1.0: 8 ports detected [ 569.278949][ T1889] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10184'. [ 569.288141][ T1889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10184'. [ 569.430065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 569.621630][ T1914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10195'. [ 569.637107][ T1914] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 570.471459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 570.609457][ T1977] netlink: 'syz.0.10220': attribute type 13 has an invalid length. [ 571.500082][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 571.963854][ T2012] netlink: 'syz.0.10233': attribute type 13 has an invalid length. [ 572.272662][ T2020] lo speed is unknown, defaulting to 1000 [ 572.287585][ T2020] wg1 speed is unknown, defaulting to 1000 [ 572.304747][ T2020] lo speed is unknown, defaulting to 1000 [ 572.372773][ T2037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2037 comm=syz.0.10245 [ 572.527522][ T2068] program syz.1.10260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.540109][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 572.592663][ T2077] netlink: 'syz.1.10265': attribute type 14 has an invalid length. [ 572.676018][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 572.676034][ T29] audit: type=1326 audit(2000000026.131:21324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.707515][ T29] audit: type=1326 audit(2000000026.131:21325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.731568][ T29] audit: type=1326 audit(2000000026.141:21326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.755851][ T29] audit: type=1326 audit(2000000026.141:21327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.779554][ T29] audit: type=1326 audit(2000000026.141:21328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.803981][ T29] audit: type=1326 audit(2000000026.141:21329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.827822][ T29] audit: type=1326 audit(2000000026.141:21330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.851739][ T29] audit: type=1326 audit(2000000026.141:21331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 572.875720][ T29] audit: type=1326 audit(2000000026.141:21332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2094 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 573.021171][ T2121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10279'. [ 573.046255][ T2121] netlink: 'syz.1.10279': attribute type 13 has an invalid length. [ 573.123025][ T2131] xt_hashlimit: size too large, truncated to 1048576 [ 573.305410][ T29] audit: type=1326 audit(2000000026.761:21333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz.0.10295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 573.580045][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 573.660449][ T2181] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10312'. [ 573.678367][ T2181] netlink: 'syz.8.10312': attribute type 13 has an invalid length. [ 574.179144][ T2250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10342'. [ 574.206879][ T2252] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10343'. [ 574.300534][ T2268] vlan0: entered allmulticast mode [ 574.318932][ T2270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10352'. [ 574.437235][ T2275] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10354'. [ 574.448320][ T2275] netlink: 'syz.5.10354': attribute type 13 has an invalid length. [ 574.630116][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 575.317002][ T2318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10369'. [ 575.359076][ T2313] netlink: 'syz.1.10369': attribute type 13 has an invalid length. [ 575.660105][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 575.672448][ T2354] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10385'. [ 575.683487][ T2354] netlink: 'syz.5.10385': attribute type 13 has an invalid length. [ 576.496063][ T2399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10406'. [ 576.700094][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 577.486310][ T2442] netlink: 'syz.1.10424': attribute type 11 has an invalid length. [ 577.740042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.435233][ T2505] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10449'. [ 578.485070][ T2509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10450'. [ 578.494163][ T2509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10450'. [ 578.517006][ T2509] vlan2: entered allmulticast mode [ 578.522201][ T2509] bridge_slave_0: entered allmulticast mode [ 578.781006][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 578.854975][ T2545] usb usb7: usbfs: process 2545 (syz.1.10461) did not claim interface 0 before use [ 579.044206][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 579.044232][ T29] audit: type=1326 audit(2000000032.501:21669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.6.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 579.129174][ T29] audit: type=1326 audit(2000000032.531:21670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.6.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 579.153147][ T29] audit: type=1326 audit(2000000032.531:21671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.6.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 579.199565][ T29] audit: type=1326 audit(2000000032.651:21672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.6.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 579.223355][ T29] audit: type=1326 audit(2000000032.651:21673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2549 comm="syz.6.10465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 579.616382][ T29] audit: type=1326 audit(2000000033.071:21674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.5.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 579.640163][ T29] audit: type=1326 audit(2000000033.071:21675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.5.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 579.664034][ T29] audit: type=1326 audit(2000000033.071:21676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.5.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 579.688009][ T29] audit: type=1326 audit(2000000033.071:21677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.5.10478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 579.830044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 579.997179][ T2596] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10483'. [ 580.007843][ T2596] netlink: 'syz.5.10483': attribute type 13 has an invalid length. [ 580.493168][ T2626] 9p: Bad value for 'rfdno' [ 580.860044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 580.892357][ T2665] netlink: 'syz.0.10510': attribute type 6 has an invalid length. [ 580.924255][ T2668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10513'. [ 581.351058][ T2705] 9p: Bad value for 'rfdno' [ 581.624260][ T2729] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10537'. [ 581.900073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.478677][ T29] audit: type=1326 audit(2000000035.931:21678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2807 comm="syz.0.10573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 582.950059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.998175][ T2830] lo speed is unknown, defaulting to 1000 [ 583.004754][ T2830] wg1 speed is unknown, defaulting to 1000 [ 583.011232][ T2830] lo speed is unknown, defaulting to 1000 [ 583.980092][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.121432][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 584.121455][ T29] audit: type=1326 audit(2000000037.551:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2906 comm="syz.5.10597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.181020][ T29] audit: type=1326 audit(2000000037.641:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2873 comm="syz.5.10597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2f0178c2d9 code=0x7ffc0000 [ 584.204764][ T29] audit: type=1326 audit(2000000037.641:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2873 comm="syz.5.10597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.672224][ T29] audit: type=1326 audit(2000000038.131:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.673479][ T2947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10627'. [ 584.696207][ T29] audit: type=1326 audit(2000000038.131:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.729085][ T29] audit: type=1326 audit(2000000038.131:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.752903][ T29] audit: type=1326 audit(2000000038.131:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.776579][ T29] audit: type=1326 audit(2000000038.131:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.800385][ T29] audit: type=1326 audit(2000000038.131:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 584.824537][ T29] audit: type=1326 audit(2000000038.131:21785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2946 comm="syz.5.10627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 585.020058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 585.379961][ T2961] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10631'. [ 585.392419][ T2961] netlink: 'syz.8.10631': attribute type 13 has an invalid length. [ 585.641172][ T3002] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10640'. [ 585.683203][ T3002] netlink: 'syz.8.10640': attribute type 13 has an invalid length. [ 585.712826][ T3006] usb usb7: usbfs: process 3006 (syz.1.10638) did not claim interface 0 before use [ 586.060048][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 586.852282][ T3034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10651'. [ 587.051476][ T3047] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10658'. [ 587.100045][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 587.333856][ T3051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10660'. [ 587.344639][ T3051] netlink: 'syz.0.10660': attribute type 13 has an invalid length. [ 587.603444][ T3070] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.931747][ T3078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10670'. [ 588.140038][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.195120][ T3088] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10674'. [ 588.294387][ T3088] netlink: 'syz.0.10674': attribute type 13 has an invalid length. [ 589.180082][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 589.243749][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 589.243763][ T29] audit: type=1326 audit(2000000042.701:22116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.273914][ T29] audit: type=1326 audit(2000000042.701:22117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.297652][ T29] audit: type=1326 audit(2000000042.701:22118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.322375][ T29] audit: type=1326 audit(2000000042.701:22119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.345982][ T29] audit: type=1326 audit(2000000042.701:22120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.370312][ T29] audit: type=1326 audit(2000000042.701:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.393941][ T29] audit: type=1326 audit(2000000042.701:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.417551][ T29] audit: type=1326 audit(2000000042.701:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.441114][ T29] audit: type=1326 audit(2000000042.701:22124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 589.464871][ T29] audit: type=1326 audit(2000000042.701:22125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3140 comm="syz.8.10693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 590.065472][ T3191] veth3: entered promiscuous mode [ 590.072742][ T3191] bond2: (slave veth3): Enslaving as an active interface with a down link [ 590.220093][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 591.063174][ T3273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10740'. [ 591.137541][ T3282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10744'. [ 591.146585][ T3282] netlink: 'syz.8.10744': attribute type 30 has an invalid length. [ 591.157836][T27587] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.166671][T27587] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.175138][T27587] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.183890][T27587] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.260138][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.300817][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.350348][ T3354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10769'. [ 592.840996][ T3379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10778'. [ 593.031364][ T3390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10783'. [ 593.340111][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.902817][ T3430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10794'. [ 593.924618][ T3432] netlink: 84 bytes leftover after parsing attributes in process `syz.5.10795'. [ 594.155912][ T3457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10806'. [ 594.165190][ T3457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10806'. [ 594.174582][ T3457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.257766][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 594.257784][ T29] audit: type=1326 audit(2000000047.711:22504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.287818][ T29] audit: type=1326 audit(2000000047.711:22505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.313685][ T29] audit: type=1326 audit(2000000047.771:22506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.337451][ T29] audit: type=1326 audit(2000000047.771:22507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.340459][ T3476] 9p: Bad value for 'rfdno' [ 594.361184][ T29] audit: type=1326 audit(2000000047.771:22508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.361218][ T29] audit: type=1326 audit(2000000047.771:22509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.361243][ T29] audit: type=1326 audit(2000000047.771:22510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.361330][ T29] audit: type=1326 audit(2000000047.771:22511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.389391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.468014][ T29] audit: type=1326 audit(2000000047.771:22512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 594.491635][ T29] audit: type=1326 audit(2000000047.771:22513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3460 comm="syz.8.10804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 595.061684][ T3492] lo speed is unknown, defaulting to 1000 [ 595.071272][ T3492] wg1 speed is unknown, defaulting to 1000 [ 595.083985][ T3492] lo speed is unknown, defaulting to 1000 [ 595.196967][ T3506] netlink: 'syz.5.10824': attribute type 4 has an invalid length. [ 595.420053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.420818][ T3501] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10822'. [ 595.477439][ T3501] netlink: 'syz.8.10822': attribute type 13 has an invalid length. [ 595.546792][T27587] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.582386][T27587] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.635458][T27587] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.674537][T27587] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.206184][ T3563] __nla_validate_parse: 1 callbacks suppressed [ 596.206290][ T3563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10845'. [ 596.460117][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.510048][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.649766][ T3605] SELinux: failed to load policy [ 598.321254][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10868'. [ 598.550053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.101384][ T3673] bridge0: entered allmulticast mode [ 599.388424][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 599.388441][ T29] audit: type=1326 audit(2000000052.841:22988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.420380][ T29] audit: type=1326 audit(2000000052.861:22989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.444108][ T29] audit: type=1326 audit(2000000052.861:22990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.468052][ T29] audit: type=1326 audit(2000000052.861:22991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.491756][ T29] audit: type=1326 audit(2000000052.861:22992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.515771][ T29] audit: type=1326 audit(2000000052.861:22993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.539583][ T29] audit: type=1326 audit(2000000052.861:22994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.563501][ T29] audit: type=1326 audit(2000000052.861:22995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.587376][ T29] audit: type=1326 audit(2000000052.861:22996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.590104][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.611566][ T29] audit: type=1326 audit(2000000052.881:22997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.5.10885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 599.789393][ T3701] usb usb7: usbfs: process 3701 (syz.1.10889) did not claim interface 0 before use [ 599.799008][ T3701] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 600.620059][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.461031][ T3761] 9p: Bad value for 'wfdno' [ 601.637301][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10917'. [ 601.660089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.937917][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.965331][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.710054][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.358822][ T3844] ipip0: entered promiscuous mode [ 603.731782][ T3859] Set syz1 is full, maxelem 65536 reached [ 603.740044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.812726][ T3889] xt_hashlimit: size too large, truncated to 1048576 [ 603.823214][ T3894] netlink: 'syz.8.10963': attribute type 4 has an invalid length. [ 603.866551][ T3894] netlink: 'syz.8.10963': attribute type 4 has an invalid length. [ 604.662091][ T3946] lo speed is unknown, defaulting to 1000 [ 604.668954][ T3946] wg1 speed is unknown, defaulting to 1000 [ 604.689026][ T3946] lo speed is unknown, defaulting to 1000 [ 605.079270][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 605.079289][ T29] audit: type=1326 audit(2000000058.531:23135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.356023][ T4005] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11005'. [ 605.561171][ T29] audit: type=1326 audit(2000000058.601:23136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.584939][ T29] audit: type=1326 audit(2000000058.601:23137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.608573][ T29] audit: type=1326 audit(2000000058.601:23138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.632596][ T29] audit: type=1326 audit(2000000058.601:23139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.656780][ T29] audit: type=1326 audit(2000000058.601:23140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.681032][ T29] audit: type=1326 audit(2000000058.601:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 605.704768][ T29] audit: type=1326 audit(2000000058.601:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.0.10989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 606.326300][ T29] audit: type=1326 audit(2000000059.781:23143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.8.11015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 606.350600][ T29] audit: type=1326 audit(2000000059.811:23144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz.8.11015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01bbe0aeb9 code=0x7ffc0000 [ 606.416504][ T4041] smc: net device bond0 applied user defined pnetid SYZ2 [ 606.424326][ T4041] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11019'. [ 606.434621][ T4041] smc: removing net device bond0 with user defined pnetid SYZ2 [ 606.443472][ T4041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.453628][ T4041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.463065][ T4041] bond0 (unregistering): Released all slaves [ 606.720662][ T4043] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11020'. [ 607.105556][ T4058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11025'. [ 607.416560][ T4079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11033'. [ 607.462980][ T4084] netlink: 'syz.8.11035': attribute type 7 has an invalid length. [ 607.470851][ T4084] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11035'. [ 607.671468][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11035'. [ 607.969236][ T4096] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11037'. [ 609.130759][ T4125] netlink: 'syz.1.11047': attribute type 7 has an invalid length. [ 609.138620][ T4125] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11047'. [ 609.232192][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11047'. [ 609.580740][ T4156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11057'. [ 609.621181][ T4156] netlink: 'syz.1.11057': attribute type 13 has an invalid length. [ 610.260325][ T4220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4220 comm=syz.0.11082 [ 611.016900][ T4235] SELinux: failed to load policy [ 611.042958][ T4239] geneve2: entered promiscuous mode [ 611.057598][T10066] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.071327][T10066] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.080470][T10066] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.088755][T10066] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.163903][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 611.163918][ T29] audit: type=1326 audit(2000000064.621:23351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.222434][ T29] audit: type=1326 audit(2000000064.661:23352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.246154][ T29] audit: type=1326 audit(2000000064.661:23353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.270302][ T29] audit: type=1326 audit(2000000064.661:23354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.294117][ T29] audit: type=1326 audit(2000000064.661:23355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.318148][ T29] audit: type=1326 audit(2000000064.661:23356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.342006][ T29] audit: type=1326 audit(2000000064.661:23357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.365657][ T29] audit: type=1326 audit(2000000064.661:23358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.389745][ T29] audit: type=1326 audit(2000000064.661:23359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.413353][ T29] audit: type=1326 audit(2000000064.661:23360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.6.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 611.475577][ T4250] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11095'. [ 611.542609][ T4260] netlink: 'syz.8.11099': attribute type 7 has an invalid length. [ 612.607696][ T4299] netlink: 'syz.1.11110': attribute type 7 has an invalid length. [ 612.615677][ T4299] __nla_validate_parse: 2 callbacks suppressed [ 612.615764][ T4299] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11110'. [ 612.645554][ T4299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11110'. [ 612.841910][ T4313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11114'. [ 613.019547][ T4331] netlink: 'syz.0.11122': attribute type 29 has an invalid length. [ 613.144640][ T4344] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11124'. [ 613.158737][ T4344] netlink: 'syz.5.11124': attribute type 13 has an invalid length. [ 613.205865][ T4350] lo speed is unknown, defaulting to 1000 [ 613.212622][ T4350] wg1 speed is unknown, defaulting to 1000 [ 613.218759][ T4350] lo speed is unknown, defaulting to 1000 [ 613.768881][ T4379] syzkaller0: entered promiscuous mode [ 613.774496][ T4379] syzkaller0: entered allmulticast mode [ 613.840610][ T4382] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11139'. [ 613.861871][ T4381] netlink: 'syz.8.11139': attribute type 13 has an invalid length. [ 613.943688][ T4390] netlink: 'syz.8.11143': attribute type 7 has an invalid length. [ 613.951645][ T4390] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11143'. [ 613.980958][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11143'. [ 614.048016][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11148'. [ 614.225463][ T4410] usb usb7: usbfs: process 4410 (syz.1.11149) did not claim interface 0 before use [ 614.234904][ T4410] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 614.399909][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11156'. [ 615.259328][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11172'. [ 615.570387][ T4486] netlink: 'syz.8.11177': attribute type 13 has an invalid length. [ 615.762200][ T4494] syz.8.11181 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 615.771994][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.8.11181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 615.772019][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.772032][ T4494] Call Trace: [ 615.772041][ T4494] [ 615.772050][ T4494] __dump_stack+0x1d/0x30 [ 615.772076][ T4494] dump_stack_lvl+0x95/0xd0 [ 615.772104][ T4494] dump_stack+0x15/0x1b [ 615.772125][ T4494] dump_header+0x80/0x240 [ 615.772146][ T4494] oom_kill_process+0x295/0x350 [ 615.772172][ T4494] out_of_memory+0x97d/0xb80 [ 615.772243][ T4494] try_charge_memcg+0x62e/0xa10 [ 615.772271][ T4494] __mem_cgroup_charge+0x65/0x150 [ 615.772396][ T4494] handle_mm_fault+0x1140/0x3030 [ 615.772431][ T4494] ? vma_start_read+0x1c7/0x2c0 [ 615.772462][ T4494] do_user_addr_fault+0x62f/0x1050 [ 615.772492][ T4494] exc_page_fault+0x62/0xa0 [ 615.772597][ T4494] asm_exc_page_fault+0x26/0x30 [ 615.772618][ T4494] RIP: 0033:0x7f01bbdc8104 [ 615.772635][ T4494] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 c6 2b 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 615.772652][ T4494] RSP: 002b:00007fffabcb1bb0 EFLAGS: 00010246 [ 615.772676][ T4494] RAX: 00007f01ba805000 RBX: 00007f01ba8256c0 RCX: 00007f01bbe0acb7 [ 615.772760][ T4494] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f01ba8256c0 [ 615.772774][ T4494] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 615.772787][ T4494] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffabcb1d00 [ 615.772801][ T4494] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 615.772820][ T4494] [ 615.772855][ T4494] memory: usage 307200kB, limit 307200kB, failcnt 3876 [ 615.940322][ T4494] memory+swap: usage 181244kB, limit 9007199254740988kB, failcnt 0 [ 615.948201][ T4494] kmem: usage 6540kB, limit 9007199254740988kB, failcnt 0 [ 615.955322][ T4494] Memory cgroup stats for /syz8: [ 615.955707][ T4494] cache 84672512 [ 615.964461][ T4494] rss 1024000 [ 615.967738][ T4494] shmem 15253504 [ 615.971312][ T4494] mapped_file 77824 [ 615.975142][ T4494] dirty 0 [ 615.978054][ T4494] writeback 0 [ 615.981413][ T4494] workingset_refault_anon 709 [ 615.986132][ T4494] workingset_refault_file 6343 [ 615.990903][ T4494] swap 92798976 [ 615.994452][ T4494] swapcached 368640 [ 615.998262][ T4494] pgpgin 839825 [ 616.001742][ T4494] pgpgout 818815 [ 616.005286][ T4494] pgfault 699199 [ 616.008827][ T4494] pgmajfault 276 [ 616.012413][ T4494] inactive_anon 385024 [ 616.016465][ T4494] active_anon 16252928 [ 616.020554][ T4494] inactive_file 0 [ 616.024182][ T4494] active_file 0 [ 616.027692][ T4494] unevictable 69419008 [ 616.031789][ T4494] hierarchical_memory_limit 314572800 [ 616.037231][ T4494] hierarchical_memsw_limit 9223372036854771712 [ 616.043418][ T4494] total_cache 84672512 [ 616.047532][ T4494] total_rss 1024000 [ 616.051351][ T4494] total_shmem 15253504 [ 616.055532][ T4494] total_mapped_file 77824 [ 616.059871][ T4494] total_dirty 0 [ 616.063417][ T4494] total_writeback 0 [ 616.067301][ T4494] total_workingset_refault_anon 709 [ 616.072606][ T4494] total_workingset_refault_file 6343 [ 616.077948][ T4494] total_swap 92798976 [ 616.082053][ T4494] total_swapcached 368640 [ 616.086557][ T4494] total_pgpgin 839825 [ 616.090663][ T4494] total_pgpgout 818815 [ 616.094815][ T4494] total_pgfault 699199 [ 616.098877][ T4494] total_pgmajfault 276 [ 616.103056][ T4494] total_inactive_anon 385024 [ 616.107722][ T4494] total_active_anon 16252928 [ 616.112437][ T4494] total_inactive_file 0 [ 616.116679][ T4494] total_active_file 0 [ 616.120951][ T4494] total_unevictable 69419008 [ 616.125530][ T4494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.11181,pid=4494,uid=0 [ 616.140577][ T4494] Memory cgroup out of memory: Killed process 4494 (syz.8.11181) total-vm:96312kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 616.237321][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 616.237337][ T29] audit: type=1326 audit(2000000069.691:23841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.267499][ T29] audit: type=1326 audit(2000000069.691:23842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.291246][ T29] audit: type=1326 audit(2000000069.691:23843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.314864][ T29] audit: type=1326 audit(2000000069.691:23844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.338511][ T29] audit: type=1326 audit(2000000069.691:23845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.362258][ T29] audit: type=1326 audit(2000000069.691:23846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.386002][ T29] audit: type=1326 audit(2000000069.691:23847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.546890][ T29] audit: type=1326 audit(2000000069.881:23848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.570688][ T29] audit: type=1326 audit(2000000069.881:23849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.594509][ T29] audit: type=1326 audit(2000000069.881:23850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4497 comm="syz.6.11182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 616.765303][ T4518] netlink: 'syz.8.11189': attribute type 13 has an invalid length. [ 617.300999][ T4555] netlink: 'syz.0.11203': attribute type 13 has an invalid length. [ 617.674365][ T4565] __nla_validate_parse: 4 callbacks suppressed [ 617.674381][ T4565] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11207'. [ 617.691298][ T4565] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11207'. [ 617.917981][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11210'. [ 617.958837][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11210'. [ 617.996979][ T4579] SELinux: failed to load policy [ 618.286836][ T4601] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11219'. [ 618.339831][ T4601] netlink: 'syz.6.11219': attribute type 13 has an invalid length. [ 620.899232][ T4657] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11237'. [ 620.942484][ T4657] netlink: 'syz.6.11237': attribute type 13 has an invalid length. [ 621.203640][ T4675] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11243'. [ 621.522829][ T4687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11247'. [ 621.617537][ T4687] netlink: 'syz.1.11247': attribute type 13 has an invalid length. [ 621.771318][ T3437] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.809728][ T3437] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.883854][ T3437] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.957061][ T3437] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.421302][ T4726] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11257'. [ 622.565722][ T4735] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11261'. [ 622.596237][ T4726] netlink: 'syz.5.11257': attribute type 13 has an invalid length. [ 622.894123][T30656] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 622.915771][T30656] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.697964][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11270'. [ 623.826567][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11272'. [ 624.249912][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 624.249929][ T29] audit: type=1326 audit(2000000077.701:23933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.256495][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11277'. [ 624.293867][ T29] audit: type=1326 audit(2000000077.701:23934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.317628][ T29] audit: type=1326 audit(2000000077.711:23935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.341252][ T29] audit: type=1326 audit(2000000077.711:23936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.365073][ T29] audit: type=1326 audit(2000000077.711:23937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.388985][ T29] audit: type=1326 audit(2000000077.711:23938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.412696][ T29] audit: type=1326 audit(2000000077.711:23939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.427248][ T4799] netlink: 'syz.5.11276': attribute type 13 has an invalid length. [ 624.436361][ T29] audit: type=1326 audit(2000000077.711:23940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.467966][ T29] audit: type=1326 audit(2000000077.711:23941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 624.491723][ T29] audit: type=1326 audit(2000000077.711:23942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.6.11277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8e8aeb9 code=0x7ffc0000 [ 625.695313][ T4835] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11291'. [ 625.749959][ T4835] netlink: 'syz.8.11291': attribute type 13 has an invalid length. [ 625.882324][ T4847] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11295'. [ 625.925538][ T4847] netlink: 'syz.5.11295': attribute type 13 has an invalid length. [ 626.210290][ T4879] 9p: Bad value for 'wfdno' [ 626.359096][ T4887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11308'. [ 626.772837][ T4895] lo speed is unknown, defaulting to 1000 [ 626.779419][ T4895] wg1 speed is unknown, defaulting to 1000 [ 626.785627][ T4895] lo speed is unknown, defaulting to 1000 [ 626.833145][ T4895] chnl_net:caif_netlink_parms(): no params data found [ 626.870212][ T4895] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.877412][ T4895] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.885364][ T4895] bridge_slave_0: entered allmulticast mode [ 626.892170][ T4895] bridge_slave_0: entered promiscuous mode [ 626.899247][ T4895] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.906545][ T4895] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.914321][ T4895] bridge_slave_1: entered allmulticast mode [ 626.921146][ T4895] bridge_slave_1: entered promiscuous mode [ 626.939209][ T4895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.950399][ T4895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.968948][ T4895] team0: Port device team_slave_0 added [ 626.975571][ T4895] team0: Port device team_slave_1 added [ 626.991328][ T4895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.998365][ T4895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.024533][ T4895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.051020][ T4895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.058192][ T4895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.084352][ T4895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.115694][ T4895] hsr_slave_0: entered promiscuous mode [ 627.121766][ T4895] hsr_slave_1: entered promiscuous mode [ 627.127699][ T4895] debugfs: 'hsr0' already exists in 'hsr' [ 627.133579][ T4895] Cannot create hsr debugfs directory [ 627.140971][ T4914] netlink: 'syz.8.11315': attribute type 7 has an invalid length. [ 627.148805][ T4914] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11315'. [ 627.849536][ T4895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 627.866298][ T4895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.881337][ T4895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.898298][ T4895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.029617][ T4895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.046523][ T4991] netlink: 'syz.6.11326': attribute type 10 has an invalid length. [ 628.058060][ T4895] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.093041][ T4962] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11321'. [ 628.132509][ T4895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.143003][ T4895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.206977][ T4999] netlink: 'syz.8.11321': attribute type 13 has an invalid length. [ 628.220572][T27587] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.227713][T27587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.251452][T27587] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.258561][T27587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.378483][ T4895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.557101][ T4895] veth0_vlan: entered promiscuous mode [ 628.573080][ T4895] veth1_vlan: entered promiscuous mode [ 628.603364][ T4895] veth0_macvtap: entered promiscuous mode [ 628.614856][ T4895] veth1_macvtap: entered promiscuous mode [ 628.627681][ T4895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.641458][ T4895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.660977][T10066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.692139][T10066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.710562][T10066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.726953][T10066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.260696][ T5113] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11341'. [ 629.342700][ T5139] netlink: 'syz.0.11341': attribute type 13 has an invalid length. [ 629.768232][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11351'. [ 630.503530][ T5221] netlink: 'syz.2.11359': attribute type 4 has an invalid length. [ 630.547559][ T5221] netlink: 'syz.2.11359': attribute type 4 has an invalid length. [ 630.651833][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 630.651850][ T29] audit: type=1326 audit(2000000084.111:24035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.695263][ T29] audit: type=1326 audit(2000000084.141:24036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.719325][ T29] audit: type=1326 audit(2000000084.141:24037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.743307][ T29] audit: type=1326 audit(2000000084.141:24038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.766743][ T29] audit: type=1326 audit(2000000084.141:24039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.790359][ T29] audit: type=1326 audit(2000000084.141:24040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.814110][ T29] audit: type=1326 audit(2000000084.141:24041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.837685][ T29] audit: type=1326 audit(2000000084.141:24042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.5.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f017eaeb9 code=0x7ffc0000 [ 630.967688][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11370'. [ 631.052945][ T5274] VFS: Mount too revealing [ 631.135662][ T5283] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11372'. [ 631.168571][ T5283] netlink: 'syz.6.11372': attribute type 13 has an invalid length. [ 631.450053][ T29] audit: type=1326 audit(2000000084.901:24043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.0.11384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 631.473820][ T29] audit: type=1326 audit(2000000084.901:24044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.0.11384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e584aeb9 code=0x7ffc0000 [ 632.040114][ T5316] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11387'. [ 632.051510][ T5316] netlink: 'syz.6.11387': attribute type 13 has an invalid length. [ 632.412159][ T5330] xfrm0: entered promiscuous mode [ 632.417250][ T5330] xfrm0: entered allmulticast mode [ 632.573426][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.580721][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.619604][ T5339] bridge0: entered allmulticast mode [ 632.640801][ T5339] netlink: 'syz.2.11396': attribute type 7 has an invalid length. [ 632.648653][ T5339] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11396'. [ 632.662183][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11396'. [ 632.841888][ T5358] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11402'. [ 632.871191][ T5358] netlink: 'syz.8.11402': attribute type 13 has an invalid length. [ 633.139551][ T5377] usb usb7: usbfs: process 5377 (syz.2.11412) did not claim interface 0 before use [ 633.149314][ T5377] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 633.216547][ T5382] bridge_slave_1: left allmulticast mode [ 633.222441][ T5382] bridge_slave_1: left promiscuous mode [ 633.228243][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.236726][ T5382] bridge_slave_0: left allmulticast mode [ 633.242477][ T5382] bridge_slave_0: left promiscuous mode [ 633.248210][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.267864][ T5385] netlink: 'syz.2.11414': attribute type 7 has an invalid length. [ 633.275757][ T5385] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11414'. [ 633.294117][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11414'. [ 633.456267][ T5391] netlink: 'syz.6.11418': attribute type 13 has an invalid length. [ 634.052911][ T5410] ref_ctr_offset mismatch. inode: 0x2f30 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x100 [ 634.116633][ T5416] smc: net device bond0 applied user defined pnetid SYZ2 [ 634.297580][ T5425] __nla_validate_parse: 2 callbacks suppressed [ 634.297607][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11429'. [ 634.719487][ T5432] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11431'. [ 634.734743][ T5431] netlink: 'syz.6.11431': attribute type 13 has an invalid length. [ 635.076606][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11440'. [ 635.220357][ T5469] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11443'. [ 635.242466][ T5462] netlink: 'syz.8.11443': attribute type 13 has an invalid length. [ 635.411385][ T5459] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11442'. [ 635.727609][ T5488] tipc: Enabling of bearer rejected, failed to enable media [ 635.948310][ T5509] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11455'. [ 635.959081][ T5509] netlink: 'syz.8.11455': attribute type 13 has an invalid length. [ 635.996600][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 635.996622][ T29] audit: type=1326 audit(2000000089.451:24357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.004829][ T5516] netlink: 'syz.0.11460': attribute type 13 has an invalid length. [ 636.028820][ T29] audit: type=1326 audit(2000000089.451:24358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.058723][ T29] audit: type=1326 audit(2000000089.491:24359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.082382][ T29] audit: type=1326 audit(2000000089.491:24360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.106364][ T29] audit: type=1326 audit(2000000089.491:24361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.130117][ T29] audit: type=1326 audit(2000000089.491:24362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.153965][ T29] audit: type=1326 audit(2000000089.491:24363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.178253][ T29] audit: type=1326 audit(2000000089.491:24364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.202432][ T29] audit: type=1326 audit(2000000089.491:24365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.226409][ T29] audit: type=1326 audit(2000000089.491:24366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.2.11463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a48aeb9 code=0x7ffc0000 [ 636.652909][ T5551] geneve5: entered promiscuous mode [ 636.697929][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.709537][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.722289][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.731406][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.771352][ T5557] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11478'. [ 636.791901][ T5557] netlink: 'syz.0.11478': attribute type 13 has an invalid length. [ 636.838491][ T52] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.866733][ T52] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.893907][ T52] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.914688][ T5556] netlink: 'syz.6.11479': attribute type 13 has an invalid length. [ 636.926542][ T52] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.091210][ T5570] tipc: Enabling of bearer rejected, failed to enable media [ 637.151105][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11488'. [ 638.210607][ T5596] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11494'. [ 638.254038][ T5596] netlink: 'syz.6.11494': attribute type 13 has an invalid length. [ 638.290135][ T5605] tipc: Enabling of bearer rejected, failed to enable media [ 638.425438][ T5617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5617 comm=syz.8.11501 [ 638.503425][ T5609] netlink: 'syz.0.11498': attribute type 13 has an invalid length. [ 638.688595][ T5640] tipc: Enabling of bearer rejected, failed to enable media [ 638.927954][ T5649] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11515'. [ 639.065424][ T5647] usb usb7: usbfs: process 5647 (syz.2.11514) did not claim interface 0 before use [ 639.076484][ T5647] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 639.179744][ T5664] tipc: Enabling of bearer rejected, failed to enable media [ 639.446018][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11527'. [ 639.548898][ T5689] SELinux: failed to load policy [ 639.859195][ T5711] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11536'. [ 639.872052][ T5711] netlink: 'syz.2.11536': attribute type 13 has an invalid length. [ 639.973697][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.985321][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.054991][ T52] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.065102][ T52] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.074272][ T52] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.083395][ T52] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.165180][ T5721] netlink: 'syz.2.11542': attribute type 7 has an invalid length. [ 640.173100][ T5721] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11542'. [ 640.185372][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11542'. [ 640.195124][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.560469][ T5745] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11550'. [ 640.572227][ T5745] netlink: 'syz.5.11550': attribute type 13 has an invalid length. [ 640.760054][ T5751] ================================================================== [ 640.768169][ T5751] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 640.777977][ T5751] [ 640.780300][ T5751] read-write to 0xffffffff86a09a00 of 8 bytes by interrupt on cpu 1: [ 640.788364][ T5751] tick_do_update_jiffies64+0x113/0x1c0 [ 640.793915][ T5751] tick_nohz_handler+0x8d/0x3d0 [ 640.798771][ T5751] __hrtimer_run_queues+0x20f/0x590 [ 640.803985][ T5751] hrtimer_interrupt+0x269/0x810 [ 640.808929][ T5751] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 640.814844][ T5751] sysvec_apic_timer_interrupt+0x6f/0x80 [ 640.820653][ T5751] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.826725][ T5751] __tsan_read8+0xd7/0x190 [ 640.831159][ T5751] do_wp_page+0x1863/0x2560 [ 640.835797][ T5751] handle_mm_fault+0x8c7/0x3030 [ 640.840661][ T5751] do_user_addr_fault+0x3fd/0x1050 [ 640.845771][ T5751] exc_page_fault+0x62/0xa0 [ 640.850269][ T5751] asm_exc_page_fault+0x26/0x30 [ 640.855113][ T5751] rep_movs_alternative+0x4a/0x90 [ 640.860305][ T5751] _copy_to_iter+0x2df/0xea0 [ 640.864900][ T5751] copy_page_to_iter+0x18f/0x2d0 [ 640.869826][ T5751] process_vm_rw+0x6c6/0x9c0 [ 640.874411][ T5751] __x64_sys_process_vm_readv+0x78/0x90 [ 640.879960][ T5751] x64_sys_call+0x148a/0x3000 [ 640.884651][ T5751] do_syscall_64+0xc0/0x2a0 [ 640.889156][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.895041][ T5751] [ 640.897360][ T5751] read to 0xffffffff86a09a00 of 8 bytes by task 5751 on cpu 0: [ 640.904895][ T5751] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 640.911143][ T5751] count_shadow_nodes+0x6a/0x230 [ 640.916078][ T5751] do_shrink_slab+0x63/0x670 [ 640.920661][ T5751] shrink_slab+0x538/0x880 [ 640.925074][ T5751] shrink_node+0x6cb/0x2000 [ 640.929566][ T5751] do_try_to_free_pages+0x404/0xcc0 [ 640.934770][ T5751] try_to_free_mem_cgroup_pages+0x222/0x470 [ 640.940662][ T5751] try_charge_memcg+0x37e/0xa10 [ 640.945501][ T5751] __mem_cgroup_charge+0x65/0x150 [ 640.950529][ T5751] shmem_get_folio_gfp+0x47b/0xd60 [ 640.955636][ T5751] shmem_write_begin+0xfc/0x1f0 [ 640.960485][ T5751] generic_perform_write+0x183/0x490 [ 640.965771][ T5751] shmem_file_write_iter+0xc5/0xf0 [ 640.970883][ T5751] vfs_write+0x5a6/0x9f0 [ 640.975209][ T5751] ksys_write+0xdc/0x1a0 [ 640.979438][ T5751] __x64_sys_write+0x40/0x50 [ 640.984014][ T5751] x64_sys_call+0x2847/0x3000 [ 640.988687][ T5751] do_syscall_64+0xc0/0x2a0 [ 640.993185][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.999068][ T5751] [ 641.001374][ T5751] value changed: 0x00000001000084ed -> 0x00000001000084ee [ 641.008465][ T5751] [ 641.010772][ T5751] Reported by Kernel Concurrency Sanitizer on: [ 641.017001][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz.5.11551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 641.026884][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.036953][ T5751] ================================================================== [ 641.545838][ T5748] syz.5.11551 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 641.560148][ T5748] CPU: 1 UID: 0 PID: 5748 Comm: syz.5.11551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 641.560169][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.560177][ T5748] Call Trace: [ 641.560183][ T5748] [ 641.560190][ T5748] __dump_stack+0x1d/0x30 [ 641.560206][ T5748] dump_stack_lvl+0x95/0xd0 [ 641.560224][ T5748] dump_stack+0x15/0x1b [ 641.560237][ T5748] dump_header+0x80/0x240 [ 641.560249][ T5748] oom_kill_process+0x295/0x350 [ 641.560349][ T5748] out_of_memory+0x97d/0xb80 [ 641.560364][ T5748] try_charge_memcg+0x62e/0xa10 [ 641.560470][ T5748] obj_cgroup_charge_pages+0x23/0xc0 [ 641.560489][ T5748] __memcg_kmem_charge_page+0x9e/0x170 [ 641.560537][ T5748] __alloc_frozen_pages_noprof+0x18a/0x350 [ 641.560624][ T5748] alloc_pages_mpol+0xb3/0x260 [ 641.560644][ T5748] alloc_pages_noprof+0x8f/0x130 [ 641.560662][ T5748] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 641.560752][ T5748] __kvmalloc_node_noprof+0x471/0x680 [ 641.560769][ T5748] ? ip_set_alloc+0x24/0x30 [ 641.560787][ T5748] ? ip_set_alloc+0x24/0x30 [ 641.560861][ T5748] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 641.560900][ T5748] ip_set_alloc+0x24/0x30 [ 641.560917][ T5748] hash_netiface_create+0x282/0x740 [ 641.560936][ T5748] ? __pfx_hash_netiface_create+0x10/0x10 [ 641.560998][ T5748] ip_set_create+0x3cf/0x970 [ 641.561014][ T5748] ? __nla_parse+0x40/0x60 [ 641.561026][ T5748] nfnetlink_rcv_msg+0x509/0x5d0 [ 641.561059][ T5748] netlink_rcv_skb+0x123/0x220 [ 641.561080][ T5748] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 641.561100][ T5748] nfnetlink_rcv+0x167/0x1720 [ 641.561119][ T5748] ? arch_scale_cpu_capacity+0x15/0x70 [ 641.561204][ T5748] ? sched_balance_rq+0x77e/0x1e80 [ 641.561223][ T5748] ? _raw_spin_lock_bh+0x56/0xb0 [ 641.561243][ T5748] ? should_fail_ex+0x30/0x280 [ 641.561314][ T5748] ? selinux_nlmsg_lookup+0x99/0x890 [ 641.561327][ T5748] ? __rcu_read_unlock+0x33/0x70 [ 641.561404][ T5748] ? __netlink_lookup+0x276/0x2b0 [ 641.561480][ T5748] netlink_unicast+0x5c0/0x690 [ 641.561500][ T5748] netlink_sendmsg+0x5c8/0x6f0 [ 641.561550][ T5748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.561589][ T5748] ____sys_sendmsg+0x5af/0x600 [ 641.561637][ T5748] ___sys_sendmsg+0x195/0x1e0 [ 641.561728][ T5748] __x64_sys_sendmsg+0xd4/0x160 [ 641.561742][ T5748] x64_sys_call+0x17ba/0x3000 [ 641.561758][ T5748] do_syscall_64+0xc0/0x2a0 [ 641.561821][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.561835][ T5748] RIP: 0033:0x7f2f017eaeb9 [ 641.561846][ T5748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.561857][ T5748] RSP: 002b:00007f2f00247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.561870][ T5748] RAX: ffffffffffffffda RBX: 00007f2f01a65fa0 RCX: 00007f2f017eaeb9 [ 641.561879][ T5748] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 641.561956][ T5748] RBP: 00007f2f01858c1f R08: 0000000000000000 R09: 0000000000000000 [ 641.561965][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.562014][ T5748] R13: 00007f2f01a66038 R14: 00007f2f01a65fa0 R15: 00007ffea295b4a8 [ 641.562027][ T5748] [ 641.562095][ T5748] memory: usage 307200kB, limit 307200kB, failcnt 2052 [ 641.879600][ T5748] memory+swap: usage 327300kB, limit 9007199254740988kB, failcnt 0 [ 641.887502][ T5748] kmem: usage 290804kB, limit 9007199254740988kB, failcnt 0 [ 641.894868][ T5748] Memory cgroup stats for /syz5: [ 641.895141][ T5748] cache 16781312 [ 641.903663][ T5748] rss 4096 [ 641.906673][ T5748] shmem 0 [ 641.909584][ T5748] mapped_file 0 [ 641.913153][ T5748] dirty 0 [ 641.916091][ T5748] writeback 0 [ 641.919347][ T5748] workingset_refault_anon 2326 [ 641.924110][ T5748] workingset_refault_file 320 [ 641.928862][ T5748] swap 20582400 [ 641.932363][ T5748] swapcached 8192 [ 641.935983][ T5748] pgpgin 1027459 [ 641.939504][ T5748] pgpgout 1023360 [ 641.943225][ T5748] pgfault 901694 [ 641.946822][ T5748] pgmajfault 400 [ 641.950366][ T5748] inactive_anon 8192 [ 641.954251][ T5748] active_anon 0 [ 641.957693][ T5748] inactive_file 0 [ 641.961423][ T5748] active_file 0 [ 641.964903][ T5748] unevictable 16781312 [ 641.969001][ T5748] hierarchical_memory_limit 314572800 [ 641.974403][ T5748] hierarchical_memsw_limit 9223372036854771712 [ 641.980657][ T5748] total_cache 16781312 [ 641.984802][ T5748] total_rss 4096 [ 641.988348][ T5748] total_shmem 0 [ 641.991988][ T5748] total_mapped_file 0 [ 641.996003][ T5748] total_dirty 0 [ 641.999642][ T5748] total_writeback 0 [ 642.003584][ T5748] total_workingset_refault_anon 2326 [ 642.008863][ T5748] total_workingset_refault_file 320 [ 642.014075][ T5748] total_swap 20582400 [ 642.018046][ T5748] total_swapcached 8192 [ 642.022204][ T5748] total_pgpgin 1027459 [ 642.026341][ T5748] total_pgpgout 1023360 [ 642.030498][ T5748] total_pgfault 901694 [ 642.034552][ T5748] total_pgmajfault 400 [ 642.038590][ T5748] total_inactive_anon 8192 [ 642.043090][ T5748] total_active_anon 0 [ 642.047079][ T5748] total_inactive_file 0 [ 642.051229][ T5748] total_active_file 0 [ 642.055198][ T5748] total_unevictable 16781312 [ 642.059791][ T5748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.11551,pid=5747,uid=0 [ 642.074645][ T5748] Memory cgroup out of memory: Killed process 5747 (syz.5.11551) total-vm:94132kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0