last executing test programs: 1m17.952530886s ago: executing program 1 (id=2): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) r1 = openat(0xffffffffffffffff, 0x0, 0x2c41, 0x0) flock(r1, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x10, 0x0, 0x6f40, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @empty, {[@noop, @noop, @timestamp={0x44, 0x8, 0xa2, 0x0, 0x2, [0x1d2]}, @generic={0x44, 0x9, "7b9804954ee2cf"}, @timestamp_addr={0x44, 0x34, 0xc5, 0x1, 0xa, [{@multicast1, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0xfffffffd}, {@remote}, {@loopback, 0x2}, {@local, 0x6}]}, @timestamp={0x44, 0x8, 0x7f, 0x0, 0x7, [0x6]}, @end, @lsrr={0x83, 0x17, 0x4e, [@multicast1, @empty, @multicast1, @empty, @private=0xa010100]}]}}}}}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca"], 0x1000f) 1m17.871542644s ago: executing program 1 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0x0) tkill(r4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x77ff, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c0004002cbd7000fcdbdf25070000", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x4}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r10 = eventfd(0x7) io_submit(r9, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r10, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r10, 0x0, 0x0, 0x7, 0x0, 0x1, r10}]) ptrace(0x10, r8) waitid(0x0, r8, 0x0, 0x8, 0xfffffffffffffffd) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r11, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001200017a746c1b9c7d410b3880a7de8100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350077673000"/28], 0x34}}, 0x0) 1m17.181941733s ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x2f, 0x73, 0x0, 0x38000000, 0x35, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x1, 0x2, 0x9}}) fsetxattr(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="757365612e6572726f72733d72656d6f756e4127d649"], &(0x7f00000004c0)='/dev/net/tun\x00', 0xd, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xfffffe7a, &(0x7f0000000080)={&(0x7f0000006080)=@gettfilter={0x6c, 0x2e, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xb, 0x9}, {0x5, 0x5}}, [{0x8, 0xb, 0xfffffe00}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5b}, {0x8, 0xb, 0x6}]}, 0x6c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x200}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x19}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe090}, 0x20048850) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="000000000500000000000000005878eed100000000000000000a5d7621c301c71f66f62f1f0e629d878c540d441fed21e9256cd179f4b3f9bebcd21fa9ad74b5a70f18bf85b154f9306ee31ff6a35066c80dc5767f7a23dcd60f706430a1b604d8f0f1038dd0d566132af7cc33ffd49040b13b001e420bcbdf3a1de3ea8d463e37ff460162f8c1f8ec07eb"], 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x8000006, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) symlinkat(&(0x7f0000001b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x516, &(0x7f0000001bc0)="$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") mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=r']) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) 1m17.138164567s ago: executing program 1 (id=19): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x9, 0xc3b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 1m17.032852788s ago: executing program 1 (id=22): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, 0x0, 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unlink(&(0x7f0000000000)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000004efffff39500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3ffe000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r9 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m16.822901439s ago: executing program 1 (id=24): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRES32, @ANYRESHEX], &(0x7f0000000440)='syzkaller\x00', 0x2a4, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x8000, 0x4, 0x0, 0x0}, &(0x7f0000000840)=0x20) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000240)={r9, 0x2}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setregid(0x0, 0x0) syz_emit_ethernet(0x62f, &(0x7f0000000980)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m16.71103915s ago: executing program 4 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m16.605931701s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1m16.178975913s ago: executing program 4 (id=35): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, 0x0, 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unlink(&(0x7f0000000000)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000004efffff39500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3ffe000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r9 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r9, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m16.082850513s ago: executing program 4 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x368, 0x25, 0x148, 0x0, 0x60, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 1m13.577418863s ago: executing program 1 (id=73): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008011}, 0x841) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.574619763s ago: executing program 32 (id=73): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008011}, 0x841) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.018946899s ago: executing program 4 (id=76): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') chroot(&(0x7f0000005040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1m13.002603231s ago: executing program 33 (id=76): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') chroot(&(0x7f0000005040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.344435426s ago: executing program 6 (id=1417): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.343325586s ago: executing program 6 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4018000) 1.29938968s ago: executing program 6 (id=1422): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0) 1.228654808s ago: executing program 6 (id=1423): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.223617448s ago: executing program 0 (id=1425): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unlink(&(0x7f0000000000)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3ffe000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r8 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.148628606s ago: executing program 0 (id=1428): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x9, 0xc3b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x81) pipe2$9p(&(0x7f0000001900), 0x0) pipe2$9p(&(0x7f0000000240), 0x184880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x40000) 1.140805876s ago: executing program 3 (id=1429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) fallocate(0xffffffffffffffff, 0x20, 0x9, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.029968237s ago: executing program 3 (id=1433): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b9ff03076804268c989e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 982.251332ms ago: executing program 2 (id=1434): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0) 978.896062ms ago: executing program 3 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0x9, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xf}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 904.06805ms ago: executing program 2 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 902.22394ms ago: executing program 0 (id=1439): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unlink(&(0x7f0000000000)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3ffe000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r8 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 855.430085ms ago: executing program 3 (id=1440): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100e700", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000004c0)="d7eb4d4583b612075291af2490a6e853ff6af14d255e8154a829118e6e371a2d49d37ceae393c686b121e10665eab301745e1c9032a1a22661d4d974dd7d2af265c11d4a7caa8c533e21de4816ef7b07051fa0f5d59d0a8052195db68753146fd7649ac09664b8b972743d4a3ed839223d37efa087df3c88", &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000380)='io_uring_req_failed\x00'}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e8ffffff0000000000000000000000000000f6850000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000d35e52c4d77b058dfbe71dacdeebf959c4ba2546f482126bb0c8da9e98015cfd8db04fb0cf1e0d37c5ed176777567e04d2529c8e15c8f2e6cee42ad33ca662bd25addbed1b0c125f69acd877feb9645a73009ddf86608d5c0152dfaca7c2d1f3d84c00000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') 796.717741ms ago: executing program 2 (id=1441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}, 0x1, 0xffffa888, 0x0, 0x40000}, 0x0) 719.793458ms ago: executing program 2 (id=1442): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x9, 0xc3b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x81) pipe2$9p(&(0x7f0000001900), 0x0) pipe2$9p(&(0x7f0000000240), 0x184880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x400}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c092}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x40000) 654.670225ms ago: executing program 5 (id=1443): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 471.047973ms ago: executing program 0 (id=1444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 465.160244ms ago: executing program 3 (id=1445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0xe5, 0x0, 0x0, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 455.684795ms ago: executing program 5 (id=1446): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000580)="b9ff03076804268c989e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 442.107456ms ago: executing program 3 (id=1447): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095", @ANYRES32, @ANYRESHEX], &(0x7f0000000440)='syzkaller\x00', 0x2a4, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x8000, 0x4, 0x0, 0x0}, &(0x7f0000000840)=0x20) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000240)={r9, 0x2}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setregid(0x0, 0x0) syz_emit_ethernet(0x62f, &(0x7f0000000980)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 404.92141ms ago: executing program 5 (id=1448): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) 393.701491ms ago: executing program 2 (id=1449): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 276.340322ms ago: executing program 2 (id=1450): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'vlan0\x00', 0x8000}) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r6, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 246.650926ms ago: executing program 5 (id=1451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 229.671467ms ago: executing program 5 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x50000a0) 228.315148ms ago: executing program 6 (id=1453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0x9, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 187.337031ms ago: executing program 5 (id=1454): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x48, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) 158.975145ms ago: executing program 0 (id=1455): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002120207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setstatus(r1, 0x4, 0x2000) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r4, 0x0, 0x200002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) unlink(&(0x7f0000000000)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x3ffe000) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r8 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 135.457477ms ago: executing program 6 (id=1456): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100e700", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000004c0)="d7eb4d4583b612075291af2490a6e853ff6af14d255e8154a829118e6e371a2d49d37ceae393c686b121e10665eab301745e1c9032a1a22661d4d974dd7d2af265c11d4a7caa8c533e21de4816ef7b07051fa0f5d59d0a8052195db68753146fd7649ac09664b8b972743d4a3ed839223d37efa087df3c88", &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000380)='io_uring_req_failed\x00'}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e8ffffff0000000000000000000000000000f6850000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x406, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000d35e52c4d77b058dfbe71dacdeebf959c4ba2546f482126bb0c8da9e98015cfd8db04fb0cf1e0d37c5ed176777567e04d2529c8e15c8f2e6cee42ad33ca662bd25addbed1b0c125f69acd877feb9645a73009ddf86608d5c0152dfaca7c2d1f3d84c00000000000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') 0s ago: executing program 0 (id=1457): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Call Trace: [ 40.017148][ T4060] [ 40.017156][ T4060] __dump_stack+0x1d/0x30 [ 40.017179][ T4060] dump_stack_lvl+0xe8/0x140 [ 40.017198][ T4060] dump_stack+0x15/0x1b [ 40.017213][ T4060] should_fail_ex+0x265/0x280 [ 40.017295][ T4060] should_fail+0xb/0x20 [ 40.017367][ T4060] should_fail_usercopy+0x1a/0x20 [ 40.017390][ T4060] _copy_to_user+0x20/0xa0 [ 40.017416][ T4060] simple_read_from_buffer+0xb5/0x130 [ 40.017506][ T4060] proc_fail_nth_read+0x10e/0x150 [ 40.017542][ T4060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 40.017572][ T4060] vfs_read+0x1a8/0x770 [ 40.017667][ T4060] ? __rcu_read_unlock+0x4f/0x70 [ 40.017692][ T4060] ? __fget_files+0x184/0x1c0 [ 40.017718][ T4060] ksys_read+0xda/0x1a0 [ 40.017788][ T4060] __x64_sys_read+0x40/0x50 [ 40.017860][ T4060] x64_sys_call+0x27c0/0x3000 [ 40.017940][ T4060] do_syscall_64+0xd2/0x200 [ 40.017958][ T4060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.017982][ T4060] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.018009][ T4060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.018078][ T4060] RIP: 0033:0x7f2232cae0dc [ 40.018094][ T4060] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 40.018112][ T4060] RSP: 002b:00007f22316ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.018136][ T4060] RAX: ffffffffffffffda RBX: 00007f2232f06090 RCX: 00007f2232cae0dc [ 40.018175][ T4060] RDX: 000000000000000f RSI: 00007f22316ee0a0 RDI: 0000000000000004 [ 40.018193][ T4060] RBP: 00007f22316ee090 R08: 0000000000000000 R09: 0000000000000000 [ 40.018206][ T4060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.018219][ T4060] R13: 00007f2232f06128 R14: 00007f2232f06090 R15: 00007ffeed8f4d48 [ 40.018266][ T4060] [ 40.057504][ T29] audit: type=1400 audit(1763317636.780:1074): avc: denied { prog_load } for pid=4050 comm="syz.6.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.057574][ T29] audit: type=1400 audit(1763317636.780:1075): avc: denied { bpf } for pid=4050 comm="syz.6.141" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.057595][ T29] audit: type=1400 audit(1763317636.800:1076): avc: denied { search } for pid=4059 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.057628][ T29] audit: type=1400 audit(1763317636.850:1077): avc: denied { create } for pid=4063 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.057680][ T29] audit: type=1400 audit(1763317636.850:1078): avc: denied { perfmon } for pid=4063 comm="syz.3.143" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.116610][ T4068] all: renamed from lo [ 40.205785][ T4073] macvtap2: entered allmulticast mode [ 40.207581][ T4073] batman_adv: batadv0: Adding interface: macvtap2 [ 40.207594][ T4073] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.207679][ T4073] batman_adv: batadv0: Interface activated: macvtap2 [ 40.282219][ T4078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 40.282294][ T4078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 40.282328][ T4078] vhci_hcd vhci_hcd.0: Device attached [ 40.306088][ T4079] vhci_hcd: connection closed [ 40.310255][ T550] vhci_hcd: stop threads [ 40.310267][ T550] vhci_hcd: release socket [ 40.310275][ T550] vhci_hcd: disconnect device [ 40.838592][ T4096] bridge0: entered promiscuous mode [ 40.838703][ T4096] macvtap1: entered allmulticast mode [ 40.838717][ T4096] bridge0: entered allmulticast mode [ 40.840253][ T4096] batman_adv: batadv0: Adding interface: macvtap1 [ 40.840264][ T4096] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.840293][ T4096] batman_adv: batadv0: Interface activated: macvtap1 [ 41.213100][ T4107] bond1: option resend_igmp: invalid value (1024) [ 41.225777][ T4107] bond1: option resend_igmp: allowed values 0 - 255 [ 41.307047][ T4107] bond1 (unregistering): Released all slaves [ 41.339296][ T4117] bond1: option resend_igmp: invalid value (1024) [ 41.345748][ T4117] bond1: option resend_igmp: allowed values 0 - 255 [ 41.390470][ T4117] bond1 (unregistering): Released all slaves [ 41.630670][ T4143] x_tables: duplicate underflow at hook 1 [ 41.901453][ T4148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 42.248333][ T4162] bond1: option resend_igmp: invalid value (1024) [ 42.254830][ T4162] bond1: option resend_igmp: allowed values 0 - 255 [ 42.313558][ T4162] bond1 (unregistering): Released all slaves [ 42.403555][ T4169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.182'. [ 42.412604][ T4169] hsr_slave_0: left promiscuous mode [ 42.419467][ T4169] hsr_slave_1: left promiscuous mode [ 42.930466][ T4181] macvtap2: entered allmulticast mode [ 42.968438][ T4181] batman_adv: batadv0: Adding interface: macvtap2 [ 42.974908][ T4181] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.122598][ T4181] batman_adv: batadv0: Interface activated: macvtap2 [ 43.271935][ T4192] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 43.278477][ T4192] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 43.286661][ T4192] vhci_hcd vhci_hcd.0: Device attached [ 43.306693][ T4193] vhci_hcd: connection closed [ 43.315674][ T550] vhci_hcd: stop threads [ 43.324602][ T550] vhci_hcd: release socket [ 43.329031][ T550] vhci_hcd: disconnect device [ 43.358436][ T4209] bridge0: entered promiscuous mode [ 43.363917][ T4209] macvtap1: entered allmulticast mode [ 43.369365][ T4209] bridge0: entered allmulticast mode [ 43.389610][ T4209] batman_adv: batadv0: Adding interface: macvtap1 [ 43.396045][ T4209] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.448067][ T4209] batman_adv: batadv0: Interface activated: macvtap1 [ 43.524202][ T4218] netlink: 24 bytes leftover after parsing attributes in process `syz.5.200'. [ 43.545939][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.201'. [ 44.039530][ T4251] FAULT_INJECTION: forcing a failure. [ 44.039530][ T4251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.052749][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.3.213 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.052856][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.052869][ T4251] Call Trace: [ 44.052875][ T4251] [ 44.052959][ T4251] __dump_stack+0x1d/0x30 [ 44.052984][ T4251] dump_stack_lvl+0xe8/0x140 [ 44.053002][ T4251] dump_stack+0x15/0x1b [ 44.053022][ T4251] should_fail_ex+0x265/0x280 [ 44.053098][ T4251] should_fail+0xb/0x20 [ 44.053129][ T4251] should_fail_usercopy+0x1a/0x20 [ 44.053151][ T4251] _copy_from_user+0x1c/0xb0 [ 44.053172][ T4251] ___sys_sendmsg+0xc1/0x1d0 [ 44.053228][ T4251] __x64_sys_sendmsg+0xd4/0x160 [ 44.053249][ T4251] x64_sys_call+0x191e/0x3000 [ 44.053277][ T4251] do_syscall_64+0xd2/0x200 [ 44.053300][ T4251] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.053329][ T4251] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.053358][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.053398][ T4251] RIP: 0033:0x7f1313f6f6c9 [ 44.053415][ T4251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.053433][ T4251] RSP: 002b:00007f13129d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.053454][ T4251] RAX: ffffffffffffffda RBX: 00007f13141c5fa0 RCX: 00007f1313f6f6c9 [ 44.053468][ T4251] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000004 [ 44.053516][ T4251] RBP: 00007f13129d7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.053528][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.053540][ T4251] R13: 00007f13141c6038 R14: 00007f13141c5fa0 R15: 00007fffbb50bb48 [ 44.053607][ T4251] [ 44.295318][ T4253] x_tables: duplicate underflow at hook 1 [ 44.302294][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 44.332166][ T4256] netlink: 72 bytes leftover after parsing attributes in process `syz.5.216'. [ 44.627282][ T4283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.226'. [ 44.639443][ T4281] FAULT_INJECTION: forcing a failure. [ 44.639443][ T4281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.652572][ T4281] CPU: 1 UID: 0 PID: 4281 Comm: syz.5.225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.652601][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.652614][ T4281] Call Trace: [ 44.652621][ T4281] [ 44.652629][ T4281] __dump_stack+0x1d/0x30 [ 44.652696][ T4281] dump_stack_lvl+0xe8/0x140 [ 44.652715][ T4281] dump_stack+0x15/0x1b [ 44.652735][ T4281] should_fail_ex+0x265/0x280 [ 44.652773][ T4281] should_fail+0xb/0x20 [ 44.652828][ T4281] should_fail_usercopy+0x1a/0x20 [ 44.652850][ T4281] _copy_from_user+0x1c/0xb0 [ 44.652874][ T4281] ___sys_sendmsg+0xc1/0x1d0 [ 44.652902][ T4281] __x64_sys_sendmsg+0xd4/0x160 [ 44.653004][ T4281] x64_sys_call+0x191e/0x3000 [ 44.653099][ T4281] do_syscall_64+0xd2/0x200 [ 44.653129][ T4281] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.653159][ T4281] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.653233][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.653271][ T4281] RIP: 0033:0x7f2232caf6c9 [ 44.653287][ T4281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.653377][ T4281] RSP: 002b:00007f223170f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.653398][ T4281] RAX: ffffffffffffffda RBX: 00007f2232f05fa0 RCX: 00007f2232caf6c9 [ 44.653412][ T4281] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 44.653471][ T4281] RBP: 00007f223170f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.653482][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.653493][ T4281] R13: 00007f2232f06038 R14: 00007f2232f05fa0 R15: 00007ffeed8f4d48 [ 44.653508][ T4281] [ 44.828108][ T4289] x_tables: duplicate underflow at hook 1 [ 45.051588][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 45.057861][ T29] audit: type=1400 audit(1763317641.860:1408): avc: denied { create } for pid=4291 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.167740][ T29] audit: type=1400 audit(1763317641.890:1409): avc: denied { map_create } for pid=4291 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.186828][ T29] audit: type=1400 audit(1763317641.890:1410): avc: denied { prog_load } for pid=4291 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.205813][ T29] audit: type=1400 audit(1763317641.890:1411): avc: denied { bpf } for pid=4291 comm="syz.2.229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.226250][ T29] audit: type=1400 audit(1763317641.890:1412): avc: denied { perfmon } for pid=4291 comm="syz.2.229" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.247010][ T29] audit: type=1400 audit(1763317641.890:1413): avc: denied { read } for pid=4291 comm="syz.2.229" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.271163][ T29] audit: type=1400 audit(1763317641.890:1414): avc: denied { open } for pid=4291 comm="syz.2.229" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.295727][ T29] audit: type=1400 audit(1763317641.890:1415): avc: denied { ioctl } for pid=4291 comm="syz.2.229" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 45.321769][ T29] audit: type=1400 audit(1763317641.950:1416): avc: denied { create } for pid=4291 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.365143][ T4300] all: renamed from lo [ 45.397923][ T29] audit: type=1400 audit(1763317642.160:1417): avc: denied { map_read map_write } for pid=4299 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.469340][ T4304] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 45.469340][ T4304] program syz.5.231 not setting count and/or reply_len properly [ 45.534054][ T4314] Zero length message leads to an empty skb [ 45.588290][ T4318] bridge0: entered promiscuous mode [ 45.593554][ T4318] macvtap1: entered allmulticast mode [ 45.599048][ T4318] bridge0: entered allmulticast mode [ 45.629090][ T4318] batman_adv: batadv0: Adding interface: macvtap1 [ 45.635503][ T4318] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.668292][ T4318] batman_adv: batadv0: Interface activated: macvtap1 [ 45.718402][ T4328] netlink: 96 bytes leftover after parsing attributes in process `syz.3.241'. [ 45.841223][ T4338] x_tables: duplicate underflow at hook 1 [ 45.852491][ T4337] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 45.852491][ T4337] program syz.2.245 not setting count and/or reply_len properly [ 46.045775][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 46.232223][ T4351] macvtap3: entered allmulticast mode [ 46.239723][ T4351] batman_adv: batadv0: Adding interface: macvtap3 [ 46.246247][ T4351] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.272528][ T4351] batman_adv: batadv0: Interface activated: macvtap3 [ 46.321527][ T4355] tmpfs: Bad value for 'mpol' [ 46.326770][ T4355] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 46.353065][ T4355] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.399276][ T4355] bond1: (slave batadv1): making interface the new active one [ 46.421323][ T4355] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 46.540472][ T4365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.553170][ T4365] FAULT_INJECTION: forcing a failure. [ 46.553170][ T4365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.566290][ T4365] CPU: 1 UID: 0 PID: 4365 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.566320][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.566333][ T4365] Call Trace: [ 46.566339][ T4365] [ 46.566347][ T4365] __dump_stack+0x1d/0x30 [ 46.566369][ T4365] dump_stack_lvl+0xe8/0x140 [ 46.566451][ T4365] dump_stack+0x15/0x1b [ 46.566483][ T4365] should_fail_ex+0x265/0x280 [ 46.566518][ T4365] should_fail+0xb/0x20 [ 46.566560][ T4365] should_fail_usercopy+0x1a/0x20 [ 46.566578][ T4365] _copy_from_user+0x1c/0xb0 [ 46.566602][ T4365] ___sys_sendmsg+0xc1/0x1d0 [ 46.566640][ T4365] __x64_sys_sendmsg+0xd4/0x160 [ 46.566744][ T4365] x64_sys_call+0x191e/0x3000 [ 46.566768][ T4365] do_syscall_64+0xd2/0x200 [ 46.566791][ T4365] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.566822][ T4365] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.566905][ T4365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.566924][ T4365] RIP: 0033:0x7f32be0df6c9 [ 46.566956][ T4365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.566975][ T4365] RSP: 002b:00007f32bcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.566996][ T4365] RAX: ffffffffffffffda RBX: 00007f32be335fa0 RCX: 00007f32be0df6c9 [ 46.567010][ T4365] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 46.567023][ T4365] RBP: 00007f32bcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 46.567035][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.567049][ T4365] R13: 00007f32be336038 R14: 00007f32be335fa0 R15: 00007ffd59b3aa98 [ 46.567114][ T4365] [ 46.875461][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.260'. [ 46.893410][ T4373] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.893410][ T4373] program syz.0.258 not setting count and/or reply_len properly [ 47.160458][ T4393] x_tables: duplicate underflow at hook 1 [ 47.465851][ T4403] all: renamed from lo (while UP) [ 47.869445][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.274'. [ 47.881932][ T4400] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 47.881932][ T4400] program syz.3.272 not setting count and/or reply_len properly [ 47.947456][ T4418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.277'. [ 48.039652][ T4438] all: renamed from lo (while UP) [ 48.137637][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.289'. [ 48.330253][ T4456] netlink: 36 bytes leftover after parsing attributes in process `syz.5.292'. [ 48.396854][ T4461] netlink: 188 bytes leftover after parsing attributes in process `syz.3.295'. [ 48.432432][ T4461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4461 comm=syz.3.295 [ 48.502825][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 48.549943][ T4488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.308'. [ 48.666559][ T4506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.316'. [ 48.711811][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.321'. [ 48.720780][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 48.816158][ T4521] bond1: option resend_igmp: invalid value (1024) [ 48.822699][ T4521] bond1: option resend_igmp: allowed values 0 - 255 [ 48.836289][ T4521] bond1 (unregistering): Released all slaves [ 48.859930][ T4532] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 48.859930][ T4532] program syz.0.327 not setting count and/or reply_len properly [ 49.313065][ T4560] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.313065][ T4560] program syz.0.336 not setting count and/or reply_len properly [ 49.361006][ T4565] bond1: option resend_igmp: invalid value (1024) [ 49.367461][ T4565] bond1: option resend_igmp: allowed values 0 - 255 [ 49.383388][ T4565] bond1 (unregistering): Released all slaves [ 49.683093][ T4584] macvtap4: entered allmulticast mode [ 49.749751][ T4584] batman_adv: batadv0: Adding interface: macvtap4 [ 49.756217][ T4584] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.790182][ T4584] batman_adv: batadv0: Interface activated: macvtap4 [ 49.863252][ T4603] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.863252][ T4603] program syz.3.347 not setting count and/or reply_len properly [ 50.100275][ T4640] x_tables: duplicate underflow at hook 1 [ 50.132299][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 50.132317][ T29] audit: type=1400 audit(1763317646.900:1676): avc: denied { create } for pid=4628 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.159072][ T29] audit: type=1400 audit(1763317646.910:1677): avc: denied { map_create } for pid=4628 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.178477][ T29] audit: type=1400 audit(1763317646.910:1678): avc: denied { prog_load } for pid=4628 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.197572][ T29] audit: type=1400 audit(1763317646.910:1679): avc: denied { bpf } for pid=4628 comm="syz.0.354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.218019][ T29] audit: type=1400 audit(1763317646.910:1680): avc: denied { perfmon } for pid=4628 comm="syz.0.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.238797][ T29] audit: type=1400 audit(1763317646.910:1681): avc: denied { read } for pid=4628 comm="syz.0.354" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.262958][ T29] audit: type=1400 audit(1763317646.910:1682): avc: denied { open } for pid=4628 comm="syz.0.354" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.287529][ T29] audit: type=1400 audit(1763317646.910:1683): avc: denied { ioctl } for pid=4628 comm="syz.0.354" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 50.379770][ T29] audit: type=1400 audit(1763317647.140:1684): avc: denied { prog_run } for pid=4628 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.398694][ T29] audit: type=1400 audit(1763317647.160:1685): avc: denied { write } for pid=4642 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.525249][ T4664] x_tables: duplicate underflow at hook 1 [ 50.904176][ T4671] bond1: option resend_igmp: invalid value (1024) [ 50.910665][ T4671] bond1: option resend_igmp: allowed values 0 - 255 [ 50.950211][ T4671] bond1 (unregistering): Released all slaves [ 50.980942][ T4686] all: renamed from lo (while UP) [ 51.571428][ T4711] x_tables: duplicate underflow at hook 1 [ 51.946088][ T4726] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 51.946088][ T4726] program syz.6.376 not setting count and/or reply_len properly [ 52.135372][ T4745] x_tables: duplicate underflow at hook 1 [ 52.477838][ T4754] bond1: option resend_igmp: invalid value (1024) [ 52.484330][ T4754] bond1: option resend_igmp: allowed values 0 - 255 [ 52.612717][ T4754] bond1 (unregistering): Released all slaves [ 52.883556][ T4773] x_tables: duplicate underflow at hook 1 [ 53.001358][ T4776] __nla_validate_parse: 5 callbacks suppressed [ 53.001375][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 53.873840][ T4820] siw: device registration error -23 [ 53.900360][ T4820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 53.906896][ T4820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.915074][ T4820] vhci_hcd vhci_hcd.0: Device attached [ 54.129312][ T4828] vhci_hcd: connection closed [ 54.131321][ T4668] vhci_hcd: stop threads [ 54.140274][ T4668] vhci_hcd: release socket [ 54.144669][ T4668] vhci_hcd: disconnect device [ 54.500203][ T4859] FAULT_INJECTION: forcing a failure. [ 54.500203][ T4859] name failslab, interval 1, probability 0, space 0, times 0 [ 54.512942][ T4859] CPU: 1 UID: 0 PID: 4859 Comm: syz.2.404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.512967][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.512978][ T4859] Call Trace: [ 54.512983][ T4859] [ 54.512990][ T4859] __dump_stack+0x1d/0x30 [ 54.513011][ T4859] dump_stack_lvl+0xe8/0x140 [ 54.513029][ T4859] dump_stack+0x15/0x1b [ 54.513163][ T4859] should_fail_ex+0x265/0x280 [ 54.513198][ T4859] should_failslab+0x8c/0xb0 [ 54.513238][ T4859] kmem_cache_alloc_noprof+0x50/0x480 [ 54.513268][ T4859] ? audit_log_start+0x342/0x720 [ 54.513291][ T4859] audit_log_start+0x342/0x720 [ 54.513314][ T4859] ? kstrtouint+0x76/0xc0 [ 54.513421][ T4859] audit_seccomp+0x48/0x100 [ 54.513450][ T4859] ? __seccomp_filter+0x82d/0x1250 [ 54.513537][ T4859] __seccomp_filter+0x83e/0x1250 [ 54.513562][ T4859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 54.513643][ T4859] ? vfs_write+0x7e8/0x960 [ 54.513674][ T4859] __secure_computing+0x82/0x150 [ 54.513699][ T4859] syscall_trace_enter+0xcf/0x1e0 [ 54.513814][ T4859] do_syscall_64+0xac/0x200 [ 54.513847][ T4859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.513873][ T4859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.513904][ T4859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.513928][ T4859] RIP: 0033:0x7f02953df6c9 [ 54.513943][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.514036][ T4859] RSP: 002b:00007f0293e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 54.514056][ T4859] RAX: ffffffffffffffda RBX: 00007f0295635fa0 RCX: 00007f02953df6c9 [ 54.514069][ T4859] RDX: b12288e90d7c8384 RSI: 0000200000000000 RDI: 0000000000000004 [ 54.514081][ T4859] RBP: 00007f0293e47090 R08: 0000000000000000 R09: 0000000000000000 [ 54.514093][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.514106][ T4859] R13: 00007f0295636038 R14: 00007f0295635fa0 R15: 00007fff4744ca08 [ 54.514126][ T4859] [ 54.919633][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 55.391656][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 55.391671][ T29] audit: type=1400 audit(1763317652.200:2075): avc: denied { search } for pid=4852 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.442055][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.413'. [ 55.482767][ T29] audit: type=1400 audit(1763317652.240:2076): avc: denied { create } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.503348][ T29] audit: type=1400 audit(1763317652.250:2077): avc: denied { write } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.523785][ T29] audit: type=1400 audit(1763317652.270:2078): avc: denied { prog_load } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.542790][ T29] audit: type=1400 audit(1763317652.270:2079): avc: denied { bpf } for pid=4894 comm="syz.6.413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.563274][ T29] audit: type=1400 audit(1763317652.270:2080): avc: denied { map_create } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.582335][ T29] audit: type=1400 audit(1763317652.270:2081): avc: denied { map_read map_write } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.602106][ T29] audit: type=1400 audit(1763317652.270:2082): avc: denied { perfmon } for pid=4894 comm="syz.6.413" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.622940][ T29] audit: type=1400 audit(1763317652.270:2083): avc: denied { prog_run } for pid=4894 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.641877][ T29] audit: type=1400 audit(1763317652.280:2084): avc: denied { create } for pid=4896 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.722578][ T4906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 55.731492][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 55.786109][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 55.824401][ T4919] FAULT_INJECTION: forcing a failure. [ 55.824401][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.837528][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.2.422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.837555][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.837566][ T4919] Call Trace: [ 55.837607][ T4919] [ 55.837616][ T4919] __dump_stack+0x1d/0x30 [ 55.837640][ T4919] dump_stack_lvl+0xe8/0x140 [ 55.837662][ T4919] dump_stack+0x15/0x1b [ 55.837681][ T4919] should_fail_ex+0x265/0x280 [ 55.837715][ T4919] should_fail+0xb/0x20 [ 55.837771][ T4919] should_fail_usercopy+0x1a/0x20 [ 55.837795][ T4919] _copy_from_user+0x1c/0xb0 [ 55.837902][ T4919] ___sys_sendmsg+0xc1/0x1d0 [ 55.838013][ T4919] __x64_sys_sendmsg+0xd4/0x160 [ 55.838033][ T4919] x64_sys_call+0x191e/0x3000 [ 55.838053][ T4919] do_syscall_64+0xd2/0x200 [ 55.838096][ T4919] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.838152][ T4919] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.838180][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.838203][ T4919] RIP: 0033:0x7f02953df6c9 [ 55.838218][ T4919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.838233][ T4919] RSP: 002b:00007f0293e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.838251][ T4919] RAX: ffffffffffffffda RBX: 00007f0295635fa0 RCX: 00007f02953df6c9 [ 55.838262][ T4919] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 55.838347][ T4919] RBP: 00007f0293e47090 R08: 0000000000000000 R09: 0000000000000000 [ 55.838359][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.838370][ T4919] R13: 00007f0295636038 R14: 00007f0295635fa0 R15: 00007fff4744ca08 [ 55.838452][ T4919] [ 56.079119][ T4926] bond2: option resend_igmp: invalid value (1024) [ 56.085566][ T4926] bond2: option resend_igmp: allowed values 0 - 255 [ 56.099252][ T4926] bond2 (unregistering): Released all slaves [ 56.129270][ T4933] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 56.237852][ T4945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 56.246899][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 56.266225][ T4948] FAULT_INJECTION: forcing a failure. [ 56.266225][ T4948] name failslab, interval 1, probability 0, space 0, times 0 [ 56.279054][ T4948] CPU: 0 UID: 0 PID: 4948 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.279083][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.279097][ T4948] Call Trace: [ 56.279103][ T4948] [ 56.279110][ T4948] __dump_stack+0x1d/0x30 [ 56.279134][ T4948] dump_stack_lvl+0xe8/0x140 [ 56.279156][ T4948] dump_stack+0x15/0x1b [ 56.279240][ T4948] should_fail_ex+0x265/0x280 [ 56.279276][ T4948] ? kernfs_get_tree+0x56/0x490 [ 56.279303][ T4948] should_failslab+0x8c/0xb0 [ 56.279328][ T4948] __kmalloc_cache_noprof+0x4c/0x4a0 [ 56.279415][ T4948] kernfs_get_tree+0x56/0x490 [ 56.279440][ T4948] cgroup_do_get_tree+0x86/0x330 [ 56.279488][ T4948] cgroup_get_tree+0xd2/0x1f0 [ 56.279518][ T4948] vfs_get_tree+0x57/0x1d0 [ 56.279540][ T4948] vfs_cmd_create+0x8a/0x140 [ 56.279608][ T4948] vfs_fsconfig_locked+0x6f/0x210 [ 56.279640][ T4948] __se_sys_fsconfig+0x648/0x770 [ 56.279670][ T4948] __x64_sys_fsconfig+0x67/0x80 [ 56.279739][ T4948] x64_sys_call+0x1f83/0x3000 [ 56.279782][ T4948] do_syscall_64+0xd2/0x200 [ 56.279801][ T4948] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.279831][ T4948] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.279974][ T4948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.279994][ T4948] RIP: 0033:0x7f1313f6f6c9 [ 56.280008][ T4948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.280103][ T4948] RSP: 002b:00007f13129d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 56.280124][ T4948] RAX: ffffffffffffffda RBX: 00007f13141c5fa0 RCX: 00007f1313f6f6c9 [ 56.280137][ T4948] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 56.280151][ T4948] RBP: 00007f13129d7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.280189][ T4948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.280200][ T4948] R13: 00007f13141c6038 R14: 00007f13141c5fa0 R15: 00007fffbb50bb48 [ 56.280290][ T4948] [ 56.284109][ T4949] siw: device registration error -23 [ 56.478123][ T4953] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 56.495069][ T4953] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.495154][ T4953] vhci_hcd vhci_hcd.0: Device attached [ 56.537807][ T4955] vhci_hcd: connection closed [ 56.538536][ T42] vhci_hcd: stop threads [ 56.547450][ T42] vhci_hcd: release socket [ 56.551905][ T42] vhci_hcd: disconnect device [ 56.602460][ T4974] FAULT_INJECTION: forcing a failure. [ 56.602460][ T4974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.615672][ T4974] CPU: 0 UID: 0 PID: 4974 Comm: syz.3.443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.615704][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.615716][ T4974] Call Trace: [ 56.615740][ T4974] [ 56.615748][ T4974] __dump_stack+0x1d/0x30 [ 56.615772][ T4974] dump_stack_lvl+0xe8/0x140 [ 56.615883][ T4974] dump_stack+0x15/0x1b [ 56.615959][ T4974] should_fail_ex+0x265/0x280 [ 56.615992][ T4974] should_fail+0xb/0x20 [ 56.616021][ T4974] should_fail_usercopy+0x1a/0x20 [ 56.616051][ T4974] _copy_from_user+0x1c/0xb0 [ 56.616076][ T4974] ___sys_sendmsg+0xc1/0x1d0 [ 56.616127][ T4974] __x64_sys_sendmsg+0xd4/0x160 [ 56.616149][ T4974] x64_sys_call+0x191e/0x3000 [ 56.616192][ T4974] do_syscall_64+0xd2/0x200 [ 56.616211][ T4974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.616240][ T4974] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.616274][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.616360][ T4974] RIP: 0033:0x7f1313f6f6c9 [ 56.616374][ T4974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.616392][ T4974] RSP: 002b:00007f13129d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.616413][ T4974] RAX: ffffffffffffffda RBX: 00007f13141c5fa0 RCX: 00007f1313f6f6c9 [ 56.616427][ T4974] RDX: 00000000240088c0 RSI: 0000200000000540 RDI: 0000000000000005 [ 56.616489][ T4974] RBP: 00007f13129d7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.616502][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.616515][ T4974] R13: 00007f13141c6038 R14: 00007f13141c5fa0 R15: 00007fffbb50bb48 [ 56.616596][ T4974] [ 57.089188][ T5027] FAULT_INJECTION: forcing a failure. [ 57.089188][ T5027] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 57.102533][ T5027] CPU: 1 UID: 0 PID: 5027 Comm: syz.2.459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.102560][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.102572][ T5027] Call Trace: [ 57.102612][ T5027] [ 57.102618][ T5027] __dump_stack+0x1d/0x30 [ 57.102639][ T5027] dump_stack_lvl+0xe8/0x140 [ 57.102658][ T5027] dump_stack+0x15/0x1b [ 57.102756][ T5027] should_fail_ex+0x265/0x280 [ 57.102786][ T5027] should_fail_alloc_page+0xf2/0x100 [ 57.102820][ T5027] __alloc_frozen_pages_noprof+0xff/0x360 [ 57.102918][ T5027] alloc_pages_mpol+0xb3/0x260 [ 57.102986][ T5027] vma_alloc_folio_noprof+0x1aa/0x300 [ 57.103011][ T5027] handle_mm_fault+0xec2/0x2be0 [ 57.103036][ T5027] ? vma_start_read+0x141/0x1f0 [ 57.103151][ T5027] do_user_addr_fault+0x630/0x1080 [ 57.103196][ T5027] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.103245][ T5027] exc_page_fault+0x62/0xa0 [ 57.103276][ T5027] asm_exc_page_fault+0x26/0x30 [ 57.103329][ T5027] RIP: 0033:0x7f029538cbbb [ 57.103439][ T5027] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 57.103456][ T5027] RSP: 002b:00007f0293e44e10 EFLAGS: 00010246 [ 57.103472][ T5027] RAX: 00007f0293e46f30 RBX: 00007f0295607640 RCX: 0000000000000000 [ 57.103486][ T5027] RDX: 00007f0293e46f78 RSI: 00007f029543edf8 RDI: 00007f0293e44e30 [ 57.103499][ T5027] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 57.103512][ T5027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.103525][ T5027] R13: 00007f0295636038 R14: 00007f0295635fa0 R15: 00007fff4744ca08 [ 57.103543][ T5027] [ 57.103553][ T5027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 57.109002][ T5031] all: renamed from lo [ 57.398284][ T5044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 58.135699][ T5057] x_tables: duplicate underflow at hook 1 [ 58.145125][ T5055] x_tables: duplicate underflow at hook 1 [ 58.460155][ T5071] macvtap3: entered allmulticast mode [ 58.467258][ T5071] batman_adv: batadv0: Adding interface: macvtap3 [ 58.473839][ T5071] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.501792][ T5071] batman_adv: batadv0: Interface activated: macvtap3 [ 58.525291][ T5069] siw: device registration error -23 [ 58.533890][ T5069] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 58.540411][ T5069] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.548652][ T5069] vhci_hcd vhci_hcd.0: Device attached [ 58.567316][ T5078] vhci_hcd: connection closed [ 58.568697][ T4668] vhci_hcd: stop threads [ 58.577633][ T4668] vhci_hcd: release socket [ 58.582199][ T4668] vhci_hcd: disconnect device [ 58.690575][ T5086] x_tables: duplicate underflow at hook 1 [ 58.919210][ T5097] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 58.919210][ T5097] program syz.5.480 not setting count and/or reply_len properly [ 58.949179][ T5098] x_tables: duplicate underflow at hook 1 [ 59.121375][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 59.131478][ T5108] hsr_slave_0: left promiscuous mode [ 59.140567][ T5108] hsr_slave_1: left promiscuous mode [ 59.736909][ T5170] x_tables: duplicate underflow at hook 1 [ 60.145771][ T5190] all: renamed from lo [ 60.598244][ T5211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.529'. [ 60.607179][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.529'. [ 60.704327][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 60.704342][ T29] audit: type=1326 audit(1763317657.140:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.733941][ T29] audit: type=1326 audit(1763317657.140:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.757299][ T29] audit: type=1326 audit(1763317657.140:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.780685][ T29] audit: type=1326 audit(1763317657.140:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.804031][ T29] audit: type=1326 audit(1763317657.140:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.827498][ T29] audit: type=1326 audit(1763317657.140:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.850900][ T29] audit: type=1326 audit(1763317657.140:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5202 comm="syz.6.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 60.874539][ T29] audit: type=1400 audit(1763317657.230:2614): avc: denied { egress } for pid=36 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 60.899161][ T29] audit: type=1400 audit(1763317657.230:2615): avc: denied { sendto } for pid=36 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 60.922535][ T29] audit: type=1400 audit(1763317657.420:2616): avc: denied { module_request } for pid=5210 comm="syz.6.529" kmod="rtnl-link-macvta" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.286850][ T5241] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.286850][ T5241] program syz.3.540 not setting count and/or reply_len properly [ 61.575933][ T5256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 61.584857][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 61.821048][ T5281] netlink: 'syz.3.554': attribute type 11 has an invalid length. [ 61.828836][ T5281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'. [ 61.852859][ T5282] FAULT_INJECTION: forcing a failure. [ 61.852859][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 61.865532][ T5282] CPU: 1 UID: 0 PID: 5282 Comm: syz.0.553 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.865639][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.865652][ T5282] Call Trace: [ 61.865659][ T5282] [ 61.865666][ T5282] __dump_stack+0x1d/0x30 [ 61.865704][ T5282] dump_stack_lvl+0xe8/0x140 [ 61.865725][ T5282] dump_stack+0x15/0x1b [ 61.865758][ T5282] should_fail_ex+0x265/0x280 [ 61.865830][ T5282] ? __se_sys_memfd_create+0x1cc/0x590 [ 61.865855][ T5282] should_failslab+0x8c/0xb0 [ 61.865909][ T5282] __kmalloc_cache_noprof+0x4c/0x4a0 [ 61.865938][ T5282] ? fput+0x8f/0xc0 [ 61.865958][ T5282] __se_sys_memfd_create+0x1cc/0x590 [ 61.865983][ T5282] __x64_sys_memfd_create+0x31/0x40 [ 61.866006][ T5282] x64_sys_call+0x2ac2/0x3000 [ 61.866103][ T5282] do_syscall_64+0xd2/0x200 [ 61.866127][ T5282] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.866197][ T5282] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.866228][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.866400][ T5282] RIP: 0033:0x7f32be0df6c9 [ 61.866419][ T5282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.866435][ T5282] RSP: 002b:00007f32bcb04e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 61.866509][ T5282] RAX: ffffffffffffffda RBX: 0000000000000301 RCX: 00007f32be0df6c9 [ 61.866520][ T5282] RDX: 00007f32bcb04ef0 RSI: 0000000000000000 RDI: 00007f32be162960 [ 61.866531][ T5282] RBP: 0000200000000080 R08: 00007f32bcb04bb7 R09: 00007f32bcb04e40 [ 61.866543][ T5282] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 61.866556][ T5282] R13: 00007f32bcb04ef0 R14: 00007f32bcb04eb0 R15: 0000200000000540 [ 61.866574][ T5282] [ 61.917352][ T5283] x_tables: duplicate underflow at hook 1 [ 62.349893][ T5292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.559'. [ 62.358893][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.559'. [ 62.553642][ T5308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.566'. [ 62.562629][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.566'. [ 62.803932][ T5346] FAULT_INJECTION: forcing a failure. [ 62.803932][ T5346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.817061][ T5346] CPU: 1 UID: 0 PID: 5346 Comm: syz.2.582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.817134][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.817149][ T5346] Call Trace: [ 62.817155][ T5346] [ 62.817163][ T5346] __dump_stack+0x1d/0x30 [ 62.817183][ T5346] dump_stack_lvl+0xe8/0x140 [ 62.817201][ T5346] dump_stack+0x15/0x1b [ 62.817288][ T5346] should_fail_ex+0x265/0x280 [ 62.817317][ T5346] should_fail+0xb/0x20 [ 62.817349][ T5346] should_fail_usercopy+0x1a/0x20 [ 62.817445][ T5346] _copy_from_user+0x1c/0xb0 [ 62.817466][ T5346] __sys_bpf+0x183/0x7c0 [ 62.817491][ T5346] __x64_sys_bpf+0x41/0x50 [ 62.817569][ T5346] x64_sys_call+0x2aee/0x3000 [ 62.817650][ T5346] do_syscall_64+0xd2/0x200 [ 62.817673][ T5346] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.817700][ T5346] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.817768][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.817788][ T5346] RIP: 0033:0x7f02953df6c9 [ 62.817801][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.817816][ T5346] RSP: 002b:00007f0293e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.817835][ T5346] RAX: ffffffffffffffda RBX: 00007f0295635fa0 RCX: 00007f02953df6c9 [ 62.817907][ T5346] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 62.817919][ T5346] RBP: 00007f0293e47090 R08: 0000000000000000 R09: 0000000000000000 [ 62.817932][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.817949][ T5346] R13: 00007f0295636038 R14: 00007f0295635fa0 R15: 00007fff4744ca08 [ 62.817967][ T5346] [ 62.990122][ T5347] x_tables: duplicate underflow at hook 1 [ 63.238966][ T5386] all: renamed from lo (while UP) [ 63.282250][ T5390] bond1: option resend_igmp: invalid value (1024) [ 63.288788][ T5390] bond1: option resend_igmp: allowed values 0 - 255 [ 63.298882][ T5390] bond1 (unregistering): Released all slaves [ 63.343426][ T5404] bond1: option resend_igmp: invalid value (1024) [ 63.349907][ T5404] bond1: option resend_igmp: allowed values 0 - 255 [ 63.358227][ T5404] bond1 (unregistering): Released all slaves [ 63.433658][ T5415] all: renamed from lo (while UP) [ 63.450650][ T5418] FAULT_INJECTION: forcing a failure. [ 63.450650][ T5418] name failslab, interval 1, probability 0, space 0, times 0 [ 63.463376][ T5418] CPU: 0 UID: 0 PID: 5418 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.463448][ T5418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.463462][ T5418] Call Trace: [ 63.463468][ T5418] [ 63.463523][ T5418] __dump_stack+0x1d/0x30 [ 63.463568][ T5418] dump_stack_lvl+0xe8/0x140 [ 63.463589][ T5418] dump_stack+0x15/0x1b [ 63.463699][ T5418] should_fail_ex+0x265/0x280 [ 63.463736][ T5418] should_failslab+0x8c/0xb0 [ 63.463764][ T5418] kmem_cache_alloc_noprof+0x50/0x480 [ 63.463868][ T5418] ? audit_log_start+0x342/0x720 [ 63.463889][ T5418] audit_log_start+0x342/0x720 [ 63.463907][ T5418] ? kstrtouint+0x76/0xc0 [ 63.463961][ T5418] audit_seccomp+0x48/0x100 [ 63.463987][ T5418] ? __seccomp_filter+0x82d/0x1250 [ 63.464012][ T5418] __seccomp_filter+0x83e/0x1250 [ 63.464065][ T5418] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 63.464095][ T5418] ? vfs_write+0x7e8/0x960 [ 63.464120][ T5418] ? __rcu_read_unlock+0x4f/0x70 [ 63.464192][ T5418] ? __fget_files+0x184/0x1c0 [ 63.464243][ T5418] __secure_computing+0x82/0x150 [ 63.464269][ T5418] syscall_trace_enter+0xcf/0x1e0 [ 63.464371][ T5418] do_syscall_64+0xac/0x200 [ 63.464394][ T5418] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.464423][ T5418] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.464456][ T5418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.464549][ T5418] RIP: 0033:0x7f1313f6f6c9 [ 63.464563][ T5418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.464578][ T5418] RSP: 002b:00007f13129d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.464597][ T5418] RAX: ffffffffffffffda RBX: 00007f13141c5fa0 RCX: 00007f1313f6f6c9 [ 63.464655][ T5418] RDX: 0000000024040050 RSI: 00002000000000c0 RDI: 0000000000000008 [ 63.464668][ T5418] RBP: 00007f13129d7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.464679][ T5418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.464692][ T5418] R13: 00007f13141c6038 R14: 00007f13141c5fa0 R15: 00007fffbb50bb48 [ 63.464763][ T5418] [ 63.698722][ T5420] macvtap2: entered allmulticast mode [ 63.921326][ T5447] bond1: option resend_igmp: invalid value (1024) [ 63.927857][ T5447] bond1: option resend_igmp: allowed values 0 - 255 [ 63.990136][ T5447] bond1 (unregistering): Released all slaves [ 64.669012][ T5460] x_tables: duplicate underflow at hook 1 [ 64.801312][ T5464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1294 sclass=netlink_tcpdiag_socket pid=5464 comm=syz.5.629 [ 64.826733][ T5466] macvtap5: entered allmulticast mode [ 65.017409][ T5480] team_slave_0: entered promiscuous mode [ 65.023139][ T5480] team_slave_1: entered promiscuous mode [ 65.059562][ T5480] team0: Device macsec1 is already an upper device of the team interface [ 65.118272][ T5480] team_slave_0: left promiscuous mode [ 65.123734][ T5480] team_slave_1: left promiscuous mode [ 65.271634][ T5502] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 65.271634][ T5502] program syz.5.643 not setting count and/or reply_len properly [ 65.320697][ T5504] macvtap6: entered allmulticast mode [ 65.412064][ T5507] __nla_validate_parse: 3 callbacks suppressed [ 65.412077][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 65.591122][ T5522] x_tables: duplicate underflow at hook 1 [ 65.712655][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 65.712688][ T29] audit: type=1400 audit(1763317662.520:2944): avc: denied { create } for pid=5526 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.841185][ T29] audit: type=1400 audit(1763317662.560:2945): avc: denied { bind } for pid=5526 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.869247][ T5530] FAULT_INJECTION: forcing a failure. [ 65.869247][ T5530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.882318][ T5530] CPU: 1 UID: 0 PID: 5530 Comm: syz.5.652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.882348][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.882362][ T5530] Call Trace: [ 65.882369][ T5530] [ 65.882456][ T5530] __dump_stack+0x1d/0x30 [ 65.882480][ T5530] dump_stack_lvl+0xe8/0x140 [ 65.882502][ T5530] dump_stack+0x15/0x1b [ 65.882522][ T5530] should_fail_ex+0x265/0x280 [ 65.882592][ T5530] should_fail+0xb/0x20 [ 65.882623][ T5530] should_fail_usercopy+0x1a/0x20 [ 65.882722][ T5530] _copy_to_user+0x20/0xa0 [ 65.882749][ T5530] simple_read_from_buffer+0xb5/0x130 [ 65.882778][ T5530] proc_fail_nth_read+0x10e/0x150 [ 65.882809][ T5530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.882838][ T5530] vfs_read+0x1a8/0x770 [ 65.882866][ T5530] ? __cond_resched+0x4e/0x90 [ 65.882896][ T5530] ksys_read+0xda/0x1a0 [ 65.882992][ T5530] __x64_sys_read+0x40/0x50 [ 65.883017][ T5530] x64_sys_call+0x27c0/0x3000 [ 65.883036][ T5530] do_syscall_64+0xd2/0x200 [ 65.883116][ T5530] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.883141][ T5530] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.883175][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.883234][ T5530] RIP: 0033:0x7f2232cae0dc [ 65.883249][ T5530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.883269][ T5530] RSP: 002b:00007f223170f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.883286][ T5530] RAX: ffffffffffffffda RBX: 00007f2232f05fa0 RCX: 00007f2232cae0dc [ 65.883300][ T5530] RDX: 000000000000000f RSI: 00007f223170f0a0 RDI: 0000000000000004 [ 65.883354][ T5530] RBP: 00007f223170f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.883367][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.883426][ T5530] R13: 00007f2232f06038 R14: 00007f2232f05fa0 R15: 00007ffeed8f4d48 [ 65.883442][ T5530] [ 66.129616][ T29] audit: type=1400 audit(1763317662.930:2946): avc: denied { listen } for pid=5531 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.169616][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.656'. [ 66.207246][ T29] audit: type=1400 audit(1763317663.000:2947): avc: denied { recv } for pid=3315 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=51656 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 66.232920][ T29] audit: type=1400 audit(1763317663.010:2948): avc: denied { create } for pid=5539 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.252438][ T29] audit: type=1400 audit(1763317663.010:2949): avc: denied { bind } for pid=5539 comm="syz.0.657" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.272473][ T29] audit: type=1400 audit(1763317663.010:2950): avc: denied { setopt } for pid=5539 comm="syz.0.657" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.292749][ T29] audit: type=1400 audit(1763317663.010:2951): avc: denied { ioctl } for pid=5539 comm="syz.0.657" path="socket:[12561]" dev="sockfs" ino=12561 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.317490][ T29] audit: type=1400 audit(1763317663.010:2952): avc: denied { connect } for pid=5539 comm="syz.0.657" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.337971][ T29] audit: type=1400 audit(1763317663.010:2953): avc: denied { map_create } for pid=5539 comm="syz.0.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.410828][ T5546] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 66.417420][ T5546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.425565][ T5546] vhci_hcd vhci_hcd.0: Device attached [ 66.451530][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 66.478659][ T5555] hsr_slave_0: left promiscuous mode [ 66.484414][ T5555] hsr_slave_1: left promiscuous mode [ 67.126228][ T5552] vhci_hcd: connection closed [ 67.126520][ T52] vhci_hcd: stop threads [ 67.135533][ T52] vhci_hcd: release socket [ 67.139990][ T52] vhci_hcd: disconnect device [ 67.448651][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 67.457569][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 67.529187][ T5496] syz.6.637 (5496) used greatest stack depth: 10216 bytes left [ 67.633355][ T5579] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 67.633355][ T5579] program syz.0.668 not setting count and/or reply_len properly [ 67.671081][ T5570] SET target dimension over the limit! [ 67.797526][ T5482] syz.6.637 (5482) used greatest stack depth: 7648 bytes left [ 67.811063][ T5598] x_tables: duplicate underflow at hook 1 [ 68.507787][ T5620] block device autoloading is deprecated and will be removed. [ 68.935533][ T5634] bond1: option resend_igmp: invalid value (1024) [ 68.942313][ T5634] bond1: option resend_igmp: allowed values 0 - 255 [ 68.952247][ T5634] bond1 (unregistering): Released all slaves [ 69.002214][ T5645] siw: device registration error -23 [ 69.046701][ T5645] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 69.053235][ T5645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.061353][ T5645] vhci_hcd vhci_hcd.0: Device attached [ 69.109961][ T5646] vhci_hcd: connection closed [ 69.110199][ T12] vhci_hcd: stop threads [ 69.119250][ T12] vhci_hcd: release socket [ 69.123656][ T12] vhci_hcd: disconnect device [ 69.194167][ T5666] macvtap7: entered allmulticast mode [ 69.401694][ T5697] macvtap4: entered allmulticast mode [ 69.533678][ T5717] netlink: 44 bytes leftover after parsing attributes in process `syz.6.716'. [ 69.562657][ T5718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.564619][ T5721] FAULT_INJECTION: forcing a failure. [ 69.564619][ T5721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.583953][ T5721] CPU: 0 UID: 0 PID: 5721 Comm: syz.0.720 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.583982][ T5721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.583995][ T5721] Call Trace: [ 69.584002][ T5721] [ 69.584010][ T5721] __dump_stack+0x1d/0x30 [ 69.584034][ T5721] dump_stack_lvl+0xe8/0x140 [ 69.584075][ T5721] dump_stack+0x15/0x1b [ 69.584093][ T5721] should_fail_ex+0x265/0x280 [ 69.584128][ T5721] should_fail+0xb/0x20 [ 69.584160][ T5721] should_fail_usercopy+0x1a/0x20 [ 69.584260][ T5721] _copy_from_user+0x1c/0xb0 [ 69.584329][ T5721] ___sys_sendmsg+0xc1/0x1d0 [ 69.584368][ T5721] __x64_sys_sendmsg+0xd4/0x160 [ 69.584389][ T5721] x64_sys_call+0x191e/0x3000 [ 69.584409][ T5721] do_syscall_64+0xd2/0x200 [ 69.584427][ T5721] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.584504][ T5721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.584524][ T5721] RIP: 0033:0x7f32be0df6c9 [ 69.584541][ T5721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.584559][ T5721] RSP: 002b:00007f32bcb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.584576][ T5721] RAX: ffffffffffffffda RBX: 00007f32be335fa0 RCX: 00007f32be0df6c9 [ 69.584647][ T5721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 69.584661][ T5721] RBP: 00007f32bcb47090 R08: 0000000000000000 R09: 0000000000000000 [ 69.584674][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.584685][ T5721] R13: 00007f32be336038 R14: 00007f32be335fa0 R15: 00007ffd59b3aa98 [ 69.584701][ T5721] [ 69.869341][ T5736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.727'. [ 69.931833][ T5740] FAULT_INJECTION: forcing a failure. [ 69.931833][ T5740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.944988][ T5740] CPU: 1 UID: 0 PID: 5740 Comm: syz.6.728 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.945020][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.945106][ T5740] Call Trace: [ 69.945113][ T5740] [ 69.945122][ T5740] __dump_stack+0x1d/0x30 [ 69.945146][ T5740] dump_stack_lvl+0xe8/0x140 [ 69.945167][ T5740] dump_stack+0x15/0x1b [ 69.945187][ T5740] should_fail_ex+0x265/0x280 [ 69.945274][ T5740] should_fail+0xb/0x20 [ 69.945306][ T5740] should_fail_usercopy+0x1a/0x20 [ 69.945327][ T5740] _copy_from_user+0x1c/0xb0 [ 69.945388][ T5740] ___sys_recvmsg+0xaa/0x370 [ 69.945409][ T5740] ? 0xffffffff81000000 [ 69.945420][ T5740] ? __rcu_read_unlock+0x4f/0x70 [ 69.945450][ T5740] __x64_sys_recvmsg+0xd1/0x160 [ 69.945506][ T5740] x64_sys_call+0x2b46/0x3000 [ 69.945609][ T5740] do_syscall_64+0xd2/0x200 [ 69.945632][ T5740] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.945749][ T5740] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.945777][ T5740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.945802][ T5740] RIP: 0033:0x7fce4d3af6c9 [ 69.945817][ T5740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.945847][ T5740] RSP: 002b:00007fce4be17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 69.945907][ T5740] RAX: ffffffffffffffda RBX: 00007fce4d605fa0 RCX: 00007fce4d3af6c9 [ 69.945921][ T5740] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 69.945989][ T5740] RBP: 00007fce4be17090 R08: 0000000000000000 R09: 0000000000000000 [ 69.946002][ T5740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.946082][ T5740] R13: 00007fce4d606038 R14: 00007fce4d605fa0 R15: 00007ffe533f2ef8 [ 69.946099][ T5740] [ 70.437256][ T5745] netlink: 'syz.0.729': attribute type 3 has an invalid length. [ 70.445154][ T5745] netlink: 'syz.0.729': attribute type 3 has an invalid length. [ 70.533192][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 70.719623][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 70.719637][ T29] audit: type=1326 audit(1763317667.530:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.749130][ T29] audit: type=1326 audit(1763317667.530:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.772630][ T29] audit: type=1326 audit(1763317667.530:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.854480][ T29] audit: type=1326 audit(1763317667.530:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.877847][ T29] audit: type=1326 audit(1763317667.530:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.901304][ T29] audit: type=1326 audit(1763317667.530:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.924838][ T29] audit: type=1326 audit(1763317667.530:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.944176][ T5789] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 70.948160][ T29] audit: type=1326 audit(1763317667.530:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.2.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02953df6c9 code=0x7ffc0000 [ 70.963159][ T5790] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 70.981932][ T29] audit: type=1400 audit(1763317667.530:3667): avc: denied { map_create } for pid=5762 comm="syz.6.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.981956][ T29] audit: type=1400 audit(1763317667.530:3668): avc: denied { prog_load } for pid=5762 comm="syz.6.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.117457][ T5798] netlink: 36 bytes leftover after parsing attributes in process `syz.5.744'. [ 71.192895][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.746'. [ 71.357891][ T5814] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.357891][ T5814] program syz.6.752 not setting count and/or reply_len properly [ 72.076071][ T5817] FAULT_INJECTION: forcing a failure. [ 72.076071][ T5817] name failslab, interval 1, probability 0, space 0, times 0 [ 72.088705][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz.3.749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.088731][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.088742][ T5817] Call Trace: [ 72.088749][ T5817] [ 72.088757][ T5817] __dump_stack+0x1d/0x30 [ 72.088861][ T5817] dump_stack_lvl+0xe8/0x140 [ 72.088881][ T5817] dump_stack+0x15/0x1b [ 72.088958][ T5817] should_fail_ex+0x265/0x280 [ 72.088990][ T5817] should_failslab+0x8c/0xb0 [ 72.089075][ T5817] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 72.089106][ T5817] ? dup_task_struct+0x70/0x6b0 [ 72.089133][ T5817] ? dup_task_struct+0x5c/0x6b0 [ 72.089160][ T5817] dup_task_struct+0x70/0x6b0 [ 72.089260][ T5817] ? _parse_integer+0x27/0x40 [ 72.089291][ T5817] copy_process+0x399/0x2000 [ 72.089320][ T5817] ? kstrtouint+0x76/0xc0 [ 72.089425][ T5817] ? kstrtouint_from_user+0x9f/0xf0 [ 72.089443][ T5817] ? __rcu_read_unlock+0x4f/0x70 [ 72.089555][ T5817] kernel_clone+0x16c/0x5c0 [ 72.089580][ T5817] ? vfs_write+0x7e8/0x960 [ 72.089607][ T5817] __x64_sys_clone+0xe6/0x120 [ 72.089780][ T5817] x64_sys_call+0x119c/0x3000 [ 72.089800][ T5817] do_syscall_64+0xd2/0x200 [ 72.089821][ T5817] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.089889][ T5817] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.089917][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.089937][ T5817] RIP: 0033:0x7f1313f6f6c9 [ 72.089974][ T5817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.089990][ T5817] RSP: 002b:00007f13129b5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 72.090007][ T5817] RAX: ffffffffffffffda RBX: 00007f13141c6090 RCX: 00007f1313f6f6c9 [ 72.090021][ T5817] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000060100000 [ 72.090034][ T5817] RBP: 00007f13129b6090 R08: 0000200000000480 R09: 0000200000000480 [ 72.090047][ T5817] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 72.090061][ T5817] R13: 00007f13141c6128 R14: 00007f13141c6090 R15: 00007fffbb50bb48 [ 72.090077][ T5817] [ 72.489661][ T5830] x_tables: duplicate underflow at hook 1 [ 72.709480][ T5842] netlink: 36 bytes leftover after parsing attributes in process `syz.5.760'. [ 73.288064][ T5856] netlink: 'syz.5.763': attribute type 1 has an invalid length. [ 73.377820][ T5858] x_tables: duplicate underflow at hook 1 [ 73.637818][ T5861] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 73.637818][ T5861] program syz.6.766 not setting count and/or reply_len properly [ 73.794441][ T5851] gretap1: entered promiscuous mode [ 74.009222][ T4539] IPVS: starting estimator thread 0... [ 74.034413][ T5883] FAULT_INJECTION: forcing a failure. [ 74.034413][ T5883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.047541][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz.6.771 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.047568][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.047582][ T5883] Call Trace: [ 74.047589][ T5883] [ 74.047596][ T5883] __dump_stack+0x1d/0x30 [ 74.047647][ T5883] dump_stack_lvl+0xe8/0x140 [ 74.047665][ T5883] dump_stack+0x15/0x1b [ 74.047741][ T5883] should_fail_ex+0x265/0x280 [ 74.047811][ T5883] should_fail+0xb/0x20 [ 74.047836][ T5883] should_fail_usercopy+0x1a/0x20 [ 74.047910][ T5883] _copy_from_user+0x1c/0xb0 [ 74.047930][ T5883] do_ipt_set_ctl+0x3a0/0x820 [ 74.047951][ T5883] ? lock_sock_nested+0x112/0x140 [ 74.048118][ T5883] nf_setsockopt+0x199/0x1b0 [ 74.048139][ T5883] ip_setsockopt+0x102/0x110 [ 74.048183][ T5883] udp_setsockopt+0x99/0xb0 [ 74.048209][ T5883] sock_common_setsockopt+0x69/0x80 [ 74.048230][ T5883] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.048252][ T5883] __sys_setsockopt+0x184/0x200 [ 74.048359][ T5883] __x64_sys_setsockopt+0x64/0x80 [ 74.048384][ T5883] x64_sys_call+0x20ec/0x3000 [ 74.048403][ T5883] do_syscall_64+0xd2/0x200 [ 74.048421][ T5883] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.048522][ T5883] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.048549][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.048567][ T5883] RIP: 0033:0x7fce4d3af6c9 [ 74.048640][ T5883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.048655][ T5883] RSP: 002b:00007fce4bdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.048672][ T5883] RAX: ffffffffffffffda RBX: 00007fce4d606180 RCX: 00007fce4d3af6c9 [ 74.048757][ T5883] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 74.048839][ T5883] RBP: 00007fce4bdd5090 R08: 00000000000002c8 R09: 0000000000000000 [ 74.048850][ T5883] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 74.048866][ T5883] R13: 00007fce4d606218 R14: 00007fce4d606180 R15: 00007ffe533f2ef8 [ 74.048882][ T5883] [ 74.400750][ T5881] IPVS: using max 2832 ests per chain, 141600 per kthread [ 75.511433][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 75.575407][ T5902] tipc: Started in network mode [ 75.580366][ T5902] tipc: Node identity c2025e27e9d, cluster identity 4711 [ 75.587493][ T5902] tipc: Enabled bearer , priority 0 [ 75.599418][ T5907] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 75.607082][ T5910] netlink: 'syz.3.783': attribute type 12 has an invalid length. [ 75.615192][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.784'. [ 75.686313][ T5902] syzkaller0: entered promiscuous mode [ 75.691839][ T5902] syzkaller0: entered allmulticast mode [ 75.697878][ T3403] IPVS: starting estimator thread 0... [ 75.716192][ T5902] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 75.728243][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 75.728258][ T29] audit: type=1400 audit(1763317672.540:4022): avc: denied { read } for pid=5915 comm="syz.6.788" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.761331][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.771530][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.788255][ T29] audit: type=1400 audit(1763317672.570:4023): avc: denied { read write } for pid=5901 comm="syz.5.782" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.811651][ T5902] tipc: Resetting bearer [ 75.811794][ T29] audit: type=1400 audit(1763317672.570:4024): avc: denied { open } for pid=5901 comm="syz.5.782" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.840745][ T29] audit: type=1400 audit(1763317672.570:4025): avc: denied { ioctl } for pid=5901 comm="syz.5.782" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.867981][ T5916] IPVS: using max 2880 ests per chain, 144000 per kthread [ 75.868316][ T5901] tipc: Resetting bearer [ 75.902418][ T5901] tipc: Disabling bearer [ 75.988740][ T29] audit: type=1400 audit(1763317672.700:4026): avc: denied { name_bind } for pid=5920 comm="syz.6.790" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.004697][ T5923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 76.010435][ T29] audit: type=1400 audit(1763317672.700:4027): avc: denied { node_bind } for pid=5920 comm="syz.6.790" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 76.010459][ T29] audit: type=1400 audit(1763317672.760:4028): avc: denied { ioctl } for pid=5926 comm="syz.3.789" path="socket:[13915]" dev="sockfs" ino=13915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.073783][ T29] audit: type=1400 audit(1763317672.760:4029): avc: denied { write } for pid=5926 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.093337][ T29] audit: type=1400 audit(1763317672.770:4030): avc: denied { ioctl } for pid=5922 comm="syz.2.791" path="pid:[4026532375]" dev="nsfs" ino=4026532375 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.128971][ T29] audit: type=1400 audit(1763317672.840:4031): avc: denied { egress } for pid=3403 comm="kworker/0:5" saddr=fe80::1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 76.252911][ T5947] bridge0: port 3(syz_tun) entered blocking state [ 76.259516][ T5947] bridge0: port 3(syz_tun) entered disabled state [ 76.266208][ T5947] syz_tun: entered allmulticast mode [ 76.276810][ T5947] syz_tun: entered promiscuous mode [ 76.282477][ T5947] bridge0: port 3(syz_tun) entered blocking state [ 76.288965][ T5947] bridge0: port 3(syz_tun) entered forwarding state [ 76.427072][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 76.436016][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'. [ 76.445039][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 76.456144][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 76.976557][ T6012] syzkaller0: entered promiscuous mode [ 76.982083][ T6012] syzkaller0: entered allmulticast mode [ 77.046622][ T6018] bridge0: port 3(syz_tun) entered disabled state [ 77.070982][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.081987][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.219189][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 77.487899][ T6078] bridge0: port 3(syz_tun) entered blocking state [ 77.494625][ T6078] bridge0: port 3(syz_tun) entered disabled state [ 77.507645][ T6078] syz_tun: entered allmulticast mode [ 77.514095][ T6078] syz_tun: entered promiscuous mode [ 77.519614][ T6078] bridge0: port 3(syz_tun) entered blocking state [ 77.526096][ T6078] bridge0: port 3(syz_tun) entered forwarding state [ 77.536138][ T6075] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 77.558648][ T6075] bond1: (slave lo): Enslaving as an active interface with an up link [ 77.571600][ T6075] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 77.587640][ T6088] bond1: (slave lo): Releasing backup interface [ 77.598282][ T6088] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 77.637090][ T6088] bridge_slave_0: left allmulticast mode [ 77.642773][ T6088] bridge_slave_0: left promiscuous mode [ 77.648475][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.660580][ T6088] bridge_slave_1: left allmulticast mode [ 77.666248][ T6088] bridge_slave_1: left promiscuous mode [ 77.672016][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.686862][ T6088] bond0: (slave bond_slave_0): Releasing backup interface [ 77.702484][ T6088] bond0: (slave bond_slave_1): Releasing backup interface [ 77.723163][ T6088] team0: Port device team_slave_0 removed [ 77.731683][ T6088] team0: Port device team_slave_1 removed [ 77.744771][ T6112] netlink: 'syz.5.874': attribute type 10 has an invalid length. [ 77.749049][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.759993][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.776539][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.783967][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.811899][ T6088] batman_adv: batadv0: Interface deactivated: macvtap1 [ 77.818857][ T6088] batman_adv: batadv0: Removing interface: macvtap1 [ 77.845773][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.854438][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.856671][ T6075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.874143][ T6075] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 77.895858][ T6112] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 77.898772][ T6129] netlink: 536 bytes leftover after parsing attributes in process `syz.0.881'. [ 77.920223][ T6118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.933331][ T6126] bond_slave_0: entered promiscuous mode [ 77.939005][ T6126] bond_slave_1: entered promiscuous mode [ 77.944664][ T6126] syz_tun: entered promiscuous mode [ 77.950620][ T6126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.958165][ T6126] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 77.967461][ T6126] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 77.975965][ T6126] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 77.984960][ T6129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.881'. [ 78.080656][ T6112] macvtap1: left allmulticast mode [ 78.159423][ T6112] macvtap2: left allmulticast mode [ 78.164627][ T6112] bridge0: left allmulticast mode [ 78.476832][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 78.758189][ T6141] erspan0: entered promiscuous mode [ 78.838107][ T6143] bridge0: port 3(syz_tun) entered disabled state [ 78.866378][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.876817][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.402624][ T6161] syz.5.891 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.337261][ T4744] syb2: Port: 1 Link DOWN [ 81.568022][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 81.568038][ T29] audit: type=1400 audit(1763317678.360:4066): avc: denied { write } for pid=6176 comm="syz.5.897" name="event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.597297][ T29] audit: type=1400 audit(1763317678.360:4067): avc: denied { open } for pid=6176 comm="syz.5.897" path="/dev/input/event2" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.621349][ T29] audit: type=1400 audit(1763317678.360:4068): avc: denied { ioctl } for pid=6176 comm="syz.5.897" path="/dev/input/event2" dev="devtmpfs" ino=252 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.380900][ T6204] x_tables: duplicate underflow at hook 1 [ 82.387689][ T29] audit: type=1400 audit(1763317679.190:4069): avc: denied { read } for pid=6193 comm="syz.5.904" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.411805][ T29] audit: type=1400 audit(1763317679.190:4070): avc: denied { open } for pid=6193 comm="syz.5.904" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 82.878106][ T29] audit: type=1400 audit(1763317679.660:4071): avc: denied { ioctl } for pid=6193 comm="syz.5.904" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.046088][ T29] audit: type=1400 audit(1763317679.850:4072): avc: denied { bind } for pid=6213 comm="syz.0.908" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.135487][ T29] audit: type=1400 audit(1763317679.940:4073): avc: denied { sys_module } for pid=6213 comm="syz.0.908" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.171029][ T29] audit: type=1400 audit(1763317679.970:4074): avc: denied { connect } for pid=6213 comm="syz.0.908" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.191398][ T29] audit: type=1326 audit(1763317679.970:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6213 comm="syz.0.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 83.242590][ T6227] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 83.250889][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 83.320597][ T6230] x_tables: duplicate underflow at hook 1 [ 83.334265][ T6228] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 83.334265][ T6228] program syz.2.913 not setting count and/or reply_len properly [ 84.171907][ T6259] syzkaller0: entered promiscuous mode [ 84.177443][ T6259] syzkaller0: entered allmulticast mode [ 84.383323][ T6285] netlink: 'syz.6.933': attribute type 10 has an invalid length. [ 84.392619][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 84.395593][ T6285] syz_tun: entered promiscuous mode [ 84.407912][ T6285] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 84.422150][ T6285] bond1: option mode: unable to set because the bond device has slaves [ 84.434078][ T6285] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 84.444352][ T6287] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 84.444352][ T6287] program syz.3.934 not setting count and/or reply_len properly [ 84.577865][ T6305] bond1: option resend_igmp: invalid value (1024) [ 84.584444][ T6305] bond1: option resend_igmp: allowed values 0 - 255 [ 84.619154][ T6305] bond1 (unregistering): Released all slaves [ 84.633696][ T6310] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 84.645653][ T6310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.671339][ T6310] bond0: (slave syz_tun): Releasing backup interface [ 84.680186][ T6310] syz_tun: left promiscuous mode [ 84.698859][ T6310] bridge_slave_0: left allmulticast mode [ 84.704639][ T6310] bridge_slave_0: left promiscuous mode [ 84.704790][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.720677][ T6310] bridge_slave_1: left allmulticast mode [ 84.726421][ T6310] bridge_slave_1: left promiscuous mode [ 84.732193][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.765772][ T6310] bond0: (slave bond_slave_0): Releasing backup interface [ 84.775765][ T6310] bond_slave_0: left promiscuous mode [ 84.784861][ T6310] bond0: (slave bond_slave_1): Releasing backup interface [ 84.795368][ T6310] bond_slave_1: left promiscuous mode [ 84.815576][ T6310] team0: Port device team_slave_0 removed [ 84.835833][ T6310] team0: Port device team_slave_1 removed [ 84.843099][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.850657][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.865495][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.872915][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.895820][ T6310] batman_adv: batadv0: Interface deactivated: macvtap1 [ 84.902788][ T6310] batman_adv: batadv0: Removing interface: macvtap1 [ 84.915816][ T6310] bond1: (slave macvlan2): Removing an active aggregator [ 84.925122][ T6310] bond1: (slave macvlan2): Releasing backup interface [ 84.972735][ T6325] syzkaller0: entered promiscuous mode [ 84.978257][ T6325] syzkaller0: entered allmulticast mode [ 85.491302][ T6372] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 85.510208][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'. [ 85.517420][ T6372] bond1: (slave lo): Enslaving as an active interface with an up link [ 85.530663][ T6372] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 85.547891][ T6383] bond1: (slave lo): Releasing backup interface [ 85.558202][ T6383] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 85.581139][ T6383] bridge_slave_0: left allmulticast mode [ 85.586786][ T6383] bridge_slave_0: left promiscuous mode [ 85.592584][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.603710][ T6383] bridge_slave_1: left allmulticast mode [ 85.609412][ T6383] bridge_slave_1: left promiscuous mode [ 85.615091][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.625878][ T6383] bond0: (slave bond_slave_0): Releasing backup interface [ 85.635812][ T6383] bond0: (slave bond_slave_1): Releasing backup interface [ 85.648453][ T6383] team0: Port device team_slave_0 removed [ 85.657830][ T6383] team0: Port device team_slave_1 removed [ 85.665233][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.672731][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.682281][ T6383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.689688][ T6383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.876572][ T6418] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.876572][ T6418] program syz.2.983 not setting count and/or reply_len properly [ 85.971777][ T6428] x_tables: duplicate underflow at hook 1 [ 86.213165][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 86.968512][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 86.968526][ T29] audit: type=1400 audit(1763317683.780:4392): avc: denied { setopt } for pid=6442 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.998033][ T6460] syzkaller0: entered promiscuous mode [ 87.003709][ T6460] syzkaller0: entered allmulticast mode [ 87.079965][ T29] audit: type=1400 audit(1763317683.890:4393): avc: denied { shutdown } for pid=6465 comm="syz.6.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.128095][ T29] audit: type=1400 audit(1763317683.910:4394): avc: denied { getopt } for pid=6465 comm="syz.6.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.147691][ T29] audit: type=1400 audit(1763317683.910:4395): avc: denied { connect } for pid=6465 comm="syz.6.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.167360][ T29] audit: type=1400 audit(1763317683.910:4396): avc: denied { name_connect } for pid=6465 comm="syz.6.1001" dest=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.189514][ T29] audit: type=1326 audit(1763317683.930:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 87.212970][ T29] audit: type=1326 audit(1763317683.930:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 87.236325][ T29] audit: type=1326 audit(1763317683.930:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 87.259605][ T29] audit: type=1326 audit(1763317683.930:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 87.282908][ T29] audit: type=1326 audit(1763317683.930:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.3.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 87.441311][ T6499] syzkaller0: entered promiscuous mode [ 87.446792][ T6499] syzkaller0: entered allmulticast mode [ 87.516034][ T6514] bond1: option resend_igmp: invalid value (1024) [ 87.522631][ T6514] bond1: option resend_igmp: allowed values 0 - 255 [ 87.540379][ T6514] bond1 (unregistering): Released all slaves [ 87.635504][ T6531] tipc: Enabled bearer , priority 0 [ 87.641845][ T6530] siw: device registration error -23 [ 87.642532][ T6531] syzkaller0: entered promiscuous mode [ 87.652860][ T6531] syzkaller0: entered allmulticast mode [ 87.660777][ T6530] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 87.662129][ T6531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 87.667326][ T6530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 87.683372][ T6530] vhci_hcd vhci_hcd.0: Device attached [ 87.690614][ T6531] tipc: Resetting bearer [ 87.855540][ T6524] tipc: Resetting bearer [ 87.887020][ T6524] tipc: Disabling bearer [ 87.910356][ T6533] vhci_hcd: connection closed [ 87.910619][ T6157] vhci_hcd: stop threads [ 87.919612][ T6157] vhci_hcd: release socket [ 87.924012][ T6157] vhci_hcd: disconnect device [ 88.619483][ T6567] x_tables: duplicate underflow at hook 1 [ 88.852783][ T6575] x_tables: duplicate underflow at hook 1 [ 89.278177][ T6589] tipc: Started in network mode [ 89.283078][ T6589] tipc: Node identity 26fdd6d6b6bc, cluster identity 4711 [ 89.290265][ T6589] tipc: Enabled bearer , priority 0 [ 89.323666][ T6589] syzkaller0: entered promiscuous mode [ 89.329239][ T6589] syzkaller0: entered allmulticast mode [ 89.355316][ T6589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 89.365020][ T6589] tipc: Resetting bearer [ 89.371665][ T6588] tipc: Resetting bearer [ 89.379030][ T6588] tipc: Disabling bearer [ 89.393014][ T6591] siw: device registration error -23 [ 89.412194][ T6591] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 89.418731][ T6591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.426852][ T6591] vhci_hcd vhci_hcd.0: Device attached [ 89.450817][ T6592] vhci_hcd: connection closed [ 89.451309][ T4715] vhci_hcd: stop threads [ 89.460324][ T4715] vhci_hcd: release socket [ 89.464742][ T4715] vhci_hcd: disconnect device [ 89.476839][ T6595] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1050'. [ 90.047714][ T6630] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 90.161421][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1067'. [ 90.246576][ T6630] bond1: (slave lo): Enslaving as an active interface with an up link [ 90.389104][ T6630] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 90.430165][ T6635] macvtap3: entered allmulticast mode [ 90.435577][ T6635] bridge0: entered allmulticast mode [ 90.780124][ T6639] bond1: (slave lo): Releasing backup interface [ 90.806435][ T6639] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 91.290442][ T6674] syzkaller0: entered promiscuous mode [ 91.295953][ T6674] syzkaller0: entered allmulticast mode [ 91.353266][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 91.391729][ T6678] bond1: option resend_igmp: invalid value (1024) [ 91.398268][ T6678] bond1: option resend_igmp: allowed values 0 - 255 [ 91.406299][ T6678] bond1 (unregistering): Released all slaves [ 91.432595][ T6685] bond2: option resend_igmp: invalid value (1024) [ 91.439134][ T6685] bond2: option resend_igmp: allowed values 0 - 255 [ 91.456350][ T6685] bond2 (unregistering): Released all slaves [ 91.475019][ T6689] syzkaller0: entered promiscuous mode [ 91.480553][ T6689] syzkaller0: entered allmulticast mode [ 91.512273][ T6694] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 91.799981][ T6712] x_tables: duplicate underflow at hook 1 [ 92.314321][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 92.314340][ T29] audit: type=1400 audit(1763317689.120:4802): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.344727][ T29] audit: type=1400 audit(1763317689.120:4803): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.400032][ T29] audit: type=1400 audit(1763317689.180:4804): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=621 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.426806][ T29] audit: type=1400 audit(1763317689.210:4805): avc: denied { create } for pid=6719 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.446846][ T29] audit: type=1400 audit(1763317689.240:4806): avc: denied { bind } for pid=6719 comm="syz.3.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.478965][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 92.546898][ T29] audit: type=1400 audit(1763317689.350:4807): avc: denied { mounton } for pid=6725 comm="syz.5.1099" path="/194/file0" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.589321][ T29] audit: type=1400 audit(1763317689.390:4808): avc: denied { name_bind } for pid=6722 comm="syz.2.1097" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.611031][ T29] audit: type=1400 audit(1763317689.390:4809): avc: denied { node_bind } for pid=6722 comm="syz.2.1097" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 92.719106][ T6739] syzkaller0: entered promiscuous mode [ 92.724604][ T6739] syzkaller0: entered allmulticast mode [ 92.786643][ T6746] x_tables: duplicate underflow at hook 1 [ 92.805810][ T6748] netlink: 'syz.5.1107': attribute type 10 has an invalid length. [ 92.834424][ T6748] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.890050][ T6748] syz_tun: entered promiscuous mode [ 92.896713][ T6748] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 93.036992][ T6748] bond1: (slave macvlan4): Enslaving as a backup interface with an up link [ 93.183408][ T6758] macvtap3: left allmulticast mode [ 93.188619][ T6758] bridge0: left allmulticast mode [ 93.284760][ T29] audit: type=1326 audit(1763317690.090:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 93.308362][ T29] audit: type=1326 audit(1763317690.090:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.3.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 93.434135][ T6793] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 93.465236][ T6793] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 93.482648][ T6793] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 93.654386][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 94.131444][ T6853] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 94.449695][ T6862] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 94.461672][ T6862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.506265][ T6862] bond0: (slave syz_tun): Releasing backup interface [ 94.530020][ T6862] syz_tun: left promiscuous mode [ 94.629379][ T6862] bond1: (slave macvlan4): Releasing backup interface [ 94.646501][ T6865] macvtap5: entered allmulticast mode [ 94.727288][ T6884] siw: device registration error -23 [ 94.739353][ T6884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 94.745884][ T6884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.754022][ T6884] vhci_hcd vhci_hcd.0: Device attached [ 94.813390][ T6885] vhci_hcd: connection closed [ 94.813587][ T31] vhci_hcd: stop threads [ 94.822588][ T31] vhci_hcd: release socket [ 94.827056][ T31] vhci_hcd: disconnect device [ 94.880514][ T6896] tipc: Started in network mode [ 94.885473][ T6896] tipc: Node identity eaa59bb0f128, cluster identity 4711 [ 94.892713][ T6896] tipc: Enabled bearer , priority 0 [ 94.900934][ T6896] syzkaller0: entered promiscuous mode [ 94.906415][ T6896] syzkaller0: entered allmulticast mode [ 94.916029][ T6896] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.930494][ T6896] tipc: Resetting bearer [ 94.938899][ T6895] tipc: Resetting bearer [ 94.952148][ T6895] tipc: Disabling bearer [ 95.014081][ T6906] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.026084][ T6906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.087404][ T6908] bond0: (slave syz_tun): Releasing backup interface [ 95.104060][ T6908] syz_tun: left promiscuous mode [ 95.146702][ T6908] bond1: (slave macvlan2): Releasing backup interface [ 95.767627][ T6966] x_tables: duplicate underflow at hook 1 [ 95.961406][ T6976] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 95.961406][ T6976] program syz.6.1195 not setting count and/or reply_len properly [ 96.009769][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1193'. [ 96.204288][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 96.227400][ T7002] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1206'. [ 96.755283][ T7029] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.773310][ T7029] bond2: (slave lo): Enslaving as an active interface with an up link [ 96.795591][ T7029] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 96.814790][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 96.835946][ T7037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1219'. [ 96.845733][ T7035] bond2: (slave lo): Releasing backup interface [ 96.852897][ T7035] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 96.872937][ T7035] syz_tun: left allmulticast mode [ 96.878081][ T7035] syz_tun: left promiscuous mode [ 96.883107][ T7035] bridge0: port 3(syz_tun) entered disabled state [ 96.934893][ T7035] bridge_slave_0: left allmulticast mode [ 96.940657][ T7035] bridge_slave_0: left promiscuous mode [ 96.946418][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.955878][ T7035] bridge_slave_1: left allmulticast mode [ 96.961556][ T7035] bridge_slave_1: left promiscuous mode [ 96.967177][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.976531][ T7035] bond0: (slave bond_slave_0): Releasing backup interface [ 97.015554][ T7035] bond0: (slave bond_slave_1): Releasing backup interface [ 97.034552][ T7053] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 97.034552][ T7053] program syz.0.1225 not setting count and/or reply_len properly [ 97.078782][ T7035] team0: Port device team_slave_0 removed [ 97.091965][ T7035] team0: Port device team_slave_1 removed [ 97.106994][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.114494][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.123143][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.130547][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.140351][ T7035] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.162880][ T7045] bond2: option resend_igmp: invalid value (1024) [ 97.169384][ T7045] bond2: option resend_igmp: allowed values 0 - 255 [ 97.202019][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 97.211996][ T7045] bond2 (unregistering): Released all slaves [ 97.356309][ T7085] tipc: Enabled bearer , priority 0 [ 97.374230][ T7085] syzkaller0: entered promiscuous mode [ 97.379775][ T7085] syzkaller0: entered allmulticast mode [ 97.385495][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 97.385509][ T29] audit: type=1326 audit(1763317694.190:5380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.415122][ T29] audit: type=1326 audit(1763317694.190:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.438508][ T29] audit: type=1326 audit(1763317694.190:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.462371][ T29] audit: type=1326 audit(1763317694.190:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.498358][ T29] audit: type=1326 audit(1763317694.190:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.521790][ T29] audit: type=1326 audit(1763317694.190:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.545615][ T29] audit: type=1326 audit(1763317694.190:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.569231][ T29] audit: type=1326 audit(1763317694.190:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.592644][ T29] audit: type=1326 audit(1763317694.190:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.616027][ T29] audit: type=1326 audit(1763317694.190:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.6.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce4d3af6c9 code=0x7ffc0000 [ 97.694597][ T7093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.825140][ T7084] tipc: Resetting bearer [ 97.833500][ T7084] tipc: Disabling bearer [ 98.189368][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 98.227364][ T7132] tipc: Started in network mode [ 98.232372][ T7132] tipc: Node identity 76c4fedf992c, cluster identity 4711 [ 98.239659][ T7132] tipc: Enabled bearer , priority 0 [ 98.306979][ T7132] syzkaller0: entered promiscuous mode [ 98.312502][ T7132] syzkaller0: entered allmulticast mode [ 98.332051][ T7132] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 98.345653][ T7131] tipc: Resetting bearer [ 98.359160][ T7131] tipc: Disabling bearer [ 98.794484][ T7183] tipc: Started in network mode [ 98.799513][ T7183] tipc: Node identity aabce0dfd102, cluster identity 4711 [ 98.806703][ T7183] tipc: Enabled bearer , priority 0 [ 98.921825][ T7188] syzkaller0: entered promiscuous mode [ 98.927327][ T7188] syzkaller0: entered allmulticast mode [ 98.934557][ T7188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 99.017589][ T7182] tipc: Resetting bearer [ 99.032580][ T7182] tipc: Disabling bearer [ 99.489970][ T7202] siw: device registration error -23 [ 99.497215][ T7202] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 99.503772][ T7202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.511891][ T7202] vhci_hcd vhci_hcd.0: Device attached [ 99.541123][ T7206] vhci_hcd: connection closed [ 99.541467][ T6157] vhci_hcd: stop threads [ 99.550627][ T6157] vhci_hcd: release socket [ 99.555028][ T6157] vhci_hcd: disconnect device [ 99.613728][ T7213] x_tables: duplicate underflow at hook 1 [ 99.673053][ T7217] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 99.706717][ T7217] bond2: (slave lo): Enslaving as an active interface with an up link [ 99.726203][ T7217] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 100.225611][ T7247] bond3: option resend_igmp: invalid value (1024) [ 100.232116][ T7247] bond3: option resend_igmp: allowed values 0 - 255 [ 100.244103][ T7247] bond3 (unregistering): Released all slaves [ 100.384960][ T7250] bond2: option resend_igmp: invalid value (1024) [ 100.391468][ T7250] bond2: option resend_igmp: allowed values 0 - 255 [ 100.443789][ T7250] bond2 (unregistering): Released all slaves [ 100.593341][ T7259] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 101.023453][ T7297] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 101.024081][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 101.059886][ T7297] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.139329][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1318'. [ 101.150418][ T7288] bond2: option resend_igmp: invalid value (1024) [ 101.156836][ T7288] bond2: option resend_igmp: allowed values 0 - 255 [ 101.231073][ T7288] bond2 (unregistering): Released all slaves [ 101.309024][ T7297] bond2: option mode: unable to set because the bond device has slaves [ 101.652107][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'. [ 101.815895][ T7358] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1339'. [ 102.059667][ T7372] siw: device registration error -23 [ 102.089759][ T7372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 102.096284][ T7372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.104474][ T7372] vhci_hcd vhci_hcd.0: Device attached [ 102.157531][ T7373] vhci_hcd: connection closed [ 102.189164][ T52] vhci_hcd: stop threads [ 102.198174][ T52] vhci_hcd: release socket [ 102.202579][ T52] vhci_hcd: disconnect device [ 102.235669][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1348'. [ 102.248970][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 102.261184][ T7389] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 102.261184][ T7389] program syz.5.1350 not setting count and/or reply_len properly [ 102.287168][ T7380] hsr_slave_0: left promiscuous mode [ 102.293164][ T7380] hsr_slave_1: left promiscuous mode [ 102.314373][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1348'. [ 102.415084][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 102.415102][ T29] audit: type=1326 audit(1763317699.220:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.525024][ T29] audit: type=1326 audit(1763317699.220:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.548460][ T29] audit: type=1326 audit(1763317699.220:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.571916][ T29] audit: type=1326 audit(1763317699.220:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.595612][ T29] audit: type=1326 audit(1763317699.220:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.619219][ T29] audit: type=1326 audit(1763317699.220:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.642890][ T29] audit: type=1326 audit(1763317699.220:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.666437][ T29] audit: type=1326 audit(1763317699.220:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.689910][ T29] audit: type=1326 audit(1763317699.220:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 102.713349][ T29] audit: type=1326 audit(1763317699.220:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7396 comm="syz.3.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1313f6f6c9 code=0x7ffc0000 [ 103.132846][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 103.150485][ T7431] x_tables: duplicate underflow at hook 1 [ 103.271152][ T7439] siw: device registration error -23 [ 103.561683][ T7439] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 103.568215][ T7439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.576326][ T7439] vhci_hcd vhci_hcd.0: Device attached [ 103.639229][ T7442] vhci_hcd: connection closed [ 103.639349][ T6157] vhci_hcd: stop threads [ 103.648316][ T6157] vhci_hcd: release socket [ 103.652722][ T6157] vhci_hcd: disconnect device [ 103.848404][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'. [ 103.883105][ T7453] bond3: option resend_igmp: invalid value (1024) [ 103.889562][ T7453] bond3: option resend_igmp: allowed values 0 - 255 [ 103.913076][ T7453] bond3 (unregistering): Released all slaves [ 104.245795][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 104.280359][ T7471] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 104.280359][ T7471] program syz.5.1380 not setting count and/or reply_len properly [ 104.904461][ T7480] x_tables: duplicate underflow at hook 1 [ 105.016909][ T7486] udevd[7486]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 105.030344][ T7488] udevd[7488]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 105.238698][ T7493] bond2: option resend_igmp: invalid value (1024) [ 105.245198][ T7493] bond2: option resend_igmp: allowed values 0 - 255 [ 105.282227][ T7493] bond2 (unregistering): Released all slaves [ 105.323360][ T7499] syz_tun: left allmulticast mode [ 105.328535][ T7499] syz_tun: left promiscuous mode [ 105.333648][ T7499] bridge0: port 3(syz_tun) entered disabled state [ 105.362007][ T7504] netlink: 'syz.3.1387': attribute type 10 has an invalid length. [ 105.371069][ T7499] bridge_slave_0: left allmulticast mode [ 105.376776][ T7499] bridge_slave_0: left promiscuous mode [ 105.382514][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.391805][ T7506] siw: device registration error -23 [ 105.397995][ T7506] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 105.404502][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.412625][ T7506] vhci_hcd vhci_hcd.0: Device attached [ 105.431145][ T7499] bridge_slave_1: left allmulticast mode [ 105.436791][ T7499] bridge_slave_1: left promiscuous mode [ 105.442490][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.469273][ T7508] vhci_hcd: connection closed [ 105.469474][ T31] vhci_hcd: stop threads [ 105.478456][ T31] vhci_hcd: release socket [ 105.482927][ T31] vhci_hcd: disconnect device [ 105.492740][ T7499] bond0: (slave bond_slave_0): Releasing backup interface [ 105.513004][ T7499] bond0: (slave bond_slave_1): Releasing backup interface [ 105.548316][ T7499] team0: Port device team_slave_0 removed [ 105.563768][ T7499] team0: Port device team_slave_1 removed [ 105.578972][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.586382][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.594596][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.602019][ T7499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.618209][ T7499] batman_adv: batadv0: Interface deactivated: macvtap1 [ 105.625086][ T7499] batman_adv: batadv0: Removing interface: macvtap1 [ 105.632770][ T7499] batman_adv: batadv0: Interface deactivated: macvtap2 [ 105.639684][ T7499] batman_adv: batadv0: Removing interface: macvtap2 [ 105.647591][ T7499] batman_adv: batadv0: Interface deactivated: macvtap3 [ 105.654453][ T7499] batman_adv: batadv0: Removing interface: macvtap3 [ 105.674993][ T7507] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 105.682998][ T7507] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 105.759295][ T7516] macvtap1: left allmulticast mode [ 105.765536][ T7516] macvtap2: left allmulticast mode [ 105.778133][ T7516] macvtap3: left allmulticast mode [ 105.785466][ T7516] macvtap4: left allmulticast mode [ 105.791944][ T7516] macvtap5: left allmulticast mode [ 105.798349][ T7516] macvtap6: left allmulticast mode [ 105.804403][ T7516] macvtap7: left allmulticast mode [ 105.809586][ T7516] bridge0: left allmulticast mode [ 106.011015][ T7546] x_tables: duplicate underflow at hook 1 [ 106.423177][ T7553] bond2: option resend_igmp: invalid value (1024) [ 106.429643][ T7553] bond2: option resend_igmp: allowed values 0 - 255 [ 106.437719][ T7553] bond2 (unregistering): Released all slaves [ 106.539247][ T7557] __nla_validate_parse: 1 callbacks suppressed [ 106.539264][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1401'. [ 106.665322][ T7567] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 106.703441][ T7567] syz_tun: entered promiscuous mode [ 106.710047][ T7567] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.759661][ T7567] bond1: (slave macvlan1): Error -98 calling set_mac_address [ 106.778369][ T7571] netlink: 'syz.6.1408': attribute type 10 has an invalid length. [ 106.803435][ T7571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.847162][ T7568] macvtap1: left allmulticast mode [ 106.853403][ T7568] macvtap2: left allmulticast mode [ 106.859292][ T7568] macvtap3: left allmulticast mode [ 106.865987][ T7568] macvtap4: left allmulticast mode [ 106.872079][ T7568] macvtap5: left allmulticast mode [ 106.877201][ T7568] bridge0: left allmulticast mode [ 106.883643][ T7581] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.883643][ T7581] program syz.2.1411 not setting count and/or reply_len properly [ 106.884432][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.922186][ T7583] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.941420][ T7583] bond1: (slave lo): Enslaving as a backup interface with an up link [ 106.951906][ T7583] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 106.971084][ T7582] syz_tun: entered promiscuous mode [ 106.976641][ T7582] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 106.987139][ T7582] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 106.997715][ T7576] bond1: (slave lo): Releasing backup interface [ 107.008580][ T7576] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 107.124954][ T7601] bond2: option resend_igmp: invalid value (1024) [ 107.131434][ T7601] bond2: option resend_igmp: allowed values 0 - 255 [ 107.145485][ T7601] bond2 (unregistering): Released all slaves [ 107.334377][ T7621] bond2: option resend_igmp: invalid value (1024) [ 107.340869][ T7621] bond2: option resend_igmp: allowed values 0 - 255 [ 107.380685][ T7621] bond2 (unregistering): Released all slaves [ 107.510394][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 107.510407][ T29] audit: type=1326 audit(1763317704.320:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.579951][ T29] audit: type=1326 audit(1763317704.320:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.603390][ T29] audit: type=1326 audit(1763317704.320:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.626795][ T29] audit: type=1326 audit(1763317704.320:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.684818][ T29] audit: type=1326 audit(1763317704.490:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.708286][ T29] audit: type=1326 audit(1763317704.490:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.747293][ T29] audit: type=1326 audit(1763317704.540:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.770709][ T29] audit: type=1326 audit(1763317704.540:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.794209][ T29] audit: type=1326 audit(1763317704.540:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.842400][ T29] audit: type=1326 audit(1763317704.560:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.0.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32be0df6c9 code=0x7ffc0000 [ 107.899260][ T7655] bond2: option resend_igmp: invalid value (1024) [ 107.905704][ T7655] bond2: option resend_igmp: allowed values 0 - 255 [ 107.913520][ T7655] bond2 (unregistering): Released all slaves [ 107.978061][ T7667] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 107.984590][ T7667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.992697][ T7667] vhci_hcd vhci_hcd.0: Device attached [ 108.001450][ T7668] vhci_hcd: connection closed [ 108.010400][ T6157] vhci_hcd: stop threads [ 108.019424][ T6157] vhci_hcd: release socket [ 108.023816][ T6157] vhci_hcd: disconnect device [ 108.058705][ T7671] tipc: Enabled bearer , priority 0 [ 108.086805][ T7671] syzkaller0: entered promiscuous mode [ 108.092303][ T7671] syzkaller0: entered allmulticast mode [ 108.123875][ T7671] tipc: Resetting bearer [ 108.134758][ T7670] tipc: Resetting bearer [ 108.182679][ T7670] tipc: Disabling bearer [ 108.276021][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'. [ 108.402490][ T3315] ================================================================== [ 108.410610][ T3315] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 108.418515][ T3315] [ 108.420828][ T3315] read-write to 0xffff88810708df58 of 8 bytes by task 7697 on cpu 0: [ 108.428877][ T3315] shmem_add_to_page_cache+0x414/0x530 [ 108.434352][ T3315] shmem_get_folio_gfp+0x4e8/0xd60 [ 108.439477][ T3315] shmem_write_begin+0xa8/0x190 [ 108.444332][ T3315] generic_perform_write+0x184/0x490 [ 108.449616][ T3315] shmem_file_write_iter+0xc5/0xf0 [ 108.454752][ T3315] __kernel_write_iter+0x2d6/0x540 [ 108.459868][ T3315] dump_user_range+0x61e/0x8f0 [ 108.464629][ T3315] elf_core_dump+0x1de7/0x1f80 [ 108.469398][ T3315] coredump_write+0xb12/0xe30 [ 108.474078][ T3315] vfs_coredump+0x143a/0x20d0 [ 108.478754][ T3315] get_signal+0xd84/0xf70 [ 108.483082][ T3315] arch_do_signal_or_restart+0x96/0x440 [ 108.488626][ T3315] irqentry_exit_to_user_mode+0x5b/0xa0 [ 108.494178][ T3315] irqentry_exit+0x12/0x50 [ 108.498597][ T3315] asm_exc_page_fault+0x26/0x30 [ 108.503451][ T3315] [ 108.505766][ T3315] read to 0xffff88810708df58 of 8 bytes by task 3315 on cpu 1: [ 108.513293][ T3315] shmem_getattr+0x68/0x200 [ 108.517798][ T3315] vfs_getattr_nosec+0x146/0x1e0 [ 108.522742][ T3315] vfs_statx+0x113/0x390 [ 108.526995][ T3315] vfs_fstatat+0x115/0x170 [ 108.531412][ T3315] __se_sys_newfstatat+0x55/0x260 [ 108.536448][ T3315] __x64_sys_newfstatat+0x55/0x70 [ 108.541489][ T3315] x64_sys_call+0x135a/0x3000 [ 108.546162][ T3315] do_syscall_64+0xd2/0x200 [ 108.550664][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.556555][ T3315] [ 108.558870][ T3315] value changed: 0x0000000000000265 -> 0x0000000000000266 [ 108.565960][ T3315] [ 108.568273][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 108.574416][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.584306][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.594358][ T3315] ==================================================================