last executing test programs: 12m42.852286349s ago: executing program 32 (id=78): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r2, 0x4, 0x2800) 12m38.185922282s ago: executing program 33 (id=161): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x6}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0xfffffff9, 0x9, 0x80000000}, 0x10) 12m21.386479416s ago: executing program 34 (id=470): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x400000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f000001bb80)='./bus\x00', 0x1000050, &(0x7f000001be00)={[], [{@uid_eq}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '.\x8d&(]'}}]}, 0x1, 0x5ee, &(0x7f000001c980)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) 12m19.860537252s ago: executing program 35 (id=503): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) utime(0x0, 0xfffffffffffffffc) 12m18.506222329s ago: executing program 36 (id=524): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fda600000000000008000f0001", 0x21) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) 11m22.022986314s ago: executing program 37 (id=1676): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) 10m29.243301646s ago: executing program 38 (id=2378): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 10m16.531941247s ago: executing program 39 (id=2657): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(r0, r0) 9m17.423408743s ago: executing program 40 (id=3905): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r1, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 9m4.003114969s ago: executing program 41 (id=4094): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 9m3.903335265s ago: executing program 42 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10003, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m52.30636679s ago: executing program 43 (id=4232): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000040), 0xff, 0x57b, &(0x7f0000000900)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0xeffb, 0xe396) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r1, 0x8, 0x4000, 0x10000) 8m49.466504072s ago: executing program 44 (id=4253): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 8m37.194023031s ago: executing program 45 (id=4460): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 8m24.988241247s ago: executing program 46 (id=4638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="a6a7adf854e7c579b0b5f2a5d9b6ad0f1d43242f48f0779af2661d858c64ac7ffb91d1123c0bb5f944c4cb411c515dae4ae6f763fdcc93e47af7f3cc15aa40112ed49c1ad587cb571efe1c3c5fbbcf6005999b345488a1a452384f0fc21f6217f8802849d20406ce744d1d3aaa927822fa6ca979263a9af3324ad580048f2445", 0x80, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendmmsg$inet6(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)='U', 0x1}], 0x1}}], 0x1, 0x4000804) 8m13.702177398s ago: executing program 47 (id=4803): perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 7m49.004368445s ago: executing program 6 (id=5193): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x22020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m48.88754659s ago: executing program 6 (id=5197): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) timer_gettime(r0, &(0x7f0000000000)) 7m48.647570662s ago: executing program 6 (id=5203): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0xffe4, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 7m48.408050684s ago: executing program 6 (id=5205): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 7m48.373826436s ago: executing program 6 (id=5206): syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m47.695223359s ago: executing program 6 (id=5216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) 7m47.672681081s ago: executing program 48 (id=5216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6m29.655010356s ago: executing program 0 (id=6440): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m29.531788972s ago: executing program 0 (id=6443): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() 6m29.268955765s ago: executing program 0 (id=6451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m29.18152814s ago: executing program 0 (id=6454): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 6m29.149588741s ago: executing program 0 (id=6456): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x20004000) 6m27.830975786s ago: executing program 0 (id=6474): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)='N', 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) write(r2, 0x0, 0x0) 6m27.804603068s ago: executing program 49 (id=6474): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000100)='N', 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) write(r2, 0x0, 0x0) 6m27.76375334s ago: executing program 4 (id=6476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6m27.693428364s ago: executing program 4 (id=6477): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x80000004}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x404c0c4}, 0x4) 6m27.649857195s ago: executing program 4 (id=6478): openat$null(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40002) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x2) 6m26.784646058s ago: executing program 4 (id=6492): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 6m26.700090113s ago: executing program 4 (id=6494): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) 6m26.527159651s ago: executing program 4 (id=6499): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r1, r2) close_range(r3, 0xffffffffffffffff, 0x0) 6m26.526885631s ago: executing program 50 (id=6499): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm0xAzyZTMpDQhixYR3ChaXAi66dpq3bn1x1b/CxfSUjUtVlxI5E5m2kkzk07a+VHI5wM3c8695+ac75z748zcy9wA9q3x9E8m4nBEfJREjFbnJxExUEn1R5zcKnd3Yz2XTklsbr75W1Ipc2djPRd166QOVjP/j4jv34s4ktlZb2l1bWGmUMgvV/OT5cXzk6XVtaPzizNz+bn80vGp6eljJ144cbx9sf7x09qhmx+/9uxXJ/9693/XP/ghiZNxqLqsPo52GY/x6nsykL6F27za7sp6LOl1A3gk6a7Zt7WXx+EYjb5KqonhbrYMAOiUTQBgH0qMAQBgn6l9D3BnYz1Xm3r7jUR33XolIg5sxV+7vrm1pL96ze5A5TroyJ1k25WRJCLG2lD/eMSHVyKuff7N29ei2g+upQHdcOlyRJwdG995/E923LOwV8/ttnBzqPIy/sDs/Xb+gV76Nh3/vNho/Je5N/6JBuOfoQb77qN4+P6fudGGappKx38v193bdrcu/qqxvmruX5Ux30Bybr6QT49t/46IiRgYSvNTlaKNR24Tt/++3az+NP507JdOv19554u0/vT1fonMjf6h7evMzpRnHjfumluXI57qbxR/cq//kybj39Mt1vH6S+9/1mxZGn8ab23aGX9nbV6NeKZh/9/vy2TX+xMnK5vDZG2jaODrnz8daVZ/ff+nU1p/7bNAN6T9P7J7/GNJ/f2apb3X8ePV0e+aLXt4/I23/8HkrUp6sDrv4ky5vDwVMZi8sXP+sfvr1vK18mn8E0833v+3qm28/aefCc+2GH//zV+/fPT4OyuNf3ZP/b/3xPW7C33N6m+t/6crqYnqnFaOf6028HHeOwAAAAAAAAAAAAAAAAAAAAAAAABoVSYiDkWSyd5LZzLZ7NYzvP8bI5lCsVQ+cq64sjQblWdlj8VApvZTl6N1v4c6Vf09/Ep+oJA/Vp+fL+Sfj4j/RMQnQ8OVfDZXLMz2OngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDrY5Pn/qV+Get06AKBjDvS6AQBA1zn/A8D+s7fz/3DH2gEAdI/P/wCw/7R8/j/b2XYAAN3z4Pm/r1GhhjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJadPnUqnzT831nNpfvbC6spC8cLR2XxpIbu4ksvmisvns3PF4lwhn80VF7etnKlLX9p6KRSL56djaeXiZDlfKk+WVtfOLBZXlspn5hdn5vJn8gNdjQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWlNaXVuYKRTyyxK7Jobb8X8Gex1F+xL98UQ0Q6JjifqjxHDvDlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7h/AgAA///wSSzL") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r1, r2) close_range(r3, 0xffffffffffffffff, 0x0) 5m41.725290067s ago: executing program 8 (id=7049): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5m40.736930416s ago: executing program 8 (id=7055): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m40.582322153s ago: executing program 8 (id=7056): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000580)=@sack_info={0x0, 0x80000001, 0x2}, &(0x7f0000000500)=0xc) 5m40.555486954s ago: executing program 8 (id=7057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x2243005, 0x0) 5m40.508945867s ago: executing program 8 (id=7059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62840, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xb2) 5m40.203348672s ago: executing program 8 (id=7061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5m40.198110772s ago: executing program 51 (id=7061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m31.544411812s ago: executing program 2 (id=9610): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) 2m30.613419529s ago: executing program 2 (id=9612): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303000000083ec4c0d6e84de0249d09f31ef580c3d000000000000000000"], 0x1, 0x191, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x2, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x2, @short={0x2, 0x0, 0xffff}}, 0x7) 2m29.700320564s ago: executing program 2 (id=9623): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x11, 0x1a00, 0x0, 0x3) 2m29.480986045s ago: executing program 2 (id=9630): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={r3, 0x2}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000640)={r4, 0x8e}, 0x8) 2m29.18635296s ago: executing program 2 (id=9642): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x125045, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m29.150444481s ago: executing program 2 (id=9633): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2m14.017359293s ago: executing program 52 (id=9633): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.754468104s ago: executing program 1 (id=10832): capset(0x0, 0x0) r0 = socket(0x2d, 0x80000, 0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) connect$qrtr(r0, 0x0, 0x0) bind$xdp(r0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) syz_emit_ethernet(0x24e, 0x0, &(0x7f0000000100)={0x0, 0x3, [0xcfe, 0x947, 0xf9a, 0x4cb]}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) 6.672850468s ago: executing program 1 (id=10834): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.534762245s ago: executing program 1 (id=10838): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 5.486422257s ago: executing program 1 (id=10855): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r3, 0xfffffffffffffffe, 0x29) 5.372964273s ago: executing program 1 (id=10856): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffe}}]}}, 0x0, 0x56}, 0x20) r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x5fb, 0xe876, 0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0x1, r2, 0x0, 0x0, 0xfffffffffffffbff}]) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4048040}, 0x40000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) 4.900131316s ago: executing program 1 (id=10857): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_io_uring_setup(0xd89, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x0, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4b, 0x0, r1, &(0x7f0000002f80), &(0x7f0000000840)='./file0\x00', 0xca0, 0x800}) io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 3.991095562s ago: executing program 9 (id=10869): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0x2, 0x8, 0x80, 0xd59, 0x20, 0xb, 0x1, [{0x3, 0xfffffffb, 0xfffffff9, 0x1dfe}, {0x800, 0xc63a, 0x7}, {0x6, 0x14, 0x10000, 0x4}, {0x7fffffff, 0x1, 0x7, 0x81}, {0xfff, 0x82, 0x5, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3ff, 0x3, 0x4, 0x8}, {0x2, 0x5, 0x4000, 0xc82}]}}]}}]}, 0xc4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3.932329404s ago: executing program 9 (id=10871): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x20, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r3, 0x3, 0x80000}) 3.839737479s ago: executing program 3 (id=10874): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x28, 0x32, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.62317301s ago: executing program 9 (id=10875): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.598356871s ago: executing program 3 (id=10876): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 2.286004326s ago: executing program 7 (id=10880): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.174890561s ago: executing program 7 (id=10881): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.100887596s ago: executing program 5 (id=10882): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r1, &(0x7f00000002c0)="04", 0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) close(r1) 2.031234169s ago: executing program 5 (id=10883): socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x40030000000000, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.787283871s ago: executing program 5 (id=10884): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4800) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 1.688258865s ago: executing program 9 (id=10885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x9, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.647492228s ago: executing program 7 (id=10886): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}], 0x1}}], 0x1, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.504871225s ago: executing program 3 (id=10887): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r2, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r3, 0x1) 1.434690418s ago: executing program 7 (id=10888): io_uring_setup(0x1fc1, &(0x7f00000002c0)={0x0, 0xfc95, 0x0, 0x0, 0x157}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r3) move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x262) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xd758}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000000080101eb10000000000000020000020900030073797a310000000006000240880900000c00048008000740000000060500030006000000050003003a00000009000100"], 0x50}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 1.421693439s ago: executing program 9 (id=10889): setitimer(0x0, &(0x7f0000000180)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 1.287260345s ago: executing program 3 (id=10890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.286846315s ago: executing program 5 (id=10891): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) 1.265740447s ago: executing program 9 (id=10892): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.248576398s ago: executing program 7 (id=10893): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4329}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.074017706s ago: executing program 7 (id=10894): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.073069356s ago: executing program 3 (id=10895): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 299.167935ms ago: executing program 5 (id=10896): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 156.792102ms ago: executing program 5 (id=10897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 0s ago: executing program 3 (id=10898): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000640)=ANY=[], 0x1, 0x291, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): call=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.420645][ T28] audit: type=1326 audit(2000001320.408:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.444643][ T28] audit: type=1326 audit(2000001320.438:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.556667][ T28] audit: type=1326 audit(2000001320.438:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.588343][ T28] audit: type=1326 audit(2000001320.438:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.628748][ T28] audit: type=1326 audit(2000001320.458:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.663800][ T28] audit: type=1326 audit(2000001320.458:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.674046][ T1944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.699296][ T28] audit: type=1326 audit(2000001320.458:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1938 comm="syz.5.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 643.728739][ T1944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.036372][ T1955] bond4: entered promiscuous mode [ 644.106600][ T1955] ip6gretap2: entered promiscuous mode [ 644.134163][ T1955] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 644.165600][ T1955] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface [ 644.191400][ T1955] ip6gretap2: left promiscuous mode [ 644.200070][ T1955] bond4 (unregistering): Released all slaves [ 644.644370][ T1986] batadv_slave_1: entered promiscuous mode [ 644.653820][ T1986] pimreg: entered allmulticast mode [ 644.659632][ T1986] pimreg: left allmulticast mode [ 644.692577][ T1985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9496'. [ 644.751112][ T1977] batadv_slave_1: left promiscuous mode [ 645.435642][ T2018] loop2: detected capacity change from 0 to 1024 [ 645.842338][ T2018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.965732][ T2018] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.9512: Allocating blocks 497-513 which overlap fs metadata [ 646.143931][ T2018] EXT4-fs (loop2): Remounting filesystem read-only [ 646.198875][ T2016] EXT4-fs (loop2): pa ffff8881006f0310: logic 304, phys. 433, len 5 [ 646.241972][T27094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.638506][ T2052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9526'. [ 646.735638][ T2035] loop2: detected capacity change from 0 to 1024 [ 646.787732][ T2035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 646.812164][ T2035] System zones: 0-1, 3-36 [ 646.857231][ T2035] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.9518: bad orphan inode 134217728 [ 646.876711][ T2035] loop2: lost filesystem error report for type 5 error -117 [ 646.899082][ T2035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.372606][ T2048] kexec: Could not allocate control_code_buffer [ 647.447194][T27094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.560678][ T2086] netlink: 'syz.1.9538': attribute type 13 has an invalid length. [ 647.568876][ T2086] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.9538'. [ 647.672839][ T2102] bond4: entered promiscuous mode [ 647.687099][ T2102] ip6gretap1: entered promiscuous mode [ 647.693300][ T2102] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 647.712233][ T2102] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 647.725050][ T2102] ip6gretap1: left promiscuous mode [ 647.804716][ T2102] bond4 (unregistering): Released all slaves [ 647.874594][ T2110] vhci_hcd vhci_hcd.3: invalid port number 255 [ 647.880888][ T2110] vhci_hcd vhci_hcd.3: default hub control req: 8016 v0008 i00ff l0 [ 647.986295][ T2120] netlink: 'syz.1.9551': attribute type 1 has an invalid length. [ 647.998136][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9552'. [ 648.014977][ T2120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 648.040937][ T2120] bond4: (slave bridge0): making interface the new active one [ 648.050281][ T2120] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 648.252568][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 648.346040][ T2144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9561'. [ 648.733610][ T2176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9569'. [ 649.108057][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 649.108072][ T28] audit: type=1400 audit(2000001326.168:10382): avc: denied { module_load } for pid=2191 comm="syz.2.9574" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 649.806699][ T2218] lo speed is unknown, defaulting to 1000 [ 650.361757][ T28] audit: type=1400 audit(2000001327.418:10383): avc: denied { sys_admin } for pid=2231 comm="syz.1.9586" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 651.540210][ T2257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9595'. [ 652.660658][ T2292] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9605'. [ 652.756607][ T2297] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9608'. [ 653.763477][ T2312] loop2: detected capacity change from 0 to 256 [ 654.191258][ T2330] No source specified [ 654.762463][ T2339] loop2: detected capacity change from 0 to 2048 [ 654.778210][ T28] audit: type=1400 audit(2000001331.838:10384): avc: denied { lock } for pid=2342 comm="syz.7.9625" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=153233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 654.842899][ T2339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.867268][ T2353] tc_dump_action: action bad kind [ 654.924182][T27094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.251815][ T28] audit: type=1400 audit(2000001332.288:10385): avc: denied { remount } for pid=2366 comm="syz.2.9642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 655.377969][ T28] audit: type=1400 audit(2000001332.288:10386): avc: denied { mounton } for pid=2366 comm="syz.2.9642" path="/438/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 656.501666][ T2386] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.9640'. [ 656.541613][ T2386] netlink: zone id is out of range [ 656.546791][ T2386] netlink: zone id is out of range [ 656.573329][ T2386] netlink: zone id is out of range [ 656.578732][ T2386] netlink: zone id is out of range [ 656.633818][ T2386] netlink: zone id is out of range [ 656.639145][ T2386] netlink: zone id is out of range [ 656.693526][ T2386] netlink: zone id is out of range [ 656.699728][ T2386] netlink: zone id is out of range [ 656.716785][ T2386] netlink: zone id is out of range [ 656.723468][ T2386] netlink: zone id is out of range [ 656.736010][ T2398] netlink: 'syz.1.9646': attribute type 4 has an invalid length. [ 670.416651][ T2419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9655'. [ 670.509728][ T2424] lo speed is unknown, defaulting to 1000 [ 670.948209][T21243] bond2 (unregistering): (slave gretap1): Releasing active interface [ 671.164281][T21243] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 671.175111][T21243] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 671.234958][T21243] bridge3 (unregistering): left promiscuous mode [ 671.241992][T21243] bridge3 (unregistering): left allmulticast mode [ 671.397063][T21243] bond0 (unregistering): Released all slaves [ 671.405819][T21243] bond1 (unregistering): Released all slaves [ 671.416926][T21243] bond2 (unregistering): Released all slaves [ 671.426057][T21243] bond3 (unregistering): Released all slaves [ 671.480958][ T2426] lo speed is unknown, defaulting to 1000 [ 671.504453][T21243] hsr_slave_0: left promiscuous mode [ 671.512628][T21243] hsr_slave_1: left promiscuous mode [ 672.526291][ T2426] chnl_net:caif_netlink_parms(): no params data found [ 672.707885][ T2426] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.721309][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.728604][ T2426] bridge_slave_0: entered allmulticast mode [ 672.752062][ T2426] bridge_slave_0: entered promiscuous mode [ 672.759255][ T2426] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.766481][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.781370][ T2426] bridge_slave_1: entered allmulticast mode [ 672.788063][ T2426] bridge_slave_1: entered promiscuous mode [ 672.819450][ T2426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.837285][ T2426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.914288][ T2426] team0: Port device team_slave_0 added [ 672.934052][ T2426] team0: Port device team_slave_1 added [ 672.987251][ T2426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.003589][ T2426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.041307][ T2426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.074267][ T2426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.092391][ T2426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.161458][ T2426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.226373][ T2426] hsr_slave_0: entered promiscuous mode [ 673.249836][ T2426] hsr_slave_1: entered promiscuous mode [ 673.266986][ T2426] debugfs: 'hsr0' already exists in 'hsr' [ 673.282055][ T2426] Cannot create hsr debugfs directory [ 674.142070][ T2426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.177931][ T2426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.214735][ T2426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.238087][ T2426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 674.658476][ T2426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.690698][ T2426] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.721483][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.728616][ T2202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.767231][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.774447][ T2202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.835667][ T2426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 674.872720][ T2426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.019871][ T2426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.223713][ T2426] veth0_vlan: entered promiscuous mode [ 675.250946][ T2426] veth1_vlan: entered promiscuous mode [ 675.296693][ T2426] veth0_macvtap: entered promiscuous mode [ 675.322285][ T2426] veth1_macvtap: entered promiscuous mode [ 675.352373][ T2426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.393643][ T2426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.440630][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.469918][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.501784][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.512491][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.955985][ T28] audit: type=1326 audit(2000001609.009:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.011903][ T28] audit: type=1326 audit(2000001609.009:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.056443][ T28] audit: type=1326 audit(2000001609.019:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.129847][ T28] audit: type=1326 audit(2000001609.019:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.200840][ T28] audit: type=1326 audit(2000001609.019:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.271152][ T28] audit: type=1326 audit(2000001609.019:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.314248][ T2688] lo: entered allmulticast mode [ 676.331168][ T28] audit: type=1326 audit(2000001609.019:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.379612][ T28] audit: type=1326 audit(2000001609.019:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.442672][ T28] audit: type=1326 audit(2000001609.019:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.478027][ T28] audit: type=1326 audit(2000001609.019:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2665 comm="syz.7.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7fc00000 [ 676.606915][ T2704] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.614296][ T2704] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.036838][ T2704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.120089][ T2704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.392664][ T2202] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.408299][ T2202] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.425907][ T2202] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.444086][ T2202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.570001][ T2829] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 680.491413][ T2857] syzkaller0: entered allmulticast mode [ 680.497583][ T2857] syzkaller0: entered promiscuous mode [ 680.557138][ T2857] syzkaller0 (unregistering): left promiscuous mode [ 680.571282][ T2857] syzkaller0 (unregistering): left allmulticast mode [ 680.817317][ T2872] tipc: Started in network mode [ 680.831778][ T2872] tipc: Node identity 7f000001, cluster identity 4711 [ 680.846395][ T2872] tipc: Enabled bearer , priority 10 [ 680.880200][ T2872] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 680.910432][ T2872] tipc: Enabled bearer , priority 10 [ 681.009034][ T2884] loop3: detected capacity change from 0 to 2048 [ 681.049108][ T2884] EXT4-fs: Ignoring removed i_version option [ 681.096750][ T2884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.490136][T21243] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 681.568844][T21243] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 422 with error 28 [ 681.599147][T21243] EXT4-fs (loop3): This should not happen!! Data will be lost [ 681.599147][T21243] [ 681.609600][T21243] EXT4-fs (loop3): Total free blocks count 0 [ 681.616558][T21243] EXT4-fs (loop3): Free/Dirty block details [ 681.623884][T21243] EXT4-fs (loop3): free_blocks=2415919504 [ 681.647645][ T2897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9732'. [ 681.678339][T21243] EXT4-fs (loop3): dirty_blocks=864 [ 681.725561][T21243] EXT4-fs (loop3): Block reservation details [ 681.754251][T21243] EXT4-fs (loop3): i_reserved_data_blocks=27 [ 681.783459][T21243] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 422 with error 28 [ 681.961839][ T23] tipc: Node number set to 2130706433 [ 682.091702][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 682.091721][ T28] audit: type=1400 audit(2000001615.159:10453): avc: denied { watch_reads } for pid=2909 comm="syz.7.9737" path="/2023/file0" dev="tmpfs" ino=10510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 682.230125][ T2926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9738'. [ 682.316737][ T2914] syz.1.9736 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 682.371152][ T2914] CPU: 0 UID: 0 PID: 2914 Comm: syz.1.9736 Tainted: G W syzkaller #0 PREEMPT(full) [ 682.371230][ T2914] Tainted: [W]=WARN [ 682.371238][ T2914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.371253][ T2914] Call Trace: [ 682.371260][ T2914] [ 682.371269][ T2914] __dump_stack+0x1d/0x30 [ 682.371298][ T2914] dump_stack_lvl+0x95/0xd0 [ 682.371327][ T2914] dump_stack+0x15/0x1b [ 682.371383][ T2914] dump_header+0x80/0x240 [ 682.371416][ T2914] oom_kill_process+0x295/0x350 [ 682.371441][ T2914] out_of_memory+0x97d/0xb80 [ 682.371493][ T2914] try_charge_memcg+0x62e/0xa10 [ 682.371539][ T2914] __mem_cgroup_charge+0x65/0x150 [ 682.371574][ T2914] shmem_get_folio_gfp+0x47b/0xd60 [ 682.371611][ T2914] shmem_write_begin+0xfc/0x1f0 [ 682.371652][ T2914] generic_perform_write+0x183/0x490 [ 682.371688][ T2914] shmem_file_write_iter+0xc5/0xf0 [ 682.371724][ T2914] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 682.371813][ T2914] vfs_write+0x5a6/0x9f0 [ 682.371855][ T2914] ksys_write+0xdc/0x1a0 [ 682.371896][ T2914] __x64_sys_write+0x40/0x50 [ 682.371982][ T2914] x64_sys_call+0x27e1/0x3020 [ 682.372013][ T2914] do_syscall_64+0x12c/0x370 [ 682.372089][ T2914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.372113][ T2914] RIP: 0033:0x7ff23e68c799 [ 682.372130][ T2914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.372149][ T2914] RSP: 002b:00007ff23d0be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 682.372217][ T2914] RAX: ffffffffffffffda RBX: 00007ff23e906090 RCX: 00007ff23e68c799 [ 682.372309][ T2914] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 682.372336][ T2914] RBP: 00007ff23e722c99 R08: 0000000000000000 R09: 0000000000000000 [ 682.372350][ T2914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.372393][ T2914] R13: 00007ff23e906128 R14: 00007ff23e906090 R15: 00007ffe43ff32f8 [ 682.372416][ T2914] [ 682.372427][ T2914] memory: usage 291868kB, limit 307200kB, failcnt 9745 [ 682.602817][ T2914] memory+swap: usage 335472kB, limit 9007199254740988kB, failcnt 0 [ 682.610996][ T2914] kmem: usage 244172kB, limit 9007199254740988kB, failcnt 0 [ 682.626963][ T2914] Memory cgroup stats for /syz1: [ 682.627361][ T2914] cache 27205632 [ 682.636306][ T2914] rss 5423104 [ 682.644487][ T2914] shmem 27205632 [ 682.668040][ T2914] mapped_file 0 [ 682.671888][ T2914] dirty 0 [ 682.675001][ T2914] writeback 0 [ 682.678447][ T2914] workingset_refault_anon 1636 [ 682.683506][ T2914] workingset_refault_file 0 [ 682.701274][ T2914] swap 55930880 [ 682.704857][ T2914] swapcached 72421376 [ 682.708877][ T2914] pgpgin 291207 [ 682.731165][ T2914] pgpgout 283233 [ 682.734818][ T2914] pgfault 293506 [ 682.738386][ T2914] pgmajfault 224 [ 682.751168][ T2914] inactive_anon 14348288 [ 682.755901][ T2914] active_anon 18313216 [ 682.760079][ T2914] inactive_file 0 [ 682.791196][ T2914] active_file 0 [ 682.794725][ T2914] unevictable 0 [ 682.798204][ T2914] hierarchical_memory_limit 314572800 [ 682.821161][ T2914] hierarchical_memsw_limit 9223372036854771712 [ 682.827396][ T2914] total_cache 27205632 [ 682.841171][ T2914] total_rss 5423104 [ 682.852010][ T2914] total_shmem 27205632 [ 682.861367][ T2914] total_mapped_file 0 [ 682.871373][ T2914] total_dirty 0 [ 682.874956][ T2914] total_writeback 0 [ 682.889060][ T2914] total_workingset_refault_anon 1636 [ 682.911223][ T2914] total_workingset_refault_file 0 [ 682.916434][ T2914] total_swap 55930880 [ 682.936240][ T2914] total_swapcached 72421376 [ 682.957133][ T2914] total_pgpgin 291207 [ 682.971468][ T2914] total_pgpgout 283233 [ 682.975609][ T2914] total_pgfault 293506 [ 682.991482][ T2914] total_pgmajfault 224 [ 682.999772][ T2914] total_inactive_anon 14348288 [ 683.016077][ T2914] total_active_anon 18313216 [ 683.089475][ T2914] total_inactive_file 0 [ 683.093895][ T2914] total_active_file 0 [ 683.097902][ T2914] total_unevictable 0 [ 683.112246][ T2914] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9736,pid=2907,uid=0 [ 683.141911][ T2914] Memory cgroup out of memory: Killed process 2907 (syz.1.9736) total-vm:96344kB, anon-rss:6172kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 683.431927][ T28] audit: type=1400 audit(2000001616.499:10454): avc: denied { nlmsg_write } for pid=2934 comm="syz.7.9743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 684.287620][ T28] audit: type=1400 audit(2000001617.349:10455): avc: denied { create } for pid=2954 comm="syz.1.9752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 684.764879][ T28] audit: type=1326 audit(2000001617.829:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 684.821048][ T28] audit: type=1326 audit(2000001617.859:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 684.939756][ T28] audit: type=1326 audit(2000001617.859:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 685.022924][ T28] audit: type=1326 audit(2000001617.859:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 685.081824][ T28] audit: type=1326 audit(2000001617.859:10460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 685.649682][ T28] audit: type=1326 audit(2000001617.859:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 685.699628][ T28] audit: type=1326 audit(2000001617.859:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.7.9755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 688.482276][ T3111] netlink: 763 bytes leftover after parsing attributes in process `syz.9.9782'. [ 688.732875][ T3134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9790'. [ 688.881565][ T3138] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3138 comm=syz.1.9790 [ 688.985198][ T3109] loop3: detected capacity change from 0 to 2048 [ 689.167430][ T3109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.230179][ T3109] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.072322][ T3142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 690.201201][ T3142] EXT4-fs (loop3): Remounting filesystem read-only [ 690.260968][ T2426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.391064][ T3158] loop3: detected capacity change from 0 to 1024 [ 690.411866][ T3158] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 690.422798][ T3158] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 690.441788][ T3158] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 690.464997][ T3158] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.9796: unexpected bad inode w/o EXT4_IGET_BAD [ 690.501288][ T3158] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 690.506797][ T3158] EXT4-fs (loop3): no journal found [ 690.515931][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 690.515953][ C0] EXT4-fs (loop3): initial error at time 2000001623: ext4_get_journal_inode:5863: inode 5 [ 690.516022][ C0] EXT4-fs (loop3): last error at time 2000001623: ext4_get_journal_inode:5863: inode 5 [ 690.686623][ T3158] EXT4-fs (loop3): can't get journal size [ 690.729337][ T3158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 691.023301][ T2426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.347863][ T3195] net_ratelimit: 352 callbacks suppressed [ 691.347884][ T3195] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 691.394007][ T3197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9808'. [ 691.403866][ T3197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9808'. [ 691.416223][ T3197] loop3: detected capacity change from 0 to 512 [ 691.466044][ T3197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.478825][ T3197] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.508565][ T2426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.572369][ T3225] syz.3.9818 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 692.824945][ T3225] CPU: 0 UID: 0 PID: 3225 Comm: syz.3.9818 Tainted: G W syzkaller #0 PREEMPT(full) [ 692.824983][ T3225] Tainted: [W]=WARN [ 692.824997][ T3225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.825016][ T3225] Call Trace: [ 692.825025][ T3225] [ 692.825114][ T3225] __dump_stack+0x1d/0x30 [ 692.825152][ T3225] dump_stack_lvl+0x95/0xd0 [ 692.825259][ T3225] dump_stack+0x15/0x1b [ 692.825291][ T3225] dump_header+0x80/0x240 [ 692.825331][ T3225] oom_kill_process+0x295/0x350 [ 692.825435][ T3225] out_of_memory+0x97d/0xb80 [ 692.825534][ T3225] try_charge_memcg+0x62e/0xa10 [ 692.825629][ T3225] __mem_cgroup_charge+0x65/0x150 [ 692.825675][ T3225] shmem_get_folio_gfp+0x47b/0xd60 [ 692.825721][ T3225] shmem_write_begin+0xfc/0x1f0 [ 692.825785][ T3225] generic_perform_write+0x183/0x490 [ 692.825827][ T3225] shmem_file_write_iter+0xc5/0xf0 [ 692.825863][ T3225] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 692.825955][ T3225] vfs_write+0x5a6/0x9f0 [ 692.826012][ T3225] ksys_write+0xdc/0x1a0 [ 692.826039][ T3225] __x64_sys_write+0x40/0x50 [ 692.826128][ T3225] x64_sys_call+0x27e1/0x3020 [ 692.826157][ T3225] do_syscall_64+0x12c/0x370 [ 692.826270][ T3225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.826299][ T3225] RIP: 0033:0x7f4fb343c799 [ 692.826322][ T3225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.826401][ T3225] RSP: 002b:00007f4fb1e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.826429][ T3225] RAX: ffffffffffffffda RBX: 00007f4fb36b6090 RCX: 00007f4fb343c799 [ 692.826449][ T3225] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 692.826464][ T3225] RBP: 00007f4fb34d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 692.826552][ T3225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.826570][ T3225] R13: 00007f4fb36b6128 R14: 00007f4fb36b6090 R15: 00007ffeabdbc6e8 [ 692.826593][ T3225] [ 692.826638][ T3225] memory: usage 295784kB, limit 307200kB, failcnt 526 [ 693.060968][ T3225] memory+swap: usage 279332kB, limit 9007199254740988kB, failcnt 0 [ 693.078801][ T3225] kmem: usage 259904kB, limit 9007199254740988kB, failcnt 0 [ 693.086346][ T3225] Memory cgroup stats for /syz3: [ 693.086704][ T3225] cache 1953792 [ 693.095700][ T3225] rss 8593408 [ 693.099072][ T3225] shmem 1949696 [ 693.368909][ T3225] mapped_file 4096 [ 693.406021][ T3225] dirty 0 [ 693.409007][ T3225] writeback 0 [ 693.703604][ T3225] workingset_refault_anon 1 [ 693.708188][ T3225] workingset_refault_file 18 [ 693.761918][ T3225] swap 0 [ 693.783664][ T3225] swapcached 6578176 [ 693.802321][ T3225] pgpgin 73223 [ 693.805774][ T3225] pgpgout 70648 [ 693.921600][ T3255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9829'. [ 693.950559][ T3225] pgfault 103243 [ 693.971162][ T3225] pgmajfault 2882 [ 693.974850][ T3225] inactive_anon 1925120 [ 693.979119][ T3225] active_anon 8617984 [ 694.061187][ T3225] inactive_file 4096 [ 694.082341][ T3225] active_file 0 [ 694.107504][ T3225] unevictable 0 [ 694.137611][ T3225] hierarchical_memory_limit 314572800 [ 694.207558][ T3225] hierarchical_memsw_limit 9223372036854771712 [ 694.264356][ T3225] total_cache 1953792 [ 694.288687][ T3225] total_rss 8593408 [ 694.331250][ T3225] total_shmem 1949696 [ 694.366225][ T3225] total_mapped_file 4096 [ 694.370513][ T3225] total_dirty 0 [ 694.403688][ T3225] total_writeback 0 [ 694.435766][ T3225] total_workingset_refault_anon 1 [ 694.454474][ T3225] total_workingset_refault_file 18 [ 694.459627][ T3225] total_swap 0 [ 694.508168][ T3225] total_swapcached 6578176 [ 694.527231][ T3225] total_pgpgin 73223 [ 694.553352][ T3225] total_pgpgout 70648 [ 694.574502][ T3225] total_pgfault 103243 [ 694.584183][ T3225] total_pgmajfault 2882 [ 694.601015][ T3225] total_inactive_anon 1925120 [ 694.651391][ T3225] total_active_anon 8617984 [ 694.655956][ T3225] total_inactive_file 4096 [ 694.686964][ T3225] total_active_file 0 [ 694.697053][ T3225] total_unevictable 0 [ 694.728286][ T3225] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9818,pid=3223,uid=0 [ 694.776641][ T3225] Memory cgroup out of memory: Killed process 3225 (syz.3.9818) total-vm:96344kB, anon-rss:9616kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 694.806151][ T3273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9834'. [ 694.889353][ T3273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3273 comm=syz.1.9834 [ 695.096060][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.155796][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.206532][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.265737][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.318988][ T3289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.332369][ T3289] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.392178][ T3289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.513312][ T30] bridge_slave_1: left allmulticast mode [ 695.521048][ T30] bridge_slave_1: left promiscuous mode [ 695.527186][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.642759][ T30] bridge_slave_0: left allmulticast mode [ 695.648545][ T30] bridge_slave_0: left promiscuous mode [ 695.659556][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.841391][ T30] bond1 (unregistering): (slave gretap1): Releasing active interface [ 695.984194][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.997481][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.009973][ T30] bond0 (unregistering): Released all slaves [ 696.018011][ T30] bond1 (unregistering): Released all slaves [ 696.052901][ T30] hsr_slave_0: left promiscuous mode [ 696.060865][ T30] hsr_slave_1: left promiscuous mode [ 696.070311][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.078258][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.097674][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.106234][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.121277][ T30] veth1_macvtap: left promiscuous mode [ 696.126946][ T30] veth0_macvtap: left promiscuous mode [ 696.133231][ T30] veth1_vlan: left promiscuous mode [ 696.138625][ T30] veth0_vlan: left promiscuous mode [ 696.336577][ T3331] 8021q: VLANs not supported on ip6gre0 [ 696.708969][ T3388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9858'. [ 696.728612][ T3388] x_tables: duplicate underflow at hook 2 [ 697.480436][ T3437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9871'. [ 697.528338][ T3437] x_tables: duplicate underflow at hook 2 [ 698.270372][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9891'. [ 698.311885][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9891'. [ 698.743852][ T3495] netlink: 168 bytes leftover after parsing attributes in process `syz.7.9888'. [ 699.088069][ T3513] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 700.230205][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 700.230222][ T28] audit: type=1400 audit(2000001633.289:10542): avc: denied { ioctl } for pid=3550 comm="syz.7.9910" path="socket:[164308]" dev="sockfs" ino=164308 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 700.673945][ T3558] cgroup: fork rejected by pids controller in /syz3 [ 700.825402][ T28] audit: type=1326 audit(2000001633.889:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 700.906541][ T28] audit: type=1326 audit(2000001633.889:10544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 700.933907][ T28] audit: type=1326 audit(2000001633.919:10545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.032579][ T28] audit: type=1326 audit(2000001633.919:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.064957][ T3797] loop3: detected capacity change from 0 to 764 [ 701.122534][ T28] audit: type=1326 audit(2000001633.919:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.198741][ T28] audit: type=1326 audit(2000001633.919:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.249839][ T28] audit: type=1326 audit(2000001633.919:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.300008][ T28] audit: type=1326 audit(2000001633.929:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.350065][ T28] audit: type=1326 audit(2000001633.929:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.3.9920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 701.438731][ T3792] Symlink component flag not implemented [ 701.446799][ T3792] Symlink component flag not implemented (116) [ 701.833779][ T3813] xfrm0: entered promiscuous mode [ 703.399936][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9952'. [ 703.423129][ T3873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3873 comm=syz.7.9952 [ 706.251938][ T3935] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2057595937/2057595939 [ 706.294068][ T3940] netlink: 399 bytes leftover after parsing attributes in process `syz.5.9968'. [ 706.304999][ T3940] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 706.321215][ T3940] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 708.581550][ T3993] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9985'. [ 709.717554][ T4067] veth1_to_team: entered allmulticast mode [ 709.950487][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10001'. [ 710.217872][ T4092] tipc: Failed to remove unknown binding: 66,1,1/0:1709291113/1709291115 [ 710.304016][ T4099] cgroup: Setting release_agent not allowed [ 711.383478][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10017'. [ 711.475555][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10017'. [ 711.475650][ T2202] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.568986][ T2202] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.581396][ T2202] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.628500][ T2202] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.965054][ T4166] bridge_slave_0: left allmulticast mode [ 712.982568][ T4166] bridge_slave_0: left promiscuous mode [ 712.997171][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.015431][ T4172] netlink: 'syz.9.10029': attribute type 83 has an invalid length. [ 713.026899][ T4166] bridge_slave_1: left allmulticast mode [ 713.041174][ T4166] bridge_slave_1: left promiscuous mode [ 713.054645][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.074688][ T4169] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10039'. [ 713.101764][ T4166] bond0: (slave bond_slave_0): Releasing backup interface [ 713.123055][ T4166] bond0: (slave bond_slave_1): Releasing backup interface [ 713.148959][ T4166] team0: Port device team_slave_0 removed [ 713.169172][ T4166] team0: Port device team_slave_1 removed [ 713.185511][ T4166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.230804][ T4166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.266750][ T4166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 713.572157][ T4185] bridge_slave_0: invalid flags given to default FDB implementation [ 713.688691][ T4188] netlink: 'syz.7.10036': attribute type 21 has an invalid length. [ 715.629436][ T4235] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10054'. [ 715.761422][ T4235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4235 comm=syz.9.10054 [ 716.524905][ T4263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4263 comm=syz.5.10064 [ 716.543674][ T4264] netlink: 'syz.7.10062': attribute type 1 has an invalid length. [ 716.566287][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10062'. [ 716.578068][ T4263] batadv_slave_0: Caught tx_queue_len zero misconfig [ 716.822196][ T4278] xfrm0: entered promiscuous mode [ 719.151640][ T4334] GUP no longer grows the stack in syz.7.10091 (4334): 200000004000-20000000a000 (200000001000) [ 719.165237][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.7.10091 Tainted: G W syzkaller #0 PREEMPT(full) [ 719.165303][ T4334] Tainted: [W]=WARN [ 719.165313][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.165358][ T4334] Call Trace: [ 719.165367][ T4334] [ 719.165377][ T4334] __dump_stack+0x1d/0x30 [ 719.165417][ T4334] dump_stack_lvl+0x95/0xd0 [ 719.165449][ T4334] dump_stack+0x15/0x1b [ 719.165480][ T4334] __get_user_pages+0x195b/0x1ea0 [ 719.165570][ T4334] ? __pfx_crypto_aes_encrypt+0x10/0x10 [ 719.165601][ T4334] ? skcipher_walk_done+0x159/0x3e0 [ 719.165633][ T4334] ? crypto_inc+0xe4/0x170 [ 719.165676][ T4334] __gup_longterm_locked+0x8d7/0xe30 [ 719.165768][ T4334] ? tls_push_sg+0x594/0x5e0 [ 719.165817][ T4334] ? __rcu_read_lock+0x36/0x50 [ 719.165882][ T4334] ? __pte_offset_map+0xef/0x150 [ 719.165919][ T4334] gup_fast_fallback+0x1f3/0x13c0 [ 719.165969][ T4334] get_user_pages_fast+0x5f/0x90 [ 719.166072][ T4334] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 719.166152][ T4334] iov_iter_get_pages2+0x5e/0xa0 [ 719.166197][ T4334] tls_decrypt_sg+0xef3/0x1a70 [ 719.166273][ T4334] tls_decrypt_sw+0x4b/0x440 [ 719.166302][ T4334] ? tls_rx_rec_wait+0x142/0x620 [ 719.166332][ T4334] tls_rx_one_record+0x118/0x820 [ 719.166362][ T4334] ? __pfx_woken_wake_function+0x10/0x10 [ 719.166422][ T4334] tls_sw_recvmsg+0x9d6/0x1500 [ 719.166462][ T4334] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 719.166489][ T4334] ? __pfx_inet6_recvmsg+0x10/0x10 [ 719.166532][ T4334] inet6_recvmsg+0x16b/0x290 [ 719.166564][ T4334] ? __pfx_inet6_recvmsg+0x10/0x10 [ 719.166595][ T4334] sock_recvmsg+0x95/0x120 [ 719.166627][ T4334] sock_read_iter+0x169/0x1b0 [ 719.166662][ T4334] do_iter_readv_writev+0x4fd/0x5a0 [ 719.166704][ T4334] vfs_readv+0x1f4/0x6e0 [ 719.166751][ T4334] do_readv+0xe9/0x210 [ 719.166788][ T4334] __x64_sys_readv+0x45/0x50 [ 719.166808][ T4334] x64_sys_call+0x27c0/0x3020 [ 719.166889][ T4334] do_syscall_64+0x12c/0x370 [ 719.166924][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.166979][ T4334] RIP: 0033:0x7f7d15e0c799 [ 719.167002][ T4334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.167028][ T4334] RSP: 002b:00007f7d1485f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 719.167056][ T4334] RAX: ffffffffffffffda RBX: 00007f7d16085fa0 RCX: 00007f7d15e0c799 [ 719.167073][ T4334] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 719.167122][ T4334] RBP: 00007f7d15ea2c99 R08: 0000000000000000 R09: 0000000000000000 [ 719.167139][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.167157][ T4334] R13: 00007f7d16086038 R14: 00007f7d16085fa0 R15: 00007ffe720ba148 [ 719.167185][ T4334] [ 719.819156][ T4358] netlink: 'syz.5.10098': attribute type 29 has an invalid length. [ 719.827770][ T4358] netlink: 'syz.5.10098': attribute type 29 has an invalid length. [ 719.849381][ T4357] delete_channel: no stack [ 719.932477][ T4367] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 721.562070][ T28] kauditd_printk_skb: 207 callbacks suppressed [ 721.562089][ T28] audit: type=1326 audit(2000001654.629:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.654574][ T28] audit: type=1326 audit(2000001654.719:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.736900][ T28] audit: type=1326 audit(2000001654.749:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.815095][ T28] audit: type=1326 audit(2000001654.749:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.847920][ T28] audit: type=1326 audit(2000001654.749:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.886691][ T28] audit: type=1326 audit(2000001654.749:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 721.995094][ T4434] ------------[ cut here ]------------ [ 722.000630][ T4434] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 722.020507][ T4434] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.9.10123/4434 [ 722.031553][ T4434] Modules linked in: [ 722.035491][ T4434] CPU: 1 UID: 0 PID: 4434 Comm: syz.9.10123 Tainted: G W syzkaller #0 PREEMPT(full) [ 722.046527][ T4434] Tainted: [W]=WARN [ 722.050350][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.060465][ T4434] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 722.066928][ T4434] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 722.086702][ T4434] RSP: 0018:ffffc90007cef370 EFLAGS: 00010246 [ 722.092891][ T4434] RAX: ffff8881048f9b88 RBX: 00000000ffffffff RCX: 0000000000000000 [ 722.100924][ T4434] RDX: ffffffff86818eef RSI: ffffffff8682d453 RDI: ffffffff871d2140 [ 722.109152][ T4434] RBP: ffff88815907b840 R08: 0000007800000000 R09: 0000000000000000 [ 722.117200][ T4434] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88815907b800 [ 722.125240][ T4434] R13: 0000000000000000 R14: ffff88815907b84c R15: ffff88815907b838 [ 722.133376][ T4434] FS: 00007f1c1c7ad6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 722.142476][ T4434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.149121][ T4434] CR2: 00007f1c1c7acff8 CR3: 000000015cac8000 CR4: 00000000003506f0 [ 722.157171][ T4434] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 722.165219][ T4434] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 722.173256][ T4434] Call Trace: [ 722.176563][ T4434] [ 722.179545][ T4434] reg_set_min_max+0x1f2/0x260 [ 722.184413][ T4434] check_cond_jmp_op+0x13b2/0x1a80 [ 722.189579][ T4434] do_check+0x4a9b/0x9860 [ 722.193991][ T4434] do_check_common+0xd0b/0x1630 [ 722.198967][ T4434] bpf_check+0x2f78/0xcc30 [ 722.203556][ T4434] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 722.209660][ T4434] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 722.215640][ T4434] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 722.221623][ T4434] ? _find_next_zero_bit+0x29/0xa0 [ 722.226782][ T4434] ? pcpu_block_update+0x24e/0x3b0 [ 722.232061][ T4434] ? pcpu_block_refresh_hint+0x157/0x170 [ 722.237782][ T4434] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 722.244022][ T4434] ? css_rstat_updated+0xbb/0x280 [ 722.249246][ T4434] ? mod_memcg_state+0x182/0x270 [ 722.254289][ T4434] ? __rcu_read_unlock+0x4e/0x70 [ 722.259272][ T4434] ? avc_has_perm_noaudit+0xab/0x130 [ 722.264630][ T4434] ? avc_has_perm+0x101/0x190 [ 722.269357][ T4434] ? selinux_bpf_prog_load+0x197/0x1c0 [ 722.274896][ T4434] ? security_bpf_prog_load+0x9e/0x140 [ 722.280470][ T4434] bpf_prog_load+0xf76/0x1140 [ 722.285239][ T4434] ? security_bpf+0x2b/0x90 [ 722.289766][ T4434] __sys_bpf+0x505/0x7e0 [ 722.294129][ T4434] __x64_sys_bpf+0x41/0x50 [ 722.298722][ T4434] x64_sys_call+0x10cb/0x3020 [ 722.303542][ T4434] do_syscall_64+0x12c/0x370 [ 722.308163][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.314131][ T4434] RIP: 0033:0x7f1c1dd9c799 [ 722.318663][ T4434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.338331][ T4434] RSP: 002b:00007f1c1c7ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 722.346819][ T4434] RAX: ffffffffffffffda RBX: 00007f1c1e016180 RCX: 00007f1c1dd9c799 [ 722.354846][ T4434] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 722.362872][ T4434] RBP: 00007f1c1de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 722.370865][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.378933][ T4434] R13: 00007f1c1e016218 R14: 00007f1c1e016180 R15: 00007ffd300dd1d8 [ 722.387028][ T4434] [ 722.390148][ T4434] ---[ end trace 0000000000000000 ]--- [ 722.492704][ T28] audit: type=1326 audit(2000001654.749:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 722.516359][ T28] audit: type=1326 audit(2000001654.749:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27a145cfce code=0x7ffc0000 [ 722.540065][ T28] audit: type=1326 audit(2000001654.749:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 722.626052][ T28] audit: type=1326 audit(2000001654.749:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.5.10121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 722.928543][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10126'. [ 722.942794][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10126'. [ 723.044540][ T4452] loop3: detected capacity change from 0 to 512 [ 723.071294][ T4452] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 723.091237][ T4452] EXT4-fs (loop3): mount failed [ 724.114501][ T4485] batman_adv: batadv0: Removing interface: dummy0 [ 724.128633][ T4485] bond2: (slave geneve2): Releasing active interface [ 724.146012][ T4485] bond3: (slave geneve3): Releasing active interface [ 724.160414][ T4485] bond4: (slave veth13): Releasing active interface [ 724.178731][ T4486] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10142'. [ 725.650221][ T4512] syzkaller0: entered promiscuous mode [ 725.655917][ T4512] syzkaller0: entered allmulticast mode [ 726.040268][ T4529] bond0: (slave bond_slave_0): Releasing backup interface [ 726.049726][ T4529] bond0: (slave bond_slave_1): Releasing backup interface [ 726.062660][ T4529] team0: Port device team_slave_1 removed [ 726.069303][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.078043][ T4535] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10157'. [ 726.087951][ T4529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 726.105765][ T4533] netlink: 'syz.9.10160': attribute type 4 has an invalid length. [ 726.366688][ T4539] syz.9.10161 invoked oom-killer: gfp_mask=0x482cc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_NOMEMALLOC), order=1, oom_score_adj=0 [ 726.384789][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.9.10161 Tainted: G W syzkaller #0 PREEMPT(full) [ 726.384869][ T4539] Tainted: [W]=WARN [ 726.384880][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.384898][ T4539] Call Trace: [ 726.384906][ T4539] [ 726.384916][ T4539] __dump_stack+0x1d/0x30 [ 726.384956][ T4539] dump_stack_lvl+0x95/0xd0 [ 726.385138][ T4539] dump_stack+0x15/0x1b [ 726.385168][ T4539] dump_header+0x80/0x240 [ 726.385200][ T4539] oom_kill_process+0x295/0x350 [ 726.385307][ T4539] out_of_memory+0x97d/0xb80 [ 726.385344][ T4539] try_charge_memcg+0x62e/0xa10 [ 726.385414][ T4539] obj_cgroup_charge_pages+0x23/0xc0 [ 726.385505][ T4539] obj_cgroup_charge_account+0x73/0x1a0 [ 726.385589][ T4539] __memcg_slab_post_alloc_hook+0x392/0x540 [ 726.385632][ T4539] __kmalloc_node_track_caller_noprof+0x353/0x560 [ 726.385667][ T4539] ? kmem_cache_alloc_node_noprof+0x260/0x460 [ 726.385762][ T4539] ? alloc_skb_with_frags+0x7d/0x470 [ 726.385873][ T4539] __alloc_skb+0x3a4/0x690 [ 726.385907][ T4539] ? __alloc_skb+0x200/0x690 [ 726.385942][ T4539] alloc_skb_with_frags+0x7d/0x470 [ 726.386097][ T4539] sock_alloc_send_pskb+0x44d/0x500 [ 726.386142][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 726.386172][ T4539] unix_stream_sendmsg+0x40a/0xbb0 [ 726.386224][ T4539] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 726.386355][ T4539] ____sys_sendmsg+0x563/0x5b0 [ 726.386429][ T4539] ___sys_sendmsg+0x195/0x1e0 [ 726.386522][ T4539] __x64_sys_sendmsg+0xd4/0x160 [ 726.386570][ T4539] x64_sys_call+0x194c/0x3020 [ 726.386644][ T4539] do_syscall_64+0x12c/0x370 [ 726.386677][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.386705][ T4539] RIP: 0033:0x7f1c1dd9c799 [ 726.386803][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.386827][ T4539] RSP: 002b:00007f1c1c7ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.386853][ T4539] RAX: ffffffffffffffda RBX: 00007f1c1e016090 RCX: 00007f1c1dd9c799 [ 726.386872][ T4539] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 726.386907][ T4539] RBP: 00007f1c1de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 726.386924][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.386940][ T4539] R13: 00007f1c1e016128 R14: 00007f1c1e016090 R15: 00007ffd300dd1d8 [ 726.386966][ T4539] [ 726.761627][ T4539] memory: usage 251300kB, limit 307200kB, failcnt 4348 [ 726.871771][ T4546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4546 comm=syz.7.10163 [ 726.888674][ T4539] memory+swap: usage 262176kB, limit 9007199254740988kB, failcnt 0 [ 727.019696][ T4539] kmem: usage 176068kB, limit 9007199254740988kB, failcnt 0 [ 727.183653][ T4539] Memory cgroup stats for /syz9: [ 727.183903][ T4539] cache 35090432 [ 727.201179][ T4539] rss 3563520 [ 727.201192][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 727.201208][ T28] audit: type=1400 audit(2000001660.219:10781): avc: denied { read } for pid=4547 comm="syz.3.10164" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 727.211181][ T4539] shmem 35090432 [ 727.253454][ T28] audit: type=1400 audit(2000001660.219:10782): avc: denied { open } for pid=4547 comm="syz.3.10164" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 727.313703][ T4551] loop3: detected capacity change from 0 to 128 [ 727.322224][ T4551] vfat: Unknown parameter '017777777777777777777770xffffffffffffffff00000000000000000000000' [ 727.335714][ T4539] mapped_file 0 [ 727.339222][ T4539] dirty 0 [ 727.342241][ T4539] writeback 0 [ 727.345577][ T4539] workingset_refault_anon 4806 [ 727.350363][ T4539] workingset_refault_file 6717 [ 727.355256][ T4539] swap 38486016 [ 727.358734][ T4539] swapcached 49991680 [ 727.372833][ T4539] pgpgin 677834 [ 727.403458][ T4539] pgpgout 668365 [ 727.407116][ T4539] pgfault 607952 [ 727.410677][ T4539] pgmajfault 681 [ 727.551793][ T4539] inactive_anon 34017280 [ 727.571241][ T4539] active_anon 4759552 [ 727.575275][ T4539] inactive_file 0 [ 727.578926][ T4539] active_file 8192 [ 727.591178][ T4539] unevictable 0 [ 727.600432][ T4539] hierarchical_memory_limit 314572800 [ 727.612799][ T4539] hierarchical_memsw_limit 9223372036854771712 [ 727.619106][ T4539] total_cache 35090432 [ 727.623646][ T4539] total_rss 3563520 [ 727.627536][ T4539] total_shmem 35090432 [ 727.631970][ T4539] total_mapped_file 0 [ 727.636048][ T4539] total_dirty 0 [ 727.639570][ T4539] total_writeback 0 [ 727.643906][ T4539] total_workingset_refault_anon 4806 [ 727.649279][ T4539] total_workingset_refault_file 6717 [ 727.654994][ T4539] total_swap 38486016 [ 727.663407][ T4539] total_swapcached 49991680 [ 727.673449][ T4539] total_pgpgin 677834 [ 727.681917][ T4539] total_pgpgout 668365 [ 727.690500][ T4539] total_pgfault 607952 [ 727.699254][ T4539] total_pgmajfault 681 [ 727.708520][ T4539] total_inactive_anon 34017280 [ 727.755109][ T4539] total_active_anon 4759552 [ 727.765705][ T4539] total_inactive_file 0 [ 727.791986][ T4539] total_active_file 8192 [ 727.808108][ T4539] total_unevictable 0 [ 727.820908][ T4539] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5095,pid=20112,uid=0 [ 727.871772][ T4539] Memory cgroup out of memory: Killed process 20112 (syz.9.5095) total-vm:96080kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 727.972937][ T4542] syz.9.10161 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 728.010139][ T4542] CPU: 1 UID: 0 PID: 4542 Comm: syz.9.10161 Tainted: G W syzkaller #0 PREEMPT(full) [ 728.010225][ T4542] Tainted: [W]=WARN [ 728.010235][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.010251][ T4542] Call Trace: [ 728.010259][ T4542] [ 728.010306][ T4542] __dump_stack+0x1d/0x30 [ 728.010343][ T4542] dump_stack_lvl+0x95/0xd0 [ 728.010373][ T4542] dump_stack+0x15/0x1b [ 728.010402][ T4542] dump_header+0x80/0x240 [ 728.010476][ T4542] oom_kill_process+0x295/0x350 [ 728.010506][ T4542] out_of_memory+0x97d/0xb80 [ 728.010607][ T4542] try_charge_memcg+0x62e/0xa10 [ 728.010732][ T4542] __mem_cgroup_charge+0x65/0x150 [ 728.010770][ T4542] do_wp_page+0xf84/0x2590 [ 728.010845][ T4542] ? __rcu_read_lock+0x36/0x50 [ 728.010877][ T4542] handle_mm_fault+0x8cb/0x3020 [ 728.010920][ T4542] ? mt_find+0x291/0x3d0 [ 728.010990][ T4542] do_user_addr_fault+0x3fd/0x1050 [ 728.011086][ T4542] exc_page_fault+0x62/0xa0 [ 728.011179][ T4542] asm_exc_page_fault+0x26/0x30 [ 728.011206][ T4542] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 728.011314][ T4542] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 728.011339][ T4542] RSP: 0018:ffffc90005143868 EFLAGS: 00050206 [ 728.011360][ T4542] RAX: ffff8881abfc5e88 RBX: ffff88811e378000 RCX: 00000000000022c0 [ 728.011380][ T4542] RDX: 0000000000000000 RSI: ffff88811e379d40 RDI: 0000200000330000 [ 728.011399][ T4542] RBP: 000020000032e2c0 R08: 0000000000000ba8 R09: 0000000000000000 [ 728.011461][ T4542] R10: 000188811e378000 R11: 000188811e37bfff R12: 00002000003322c0 [ 728.011480][ T4542] R13: ffffc90005143e70 R14: 0000000000004000 R15: 00007ffffffff000 [ 728.011508][ T4542] _copy_to_iter+0x141/0xea0 [ 728.011598][ T4542] ? _raw_spin_unlock+0x9/0x30 [ 728.011632][ T4542] ? finish_task_switch+0x7d/0x280 [ 728.011702][ T4542] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 728.011802][ T4542] __skb_datagram_iter+0x2f4/0x680 [ 728.011846][ T4542] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 728.011891][ T4542] skb_copy_datagram_iter+0x3f/0x120 [ 728.011960][ T4542] unix_stream_read_actor+0x43/0x70 [ 728.011990][ T4542] unix_stream_read_generic+0x6e9/0x1630 [ 728.012033][ T4542] ? __pfx_autoremove_wake_function+0x10/0x10 [ 728.012139][ T4542] unix_stream_recvmsg+0xff/0x130 [ 728.012170][ T4542] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 728.012202][ T4542] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 728.012298][ T4542] sock_recvmsg+0xf5/0x120 [ 728.012329][ T4542] ____sys_recvmsg+0xf5/0x280 [ 728.012382][ T4542] ___sys_recvmsg+0x11f/0x3b0 [ 728.012496][ T4542] __x64_sys_recvmsg+0xd1/0x160 [ 728.012548][ T4542] x64_sys_call+0x2b1a/0x3020 [ 728.012645][ T4542] do_syscall_64+0x12c/0x370 [ 728.012726][ T4542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.012754][ T4542] RIP: 0033:0x7f1c1dd9c799 [ 728.012774][ T4542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.012798][ T4542] RSP: 002b:00007f1c1c7ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 728.012823][ T4542] RAX: ffffffffffffffda RBX: 00007f1c1e016180 RCX: 00007f1c1dd9c799 [ 728.012850][ T4542] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000005 [ 728.012866][ T4542] RBP: 00007f1c1de32c99 R08: 0000000000000000 R09: 0000000000000000 [ 728.012879][ T4542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.012895][ T4542] R13: 00007f1c1e016218 R14: 00007f1c1e016180 R15: 00007ffd300dd1d8 [ 728.012922][ T4542] [ 728.411309][ T4542] memory: usage 307044kB, limit 307200kB, failcnt 4431 [ 728.418352][ T4542] memory+swap: usage 344564kB, limit 9007199254740988kB, failcnt 0 [ 728.426417][ T4542] kmem: usage 269084kB, limit 9007199254740988kB, failcnt 0 [ 728.437900][ T4542] Memory cgroup stats for /syz9: [ 728.438173][ T4542] cache 35090432 [ 728.483365][ T4542] rss 3563520 [ 728.486864][ T4542] shmem 35090432 [ 728.514381][ T4542] mapped_file 0 [ 728.517889][ T4542] dirty 0 [ 728.535604][ T4542] writeback 0 [ 728.538940][ T4542] workingset_refault_anon 4806 [ 728.556878][ T4542] workingset_refault_file 6717 [ 728.584397][ T4542] swap 38420480 [ 728.598422][ T4542] swapcached 49958912 [ 728.607217][ T4542] pgpgin 677834 [ 728.617738][ T4542] pgpgout 668373 [ 728.626034][ T4542] pgfault 607954 [ 728.634266][ T4542] pgmajfault 681 [ 728.642742][ T4542] inactive_anon 34017280 [ 728.643541][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10173'. [ 728.652016][ T4542] active_anon 4726784 [ 728.673961][ T4542] inactive_file 0 [ 728.677659][ T4542] active_file 8192 [ 728.693409][ T4542] unevictable 0 [ 728.703194][ T4542] hierarchical_memory_limit 314572800 [ 728.715796][ T4542] hierarchical_memsw_limit 9223372036854771712 [ 728.738821][ T4542] total_cache 35090432 [ 728.752216][ T4542] total_rss 3563520 [ 728.756269][ T4542] total_shmem 35090432 [ 728.760476][ T4542] total_mapped_file 0 [ 728.764773][ T4542] total_dirty 0 [ 728.768366][ T4542] total_writeback 0 [ 728.772488][ T4542] total_workingset_refault_anon 4806 [ 728.777978][ T4542] total_workingset_refault_file 6717 [ 728.783657][ T4542] total_swap 38420480 [ 728.787713][ T4542] total_swapcached 49958912 [ 728.792549][ T4542] total_pgpgin 677834 [ 728.796856][ T4542] total_pgpgout 668373 [ 728.801042][ T4542] total_pgfault 607954 [ 728.805533][ T4542] total_pgmajfault 681 [ 728.809957][ T4542] total_inactive_anon 34017280 [ 728.816626][ T4542] total_active_anon 4726784 [ 728.821496][ T4542] total_inactive_file 0 [ 728.825781][ T4542] total_active_file 8192 [ 728.830134][ T4542] total_unevictable 0 [ 728.834535][ T4542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.10161,pid=4537,uid=0 [ 728.858281][ T4542] Memory cgroup out of memory: Killed process 4537 (syz.9.10161) total-vm:100448kB, anon-rss:4692kB, file-rss:26320kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 728.941407][ T4575] lo speed is unknown, defaulting to 1000 [ 728.953202][ T4575] lo speed is unknown, defaulting to 1000 [ 728.959303][ T4575] lo speed is unknown, defaulting to 1000 [ 729.118827][ T4575] infiniband syU: set active [ 729.123756][T14483] lo speed is unknown, defaulting to 1000 [ 729.129905][ T4575] infiniband syU: added lo [ 729.168251][ T4575] RDS/IB: syU: added [ 729.172429][ T4575] smc: adding ib device syU with port count 1 [ 729.178674][ T4575] smc: ib device syU port 1 has no pnetid [ 729.185249][T14483] lo speed is unknown, defaulting to 1000 [ 729.191628][ T4575] lo speed is unknown, defaulting to 1000 [ 729.240914][ T4575] lo speed is unknown, defaulting to 1000 [ 729.294331][ T4575] lo speed is unknown, defaulting to 1000 [ 729.372138][ T4575] lo speed is unknown, defaulting to 1000 [ 729.453395][ T4599] tipc: Enabling of bearer rejected, failed to enable media [ 729.527601][ T4588] lo speed is unknown, defaulting to 1000 [ 729.607689][ T4575] lo speed is unknown, defaulting to 1000 [ 729.699665][ T4575] lo speed is unknown, defaulting to 1000 [ 729.817258][ T4575] lo speed is unknown, defaulting to 1000 [ 730.539442][ T4660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10206'. [ 730.592527][ T4660] bond4: entered promiscuous mode [ 730.606928][ T4660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.503763][ T4660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.511394][ T4660] bond4: (slave sit5): The slave device specified does not support setting the MAC address [ 731.523684][ T4660] bond4: (slave sit5): Error -95 calling set_mac_address [ 731.584873][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10210'. [ 731.596465][ T4672] netlink: 'syz.1.10210': attribute type 30 has an invalid length. [ 731.662033][T19035] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.671560][T21243] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.683266][T21243] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.693121][T21243] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.857566][ T4731] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10238'. [ 732.884011][ T4731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4731 comm=syz.7.10238 [ 733.048274][ T4735] netlink: 'syz.7.10230': attribute type 1 has an invalid length. [ 733.076488][ T4735] 8021q: adding VLAN 0 to HW filter on device bond7 [ 733.085466][ T4735] bond6: (slave bond7): making interface the new active one [ 733.093192][ T4735] bond6: (slave bond7): Enslaving as an active interface with an up link [ 733.114193][ T4735] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 733.360219][ T4746] lo speed is unknown, defaulting to 1000 [ 733.475862][ T4760] netlink: 'syz.9.10236': attribute type 27 has an invalid length. [ 733.508240][ T4760] xfrm0: left promiscuous mode [ 733.568242][ T4760] bond2: left allmulticast mode [ 733.572184][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10239'. [ 733.582499][ T4760] bridge12: left promiscuous mode [ 733.594420][ T4760] bridge12: left allmulticast mode [ 733.648713][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.669955][ T4762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.686861][ T4769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4769 comm=syz.1.10239 [ 733.709715][T19035] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.721354][T19035] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.774523][T19035] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.794748][T19035] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.795080][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10241'. [ 733.814944][T19035] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.835169][T19035] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.869858][ T4773] bond5: entered promiscuous mode [ 733.884075][ T4773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 733.912964][T19035] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.922507][T19035] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.049505][ T4773] 8021q: adding VLAN 0 to HW filter on device bond5 [ 734.068336][ T4773] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 734.079965][ T4773] bond5: (slave sit1): Error -95 calling set_mac_address [ 734.887725][ T4813] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 735.472197][ T4820] bond0: entered promiscuous mode [ 735.477421][ T4820] gretap1: entered promiscuous mode [ 735.483781][ T4820] batadv0: entered promiscuous mode [ 735.489681][ T4820] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 735.500770][ T4820] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 735.511601][ T4820] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 735.525019][ T4820] bond0: left promiscuous mode [ 735.530111][ T4820] gretap1: left promiscuous mode [ 735.537357][ T4820] batadv0: left promiscuous mode [ 735.976425][ T4840] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 735.976425][ T4840] The task syz.9.10264 (4840) triggered the difference, watch for misbehavior. [ 736.286482][ T28] audit: type=1326 audit(2000001669.349:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.343770][ T28] audit: type=1326 audit(2000001669.379:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.368389][ T28] audit: type=1326 audit(2000001669.389:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.395884][ T28] audit: type=1326 audit(2000001669.389:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.419977][ T28] audit: type=1326 audit(2000001669.389:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.475404][ T28] audit: type=1326 audit(2000001669.389:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.499384][ T28] audit: type=1326 audit(2000001669.389:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.523312][ T28] audit: type=1326 audit(2000001669.389:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.611313][ T28] audit: type=1326 audit(2000001669.389:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.646016][ T28] audit: type=1326 audit(2000001669.389:10792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4844 comm="syz.5.10266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 736.713191][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10271'. [ 736.906563][ T4865] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10274'. [ 737.012173][ T4852] lo speed is unknown, defaulting to 1000 [ 737.847106][ T4885] netlink: 'syz.9.10281': attribute type 1 has an invalid length. [ 737.903089][ T4885] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.950462][ T4885] bond4: (slave bond5): making interface the new active one [ 737.958606][ T4885] bond4: (slave bond5): Enslaving as an active interface with an up link [ 738.013676][ T4891] bond4: (slave gretap3): Enslaving as a backup interface with an up link [ 739.162236][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10290'. [ 739.760342][ T4916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.791516][T19037] bond0: (slave gretap1): link status definitely down, disabling slave [ 739.801328][T19037] bond0: now running without any active interface! [ 740.815368][ T4976] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2223563300/2223563301 [ 742.374115][ T5013] lo: entered allmulticast mode [ 742.392788][ T5015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10327'. [ 742.397139][ T5013] lo: left allmulticast mode [ 742.474296][ T5015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5015 comm=syz.5.10327 [ 742.501355][ T5018] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10328'. [ 742.588089][ T5018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5018 comm=syz.7.10328 [ 742.934591][ T5040] netlink: 'syz.7.10337': attribute type 1 has an invalid length. [ 742.993982][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10337'. [ 743.050273][ T5040] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.080124][ T5042] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 743.101286][ T5042] bond8: entered allmulticast mode [ 743.127950][ T5044] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 743.345023][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10339'. [ 743.422145][ T5048] vlan3: entered allmulticast mode [ 743.437586][ T5048] bridge0: entered allmulticast mode [ 743.450540][ T5048] bridge10: port 1(vlan3) entered blocking state [ 743.465450][ T5048] bridge10: port 1(vlan3) entered disabled state [ 743.473270][ T5048] vlan3: entered promiscuous mode [ 743.479344][ T5048] bridge0: entered promiscuous mode [ 743.709469][ T5072] lo speed is unknown, defaulting to 1000 [ 746.529076][ T3411] IPVS: starting estimator thread 0... [ 746.635136][ T5140] netlink: 'syz.7.10367': attribute type 2 has an invalid length. [ 746.644010][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10367'. [ 746.661560][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 746.661617][ T28] audit: type=1400 audit(2000001679.699:10819): avc: denied { listen } for pid=5139 comm="syz.7.10367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 746.664416][ T5135] IPVS: using max 2304 ests per chain, 115200 per kthread [ 746.769659][ T5142] netlink: 'syz.7.10368': attribute type 2 has an invalid length. [ 746.976413][ T5154] loop3: detected capacity change from 0 to 128 [ 747.020191][ T5154] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 747.565744][ T5173] delete_channel: no stack [ 749.180566][ T5222] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 749.219062][ T5222] ref_ctr increment failed for inode: 0x10e9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810af14a40 [ 749.276203][ T5226] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 749.313177][ T5226] ref_ctr decrement failed for inode: 0x10e9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810af14a40 [ 749.331280][ T5226] uprobe: syz.1.10396:5226 failed to unregister, leaking uprobe [ 749.548089][ T28] audit: type=1326 audit(2000001682.609:10820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.579009][ T5240] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 749.615892][ T28] audit: type=1326 audit(2000001682.639:10821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.664513][ T28] audit: type=1326 audit(2000001682.639:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.714918][ T28] audit: type=1326 audit(2000001682.639:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.763314][ T28] audit: type=1326 audit(2000001682.639:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.811121][ T28] audit: type=1326 audit(2000001682.639:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.859828][ T28] audit: type=1326 audit(2000001682.639:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.908715][ T28] audit: type=1326 audit(2000001682.639:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 749.957767][ T28] audit: type=1326 audit(2000001682.639:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5239 comm="syz.5.10402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f27a149c799 code=0x7ffc0000 [ 750.834060][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10409'. [ 750.849905][ T5261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10409'. [ 751.339424][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10418'. [ 751.888432][ T5313] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 752.028166][ T5319] : port 1(veth0_to_bridge) entered blocking state [ 752.056427][ T5319] : port 1(veth0_to_bridge) entered disabled state [ 752.063492][ T5319] veth0_to_bridge: entered allmulticast mode [ 752.070061][ T5319] veth0_to_bridge: entered promiscuous mode [ 754.686001][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 754.686019][ T28] audit: type=1326 audit(2000001687.749:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 754.766289][ T5367] lo speed is unknown, defaulting to 1000 [ 754.773836][ T28] audit: type=1326 audit(2000001687.749:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 754.848525][ T28] audit: type=1326 audit(2000001687.749:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 754.919385][ T28] audit: type=1326 audit(2000001687.749:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 754.998526][ T28] audit: type=1326 audit(2000001687.749:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.072834][ T28] audit: type=1326 audit(2000001687.759:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.146787][ T28] audit: type=1326 audit(2000001687.779:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.206111][ T28] audit: type=1326 audit(2000001687.789:10968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.273461][ T28] audit: type=1326 audit(2000001687.789:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.336642][ T28] audit: type=1326 audit(2000001687.799:10970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.1.10443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 755.511255][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10451'. [ 755.769777][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10460'. [ 757.040617][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10472'. [ 757.170430][ T5466] delete_channel: no stack [ 757.438471][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10478'. [ 757.552611][ T5483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5483 comm=syz.1.10478 [ 757.718247][ T5494] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.10479'. [ 757.882806][ T5475] lo speed is unknown, defaulting to 1000 [ 759.658097][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10489'. [ 759.683465][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10490'. [ 759.791020][ T5529] vlan1: entered allmulticast mode [ 759.832553][ T5529] bridge8: entered allmulticast mode [ 759.876088][ T5528] bridge8: port 1(veth23) entered blocking state [ 759.884273][ T5528] bridge8: port 1(veth23) entered disabled state [ 759.903024][ T5528] veth23: entered allmulticast mode [ 759.916815][ T5528] veth23: entered promiscuous mode [ 761.883564][ T5570] lo speed is unknown, defaulting to 1000 [ 762.734534][ T5603] xt_hashlimit: size too large, truncated to 1048576 [ 765.033490][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 765.033509][ T28] audit: type=1326 audit(2000001954.101:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.092660][ T28] audit: type=1326 audit(2000001954.101:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.154556][ T28] audit: type=1326 audit(2000001954.101:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.208813][ T28] audit: type=1326 audit(2000001954.101:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.261235][ T28] audit: type=1326 audit(2000001954.101:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.359420][ T28] audit: type=1326 audit(2000001954.101:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.454922][ T28] audit: type=1326 audit(2000001954.131:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.549676][ T28] audit: type=1326 audit(2000001954.131:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.652287][ T28] audit: type=1326 audit(2000001954.131:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.735622][ T28] audit: type=1326 audit(2000001954.131:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.10533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 765.948291][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10536'. [ 767.287090][ T5696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 767.366714][ T5700] Set syz0 is full, maxelem 0 reached [ 768.142253][ T5718] lo speed is unknown, defaulting to 1000 [ 768.223713][ T5720] syzkaller0: entered promiscuous mode [ 768.249386][ T5720] syzkaller0: entered allmulticast mode [ 768.969969][ T5764] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 771.073616][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10573'. [ 771.121507][ T5781] netlink: 'syz.1.10573': attribute type 5 has an invalid length. [ 771.137838][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10573'. [ 771.610317][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10583'. [ 771.660679][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10583'. [ 771.866084][ T5814] netlink: 'syz.7.10585': attribute type 1 has an invalid length. [ 772.097546][ T5819] loop3: detected capacity change from 0 to 1024 [ 772.112502][ T5814] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.135828][ T5819] EXT4-fs: inline encryption not supported [ 772.173622][ T5819] EXT4-fs: Ignoring removed i_version option [ 772.212944][ T5819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.245072][ T2426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.296671][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10587'. [ 772.315339][ T5830] bond1: (slave veth3): Enslaving as an active interface with a down link [ 772.333808][ T5830] bond1: (slave veth5): Enslaving as an active interface with a down link [ 772.429783][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10590'. [ 773.111191][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 773.111209][ T28] audit: type=1400 audit(2000001962.171:11132): avc: denied { accept } for pid=5862 comm="syz.7.10599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 773.260790][ T28] audit: type=1400 audit(2000001962.321:11133): avc: denied { audit_write } for pid=5867 comm="syz.9.10601" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 774.253824][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10608'. [ 774.296881][ T5887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5887 comm=syz.1.10608 [ 774.338136][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10610'. [ 774.426118][ T5898] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10611'. [ 774.540223][ T5901] netlink: 'syz.1.10613': attribute type 83 has an invalid length. [ 775.192192][ T5914] batadv_slave_1: entered promiscuous mode [ 775.293261][ T5913] batadv_slave_1: left promiscuous mode [ 775.571231][ T28] audit: type=1326 audit(2000001964.631:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.595723][ T5924] netlink: 'syz.5.10620': attribute type 1 has an invalid length. [ 775.619652][ T5924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.634425][ T28] audit: type=1326 audit(2000001964.631:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.681932][ T28] audit: type=1326 audit(2000001964.631:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.705842][ T28] audit: type=1326 audit(2000001964.631:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.724038][ T5924] bond5: (slave gretap2): making interface the new active one [ 775.729769][ T28] audit: type=1326 audit(2000001964.631:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.760713][ T28] audit: type=1326 audit(2000001964.631:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.777498][ T5924] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 775.784938][ T28] audit: type=1326 audit(2000001964.631:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 775.817695][ T28] audit: type=1326 audit(2000001964.631:11141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.7.10621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d15e0c799 code=0x7ffc0000 [ 776.766899][ T5940] syz.7.10626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 776.825908][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.7.10626 Tainted: G W syzkaller #0 PREEMPT(full) [ 776.825950][ T5940] Tainted: [W]=WARN [ 776.825960][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 776.825977][ T5940] Call Trace: [ 776.825986][ T5940] [ 776.825996][ T5940] __dump_stack+0x1d/0x30 [ 776.826028][ T5940] dump_stack_lvl+0x95/0xd0 [ 776.826133][ T5940] dump_stack+0x15/0x1b [ 776.826189][ T5940] dump_header+0x80/0x240 [ 776.826220][ T5940] oom_kill_process+0x295/0x350 [ 776.826252][ T5940] out_of_memory+0x97d/0xb80 [ 776.826344][ T5940] try_charge_memcg+0x62e/0xa10 [ 776.826398][ T5940] obj_cgroup_charge_pages+0x23/0xc0 [ 776.826435][ T5940] __memcg_kmem_charge_page+0x9e/0x170 [ 776.826555][ T5940] __alloc_frozen_pages_noprof+0x18a/0x360 [ 776.826597][ T5940] alloc_pages_mpol+0xb3/0x260 [ 776.826633][ T5940] alloc_pages_noprof+0x8f/0x130 [ 776.826738][ T5940] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 776.826831][ T5940] __kvmalloc_node_noprof+0x3d4/0x650 [ 776.826925][ T5940] ? ip_set_alloc+0x24/0x30 [ 776.826954][ T5940] ? ip_set_alloc+0x24/0x30 [ 776.826981][ T5940] ? __kmalloc_cache_noprof+0x18a/0x410 [ 776.827092][ T5940] ip_set_alloc+0x24/0x30 [ 776.827128][ T5940] hash_netiface_create+0x282/0x740 [ 776.827211][ T5940] ? __pfx_hash_netiface_create+0x10/0x10 [ 776.827246][ T5940] ip_set_create+0x3cf/0x970 [ 776.827300][ T5940] ? __nla_parse+0x40/0x60 [ 776.827403][ T5940] nfnetlink_rcv_msg+0x509/0x5d0 [ 776.827476][ T5940] netlink_rcv_skb+0x123/0x220 [ 776.827508][ T5940] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 776.827626][ T5940] nfnetlink_rcv+0x167/0x1720 [ 776.827737][ T5940] ? vm_area_free+0x71/0xb0 [ 776.827786][ T5940] ? kmem_cache_free+0x237/0x380 [ 776.827812][ T5940] ? percpu_counter_add_batch+0xb6/0x130 [ 776.827897][ T5940] ? uprobe_mmap+0x8b8/0xf80 [ 776.827934][ T5940] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 776.828010][ T5940] ? inode_to_bdi+0x47/0xa0 [ 776.828067][ T5940] ? vma_wants_writenotify+0x148/0x1a0 [ 776.828088][ T5940] ? vma_set_page_prot+0xc3/0xf0 [ 776.828120][ T5940] ? __mmap_complete+0x1f2/0x220 [ 776.828211][ T5940] ? mmap_region+0x1d1b/0x2050 [ 776.828232][ T5940] ? _raw_spin_lock_bh+0x56/0xb0 [ 776.828265][ T5940] ? _raw_spin_unlock_bh+0x18/0x20 [ 776.828370][ T5940] ? selinux_nlmsg_lookup+0x99/0x890 [ 776.828412][ T5940] ? __rcu_read_unlock+0x33/0x70 [ 776.828440][ T5940] ? __netlink_lookup+0x276/0x2b0 [ 776.828553][ T5940] netlink_unicast+0x5c0/0x690 [ 776.828590][ T5940] netlink_sendmsg+0x5c8/0x6f0 [ 776.828724][ T5940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.828766][ T5940] ____sys_sendmsg+0x563/0x5b0 [ 776.828806][ T5940] ___sys_sendmsg+0x195/0x1e0 [ 776.828893][ T5940] __x64_sys_sendmsg+0xd4/0x160 [ 776.828996][ T5940] x64_sys_call+0x194c/0x3020 [ 776.829033][ T5940] do_syscall_64+0x12c/0x370 [ 776.829063][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.829090][ T5940] RIP: 0033:0x7f7d15e0c799 [ 776.829105][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.829203][ T5940] RSP: 002b:00007f7d1485f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.829225][ T5940] RAX: ffffffffffffffda RBX: 00007f7d16085fa0 RCX: 00007f7d15e0c799 [ 776.829242][ T5940] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 776.829259][ T5940] RBP: 00007f7d15ea2c99 R08: 0000000000000000 R09: 0000000000000000 [ 776.829318][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.829332][ T5940] R13: 00007f7d16086038 R14: 00007f7d16085fa0 R15: 00007ffe720ba148 [ 776.829435][ T5940] [ 776.829505][ T5940] memory: usage 307200kB, limit 307200kB, failcnt 556 [ 777.193054][ T5940] memory+swap: usage 216912kB, limit 9007199254740988kB, failcnt 0 [ 777.200982][ T5940] kmem: usage 202064kB, limit 9007199254740988kB, failcnt 0 [ 777.208501][ T5940] Memory cgroup stats for /syz7: [ 777.208965][ T5940] cache 13275136 [ 777.217634][ T5940] rss 573440 [ 777.220849][ T5940] shmem 12750848 [ 777.270286][ T5940] mapped_file 512000 [ 777.304185][ T5940] dirty 16384 [ 777.307522][ T5940] writeback 0 [ 777.330059][ T5940] workingset_refault_anon 5150 [ 777.334944][ T5940] workingset_refault_file 4611 [ 777.339738][ T5940] swap 1282048 [ 777.343242][ T5940] swapcached 6979584 [ 777.347152][ T5940] pgpgin 984515 [ 777.350752][ T5940] pgpgout 981131 [ 777.354453][ T5940] pgfault 662212 [ 777.358067][ T5940] pgmajfault 716 [ 777.361784][ T5940] inactive_anon 12320768 [ 777.366085][ T5940] active_anon 1015808 [ 777.370112][ T5940] inactive_file 0 [ 777.373830][ T5940] active_file 524288 [ 777.377780][ T5940] unevictable 0 [ 777.381425][ T5940] hierarchical_memory_limit 314572800 [ 777.386821][ T5940] hierarchical_memsw_limit 9223372036854771712 [ 777.401141][ T5940] total_cache 13275136 [ 777.405273][ T5940] total_rss 573440 [ 777.409089][ T5940] total_shmem 12750848 [ 777.423730][ T5940] total_mapped_file 512000 [ 777.428196][ T5940] total_dirty 16384 [ 777.441166][ T5940] total_writeback 0 [ 777.452544][ T5940] total_workingset_refault_anon 5150 [ 777.458384][ T5969] lo speed is unknown, defaulting to 1000 [ 777.463236][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10636'. [ 777.471207][ T5940] total_workingset_refault_file 4611 [ 777.482105][ T5969] lo speed is unknown, defaulting to 1000 [ 777.488141][ T5969] lo speed is unknown, defaulting to 1000 [ 777.501223][ T5940] total_swap 1282048 [ 777.511198][ T5940] total_swapcached 6979584 [ 777.520823][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10636'. [ 777.525979][ T5940] total_pgpgin 984515 [ 777.544000][ T5940] total_pgpgout 981131 [ 777.550471][ T5940] total_pgfault 662212 [ 777.558273][ T5940] total_pgmajfault 716 [ 777.568381][ T5940] total_inactive_anon 12320768 [ 777.578481][ T5940] total_active_anon 1015808 [ 777.588609][ T5940] total_inactive_file 0 [ 777.595866][ T5940] total_active_file 524288 [ 777.600459][ T5940] total_unevictable 0 [ 777.604639][ T5940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.10626,pid=5939,uid=0 [ 777.665229][ T5969] infiniband syz0: set active [ 777.666623][ T5940] Memory cgroup out of memory: Killed process 5940 (syz.7.10626) total-vm:96212kB, anon-rss:1408kB, file-rss:22408kB, shmem-rss:484kB, UID:0 pgtables:128kB oom_score_adj:0 [ 777.670322][T14483] lo speed is unknown, defaulting to 1000 [ 777.711581][ T5969] infiniband syz0: added lo [ 777.759230][ T5969] RDS/IB: syz0: added [ 777.778951][ T5969] smc: adding ib device syz0 with port count 1 [ 777.815153][ T5969] smc: ib device syz0 port 1 has no pnetid [ 777.844568][T14483] lo speed is unknown, defaulting to 1000 [ 777.851683][ T5969] lo speed is unknown, defaulting to 1000 [ 777.976754][ T5969] lo speed is unknown, defaulting to 1000 [ 778.064831][ T5969] lo speed is unknown, defaulting to 1000 [ 778.159522][ T5969] lo speed is unknown, defaulting to 1000 [ 778.238526][ T5969] lo speed is unknown, defaulting to 1000 [ 778.322273][ T5993] loop3: detected capacity change from 0 to 512 [ 778.328885][ T5993] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 778.405774][ T5993] loop3: detected capacity change from 0 to 256 [ 778.434451][ T5993] FAT-fs (loop3): count of clusters too big (178174) [ 778.470895][ T5993] FAT-fs (loop3): Can't find a valid FAT filesystem [ 778.497380][ T5969] lo speed is unknown, defaulting to 1000 [ 778.644496][ T5969] lo speed is unknown, defaulting to 1000 [ 778.771592][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10650'. [ 778.869533][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10654'. [ 778.878996][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10654'. [ 778.990957][ T6020] loop3: detected capacity change from 0 to 8192 [ 779.071964][ T6020] loop3: p1 p2 p4 [ 779.077256][ T6020] loop3: p4 size 262912 extends beyond EOD, truncated [ 779.503664][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 779.503680][ T28] audit: type=1326 audit(2000001968.571:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.549702][ T28] audit: type=1326 audit(2000001968.571:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.573940][ T28] audit: type=1326 audit(2000001968.601:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.597782][ T28] audit: type=1326 audit(2000001968.601:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.621585][ T28] audit: type=1326 audit(2000001968.601:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.646705][ T28] audit: type=1326 audit(2000001968.601:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.671596][ T28] audit: type=1326 audit(2000001968.601:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.695662][ T28] audit: type=1326 audit(2000001968.601:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.719510][ T28] audit: type=1326 audit(2000001968.601:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 779.743669][ T28] audit: type=1326 audit(2000001968.601:11189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.3.10664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb343c799 code=0x7ffc0000 [ 781.025333][ T6101] netlink: 'syz.5.10681': attribute type 11 has an invalid length. [ 781.342465][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10685'. [ 781.371634][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10685'. [ 781.956608][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10699'. [ 781.983711][ T6129] vlan3: entered allmulticast mode [ 781.989016][ T6129] bridge15: entered allmulticast mode [ 781.995597][ T6129] bridge15: port 1(erspan0) entered blocking state [ 782.003282][ T6129] bridge15: port 1(erspan0) entered disabled state [ 782.010047][ T6129] erspan0: entered allmulticast mode [ 782.031896][ T6129] erspan0: entered promiscuous mode [ 782.037764][ T6129] bridge15: port 1(erspan0) entered blocking state [ 782.044397][ T6129] bridge15: port 1(erspan0) entered forwarding state [ 782.077923][ T6132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 782.125823][ T6132] vlan4: entered allmulticast mode [ 782.148398][ T6132] bond6: entered allmulticast mode [ 782.587461][ T6167] ipip1: entered promiscuous mode [ 783.046269][ T6186] xt_CT: No such helper "pptp" [ 784.042552][ T6216] lo: entered allmulticast mode [ 784.228444][ T6225] lo speed is unknown, defaulting to 1000 [ 784.286835][ T6225] lo speed is unknown, defaulting to 1000 [ 784.300783][ T6232] netlink: 'syz.5.10724': attribute type 2 has an invalid length. [ 784.317645][ T6232] netlink: 199792 bytes leftover after parsing attributes in process `syz.5.10724'. [ 784.581317][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10727'. [ 784.622009][ T6242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6242 comm=syz.1.10727 [ 785.198004][ T6225] lo speed is unknown, defaulting to 1000 [ 785.511672][ T6225] lo speed is unknown, defaulting to 1000 [ 786.523537][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10747'. [ 786.601304][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10747'. [ 786.675887][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10747'. [ 786.751333][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10747'. [ 786.891357][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10750'. [ 786.918326][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10750'. [ 787.492986][ T6322] netlink: 'syz.3.10753': attribute type 1 has an invalid length. [ 787.597152][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10753'. [ 787.681516][ T6322] bond2: entered promiscuous mode [ 787.686858][ T6322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 787.709529][ T6326] bond2: entered allmulticast mode [ 787.739824][ T6329] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.764109][ T6322] bond2: (slave bridge3): making interface the new active one [ 787.772007][ T6322] bridge3: entered promiscuous mode [ 787.777385][ T6322] bridge3: entered allmulticast mode [ 787.787103][ T6322] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 787.821889][ T6329] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.927363][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 787.927383][ T28] audit: type=1326 audit(2000001976.991:11240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 787.973124][ T28] audit: type=1326 audit(2000001976.991:11241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 787.997516][ T28] audit: type=1326 audit(2000001977.001:11242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.046624][ T28] audit: type=1326 audit(2000001977.001:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.085290][ T6329] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.097467][ T28] audit: type=1326 audit(2000001977.001:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.124258][ T28] audit: type=1326 audit(2000001977.001:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.202150][ T28] audit: type=1326 audit(2000001977.001:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.230226][ T28] audit: type=1326 audit(2000001977.001:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.284770][ T28] audit: type=1326 audit(2000001977.001:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.302766][ T6329] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.331842][ T6346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10760'. [ 788.366727][ T28] audit: type=1326 audit(2000001977.041:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.1.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23e68c799 code=0x7ffc0000 [ 788.489441][ T6346] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 788.505087][ T6346] bridge12: entered promiscuous mode [ 788.510874][ T6346] bridge12: entered allmulticast mode [ 788.700146][ T2202] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.729238][ T2202] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.757578][ T2202] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.771817][ T2202] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.800078][ T6355] bridge0: entered promiscuous mode [ 788.812362][ T6355] bridge0: port 4(macsec1) entered blocking state [ 788.821959][ T6355] bridge0: port 4(macsec1) entered disabled state [ 788.830920][ T6355] macsec1: entered allmulticast mode [ 788.836819][ T6355] bridge0: entered allmulticast mode [ 788.843743][ T6355] macsec1: left allmulticast mode [ 788.849251][ T6355] bridge0: left allmulticast mode [ 788.855152][ T6355] bridge0: left promiscuous mode [ 789.149458][ T6380] syzkaller0: entered promiscuous mode [ 789.155329][ T6380] syzkaller0: entered allmulticast mode [ 789.346584][ T6391] __nla_validate_parse: 1 callbacks suppressed [ 789.346604][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10774'. [ 789.398235][ T6391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6391 comm=syz.5.10774 [ 789.759825][ T6398] veth1_vlan: left allmulticast mode [ 789.765638][ T6398] macvlan0: left allmulticast mode [ 789.789908][ T6398] ip6gre4: left promiscuous mode [ 789.795197][ T6398] ip6gre4: left allmulticast mode [ 789.861995][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10775'. [ 789.976434][ T6398] geneve2: left promiscuous mode [ 790.289925][ T23] lo speed is unknown, defaulting to 1000 [ 790.290154][T19035] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.295859][ T23] syU: Port: 1 Link DOWN [ 790.380388][T19035] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.388966][ T23] lo speed is unknown, defaulting to 1000 [ 790.398168][T19035] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.406987][T19035] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.927141][ T6435] xt_hashlimit: size too large, truncated to 1048576 [ 792.009724][ T6437] lo speed is unknown, defaulting to 1000 [ 792.259595][ T6446] syzkaller0: entered promiscuous mode [ 792.393556][ T6437] lo speed is unknown, defaulting to 1000 [ 792.958770][ T6451] lo speed is unknown, defaulting to 1000 [ 793.383617][ T6451] lo speed is unknown, defaulting to 1000 [ 793.429537][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10795'. [ 793.759234][ T6474] loop3: detected capacity change from 0 to 8192 [ 793.792212][ T6474] loop3: p1 < > p2 p4 < p5 > [ 793.797669][ T6474] loop3: partition table partially beyond EOD, truncated [ 793.842337][ T6474] loop3: p1 start 134217728 is beyond EOD, truncated [ 793.850540][ T6474] loop3: p2 size 591360 extends beyond EOD, truncated [ 793.897257][ T6474] loop3: p5 size 591360 extends beyond EOD, truncated [ 794.088958][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 794.088977][ T28] audit: type=1326 audit(2000001983.141:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.153940][ T28] audit: type=1326 audit(2000001983.141:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.204697][ T28] audit: type=1326 audit(2000001983.141:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.303345][ T28] audit: type=1326 audit(2000001983.141:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.396775][ T28] audit: type=1326 audit(2000001983.141:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.472067][ T28] audit: type=1326 audit(2000001983.141:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.572968][ T28] audit: type=1326 audit(2000001983.141:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.647198][ T28] audit: type=1326 audit(2000001983.141:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.721114][ T28] audit: type=1326 audit(2000001983.141:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6492 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c1dd9c799 code=0x7ffc0000 [ 794.793786][ T28] audit: type=1326 audit(2000001983.141:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.9.10817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c1dd5cfce code=0x7ffc0000 [ 795.021245][ T6519] netlink: 292 bytes leftover after parsing attributes in process `syz.1.10813'. [ 795.220193][ T6529] lo speed is unknown, defaulting to 1000 [ 795.331307][ T6529] lo speed is unknown, defaulting to 1000 [ 795.474746][ T6545] sch_tbf: burst 4398 is lower than device lo mtu (9230) ! [ 796.409747][ T6553] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10823'. [ 797.683895][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10833'. [ 797.704033][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10833'. [ 797.713493][ T6584] veth25: entered promiscuous mode [ 797.718644][ T6584] veth25: entered allmulticast mode [ 797.740404][ T6586] netlink: 'syz.1.10834': attribute type 4 has an invalid length. [ 797.775740][ T6586] netlink: 'syz.1.10834': attribute type 4 has an invalid length. [ 797.870146][ T6594] lo speed is unknown, defaulting to 1000 [ 797.910258][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10840'. [ 797.920412][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10840'. [ 797.947315][ T6603] vlan4: entered promiscuous mode [ 797.953202][ T6603] bridge9: entered promiscuous mode [ 797.958613][ T6603] vlan4: entered allmulticast mode [ 797.971400][ T6603] bridge9: entered allmulticast mode [ 798.014943][ T6594] lo speed is unknown, defaulting to 1000 [ 798.260791][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10842'. [ 798.313335][ T6612] netlink: 'syz.5.10843': attribute type 1 has an invalid length. [ 798.354199][ T6612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.397324][ T6614] bond7: (slave gretap3): making interface the new active one [ 798.416627][ T6614] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 798.441398][ T6612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6612 comm=syz.5.10843 [ 798.456377][ T6616] netlink: 11930 bytes leftover after parsing attributes in process `syz.9.10844'. [ 798.547734][ T6629] syzkaller0: entered promiscuous mode [ 798.561230][ T6629] syzkaller0: entered allmulticast mode [ 798.617411][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10847'. [ 798.636697][ T6637] netlink: 'syz.7.10851': attribute type 1 has an invalid length. [ 798.661255][ T6637] 8021q: adding VLAN 0 to HW filter on device bond10 [ 798.677300][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10851'. [ 798.689655][ T6637] bond10: entered promiscuous mode [ 798.697818][ T6637] bond10: entered allmulticast mode [ 798.710016][ T6637] bond10: (slave dummy0): making interface the new active one [ 798.717782][ T6637] dummy0: entered promiscuous mode [ 798.723191][ T6637] dummy0: entered allmulticast mode [ 798.729222][ T6637] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 798.759217][ T6644] x_tables: duplicate entry at hook 2 [ 798.766961][ T6641] lo speed is unknown, defaulting to 1000 [ 798.806591][ T6641] lo speed is unknown, defaulting to 1000 [ 799.678017][ T6667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6667 comm=syz.9.10862 [ 799.697882][ T6670] bond11: entered promiscuous mode [ 799.703300][ T6670] 8021q: adding VLAN 0 to HW filter on device bond11 [ 799.767124][ T6670] bridge10: entered promiscuous mode [ 799.778256][ T6670] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 799.805307][ T6670] macvlan0: entered promiscuous mode [ 799.810750][ T6670] macvlan0: entered allmulticast mode [ 799.817459][ T6670] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 799.986311][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 799.986331][ T28] audit: type=1400 audit(2000002245.047:11328): avc: denied { getopt } for pid=6678 comm="syz.7.10865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 800.051198][ T28] audit: type=1400 audit(2000002245.047:11329): avc: denied { map } for pid=6678 comm="syz.7.10865" path="socket:[183532]" dev="sockfs" ino=183532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 800.081469][ T6682] __nla_validate_parse: 3 callbacks suppressed [ 800.081492][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10866'. [ 800.109545][ T6682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6682 comm=syz.9.10866 [ 800.414581][ T6689] sctp: [Deprecated]: syz.3.10870 (pid 6689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.414581][ T6689] Use struct sctp_sack_info instead [ 800.480151][ T6695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 801.142565][ T6710] loop3: detected capacity change from 0 to 512 [ 801.370379][ T6710] EXT4-fs: Ignoring removed nobh option [ 801.756024][ T6710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 801.871374][ T6710] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.10876: EA inode hash validation failed [ 801.944775][ T6710] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.10876: corrupted inode contents [ 802.027661][ T6710] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.029036][ T6710] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.10876: mark_inode_dirty error [ 802.038988][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 802.039235][ C1] EXT4-fs (loop3): initial error at time 2000002247: ext4_do_update_inode:5569: inode 15 [ 802.039436][ C1] EXT4-fs (loop3): last error at time 2000002247: ext4_do_update_inode:5569: inode 15 [ 802.188872][ T6736] netlink: 'syz.7.10881': attribute type 2 has an invalid length. [ 802.221608][ T6710] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.222954][ T6710] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.10876: corrupted inode contents [ 802.296363][ T6710] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.297783][ T6710] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.10876: mark_inode_dirty error [ 802.381420][ T6710] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.382812][ T6710] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.10876: mark inode dirty (error -117) [ 802.471377][ T6710] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.472412][ T6710] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 802.534464][ T6710] EXT4-fs (loop3): 1 orphan inode deleted [ 802.567664][ T6710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 802.971812][ T2426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.994886][ T6759] netlink: 'syz.7.10888': attribute type 3 has an invalid length. [ 803.076051][ T6769] syzkaller0: entered promiscuous mode [ 803.092095][ T6769] syzkaller0: entered allmulticast mode [ 803.355252][ T6781] netlink: 'syz.3.10895': attribute type 1 has an invalid length. [ 803.677193][ T6781] 8021q: adding VLAN 0 to HW filter on device bond3 [ 803.804609][ T6785] ip6erspan0: entered promiscuous mode [ 803.843224][ T6785] bond3: (slave ip6erspan0): making interface the new active one [ 803.885113][ T6785] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 804.122244][ T6786] macvlan2: entered promiscuous mode [ 804.128108][ T6786] bond3: entered promiscuous mode [ 804.133899][ T6786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 804.152002][ T6786] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 804.301276][ T6786] bond3: left promiscuous mode [ 804.353748][ T6778] lo speed is unknown, defaulting to 1000 [ 804.409543][ T6797] loop3: detected capacity change from 0 to 128 [ 804.582849][ T6778] lo speed is unknown, defaulting to 1000 [ 805.307029][ T6797] ================================================================== [ 805.315178][ T6797] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 805.323132][ T6797] [ 805.325486][ T6797] write to 0xffff88811b51af14 of 4 bytes by task 6801 on cpu 0: [ 805.333147][ T6797] xas_set_mark+0x12b/0x140 [ 805.337686][ T6797] __folio_start_writeback+0x17b/0x370 [ 805.343195][ T6797] __block_write_full_folio+0x53a/0x8f0 [ 805.348781][ T6797] block_write_full_folio+0x2c1/0x2e0 [ 805.354231][ T6797] mpage_writepages+0x710/0x1310 [ 805.359215][ T6797] fat_writepages+0x24/0x30 [ 805.363759][ T6797] do_writepages+0x1c6/0x310 [ 805.368397][ T6797] file_write_and_wait_range+0x178/0x2f0 [ 805.374053][ T6797] __generic_file_fsync+0x46/0x160 [ 805.379198][ T6797] fat_file_fsync+0x49/0x100 [ 805.383825][ T6797] vfs_fsync_range+0xc5/0xe0 [ 805.388456][ T6797] generic_file_write_iter+0x1ba/0x310 [ 805.394046][ T6797] iter_file_splice_write+0x6c4/0xa80 [ 805.399443][ T6797] direct_splice_actor+0x156/0x2a0 [ 805.404592][ T6797] splice_direct_to_actor+0x311/0x670 [ 805.410009][ T6797] do_splice_direct+0x119/0x1a0 [ 805.414901][ T6797] do_sendfile+0x382/0x650 [ 805.419357][ T6797] __x64_sys_sendfile64+0x105/0x150 [ 805.424601][ T6797] x64_sys_call+0x2dc4/0x3020 [ 805.429322][ T6797] do_syscall_64+0x12c/0x370 [ 805.433945][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.439874][ T6797] [ 805.442225][ T6797] read to 0xffff88811b51af14 of 4 bytes by task 6797 on cpu 1: [ 805.449794][ T6797] __writeback_single_inode+0x26b/0x860 [ 805.455389][ T6797] writeback_single_inode+0x16d/0x3f0 [ 805.460901][ T6797] sync_inode_metadata+0x6e/0xa0 [ 805.465877][ T6797] __generic_file_fsync+0x109/0x160 [ 805.471113][ T6797] fat_file_fsync+0x49/0x100 [ 805.475826][ T6797] vfs_fsync_range+0xc5/0xe0 [ 805.480460][ T6797] generic_file_write_iter+0x1ba/0x310 [ 805.486040][ T6797] iter_file_splice_write+0x6c4/0xa80 [ 805.491444][ T6797] direct_splice_actor+0x156/0x2a0 [ 805.496591][ T6797] splice_direct_to_actor+0x311/0x670 [ 805.501996][ T6797] do_splice_direct+0x119/0x1a0 [ 805.506874][ T6797] do_sendfile+0x382/0x650 [ 805.511353][ T6797] __x64_sys_sendfile64+0x105/0x150 [ 805.516610][ T6797] x64_sys_call+0x2dc4/0x3020 [ 805.521335][ T6797] do_syscall_64+0x12c/0x370 [ 805.526059][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.531989][ T6797] [ 805.534332][ T6797] value changed: 0x0a000021 -> 0x04000021 [ 805.540075][ T6797] [ 805.542419][ T6797] Reported by Kernel Concurrency Sanitizer on: [ 805.548599][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.3.10898 Tainted: G W syzkaller #0 PREEMPT(full) [ 805.559572][ T6797] Tainted: [W]=WARN [ 805.563401][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.573558][ T6797] ==================================================================