last executing test programs: 2m56.268311103s ago: executing program 32 (id=1588): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004331}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m51.777458165s ago: executing program 3 (id=1671): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 2m51.736052558s ago: executing program 3 (id=1674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) 2m51.168352021s ago: executing program 3 (id=1678): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x0) 2m51.072174336s ago: executing program 3 (id=1682): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m51.02702665s ago: executing program 3 (id=1684): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000000240)=@delchain={0xd04, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xffffffff, 0x7}, {0x8000, 0x1, 0x80000000}, 0x16, 0x17, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc94, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1ffe6, 0x8}}, @TCA_RSVP_POLICE={0x824, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x2, 0x3ff, 0x3d, 0x2, 0xf7, 0x7, 0xffff7fff, 0xfffffff9, 0x80, 0x10, 0x8, 0xf90, 0xb4e, 0x9, 0x8, 0x9, 0x6, 0xffffffc0, 0x4, 0x101, 0x14c1, 0x1, 0x0, 0x80000001, 0x4, 0x1ff, 0x7, 0x0, 0xffff, 0x2, 0xff, 0x2, 0x3, 0xbb, 0x0, 0x4, 0x100, 0x7, 0x7, 0x61, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x4, 0xffff, 0x7fb4, 0x3, 0x0, 0x9, 0xd819, 0x0, 0x9, 0x80000001, 0x7, 0x4dbc263c, 0x336d, 0xfffffffb, 0x1, 0x2, 0x1, 0x1, 0x685c, 0x100, 0x3, 0x200, 0xb9, 0x1, 0x8000, 0xffffffff, 0x924, 0x1, 0x4, 0x4, 0x4, 0xfffffffb, 0xff, 0x2, 0x3, 0x405, 0x0, 0x1000, 0xffff, 0xb, 0xffffffff, 0x5, 0x6, 0x4, 0x3, 0x3, 0xb66, 0x7fff, 0x5, 0x4, 0xe2b, 0x3, 0x8, 0x400, 0x20c3, 0x9, 0x469, 0x4, 0x8, 0x2, 0xfffffffb, 0x5, 0x0, 0x7, 0xfc, 0x4, 0x4, 0x4410, 0x788, 0x4, 0x0, 0xfffffffa, 0x0, 0x40, 0x5, 0x0, 0x9, 0x8, 0x1, 0x7f, 0x8, 0x5e83, 0x9, 0x8001, 0x3, 0x2, 0x0, 0x9, 0x2, 0x8, 0x5, 0x8001, 0x7, 0xa61f, 0x800, 0x1ff, 0x3, 0x9, 0xfffffc01, 0x100, 0xc9e6, 0x2, 0x5, 0x200, 0x0, 0x0, 0x5, 0x6, 0x2, 0x200, 0x0, 0x0, 0x4, 0x1, 0x9, 0x2, 0xffff, 0x3, 0x12, 0x6, 0x0, 0x8, 0x7, 0x2, 0x1, 0x80000001, 0x100, 0x3, 0x101, 0x7fff, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x4, 0x2, 0x3f26406, 0xa, 0x10001, 0x5, 0x9, 0x4, 0x10, 0x4, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0x4, 0xae26, 0x3697, 0x3, 0x1, 0x8001, 0x7, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x4, 0x7, 0xd1, 0x8, 0x5, 0x7, 0x2, 0x7fffffff, 0xfffffffe, 0xb, 0x7, 0xd, 0x8, 0x6, 0x1, 0xd, 0x3, 0x8, 0x2, 0x532, 0xffffff3e, 0x6, 0xff, 0x5b96000, 0x4, 0x1, 0x5, 0x5, 0x4, 0x4, 0x3, 0x70ea, 0x10, 0xffffffff, 0x100, 0x4, 0xd, 0x1, 0xfff, 0x0, 0x7fff, 0xae, 0x416efdef, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc9e5, 0x80000001, 0x101, 0x0, 0xa9, 0x7, 0x4, 0x94, 0x49b, 0x7ff, 0x1, 0x81, 0xb8, 0x8001, 0x10, 0x3, 0x4, 0x991, 0xfffffffd, 0x7ff, 0x6, 0x5, 0x4, 0x8001, 0x3, 0x7, 0x5, 0xced, 0xfffffc00, 0x6, 0x101, 0x7fff, 0x8, 0x7, 0x1, 0x3, 0xb, 0x0, 0xb, 0x8, 0x7, 0x8d2, 0x80, 0x47e, 0x4918, 0xc43, 0x80000001, 0x4, 0x8, 0xfffffff9, 0x3, 0x6dbb, 0x6, 0xfffffff8, 0xe2, 0x3, 0x7, 0x9, 0x4, 0x1, 0x3, 0x0, 0xf3523b20, 0x6, 0x0, 0x2, 0x2, 0x80000000, 0x21dce07, 0x3ff, 0x4, 0x0, 0x6, 0x9, 0x10, 0x10000, 0x5, 0x2, 0x3, 0xe51, 0x8, 0x7fff, 0x5, 0x6, 0x80, 0x50, 0x9, 0x40, 0x0, 0x575e, 0x400, 0x9, 0x5, 0x9, 0x0, 0x6, 0x5c, 0x2, 0x40, 0x6, 0x6, 0x401, 0x0, 0x0, 0x401, 0x0, 0xfffffff3, 0x2, 0x4f478, 0x2, 0x5, 0x401, 0x6, 0x2, 0x6, 0x400, 0xffffffff, 0x1000, 0x8, 0x2, 0x96f3, 0x1ff, 0x6, 0x6, 0xffffffff, 0x2, 0x1, 0x1000, 0x3, 0x6, 0x40008001, 0x1ff, 0x3, 0x4a, 0xa, 0x8, 0x400, 0xffffffff, 0x0, 0xa, 0x7, 0x50000, 0xb, 0x2, 0x834, 0x1, 0x9, 0x2, 0x1, 0x2, 0x3, 0xffffffff, 0x8, 0x7, 0x8, 0x38f04e17, 0x9, 0x5, 0x81, 0x0, 0xaa02, 0x0, 0xa2, 0x9, 0x7fff, 0x3, 0xc, 0xfffffffe, 0x6, 0xa6, 0xd, 0x3, 0x7, 0x2f, 0x7, 0xce, 0x4db4acbc, 0x9, 0x0, 0xb01, 0x40, 0x4, 0x599, 0x5, 0x8, 0x8, 0x5, 0x8, 0xff, 0x2, 0x101, 0x0, 0xd104, 0x7fff, 0x9, 0x9, 0x30, 0x5, 0x380, 0x9, 0x7, 0x5, 0xa, 0xff, 0xfffffffc, 0x5, 0x1, 0x1, 0xe, 0x4, 0xfff, 0x1, 0x0, 0x401, 0x8, 0x4, 0x81, 0xb9c, 0x0, 0x6, 0x8, 0xa0, 0x8, 0x4, 0x8, 0x8, 0x9, 0x1, 0x8000, 0x0, 0x2, 0x6, 0x40, 0x0, 0x1, 0xcd0, 0x1, 0x10000, 0x0, 0x2, 0x5, 0xfffffffd, 0x50, 0x4, 0x54, 0x200, 0x200, 0x9, 0xffff8000, 0xb, 0x8000, 0x80, 0x2, 0x4, 0x1, 0x5]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x4a24, 0xa661}, {0x400000, 0x3, 0x101}, 0x37, 0xff}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x4, 0x32f, 0x681, {0x7, 0x0, 0xfffe, 0x11, 0x1, 0x5}, {0x0, 0x1, 0x1, 0x1ff, 0xfff7, 0xf}, 0xbe, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x5, 0x6, 0x1, 0xf6dc, 0x10001, 0x10000, 0xbfe4, 0x9, 0x8, 0x8, 0x1, 0x5, 0xffffffff, 0x4ab3689d, 0xfffffff8, 0x1000, 0x6, 0x2, 0x5acd, 0x9, 0x1, 0x5, 0x0, 0x99aa, 0x814, 0x4, 0x4, 0x2, 0x9, 0x3a, 0x5, 0xfffff000, 0x9, 0x7ff, 0x4, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0xffff8001, 0x0, 0x7, 0x0, 0x800, 0x0, 0x1, 0x0, 0x61, 0x10, 0x101, 0x4, 0xb4c1, 0xa, 0x81, 0x7fff, 0x15, 0x2, 0x0, 0x0, 0x8, 0x200, 0x1, 0x10001, 0x5, 0x4, 0x929, 0x1, 0x9, 0x7, 0x81, 0x8, 0x1000000, 0xfffffff8, 0x2be, 0xffffff00, 0x800, 0x6, 0x7fffffff, 0x0, 0x5, 0x5, 0x80, 0x3, 0x0, 0x4, 0x401, 0x9, 0xb, 0x81, 0x1, 0x7fffffff, 0x2, 0x2038, 0x3, 0xa4, 0x5, 0x101, 0x0, 0x6, 0x40, 0x3d95cac0, 0x2, 0x104d, 0x1000, 0x4cb, 0x239, 0x1, 0x7, 0x23, 0x3, 0x3941d18c, 0x3207, 0x5, 0x1, 0x0, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x8, 0x5, 0x40, 0x1, 0x1, 0x5, 0xfffffff7, 0xc42, 0x0, 0x5, 0x1, 0x7, 0x3, 0xe, 0x6, 0xfffffffb, 0xda, 0x3, 0xefffff92, 0xfffffc00, 0x4, 0x1, 0x401, 0x5, 0x8000, 0x9, 0x6, 0x708, 0x7fffffff, 0x1, 0x5b9449b5, 0x5, 0x8, 0xffffffff, 0x5, 0x5, 0xfffffff8, 0xa, 0x6, 0x7, 0x416, 0x8, 0x2, 0xf40000, 0x6, 0x8a87, 0x9, 0x6e, 0xfffff800, 0x7, 0x64ad, 0x0, 0xd, 0x6, 0x1, 0x3, 0xd, 0x5, 0x3, 0x6, 0x6, 0x3, 0x401, 0x6, 0x80000001, 0x9, 0x0, 0xfffffe00, 0x7, 0xfffffff7, 0xbfb6, 0x8000, 0x9, 0x7, 0xffffff54, 0x2, 0xd7ed, 0x5, 0x7, 0x0, 0x10000, 0x10001, 0x9, 0xc, 0x80000001, 0x5699, 0x698b, 0x4, 0xe6, 0x4, 0x7fffffff, 0xfe4a, 0x1, 0x800, 0xf, 0x8, 0x3, 0xfffffff7, 0x7, 0x400, 0x7fffffff, 0x0, 0x1, 0xffffffff, 0x8, 0x1, 0x65, 0x8, 0x8, 0x800, 0x4, 0x200, 0x2, 0x8000, 0x5, 0x9, 0x8, 0x9, 0x595, 0x4, 0x5, 0x1, 0x4, 0x3, 0x8, 0x4, 0x2]}]}]}}]}, 0xd04}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x400a00, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m50.684374229s ago: executing program 3 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x340800, &(0x7f0000000a80)={[], [{@euid_lt}, {@euid_gt}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2m50.68111744s ago: executing program 33 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x340800, &(0x7f0000000a80)={[], [{@euid_lt}, {@euid_gt}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 2m31.988902284s ago: executing program 4 (id=2127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", '\x00', "4807a1e6"}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0xc}}], 0xc}, 0x0) 2m31.924310517s ago: executing program 4 (id=2129): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 2m31.826500933s ago: executing program 4 (id=2131): syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "7036aae76ff4739f39be35830a3e80a091594647f0b23f18fd91ece93955bbe7ec49e6"}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.283673165s ago: executing program 4 (id=2144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1041006, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 2m31.254139577s ago: executing program 4 (id=2146): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@orlov}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2m31.080292237s ago: executing program 4 (id=2149): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x9}}}]}]}]}}]}, 0x50}}, 0x0) 2m31.080131227s ago: executing program 34 (id=2149): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x9}}}]}]}]}}]}, 0x50}}, 0x0) 2m27.742964562s ago: executing program 0 (id=2197): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x152, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340), &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2}, 0x8) 2m26.896251392s ago: executing program 0 (id=2198): socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 2m26.859236334s ago: executing program 0 (id=2199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r2, 0x25, 0x0, @val=@netkit}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4, 0x4, r1}, 0x10) 2m26.829110366s ago: executing program 0 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 2m26.802454567s ago: executing program 0 (id=2201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0xffff}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 2m26.741131341s ago: executing program 0 (id=2202): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8005}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syslog(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pause() 2m26.731768441s ago: executing program 35 (id=2202): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8005}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syslog(0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pause() 2m26.294224817s ago: executing program 6 (id=2205): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0xf, 0x6, @random="1905664bdaf1"}, 0x14) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 2m26.202202962s ago: executing program 6 (id=2206): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@errors_remount}]}, 0x2, 0x571, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r0, &(0x7f0000000240)=""/118, 0x76) getdents(r0, 0x0, 0x0) 2m26.06522245s ago: executing program 6 (id=2207): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 2m25.936902368s ago: executing program 6 (id=2210): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 2m25.785542266s ago: executing program 6 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 2m25.476125345s ago: executing program 6 (id=2220): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m25.443426277s ago: executing program 36 (id=2220): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10290, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m48.008512978s ago: executing program 9 (id=3074): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1m47.966922471s ago: executing program 9 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000e4ff00000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000004080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8065}, 0x24000840) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 1m47.940256902s ago: executing program 9 (id=3079): connect$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000901000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m47.836496928s ago: executing program 9 (id=3084): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000bde000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.820257049s ago: executing program 9 (id=3085): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) chroot(0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x140002, 0x0) 1m47.731379125s ago: executing program 9 (id=3086): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000020000000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x2c, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1m47.711352436s ago: executing program 37 (id=3086): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000020000000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x2c, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 2.146578095s ago: executing program 5 (id=5296): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 2.0626419s ago: executing program 7 (id=5298): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0xfdff, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x7, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x6, 0x1fd, {0x0, 0xa}, {0x1, 0x7}, @const={0x0, {0x1, 0x8, 0x4, 0x881}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.835881703s ago: executing program 5 (id=5301): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) 1.514635002s ago: executing program 8 (id=5306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) gettid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() gettid() timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 1.507432832s ago: executing program 5 (id=5307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 1.475578284s ago: executing program 8 (id=5309): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) socket(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xff) 1.385496459s ago: executing program 8 (id=5311): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x4000001e, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.20004508s ago: executing program 7 (id=5318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) fchown(r2, 0x0, 0xee01) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) 1.148789143s ago: executing program 8 (id=5320): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 1.011425061s ago: executing program 5 (id=5323): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) timer_create(0x2, 0x0, 0x0) 955.732974ms ago: executing program 8 (id=5324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) 881.027989ms ago: executing program 5 (id=5325): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 696.319379ms ago: executing program 5 (id=5327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffbf}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) syz_emit_ethernet(0x43, &(0x7f00000000c0)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "180022ebff"}}}}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) 562.933607ms ago: executing program 7 (id=5329): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6e2a, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x5a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 529.009619ms ago: executing program 2 (id=5331): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x94}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x800) 521.03763ms ago: executing program 1 (id=5332): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 505.008831ms ago: executing program 7 (id=5333): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 429.445395ms ago: executing program 2 (id=5334): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x38, "3a867cf0a70f4fd673292639346ea5e1a8fa8566c780406f6709000005000000000c0000fe65af078e84e4e4d48a1a87bef711904e3322c5"}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 402.548337ms ago: executing program 2 (id=5335): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM(0x41555856, 0x2, &(0x7f0000ffb000/0x2000)=nil) listen(0xffffffffffffffff, 0x800) 382.456188ms ago: executing program 2 (id=5336): socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 358.432189ms ago: executing program 2 (id=5337): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r0, &(0x7f0000000240)=""/164, 0x131, 0x131) 350.41288ms ago: executing program 1 (id=5338): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)="5cdd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 332.501621ms ago: executing program 2 (id=5339): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000580)="0000000000aa303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d35bd216ed78ffb6e711b889cda0346ce9bca2e6e9e46b1d980456c43a659f7c7e3e6e9e16e0de93100734d432ca57c27d3bde66b2791ccc02c85c43e8652f13258bd412", 0xa3}, {&(0x7f0000001080)="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", 0x3df}], 0x2, 0x0, 0x0, 0xcc015}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 318.347292ms ago: executing program 7 (id=5340): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r1, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) 282.553754ms ago: executing program 1 (id=5341): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 204.493139ms ago: executing program 1 (id=5342): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 147.554991ms ago: executing program 1 (id=5343): socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x85, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 78.917936ms ago: executing program 1 (id=5344): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x55eac547, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 35.253068ms ago: executing program 8 (id=5345): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x20000000016b, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x138) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=5346): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) kernel console output (not intermixed with test programs): utor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 184.081806][T12889] sch_fq: defrate 7 ignored. [ 184.274123][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3321'. [ 184.488035][ T28] audit: type=1400 audit(2000000018.830:1751): avc: denied { unmount } for pid=12918 comm="syz.5.3327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.895767][T12955] ipip0: entered promiscuous mode [ 184.956189][T12957] loop8: detected capacity change from 0 to 1024 [ 184.960129][T12960] Cannot find del_set index 4 as target [ 184.989650][T12957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 185.008159][T12957] System zones: 0-1, 3-36 [ 185.013406][T12957] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3342: bad orphan inode 134217728 [ 185.024856][T12957] loop8: lost filesystem error report for type 5 error -117 [ 185.048728][T12957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.094023][ T9470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.371232][T12988] netlink: 'syz.5.3354': attribute type 2 has an invalid length. [ 185.379065][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3354'. [ 185.407079][T12988] netlink: 'syz.5.3354': attribute type 2 has an invalid length. [ 185.414909][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3354'. [ 186.617849][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 186.617867][ T28] audit: type=1400 audit(2000000020.960:1757): avc: denied { mount } for pid=13046 comm="syz.7.3376" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 186.810962][T13049] macvlan0: entered promiscuous mode [ 186.817122][T13049] batman_adv: batadv0: Adding interface: macvlan0 [ 186.823589][T13049] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.849294][T13049] batman_adv: batadv0: Not using interface macvlan0 (retrying later): interface not active [ 187.085995][T13062] tipc: Failed to remove unknown binding: 66,1,1/0:4040983438/4040983440 [ 187.094649][T13062] tipc: Failed to remove unknown binding: 66,1,1/0:4040983438/4040983440 [ 187.165872][T13068] uprobe: syz.2.3384:13068 failed to unregister, leaking uprobe [ 187.209476][T13073] bond0: (slave bond_slave_1): Releasing backup interface [ 187.265245][T13077] batadv2: entered promiscuous mode [ 187.285820][T13079] batman_adv: batadv0: Adding interface: dummy0 [ 187.292179][T13079] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.319603][T13079] batman_adv: batadv0: Interface activated: dummy0 [ 187.354362][T13079] batadv0: mtu less than device minimum [ 187.360626][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.371650][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.382630][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.393653][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.404671][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.415763][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.426879][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.438036][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.449218][T13079] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 187.826853][T13113] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3403'. [ 187.836278][T13113] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3403'. [ 187.873281][T13115] netlink: 'syz.7.3404': attribute type 10 has an invalid length. [ 187.885353][T13117] netlink: 'syz.2.3405': attribute type 13 has an invalid length. [ 187.904569][T13115] team0: Failed to send options change via netlink (err -105) [ 187.912308][T13115] team0: Port device dummy0 added [ 187.922750][T13118] netlink: 'syz.7.3404': attribute type 10 has an invalid length. [ 187.969606][T13118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 187.980193][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 187.990267][T13118] team0: Failed to send options change via netlink (err -105) [ 187.997937][T13118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 188.007173][T13118] team0: Port device dummy0 removed [ 188.014117][T13118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.024019][T13123] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 188.037096][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 188.046286][ T4263] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.057959][ T4263] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.082266][ T4263] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.100544][ T4263] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.111249][ T28] audit: type=1400 audit(2000000022.450:1758): avc: denied { map } for pid=13125 comm="syz.2.3408" path="socket:[36233]" dev="sockfs" ino=36233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 188.229430][T13138] bond0: (slave bond_slave_1): Releasing backup interface [ 188.283100][T13147] batman_adv: batadv0: Interface deactivated: dummy0 [ 188.290663][T13147] batman_adv: batadv0: Removing interface: dummy0 [ 188.298619][T13147] bridge_slave_0: left allmulticast mode [ 188.304336][T13147] bridge_slave_0: left promiscuous mode [ 188.310096][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.322075][T13147] bridge_slave_1: left allmulticast mode [ 188.327831][T13147] bridge_slave_1: left promiscuous mode [ 188.333576][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.342097][T13147] bond0: (slave bond_slave_0): Releasing backup interface [ 188.350921][T13147] bond0: (slave bond_slave_1): Releasing backup interface [ 188.360114][T13147] team0: Port device team_slave_0 removed [ 188.366754][T13147] team0: Port device team_slave_1 removed [ 188.373730][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.488538][ T28] audit: type=1326 audit(2000000022.830:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.512258][ T28] audit: type=1326 audit(2000000022.830:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.552583][ T28] audit: type=1326 audit(2000000022.880:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 188.576331][ T28] audit: type=1326 audit(2000000022.880:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 188.599963][ T28] audit: type=1326 audit(2000000022.880:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.623630][ T28] audit: type=1326 audit(2000000022.880:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.647221][ T28] audit: type=1326 audit(2000000022.880:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.671047][ T28] audit: type=1326 audit(2000000022.880:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13156 comm="syz.7.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 188.803967][T13171] netlink: 'syz.2.3427': attribute type 29 has an invalid length. [ 188.827939][T13171] netlink: 'syz.2.3427': attribute type 29 has an invalid length. [ 188.848921][T13171] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3427'. [ 188.858844][T13171] unsupported nla_type 66 [ 189.191405][T13197] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 189.212575][T13197] bond8: entered promiscuous mode [ 189.218127][T13197] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.258159][T13197] 8021q: adding VLAN 0 to HW filter on device bond8 [ 189.268678][T13197] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 189.278892][T13197] bond8: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 189.291666][T13197] bond8: (slave vcan0): making interface the new active one [ 189.299658][T13197] vcan0: entered promiscuous mode [ 189.307060][T13197] bond8: (slave vcan0): Enslaving as an active interface with an up link [ 189.884611][T13257] netlink: 'syz.7.3457': attribute type 2 has an invalid length. [ 192.120761][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 192.120776][ T28] audit: type=1326 audit(2000000026.460:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.186763][ T28] audit: type=1326 audit(2000000026.490:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.211116][ T28] audit: type=1326 audit(2000000026.490:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.234909][ T28] audit: type=1326 audit(2000000026.490:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.259219][ T28] audit: type=1326 audit(2000000026.510:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.282831][ T28] audit: type=1326 audit(2000000026.510:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.307210][ T28] audit: type=1326 audit(2000000026.510:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.330784][ T28] audit: type=1326 audit(2000000026.520:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.355091][ T28] audit: type=1326 audit(2000000026.520:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.379494][ T28] audit: type=1326 audit(2000000026.520:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13443 comm="syz.1.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 192.452512][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3499'. [ 192.504283][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3499'. [ 192.549921][T13451] syz.8.3499: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 192.564721][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.8.3499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.564882][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.564915][T13451] Call Trace: [ 192.564957][T13451] [ 192.564968][T13451] __dump_stack+0x1d/0x30 [ 192.565149][T13451] dump_stack_lvl+0x95/0xd0 [ 192.565173][T13451] dump_stack+0x15/0x1b [ 192.565195][T13451] warn_alloc+0x145/0x1c0 [ 192.565303][T13451] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 192.565331][T13451] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 192.565358][T13451] ? ctx_sched_in+0x3b5/0x3e0 [ 192.565412][T13451] ? __rcu_read_unlock+0x4e/0x70 [ 192.565488][T13451] ? avc_has_perm_noaudit+0xab/0x130 [ 192.565579][T13451] ? should_fail_ex+0x30/0x280 [ 192.565629][T13451] ? should_failslab+0x8c/0xb0 [ 192.565659][T13451] vmalloc_user_noprof+0x7d/0xb0 [ 192.565694][T13451] ? xskq_create+0x80/0xe0 [ 192.565765][T13451] xskq_create+0x80/0xe0 [ 192.565833][T13451] xsk_init_queue+0x91/0xe0 [ 192.565860][T13451] xsk_setsockopt+0x3f5/0x640 [ 192.565908][T13451] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.565943][T13451] __sys_setsockopt+0x184/0x200 [ 192.566040][T13451] __x64_sys_setsockopt+0x64/0x80 [ 192.566083][T13451] x64_sys_call+0x21d5/0x3000 [ 192.566111][T13451] do_syscall_64+0xc0/0x2a0 [ 192.566144][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.566231][T13451] RIP: 0033:0x7f2d8c6eaf79 [ 192.566313][T13451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.566339][T13451] RSP: 002b:00007f2d8b13f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.566368][T13451] RAX: ffffffffffffffda RBX: 00007f2d8c965fa0 RCX: 00007f2d8c6eaf79 [ 192.566409][T13451] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 192.566428][T13451] RBP: 00007f2d8c7816e0 R08: 0000000000000004 R09: 0000000000000000 [ 192.566441][T13451] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.566457][T13451] R13: 00007f2d8c966038 R14: 00007f2d8c965fa0 R15: 00007ffd2d3b5028 [ 192.566484][T13451] [ 192.776308][T13451] Mem-Info: [ 192.779544][T13451] active_anon:47140 inactive_anon:19 isolated_anon:0 [ 192.779544][T13451] active_file:22013 inactive_file:5314 isolated_file:0 [ 192.779544][T13451] unevictable:0 dirty:140 writeback:0 [ 192.779544][T13451] slab_reclaimable:3768 slab_unreclaimable:54428 [ 192.779544][T13451] mapped:31707 shmem:38225 pagetables:2527 [ 192.779544][T13451] sec_pagetables:0 bounce:0 [ 192.779544][T13451] kernel_misc_reclaimable:0 [ 192.779544][T13451] free:1740527 free_pcp:26636 free_cma:0 [ 192.825798][T13451] Node 0 active_anon:188628kB inactive_anon:76kB active_file:88052kB inactive_file:21256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126876kB dirty:580kB writeback:0kB shmem:152972kB kernel_stack:5120kB pagetables:10196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.853834][T13451] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.883949][T13451] lowmem_reserve[]: 0 2879 7858 7858 [ 192.889471][T13451] Node 0 DMA32 free:2944852kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 192.920972][T13451] lowmem_reserve[]: 0 0 4978 4978 [ 192.926080][T13451] Node 0 Normal free:4001896kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:189672kB inactive_anon:76kB active_file:88052kB inactive_file:21256kB unevictable:0kB writepending:580kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:101896kB local_pcp:93296kB free_cma:0kB [ 192.959461][T13451] lowmem_reserve[]: 0 0 0 0 [ 192.964079][T13451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.976937][T13451] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944852kB [ 192.993364][T13451] Node 0 Normal: 78*4kB (UME) 134*8kB (UM) 66*16kB (UME) 51*32kB (UME) 34*64kB (UME) 36*128kB (M) 14*256kB (UME) 34*512kB (UME) 41*1024kB (UM) 6*2048kB (UME) 956*4096kB (UM) = 4001896kB [ 193.012261][T13451] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 193.021634][T13451] 65862 total pagecache pages [ 193.026352][T13451] 11 pages in swap cache [ 193.030672][T13451] Free swap = 124372kB [ 193.034984][T13451] Total swap = 124996kB [ 193.039288][T13451] 2097051 pages RAM [ 193.043133][T13451] 0 pages HighMem/MovableOnly [ 193.047965][T13451] 81556 pages reserved [ 193.332908][T13476] tipc: Enabled bearer , priority 18 [ 193.623609][T13510] netlink: 'syz.5.3527': attribute type 4 has an invalid length. [ 193.825514][T13526] netlink: 'syz.5.3533': attribute type 1 has an invalid length. [ 193.850280][T13526] bond0: (slave ip6gretap1): making interface the new active one [ 193.858595][T13526] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 194.231247][T13550] loop1: detected capacity change from 0 to 4096 [ 194.238064][T13550] EXT4-fs: Ignoring removed bh option [ 194.246379][T13550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.264716][T13550] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3542'. [ 194.287346][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.313690][T13556] netlink: 304 bytes leftover after parsing attributes in process `syz.8.3541'. [ 194.373624][T13563] geneve2: entered promiscuous mode [ 194.379051][T13563] geneve2: entered allmulticast mode [ 194.390502][ T4257] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.411763][ T4257] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.434006][ T4257] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.444372][ T4257] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.653617][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 194.662672][T13581] netlink: 'syz.2.3552': attribute type 5 has an invalid length. [ 194.670511][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 194.682356][T13581] geneve5: entered promiscuous mode [ 194.687722][T13581] geneve5: entered allmulticast mode [ 194.694001][ T4261] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 194.704677][ T4261] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 194.714571][ T4261] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 194.726133][ T4261] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 194.780771][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 194.789833][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 194.799818][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 194.808846][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 194.908816][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 194.944805][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 195.415859][T13638] loop1: detected capacity change from 0 to 256 [ 195.436941][T13638] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ' [ 195.502463][T13645] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 195.763810][T13665] syz_tun: entered allmulticast mode [ 195.843912][T13664] syz_tun: left allmulticast mode [ 197.461975][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 197.462022][ T28] audit: type=1326 audit(2000000031.800:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.516516][ T28] audit: type=1326 audit(2000000031.840:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.540247][ T28] audit: type=1326 audit(2000000031.840:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.563912][ T28] audit: type=1326 audit(2000000031.840:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.587453][ T28] audit: type=1326 audit(2000000031.840:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.611027][ T28] audit: type=1326 audit(2000000031.840:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.634658][ T28] audit: type=1326 audit(2000000031.840:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.658304][ T28] audit: type=1326 audit(2000000031.840:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.681819][ T28] audit: type=1326 audit(2000000031.840:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.705429][ T28] audit: type=1326 audit(2000000031.840:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.2.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 197.737941][T13785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.758847][T13785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.731865][T13892] xt_hashlimit: max too large, truncated to 1048576 [ 200.152402][T13933] netlink: 'syz.7.3702': attribute type 1 has an invalid length. [ 200.287475][T13933] bond2: entered promiscuous mode [ 200.287694][T13933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.296181][T13935] bond2: (slave bridge2): making interface the new active one [ 200.296205][T13935] bridge2: entered promiscuous mode [ 200.301814][T13935] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 200.961809][T13960] __nla_validate_parse: 6 callbacks suppressed [ 200.961831][T13960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3711'. [ 200.985666][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3712'. [ 201.206830][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3715'. [ 201.423823][T13988] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3720'. [ 201.433736][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3720'. [ 202.188760][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3725'. [ 202.522777][T14036] netlink: 'syz.2.3741': attribute type 1 has an invalid length. [ 202.572027][T14036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.668444][T14051] netlink: 'syz.8.3747': attribute type 1 has an invalid length. [ 202.682918][T14042] bond9: (slave veth7): Enslaving as an active interface with a down link [ 202.694268][T14048] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3745'. [ 202.735597][T14036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.757581][T14036] bond9: (slave batadv1): making interface the new active one [ 202.777043][T14036] batadv1: entered promiscuous mode [ 202.791875][T14036] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 202.810475][T14051] bond1: entered promiscuous mode [ 202.819303][T14051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.828312][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 202.828331][ T28] audit: type=1326 audit(2000000037.170:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14055 comm="syz.5.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x0 [ 202.869498][T14058] bond1: (slave bridge1): making interface the new active one [ 202.877160][T14058] bridge1: entered promiscuous mode [ 202.884741][T14058] bridge1: left promiscuous mode [ 202.920527][T14070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3754'. [ 203.072723][T14089] netlink: 'syz.8.3764': attribute type 39 has an invalid length. [ 203.139503][T14087] io-wq is not configured for unbound workers [ 203.193573][ T28] audit: type=1326 audit(2000000037.530:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14095 comm="syz.1.3765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x0 [ 203.675813][ T28] audit: type=1326 audit(2000000038.010:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.700366][ T28] audit: type=1326 audit(2000000038.010:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.726562][ T28] audit: type=1326 audit(2000000038.060:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.751117][ T28] audit: type=1326 audit(2000000038.060:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.774669][ T28] audit: type=1326 audit(2000000038.060:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.799017][ T28] audit: type=1326 audit(2000000038.060:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.822667][ T28] audit: type=1326 audit(2000000038.060:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 203.846221][ T28] audit: type=1326 audit(2000000038.060:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14114 comm="syz.5.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 204.016829][ C0] net_ratelimit: 12 callbacks suppressed [ 204.016851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.048537][T14137] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3781'. [ 204.375701][T14172] netlink: 'syz.5.3794': attribute type 4 has an invalid length. [ 204.402102][T14174] loop1: detected capacity change from 0 to 164 [ 204.414189][T14174] ISOFS: Bad logical zone size 65280 [ 204.489832][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'. [ 205.208405][T14227] team1: entered promiscuous mode [ 205.213661][T14227] team1: entered allmulticast mode [ 205.220280][T14227] 8021q: adding VLAN 0 to HW filter on device team1 [ 205.432397][T14251] loop8: detected capacity change from 0 to 128 [ 205.460040][T14251] bio_check_eod: 39 callbacks suppressed [ 205.460056][T14251] syz.8.3826: attempt to access beyond end of device [ 205.460056][T14251] loop8: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 205.480880][T14251] Buffer I/O error on dev loop8, logical block 129, lost async page write [ 205.490135][T14251] syz.8.3826: attempt to access beyond end of device [ 205.490135][T14251] loop8: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 205.504303][T14251] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 205.513703][T14251] syz.8.3826: attempt to access beyond end of device [ 205.513703][T14251] loop8: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 205.527585][T14251] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 205.536137][T14251] syz.8.3826: attempt to access beyond end of device [ 205.536137][T14251] loop8: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 205.550581][T14251] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 205.561838][T14251] syz.8.3826: attempt to access beyond end of device [ 205.561838][T14251] loop8: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 205.575698][T14251] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 205.585615][T14251] syz.8.3826: attempt to access beyond end of device [ 205.585615][T14251] loop8: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 205.599374][T14251] Buffer I/O error on dev loop8, logical block 129, lost async page write [ 205.609896][T14251] syz.8.3826: attempt to access beyond end of device [ 205.609896][T14251] loop8: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 205.623685][T14251] Buffer I/O error on dev loop8, logical block 130, lost async page write [ 205.632615][T14251] syz.8.3826: attempt to access beyond end of device [ 205.632615][T14251] loop8: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 205.646485][T14251] Buffer I/O error on dev loop8, logical block 131, lost async page write [ 205.655259][T14251] syz.8.3826: attempt to access beyond end of device [ 205.655259][T14251] loop8: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 205.669190][T14251] Buffer I/O error on dev loop8, logical block 132, lost async page write [ 205.678945][T14251] syz.8.3826: attempt to access beyond end of device [ 205.678945][T14251] loop8: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 205.692823][T14251] Buffer I/O error on dev loop8, logical block 133, lost async page write [ 205.929972][T14259] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 205.945181][T14259] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 205.980218][T14263] netlink: 'syz.5.3832': attribute type 1 has an invalid length. [ 205.995346][T14263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.026084][T14263] bond1: (slave veth5): Enslaving as an active interface with a down link [ 206.052844][T14263] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 206.061792][T14263] bond1: (slave batadv2): making interface the new active one [ 206.071416][T14263] batadv2: entered promiscuous mode [ 206.076792][T14263] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 206.353866][T14296] netlink: 'syz.5.3846': attribute type 14 has an invalid length. [ 206.361824][T14296] __nla_validate_parse: 6 callbacks suppressed [ 206.361842][T14296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3846'. [ 206.425482][T14299] IPVS: Error connecting to the multicast addr [ 206.531309][T14309] netlink: 'syz.5.3852': attribute type 39 has an invalid length. [ 206.555989][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3853'. [ 206.655919][T14323] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3858'. [ 206.879038][T14338] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 206.898317][T14338] bond2 (unregistering): Released all slaves [ 207.147358][T14368] delete_channel: no stack [ 207.876800][T14410] dvmrp0: entered allmulticast mode [ 207.908197][T14413] erspan0: entered promiscuous mode [ 207.952503][T14419] ref_ctr increment failed for inode: 0x553 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811b01de80 [ 208.042624][T14418] uprobe: syz.8.3898:14418 failed to unregister, leaking uprobe [ 208.052150][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 208.052169][ T28] audit: type=1326 audit(2000000042.390:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.107068][ T28] audit: type=1326 audit(2000000042.420:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.131487][ T28] audit: type=1326 audit(2000000042.420:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.155230][ T28] audit: type=1326 audit(2000000042.430:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.179515][ T28] audit: type=1326 audit(2000000042.430:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.203114][ T28] audit: type=1326 audit(2000000042.430:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.227337][ T28] audit: type=1326 audit(2000000042.430:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.250899][ T28] audit: type=1326 audit(2000000042.430:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.275097][ T28] audit: type=1326 audit(2000000042.430:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.299309][ T28] audit: type=1326 audit(2000000042.430:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.7.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 208.608461][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 209.216283][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3924'. [ 209.340198][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3927'. [ 209.431992][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3928'. [ 209.565214][T14503] dvmrp0: entered allmulticast mode [ 210.520638][T14554] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3951'. [ 211.430025][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3964'. [ 211.521959][T14582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.736132][T14589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.747361][T14589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.757863][T14589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 211.793832][T14591] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 211.818889][T14589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.829348][T14589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.839724][T14589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 211.852424][T14593] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.931822][T14589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.942216][T14589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.952632][T14589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.030187][T14589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.040641][T14589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.051333][T14589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.156693][ T51] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.164960][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.173503][ T51] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.226526][ T51] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.235120][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.243542][ T51] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.301480][ T51] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.309799][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.318191][ T51] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 212.337897][ T51] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.346203][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.354584][ T51] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.150058][ T4250] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.160201][ T4250] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.183132][ T4250] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.195650][ T4250] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.392239][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 213.407616][T14679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'. [ 213.963499][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4015'. [ 214.107629][ T4250] batadv1: left promiscuous mode [ 214.369283][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 214.369327][ T28] audit: type=1326 audit(2000000048.710:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.438630][ T28] audit: type=1326 audit(2000000048.740:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.463215][ T28] audit: type=1326 audit(2000000048.740:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.487535][ T28] audit: type=1326 audit(2000000048.740:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.511096][ T28] audit: type=1326 audit(2000000048.740:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.535199][ T28] audit: type=1326 audit(2000000048.740:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.559516][ T28] audit: type=1326 audit(2000000048.740:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.583068][ T28] audit: type=1326 audit(2000000048.740:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.607275][ T28] audit: type=1326 audit(2000000048.740:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.630789][ T28] audit: type=1326 audit(2000000048.740:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14733 comm="syz.1.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 214.697523][T14742] netlink: 'syz.1.4031': attribute type 1 has an invalid length. [ 214.705380][T14742] netlink: 'syz.1.4031': attribute type 2 has an invalid length. [ 214.717456][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4031'. [ 214.760049][T14744] veth6: entered promiscuous mode [ 214.765268][T14744] veth6: entered allmulticast mode [ 214.865027][T14752] loop8: detected capacity change from 0 to 128 [ 214.892683][T14752] FAT-fs (loop8): bogus number of reserved sectors [ 214.899468][T14752] FAT-fs (loop8): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 214.911066][T14752] FAT-fs (loop8): Can't find a valid FAT filesystem [ 214.960383][T14758] tipc: Failed to remove unknown binding: 66,1,1/0:3367108223/3367108225 [ 215.119827][T14779] loop1: detected capacity change from 0 to 512 [ 215.149063][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.4048: corrupted inode contents [ 215.161452][T14779] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.168759][T14779] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.4048: mark_inode_dirty error [ 215.189150][T14779] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.232540][T14792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14792 comm=syz.2.4052 [ 215.254774][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.4048: corrupted inode contents [ 215.266671][T14779] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.267154][T14779] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.4048: mark_inode_dirty error [ 215.287553][T14779] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.288459][T14779] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.4048: Failed to acquire dquot type 0 [ 215.308822][T14779] loop1: lost filesystem error report for type 5 error -117 [ 215.309811][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4048: corrupted inode contents [ 215.329101][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.329316][T14779] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4048: mark_inode_dirty error [ 215.349860][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.359268][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4048: corrupted inode contents [ 215.380454][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.381199][T14779] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4048: mark_inode_dirty error [ 215.401802][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.402935][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4048: corrupted inode contents [ 215.424050][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.427421][T14779] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 215.445169][T14779] loop1: lost filesystem error report for type 5 error -117 [ 215.445513][T14779] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4048: corrupted inode contents [ 215.464907][T14779] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 215.466563][T14779] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4048: mark_inode_dirty error [ 215.497467][T14779] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 215.506501][T14779] loop1: lost filesystem error report for type 5 error -117 [ 215.516844][T14779] EXT4-fs (loop1): 1 truncate cleaned up [ 215.540411][T14779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.553509][T14779] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.676148][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.894523][T14826] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.906234][T14826] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.129042][T14826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.140995][T14826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.207035][ T51] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.215469][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.224109][ T51] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.286254][ T51] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.295433][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.304135][ T51] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.317892][ T51] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.326371][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.335022][ T51] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.357248][ T4257] batadv2: left promiscuous mode [ 217.376531][ T51] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.384948][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.394281][ T51] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.632261][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4085'. [ 217.690222][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4087'. [ 217.815864][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4089'. [ 217.825612][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4089'. [ 217.997971][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810ac41800: rx timeout, send abort [ 218.506272][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810ac41800: abort rx timeout. Force session deactivation [ 218.820289][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4105'. [ 218.977939][T15084] xt_hashlimit: max too large, truncated to 1048576 [ 219.263049][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4120'. [ 219.272967][T15104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4120'. [ 219.283655][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4119'. [ 219.348629][T15107] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4121'. [ 219.380565][T15109] netlink: 'syz.8.4122': attribute type 29 has an invalid length. [ 219.397452][T15109] netlink: 'syz.8.4122': attribute type 29 has an invalid length. [ 219.406045][T15109] netlink: 500 bytes leftover after parsing attributes in process `syz.8.4122'. [ 219.410477][T15111] loop1: detected capacity change from 0 to 512 [ 219.437480][T15111] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.460047][T15111] EXT4-fs (loop1): 1 truncate cleaned up [ 219.479884][T15111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.571434][T15120] lo speed is unknown, defaulting to 1000 [ 219.577429][T15120] lo speed is unknown, defaulting to 1000 [ 219.583481][T15120] lo speed is unknown, defaulting to 1000 [ 219.595594][T15120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.647153][T15120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 219.663204][T15120] lo speed is unknown, defaulting to 1000 [ 219.669388][T15120] lo speed is unknown, defaulting to 1000 [ 219.675649][T15120] lo speed is unknown, defaulting to 1000 [ 219.683309][T15120] lo speed is unknown, defaulting to 1000 [ 219.701928][T15120] lo speed is unknown, defaulting to 1000 [ 219.711410][T15120] lo speed is unknown, defaulting to 1000 [ 219.741488][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.953689][T15153] siw: device registration error -23 [ 221.110752][T15157] tipc: Disabling bearer [ 221.373539][T12022] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 221.384544][T12022] CPU: 1 UID: 0 PID: 12022 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.384625][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 221.384642][T12022] Call Trace: [ 221.384649][T12022] [ 221.384656][T12022] __dump_stack+0x1d/0x30 [ 221.384689][T12022] dump_stack_lvl+0x95/0xd0 [ 221.384710][T12022] dump_stack+0x15/0x1b [ 221.384734][T12022] dump_header+0x80/0x240 [ 221.384761][T12022] oom_kill_process+0x295/0x350 [ 221.384791][T12022] out_of_memory+0x97d/0xb80 [ 221.384910][T12022] try_charge_memcg+0x62e/0xa10 [ 221.385037][T12022] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 221.385173][T12022] __read_swap_cache_async+0x17b/0x2d0 [ 221.385220][T12022] swap_cluster_readahead+0x262/0x3c0 [ 221.385264][T12022] swapin_readahead+0xde/0x840 [ 221.385375][T12022] ? update_load_avg+0x1da/0x810 [ 221.385470][T12022] ? kvm_sched_clock_read+0x11/0x20 [ 221.385500][T12022] ? sched_clock+0x3f/0x60 [ 221.385532][T12022] ? __perf_event_task_sched_in+0xa65/0xad0 [ 221.385609][T12022] ? __rcu_read_unlock+0x4e/0x70 [ 221.385696][T12022] ? swap_cache_get_folio+0x26f/0x280 [ 221.385737][T12022] do_swap_page+0x59b/0x2a50 [ 221.385777][T12022] ? finish_task_switch+0x79/0x280 [ 221.385825][T12022] ? __schedule+0x81f/0xce0 [ 221.385868][T12022] ? __rcu_read_lock+0x36/0x50 [ 221.385903][T12022] ? __pfx_default_wake_function+0x10/0x10 [ 221.386025][T12022] handle_mm_fault+0xb40/0x3030 [ 221.386090][T12022] ? vma_start_read+0x1c7/0x2c0 [ 221.386130][T12022] do_user_addr_fault+0x62f/0x1050 [ 221.386171][T12022] exc_page_fault+0x62/0xa0 [ 221.386217][T12022] asm_exc_page_fault+0x26/0x30 [ 221.386238][T12022] RIP: 0033:0x7f5644c66197 [ 221.386259][T12022] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 221.386285][T12022] RSP: 002b:00007fff5df6dda0 EFLAGS: 00010202 [ 221.386324][T12022] RAX: 0000000000000000 RBX: 000055557b795500 RCX: 00007f5644c66197 [ 221.386350][T12022] RDX: 00007fff5df6dde0 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.386369][T12022] RBP: 00007fff5df6de4c R08: 0000000000000000 R09: 0000000000000000 [ 221.386441][T12022] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 221.386456][T12022] R13: 00000000000927c0 R14: 0000000000036053 R15: 00007fff5df6dea0 [ 221.386479][T12022] [ 221.620316][T12022] memory: usage 304860kB, limit 307200kB, failcnt 2948 [ 221.627288][T12022] memory+swap: usage 299520kB, limit 9007199254740988kB, failcnt 0 [ 221.635236][T12022] kmem: usage 291348kB, limit 9007199254740988kB, failcnt 0 [ 221.642564][T12022] Memory cgroup stats for /syz1: [ 221.691486][T12022] cache 0 [ 221.699538][T12022] rss 0 [ 221.702343][T12022] shmem 0 [ 221.705296][T12022] mapped_file 0 [ 221.708864][T12022] dirty 0 [ 221.711816][T12022] writeback 0 [ 221.715119][T12022] workingset_refault_anon 13 [ 221.720462][T12022] workingset_refault_file 22 [ 221.725232][T12022] swap 655360 [ 221.728653][T12022] swapcached 8192 [ 221.732364][T12022] pgpgin 108905 [ 221.735988][T12022] pgpgout 108903 [ 221.739583][T12022] pgfault 147803 [ 221.743138][T12022] pgmajfault 55 [ 221.747308][T12022] inactive_anon 0 [ 221.751008][T12022] active_anon 8192 [ 221.754735][T12022] inactive_file 0 [ 221.758410][T12022] active_file 0 [ 221.761957][T12022] unevictable 0 [ 221.765452][T12022] hierarchical_memory_limit 314572800 [ 221.770955][T12022] hierarchical_memsw_limit 9223372036854771712 [ 221.777853][T12022] total_cache 0 [ 221.781407][T12022] total_rss 0 [ 221.784719][T12022] total_shmem 0 [ 221.788220][T12022] total_mapped_file 0 [ 221.792338][T12022] total_dirty 0 [ 221.795876][T12022] total_writeback 0 [ 221.799744][T12022] total_workingset_refault_anon 13 [ 221.804875][T12022] total_workingset_refault_file 22 [ 221.810663][T12022] total_swap 655360 [ 221.814506][T12022] total_swapcached 8192 [ 221.818742][T12022] total_pgpgin 108905 [ 221.822853][T12022] total_pgpgout 108903 [ 221.826998][T12022] total_pgfault 147803 [ 221.831086][T12022] total_pgmajfault 55 [ 221.835091][T12022] total_inactive_anon 0 [ 221.840031][T12022] total_active_anon 8192 [ 221.844300][T12022] total_inactive_file 0 [ 221.848531][T12022] total_active_file 0 [ 221.852539][T12022] total_unevictable 0 [ 221.856621][T12022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4141,pid=15154,uid=0 [ 221.872223][T12022] Memory cgroup out of memory: Killed process 15154 (syz.1.4141) total-vm:96324kB, anon-rss:1340kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 222.062964][T15176] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 222.732815][T15238] netlink: 'syz.8.4174': attribute type 29 has an invalid length. [ 222.741532][T15238] netlink: 'syz.8.4174': attribute type 29 has an invalid length. [ 222.756400][T15238] netlink: 'syz.8.4174': attribute type 29 has an invalid length. [ 223.003366][T15255] netlink: 'syz.1.4180': attribute type 10 has an invalid length. [ 223.023065][T15258] __nla_validate_parse: 2 callbacks suppressed [ 223.023084][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4181'. [ 223.182629][T15270] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 223.216894][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4187'. [ 223.669840][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 223.669923][ T28] audit: type=1326 audit(2000000058.010:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.714268][ T28] audit: type=1326 audit(2000000058.040:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.738675][ T28] audit: type=1326 audit(2000000058.040:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.762268][ T28] audit: type=1326 audit(2000000058.040:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.786719][ T28] audit: type=1326 audit(2000000058.040:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.810158][ T28] audit: type=1326 audit(2000000058.040:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.834530][ T28] audit: type=1326 audit(2000000058.050:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.858843][ T28] audit: type=1326 audit(2000000058.050:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.882286][ T28] audit: type=1326 audit(2000000058.050:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 223.906620][ T28] audit: type=1326 audit(2000000058.050:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.2.4192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d583af79 code=0x7ffc0000 [ 224.859191][T15320] lo speed is unknown, defaulting to 1000 [ 224.997847][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4204'. [ 225.007026][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4204'. [ 225.019358][T15320] geneve0: entered promiscuous mode [ 225.024666][T15320] geneve0: entered allmulticast mode [ 225.412760][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4211'. [ 225.525973][T15354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4218'. [ 225.535099][T15354] netlink: 'syz.5.4218': attribute type 7 has an invalid length. [ 225.542938][T15354] netlink: 'syz.5.4218': attribute type 8 has an invalid length. [ 225.550812][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 225.567718][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4220'. [ 225.616647][T15357] IPv6: Can't replace route, no match found [ 226.079950][T15374] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 226.431098][T15386] lo speed is unknown, defaulting to 1000 [ 226.792468][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4239'. [ 226.980596][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 227.773418][T15457] loop8: detected capacity change from 0 to 1024 [ 227.860538][T15457] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.872797][T15457] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.891113][T15457] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 3) [ 227.934279][T15457] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 227.946690][T15457] EXT4-fs (loop8): This should not happen!! Data will be lost [ 227.946690][T15457] [ 227.994000][T15457] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.035812][T15457] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.087062][T15456] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.108779][T15457] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.132305][T15473] uprobe: syz.5.4263:15473 failed to unregister, leaking uprobe [ 228.163752][T15457] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.206938][T15456] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.237530][T15456] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.290382][T15457] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.334836][T15483] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.4258: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.645666][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 228.658038][ T51] EXT4-fs (loop8): This should not happen!! Data will be lost [ 228.658038][ T51] [ 228.697695][ T9470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.787464][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 228.787488][ T28] audit: type=1326 audit(2000000063.130:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 228.846594][ T28] audit: type=1326 audit(2000000063.170:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 228.870124][ T28] audit: type=1326 audit(2000000063.170:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 228.893859][ T28] audit: type=1326 audit(2000000063.170:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d8c6ab84e code=0x7ffc0000 [ 228.918075][ T28] audit: type=1326 audit(2000000063.170:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 229.068178][T15514] __nla_validate_parse: 1 callbacks suppressed [ 229.068199][T15514] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4279'. [ 229.094622][ T28] audit: type=1326 audit(2000000063.340:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 229.108537][T15514] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4279'. [ 229.118367][ T28] audit: type=1326 audit(2000000063.340:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 229.118406][ T28] audit: type=1326 audit(2000000063.350:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15508 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 229.118437][ T28] audit: type=1326 audit(2000000063.360:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2d8c6ab84e code=0x7ffc0000 [ 229.118572][ T28] audit: type=1326 audit(2000000063.360:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15504 comm="syz.8.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 229.300768][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4282'. [ 229.317193][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4283'. [ 229.411390][T15528] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4286'. [ 229.499355][T15525] lo speed is unknown, defaulting to 1000 [ 229.742217][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4295'. [ 229.751955][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4295'. [ 229.970230][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4303'. [ 229.979601][T15570] syzkaller0: entered allmulticast mode [ 229.990606][T15570] syzkaller0: entered promiscuous mode [ 230.022464][T15570] syzkaller0 (unregistering): left allmulticast mode [ 230.029630][T15570] syzkaller0 (unregistering): left promiscuous mode [ 230.259155][T15591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4312'. [ 231.070381][T15638] xt_hashlimit: size too large, truncated to 1048576 [ 231.163001][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4329'. [ 231.187644][T15642] bridge_slave_0 (unregistering): left allmulticast mode [ 231.194754][T15642] bridge_slave_0 (unregistering): left promiscuous mode [ 231.201962][T15642] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.683490][T15668] gretap1: entered promiscuous mode [ 232.023967][T15684] lo: Caught tx_queue_len zero misconfig [ 232.093681][T15681] lo speed is unknown, defaulting to 1000 [ 232.301354][T15692] pim6reg: entered allmulticast mode [ 233.140704][T15754] netlink: 'syz.2.4366': attribute type 1 has an invalid length. [ 233.154815][T15755] bridge0: port 3(macsec1) entered blocking state [ 233.161446][T15755] bridge0: port 3(macsec1) entered disabled state [ 233.168967][T15755] macsec1: entered allmulticast mode [ 233.174297][T15755] bridge0: entered allmulticast mode [ 233.190034][T15755] macsec1: left allmulticast mode [ 233.195191][T15755] bridge0: left allmulticast mode [ 233.213054][T15754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 233.254495][T15760] bond10: (slave dummy0): making interface the new active one [ 233.283761][T15760] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 233.426002][T15773] netlink: 'syz.7.4368': attribute type 10 has an invalid length. [ 233.433928][T15773] netlink: 'syz.7.4368': attribute type 11 has an invalid length. [ 233.448127][ T4259] tipc: Subscription rejected, illegal request [ 233.620068][T15796] bond8: (slave vcan0): Releasing backup interface [ 233.636747][T15796] vcan0 (unregistering): left promiscuous mode [ 233.648078][T15796] bond8: Destroying bond [ 233.654305][T15796] bond8 (unregistering): Released all slaves [ 233.831835][T15814] lo speed is unknown, defaulting to 1000 [ 233.916883][T15821] netlink: 'syz.2.4379': attribute type 6 has an invalid length. [ 233.980223][T15827] lo speed is unknown, defaulting to 1000 [ 234.565121][T15926] netlink: 'syz.1.4405': attribute type 3 has an invalid length. [ 234.573376][T15926] netlink: 'syz.1.4405': attribute type 1 has an invalid length. [ 234.581421][T15926] __nla_validate_parse: 9 callbacks suppressed [ 234.581463][T15926] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4405'. [ 234.882461][T15969] lo speed is unknown, defaulting to 1000 [ 234.889404][T15969] lo speed is unknown, defaulting to 1000 [ 234.895462][T15969] lo speed is unknown, defaulting to 1000 [ 234.935829][T15969] infiniband syz0: set down [ 234.940444][T15969] infiniband syz0: added lo [ 234.945411][ T6627] lo speed is unknown, defaulting to 1000 [ 234.957704][T15969] RDS/IB: syz0: added [ 234.961751][T15969] smc: adding ib device syz0 with port count 1 [ 234.967964][T15969] smc: ib device syz0 port 1 has no pnetid [ 234.974493][ T6627] lo speed is unknown, defaulting to 1000 [ 234.980642][T15969] lo speed is unknown, defaulting to 1000 [ 235.020126][T15969] lo speed is unknown, defaulting to 1000 [ 235.036000][T15975] lo speed is unknown, defaulting to 1000 [ 235.065091][T15969] lo speed is unknown, defaulting to 1000 [ 235.101929][T15975] lo speed is unknown, defaulting to 1000 [ 235.141669][T15969] lo speed is unknown, defaulting to 1000 [ 235.190452][T15969] lo speed is unknown, defaulting to 1000 [ 235.227868][T15969] lo speed is unknown, defaulting to 1000 [ 235.276074][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 235.276090][ T28] audit: type=1400 audit(2000000069.610:2272): avc: denied { append } for pid=15980 comm="syz.8.4415" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.356218][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4416'. [ 235.369273][T15983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4416'. [ 235.394286][T15983] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4416'. [ 235.470640][T15991] netlink: 'syz.5.4420': attribute type 1 has an invalid length. [ 235.494595][T15991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.520701][T15991] bond2: (slave veth15): Enslaving as an active interface with a down link [ 235.540304][T15991] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 235.548463][T15991] bond2: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 235.679959][T16012] lo speed is unknown, defaulting to 1000 [ 235.686482][T16012] lo speed is unknown, defaulting to 1000 [ 236.803565][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 236.829760][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4441'. [ 237.026559][ T28] audit: type=1400 audit(2000000071.360:2273): avc: denied { watch } for pid=16070 comm="syz.8.4449" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 237.072624][T16075] batman_adv: batadv0: Adding interface: dummy0 [ 237.079749][T16075] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.107376][T16075] batman_adv: batadv0: Interface activated: dummy0 [ 237.119611][T16075] batadv0: mtu less than device minimum [ 237.125680][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.136680][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.147745][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.158724][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.169636][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.180656][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.191732][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.202740][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.213687][T16075] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-224) [ 237.301927][T16087] netlink: 'syz.1.4457': attribute type 4 has an invalid length. [ 237.311666][T16087] netlink: 'syz.1.4457': attribute type 4 has an invalid length. [ 237.322384][ T3408] lo speed is unknown, defaulting to 1000 [ 237.328342][ T3408] syz0: Port: 1 Link ACTIVE [ 237.336941][ T23] lo speed is unknown, defaulting to 1000 [ 237.342747][ T23] syz0: Port: 1 Link DOWN [ 237.342814][ T3408] lo speed is unknown, defaulting to 1000 [ 237.393737][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4459'. [ 237.702037][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4467'. [ 237.712864][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4467'. [ 237.729400][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4467'. [ 237.808769][ T28] audit: type=1400 audit(2000000072.150:2274): avc: denied { lock } for pid=16118 comm="syz.7.4471" path="socket:[52078]" dev="sockfs" ino=52078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.811048][T16119] netlink: 'syz.7.4471': attribute type 10 has an invalid length. [ 237.843768][T16119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.106474][ T28] audit: type=1400 audit(2000000072.440:2275): avc: denied { mounton } for pid=16138 comm="syz.2.4479" path=2F313036322FE91F7189591E9233614B dev="tmpfs" ino=5502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 238.143200][T16141] rdma_rxe: rxe_newlink: failed to add lo [ 238.664399][T16153] bridge_slave_1: left allmulticast mode [ 238.670327][T16153] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.034251][T16177] syzkaller0: entered allmulticast mode [ 239.139599][T16177] syzkaller0: entered promiscuous mode [ 239.146854][T16177] syzkaller0 (unregistering): left promiscuous mode [ 239.153496][T16177] syzkaller0 (unregistering): left allmulticast mode [ 239.614329][T16216] __nla_validate_parse: 5 callbacks suppressed [ 239.614402][T16216] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4512'. [ 239.639778][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4513'. [ 239.686674][T16198] macvtap2: entered promiscuous mode [ 239.692890][T16198] bridge0: entered promiscuous mode [ 239.704172][T16198] macvtap2: entered allmulticast mode [ 239.725042][T16198] bridge0: entered allmulticast mode [ 239.758449][T16198] bridge0: port 1(macvtap2) entered blocking state [ 239.766005][T16198] bridge0: port 1(macvtap2) entered disabled state [ 239.814797][T16198] bridge0: left allmulticast mode [ 239.833537][T16198] bridge0: left promiscuous mode [ 239.959836][T16218] erspan0: left promiscuous mode [ 239.975314][T16218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.984761][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.039434][ T3408] lo speed is unknown, defaulting to 1000 [ 240.045357][ T3408] syz0: Port: 1 Link ACTIVE [ 240.057488][ T3408] lo speed is unknown, defaulting to 1000 [ 240.166916][ T28] audit: type=1326 audit(2000000074.510:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.191380][ T28] audit: type=1326 audit(2000000074.510:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.248164][ T28] audit: type=1326 audit(2000000074.510:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.272039][ T28] audit: type=1326 audit(2000000074.560:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.295703][ T28] audit: type=1326 audit(2000000074.580:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.320107][ T28] audit: type=1326 audit(2000000074.580:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.343755][ T28] audit: type=1326 audit(2000000074.580:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.367544][ T28] audit: type=1326 audit(2000000074.580:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.391933][ T28] audit: type=1326 audit(2000000074.580:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.415619][ T28] audit: type=1326 audit(2000000074.580:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.440034][ T28] audit: type=1326 audit(2000000074.580:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.463876][ T28] audit: type=1326 audit(2000000074.580:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.488116][ T28] audit: type=1326 audit(2000000074.580:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.511626][ T28] audit: type=1326 audit(2000000074.580:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.1.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 240.597260][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4523'. [ 240.765261][T16265] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4532'. [ 240.822799][T16272] PKCS7: Unknown OID: [4] (bad) [ 240.828501][T16272] PKCS7: Only support pkcs7_signedData type [ 240.857561][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4537'. [ 241.522418][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4554'. [ 241.581413][T16313] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 242.322223][T16345] netlink: 'syz.2.4568': attribute type 4 has an invalid length. [ 242.340547][T16345] netlink: 'syz.2.4568': attribute type 4 has an invalid length. [ 242.379067][T16348] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4569'. [ 242.396171][ T4261] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.405256][ T4261] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 242.468719][ T4261] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.478558][ T4261] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 242.538733][ T4261] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.547790][ T4261] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 242.597542][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.606661][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 242.677420][T16369] netlink: 'syz.2.4578': attribute type 4 has an invalid length. [ 242.805846][T16374] ip6gre1: entered promiscuous mode [ 242.825097][T16374] ip6gre1: entered allmulticast mode [ 243.024083][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4596'. [ 243.082549][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4598'. [ 243.114178][T16417] loop1: detected capacity change from 0 to 256 [ 243.152926][T16417] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.186727][T16417] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.291650][T16495] loop1: detected capacity change from 0 to 128 [ 244.549644][T16511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4636'. [ 245.212584][T16558] loop1: detected capacity change from 0 to 512 [ 245.274981][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.4657: corrupted inode contents [ 245.287525][T16558] fserror_report: 1 callbacks suppressed [ 245.287593][T16558] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.317779][T16558] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.4657: mark_inode_dirty error [ 245.338317][T16558] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.347071][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.4657: corrupted inode contents [ 245.368641][T16558] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.586531][T16558] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.4657: mark_inode_dirty error [ 245.607519][T16558] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.613750][T16558] __quota_error: 5 callbacks suppressed [ 245.613767][T16558] Quota error (device loop1): write_blk: dquota write failed [ 245.639704][T16558] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 245.668434][T16558] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.4657: Failed to acquire dquot type 0 [ 245.680413][T16558] loop1: lost filesystem error report for type 5 error -117 [ 245.720577][ T28] audit: type=1400 audit(2000000080.050:2295): avc: denied { accept } for pid=16567 comm="syz.8.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 245.771205][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4657: corrupted inode contents [ 245.783841][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.789950][T16558] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4657: mark_inode_dirty error [ 245.811224][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.811500][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4657: corrupted inode contents [ 245.832628][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.832956][T16558] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4657: mark_inode_dirty error [ 245.854155][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.854483][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4657: corrupted inode contents [ 245.876341][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.877686][T16558] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 245.895394][T16558] loop1: lost filesystem error report for type 5 error -117 [ 245.895696][T16558] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4657: corrupted inode contents [ 245.915622][T16558] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 245.915929][T16558] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4657: mark_inode_dirty error [ 245.946677][T16558] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 245.955617][T16558] loop1: lost filesystem error report for type 5 error -117 [ 245.956257][T16558] EXT4-fs (loop1): 1 truncate cleaned up [ 245.985989][T16558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.004211][T16570] loop8: detected capacity change from 0 to 1024 [ 246.021349][T16570] EXT4-fs: Ignoring removed nobh option [ 246.027773][T16570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.037254][T16558] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.068402][T16570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.106516][ T28] audit: type=1326 audit(2000000080.440:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.131260][ T28] audit: type=1326 audit(2000000080.440:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.154891][ T28] audit: type=1326 audit(2000000080.440:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.179155][ T28] audit: type=1326 audit(2000000080.440:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.202698][ T28] audit: type=1326 audit(2000000080.440:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.226892][ T28] audit: type=1326 audit(2000000080.440:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.250411][ T28] audit: type=1326 audit(2000000080.440:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.1.4657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 246.338707][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.839083][ T9470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.905901][T16593] bond0: option lp_interval: invalid value (0) [ 246.912970][T16593] bond0: option lp_interval: allowed values 1 - 2147483647 [ 247.639237][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4682'. [ 247.661460][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4682'. [ 247.727787][T16639] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4685'. [ 247.737132][T16639] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4685'. [ 248.283456][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4701'. [ 248.365091][T16682] netlink: 'syz.5.4703': attribute type 4 has an invalid length. [ 248.435164][T16682] netlink: 'syz.5.4703': attribute type 4 has an invalid length. [ 248.445074][ T23] lo speed is unknown, defaulting to 1000 [ 248.451527][ T23] syz2: Port: 1 Link ACTIVE [ 248.515915][ T23] lo speed is unknown, defaulting to 1000 [ 248.521760][ T23] syz2: Port: 1 Link DOWN [ 248.526230][ T4257] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.552367][ T4257] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.580104][ T4257] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.599093][ T4257] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.779414][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'. [ 248.898242][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'. [ 249.859027][T16738] lo speed is unknown, defaulting to 1000 [ 249.874250][T16738] lo speed is unknown, defaulting to 1000 [ 250.304328][T16762] loop1: detected capacity change from 0 to 164 [ 250.329605][T16762] ISOFS: unable to read i-node block [ 250.344861][T16762] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 250.458138][T16777] IPv6: sit2: Disabled Multicast RS [ 250.529367][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 250.539030][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 250.882391][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 250.882410][ T28] audit: type=1326 audit(2000000085.220:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 250.912974][ T28] audit: type=1326 audit(2000000085.220:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 250.937121][ T28] audit: type=1326 audit(2000000085.220:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 250.960751][ T28] audit: type=1326 audit(2000000085.220:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 250.985220][ T28] audit: type=1326 audit(2000000085.220:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 251.009424][ T28] audit: type=1326 audit(2000000085.220:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 251.032933][ T28] audit: type=1326 audit(2000000085.220:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 251.057256][ T28] audit: type=1326 audit(2000000085.220:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16798 comm="syz.1.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 251.119389][T16801] netlink: 392 bytes leftover after parsing attributes in process `syz.5.4753'. [ 251.152361][T16803] netlink: 'syz.1.4754': attribute type 1 has an invalid length. [ 251.337646][T16822] loop1: detected capacity change from 0 to 512 [ 251.373807][T16822] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 251.432816][T16822] loop1: detected capacity change from 0 to 1024 [ 251.441696][T16822] EXT4-fs: Ignoring removed i_version option [ 251.455813][T16822] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.470635][T16822] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.4761: lblock 2 mapped to illegal pblock 2 (length 1) [ 251.484929][T16822] fserror_report: 1 callbacks suppressed [ 251.484943][T16822] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 251.491087][T16822] EXT4-fs (loop1): Remounting filesystem read-only [ 251.507517][T16822] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 251.515839][T16822] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 251.526111][T16822] EXT4-fs (loop1): 1 orphan inode deleted [ 251.533803][T16822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.562189][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.759194][T16846] netlink: 'syz.1.4770': attribute type 4 has an invalid length. [ 251.798753][ T3408] lo speed is unknown, defaulting to 1000 [ 251.804626][ T3408] syz0: Port: 1 Link DOWN [ 251.810894][T16846] netlink: 'syz.1.4770': attribute type 4 has an invalid length. [ 251.818844][ T6626] lo speed is unknown, defaulting to 1000 [ 251.827631][ T6626] lo speed is unknown, defaulting to 1000 [ 251.833465][ T6626] syz0: Port: 1 Link ACTIVE [ 251.897684][ T6627] lo speed is unknown, defaulting to 1000 [ 251.903553][ T6627] syz0: Port: 1 Link DOWN [ 252.143445][ T6617] lo speed is unknown, defaulting to 1000 [ 252.177175][T16863] lo speed is unknown, defaulting to 1000 [ 252.189981][T16863] lo speed is unknown, defaulting to 1000 [ 252.211701][T16865] lo speed is unknown, defaulting to 1000 [ 252.283905][T16865] lo speed is unknown, defaulting to 1000 [ 252.435951][T16880] netlink: 'syz.8.4784': attribute type 21 has an invalid length. [ 252.443874][T16880] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.464500][T16880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.471777][T16880] IPv6: NLM_F_CREATE should be set when creating new route [ 252.479103][T16880] IPv6: NLM_F_CREATE should be set when creating new route [ 252.486426][T16880] IPv6: NLM_F_CREATE should be set when creating new route [ 253.036113][T16919] syzkaller1: entered promiscuous mode [ 253.041768][T16919] syzkaller1: entered allmulticast mode [ 253.170641][T16921] __nla_validate_parse: 7 callbacks suppressed [ 253.170659][T16921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4802'. [ 253.698132][T16950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4815'. [ 253.918105][T16960] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 254.253084][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4833'. [ 254.265007][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4835'. [ 254.315695][T17002] netlink: 'syz.7.4837': attribute type 1 has an invalid length. [ 254.324334][T17002] netlink: 'syz.7.4837': attribute type 4 has an invalid length. [ 254.332189][T17002] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4837'. [ 254.390269][T17008] pim6reg1: entered promiscuous mode [ 254.395639][T17008] pim6reg1: entered allmulticast mode [ 254.402127][T17002] netlink: 'syz.7.4837': attribute type 1 has an invalid length. [ 254.410756][T17002] netlink: 'syz.7.4837': attribute type 4 has an invalid length. [ 254.418555][T17002] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4837'. [ 254.515270][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4841'. [ 254.536704][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4842'. [ 254.649412][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4842'. [ 254.658620][ T4257] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.671177][ T4257] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.690303][ T4257] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.721579][T17024] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4846'. [ 254.732537][ T4257] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.751768][T17024] net_ratelimit: 12 callbacks suppressed [ 254.751790][T17024] netlink: zone id is out of range [ 254.762733][T17024] netlink: zone id is out of range [ 254.776752][T17024] netlink: zone id is out of range [ 254.807775][T17024] netlink: set zone limit has 8 unknown bytes [ 254.905102][T17032] lo speed is unknown, defaulting to 1000 [ 254.920036][T17032] lo speed is unknown, defaulting to 1000 [ 255.149082][T17046] netlink: 'syz.8.4854': attribute type 1 has an invalid length. [ 255.180946][T17046] bond2: entered promiscuous mode [ 255.186048][T17046] bond2: entered allmulticast mode [ 255.203415][T17046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.223649][T17046] macvlan0: entered promiscuous mode [ 255.230033][T17046] macvlan0: entered allmulticast mode [ 255.242676][T17046] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 256.125848][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 256.125866][ T28] audit: type=1400 audit(2000000090.460:2356): avc: denied { watch watch_reads } for pid=17068 comm="syz.7.4861" path="/" dev="configfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.206597][T17073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.234741][T17073] batman_adv: batadv0: Removing interface: macvlan0 [ 256.806291][ T28] audit: type=1326 audit(2000000091.140:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.830838][ T28] audit: type=1326 audit(2000000091.140:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.854538][ T28] audit: type=1326 audit(2000000091.140:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.878108][ T28] audit: type=1326 audit(2000000091.140:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.902380][ T28] audit: type=1326 audit(2000000091.140:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.925981][ T28] audit: type=1326 audit(2000000091.140:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.950490][ T28] audit: type=1326 audit(2000000091.140:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.974106][ T28] audit: type=1326 audit(2000000091.140:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 256.998484][ T28] audit: type=1326 audit(2000000091.140:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17092 comm="syz.8.4872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d8c6eaf79 code=0x7ffc0000 [ 257.039802][T17064] syz.2.4859 (17064) used greatest stack depth: 7752 bytes left [ 257.195449][T17110] openvswitch: netlink: Missing key (keys=40, expected=100) [ 257.779833][T17148] syz_tun: entered allmulticast mode [ 258.062618][T17162] lo speed is unknown, defaulting to 1000 [ 258.087575][T17162] lo speed is unknown, defaulting to 1000 [ 258.209292][T17171] __nla_validate_parse: 8 callbacks suppressed [ 258.209310][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4905'. [ 258.289165][T17175] netlink: 'syz.8.4906': attribute type 32 has an invalid length. [ 258.467952][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4908'. [ 258.720363][ T4257] tipc: Subscription rejected, illegal request [ 259.070794][T17224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4923'. [ 259.955078][T17270] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4943'. [ 259.965468][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4943'. [ 260.071051][T17274] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 260.110193][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4945'. [ 261.159035][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 261.159054][ T28] audit: type=1326 audit(2000000095.500:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17302 comm="syz.8.4953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d8c6eaf79 code=0x0 [ 261.369280][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4965'. [ 261.387084][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4965'. [ 261.460267][T17339] loop1: detected capacity change from 0 to 4096 [ 261.517646][T17339] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=4 [ 261.538367][T17339] EXT4-fs warning (device loop1): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.596786][T17339] EXT4-fs (loop1): mount failed [ 261.658580][T17339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4967'. [ 261.774301][T17369] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4980'. [ 261.877263][ T28] audit: type=1326 audit(2000000096.210:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 261.900843][ T28] audit: type=1326 audit(2000000096.210:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 261.924525][ T28] audit: type=1326 audit(2000000096.210:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 261.948822][ T28] audit: type=1326 audit(2000000096.210:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 261.972447][ T28] audit: type=1326 audit(2000000096.210:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 261.996823][ T28] audit: type=1326 audit(2000000096.210:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5644caaf79 code=0x7ffc0000 [ 262.052130][ T28] audit: type=1326 audit(2000000096.290:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5644c6b84e code=0x7ffc0000 [ 262.076549][ T28] audit: type=1326 audit(2000000096.290:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17376 comm="syz.1.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5644c6b84e code=0x7ffc0000 [ 262.268127][T17386] lo speed is unknown, defaulting to 1000 [ 262.274247][T17386] lo speed is unknown, defaulting to 1000 [ 263.155655][T17439] loop1: detected capacity change from 0 to 512 [ 263.168739][T17440] macvtap2: entered promiscuous mode [ 263.174093][T17440] team0: entered promiscuous mode [ 263.192499][T17439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.209890][T17440] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 263.218605][T17440] team0: Device macvtap2 is already an upper device of the team interface [ 263.237737][T17439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.252905][T17439] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.320994][T17440] team0: left promiscuous mode [ 263.507836][T12022] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.560035][T17452] lo speed is unknown, defaulting to 1000 [ 263.566306][T17452] lo speed is unknown, defaulting to 1000 [ 263.959235][T17480] __nla_validate_parse: 2 callbacks suppressed [ 263.959256][T17480] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.5025'. [ 264.459776][T17512] netlink: 'syz.5.5034': attribute type 3 has an invalid length. [ 264.541002][T17519] netlink: 'syz.8.5036': attribute type 1 has an invalid length. [ 264.595086][T17526] xt_hashlimit: max too large, truncated to 1048576 [ 264.610526][T17526] No such timeout policy "syz1" [ 264.650535][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5039'. [ 265.182083][T17587] netlink: 'syz.2.5062': attribute type 27 has an invalid length. [ 265.204017][T17587] bond1: left promiscuous mode [ 265.209622][T17587] bridge1: left promiscuous mode [ 265.215397][T17587] macvtap1: left promiscuous mode [ 265.220589][T17587] macvtap1: left allmulticast mode [ 265.226349][T17587] team1: left promiscuous mode [ 265.231265][T17587] team1: left allmulticast mode [ 265.236274][T17587] geneve4: left promiscuous mode [ 265.242195][T17587] ipip0: left promiscuous mode [ 265.247074][T17587] geneve5: left promiscuous mode [ 265.252088][T17587] geneve5: left allmulticast mode [ 265.260944][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5063'. [ 265.287780][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.296277][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.305958][T17590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.491463][T17602] netlink: 'syz.2.5068': attribute type 3 has an invalid length. [ 266.699927][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 266.699946][ T28] audit: type=1326 audit(2000000101.040:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.718666][T17665] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 266.741116][ T28] audit: type=1326 audit(2000000101.070:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.765608][ T28] audit: type=1326 audit(2000000101.070:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.789805][ T28] audit: type=1326 audit(2000000101.070:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.813381][ T28] audit: type=1326 audit(2000000101.070:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.837475][ T28] audit: type=1326 audit(2000000101.070:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.861091][ T28] audit: type=1326 audit(2000000101.070:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.885511][ T28] audit: type=1326 audit(2000000101.070:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.913215][ T28] audit: type=1326 audit(2000000101.250:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17663 comm="syz.7.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 266.958542][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5097'. [ 266.982885][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5099'. [ 266.991899][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5099'. [ 267.095369][ T28] audit: type=1400 audit(2000000101.430:2527): avc: denied { lock } for pid=17683 comm="syz.7.5103" path="socket:[59444]" dev="sockfs" ino=59444 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 267.334739][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5107'. [ 267.345632][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5107'. [ 267.968040][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5117'. [ 268.006325][T17723] geneve6: entered promiscuous mode [ 268.011633][T17723] geneve6: entered allmulticast mode [ 268.154990][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5122'. [ 268.265513][T17740] tipc: Enabling of bearer rejected, failed to enable media [ 268.404091][T17750] netlink: 'syz.5.5131': attribute type 4 has an invalid length. [ 268.418409][T17750] netlink: 'syz.5.5131': attribute type 4 has an invalid length. [ 268.439282][ T3391] lo speed is unknown, defaulting to 1000 [ 268.445071][ T3391] syz2: Port: 1 Link ACTIVE [ 270.020337][T17818] netlink: 'syz.8.5158': attribute type 14 has an invalid length. [ 270.028219][T17818] __nla_validate_parse: 1 callbacks suppressed [ 270.028236][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5158'. [ 270.097550][T17818] netlink: 'syz.8.5158': attribute type 14 has an invalid length. [ 270.105418][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5158'. [ 270.148694][T17818] netlink: 'syz.8.5158': attribute type 14 has an invalid length. [ 270.156587][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5158'. [ 270.195688][T17827] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 271.001539][T17845] smc: net device bond0 applied user defined pnetid SYZ2 [ 271.020470][T17841] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.051705][T17845] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5170'. [ 271.065927][T17845] smc: removing net device bond0 with user defined pnetid SYZ2 [ 271.074055][T17845] bond0 (unregistering): Released all slaves [ 271.217829][T17857] loop1: detected capacity change from 0 to 4096 [ 271.229534][T17857] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 271.798288][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 271.798346][ T28] audit: type=1326 audit(2000000106.140:2557): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.5.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 271.829023][ T28] audit: type=1326 audit(2000000106.160:2558): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.5.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f380e31c399 code=0x7ffc0000 [ 271.852913][ T28] audit: type=1326 audit(2000000106.160:2559): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.5.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 271.877669][ T28] audit: type=1326 audit(2000000106.160:2560): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.5.5190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380e37af79 code=0x7ffc0000 [ 272.227008][T17917] netlink: 'syz.8.5196': attribute type 22 has an invalid length. [ 272.235032][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5196'. [ 272.268892][T17917] netlink: 'syz.8.5196': attribute type 22 has an invalid length. [ 272.277597][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5196'. [ 272.927955][T17936] bridge7: entered allmulticast mode [ 273.445430][ T28] audit: type=1400 audit(2000000107.780:2561): avc: denied { read } for pid=17955 comm="syz.8.5212" name="file0" dev="tmpfs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 273.468673][ T28] audit: type=1400 audit(2000000107.780:2562): avc: denied { open } for pid=17955 comm="syz.8.5212" path="/508/file0" dev="tmpfs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 273.562514][ T28] audit: type=1400 audit(2000000107.900:2563): avc: denied { unlink } for pid=9470 comm="syz-executor" name="file0" dev="tmpfs" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 273.902016][T17980] loop8: detected capacity change from 0 to 32768 [ 274.075456][T17982] netlink: 'syz.8.5221': attribute type 2 has an invalid length. [ 274.443291][ T28] audit: type=1400 audit(2000000108.770:2564): avc: denied { create } for pid=17997 comm="syz.8.5229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 274.523500][T17999] loop8: detected capacity change from 0 to 512 [ 274.532603][T18007] bond10: (slave dummy0): Releasing active interface [ 274.570830][T17999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.657570][T17999] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.823914][ T9470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.856032][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5236'. [ 274.865022][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5236'. [ 274.887522][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5235'. [ 274.929368][T18018] netlink: 204 bytes leftover after parsing attributes in process `syz.7.5235'. [ 275.056543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.210736][T18032] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.477343][T18039] netlink: 'syz.7.5243': attribute type 10 has an invalid length. [ 275.537576][T18039] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.565818][T18040] netlink: 'syz.7.5243': attribute type 10 has an invalid length. [ 275.607183][T18039] bond0: (slave team0): Enslaving as an active interface with an up link [ 275.620635][T18040] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 275.661290][T18039] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.122998][T18048] __nla_validate_parse: 1 callbacks suppressed [ 276.123021][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5247'. [ 276.262723][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5249'. [ 276.625328][ T28] audit: type=1326 audit(2000000110.960:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 276.704476][ T28] audit: type=1326 audit(2000000111.000:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03168c4d97 code=0x7ffc0000 [ 276.807196][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 276.807295][ T28] audit: type=1326 audit(2000000111.150:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 276.875447][ T28] audit: type=1326 audit(2000000111.180:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 276.899867][ T28] audit: type=1326 audit(2000000111.190:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 276.923440][ T28] audit: type=1326 audit(2000000111.190:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03168c4d97 code=0x7ffc0000 [ 276.947758][ T28] audit: type=1326 audit(2000000111.190:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f031686c399 code=0x7ffc0000 [ 276.971271][ T28] audit: type=1326 audit(2000000111.190:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 276.995567][ T28] audit: type=1326 audit(2000000111.190:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f031688b84e code=0x7ffc0000 [ 277.020017][ T28] audit: type=1326 audit(2000000111.190:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03168c4d97 code=0x7ffc0000 [ 277.043798][ T28] audit: type=1326 audit(2000000111.190:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f031686c399 code=0x7ffc0000 [ 277.068010][ T28] audit: type=1326 audit(2000000111.190:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18054 comm="syz.7.5250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03168caf79 code=0x7ffc0000 [ 277.201844][T18067] IPv6: sit8: Disabled Multicast RS [ 277.947965][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 277.956925][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 278.090011][T18103] netlink: 'syz.7.5267': attribute type 3 has an invalid length. [ 278.111308][T18103] netlink: 'syz.7.5267': attribute type 3 has an invalid length. [ 278.141434][T18103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=18103 comm=syz.7.5267 [ 278.291378][T18112] netlink: 'syz.5.5271': attribute type 39 has an invalid length. [ 278.444394][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5279'. [ 278.977293][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5288'. [ 279.273819][T18169] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5294'. [ 279.448039][T18179] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.5298'. [ 279.458037][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5298'. [ 279.630267][T18185] lo speed is unknown, defaulting to 1000 [ 279.637038][T18185] lo speed is unknown, defaulting to 1000 [ 279.679603][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5303'. [ 280.025022][T18202] lo speed is unknown, defaulting to 1000 [ 280.032487][T18212] netlink: 'syz.5.5307': attribute type 5 has an invalid length. [ 280.041190][T18212] netlink: 'syz.5.5307': attribute type 6 has an invalid length. [ 280.062584][T18202] lo speed is unknown, defaulting to 1000 [ 280.158656][T18221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.180457][T18221] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 280.269877][ T4261] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.405593][T18244] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 280.434778][T18244] SELinux: failed to load policy [ 280.436928][ T4259] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.477548][T18244] loop1: detected capacity change from 0 to 1024 [ 280.522312][T18244] EXT4-fs: inline encryption not supported [ 280.574100][T18244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.610601][T18244] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.5322: Allocating blocks 385-513 which overlap fs metadata [ 280.677123][T18244] EXT4-fs (loop1): pa ffff888107aa9690: logic 16, phys. 129, len 24 [ 280.685210][T18244] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 280.717402][T18244] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 280.729924][T18244] EXT4-fs (loop1): This should not happen!! Data will be lost [ 280.729924][T18244] [ 280.739710][T18244] EXT4-fs (loop1): Total free blocks count 0 [ 280.745719][T18244] EXT4-fs (loop1): Free/Dirty block details [ 280.752374][T18244] EXT4-fs (loop1): free_blocks=128 [ 280.757560][T18244] EXT4-fs (loop1): dirty_blocks=0 [ 280.762668][T18244] EXT4-fs (loop1): Block reservation details [ 280.768716][T18244] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 280.947218][T18277] netlink: 'syz.7.5333': attribute type 39 has an invalid length. [ 280.984253][T18275] syzkaller0: entered promiscuous mode [ 280.989849][T18275] syzkaller0: entered allmulticast mode [ 281.303337][T18302] __nla_validate_parse: 7 callbacks suppressed [ 281.303357][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5343'. [ 281.319445][T18302] netlink: 'syz.1.5343': attribute type 7 has an invalid length. [ 281.327259][T18302] netlink: 'syz.1.5343': attribute type 8 has an invalid length. [ 281.334999][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5343'. [ 281.460725][T18308] ================================================================== [ 281.468874][T18308] BUG: KCSAN: data-race in __d_drop / fast_dput [ 281.475248][T18308] [ 281.477600][T18308] write to 0xffff88815f00a790 of 8 bytes by task 18307 on cpu 0: [ 281.485340][T18308] __d_drop+0x14d/0x240 [ 281.489605][T18308] __dentry_kill+0x122/0x460 [ 281.494235][T18308] finish_dput+0x2b/0x200 [ 281.498597][T18308] dput+0x52/0x60 [ 281.502265][T18308] step_into_slowpath+0x38c/0x4c0 [ 281.507332][T18308] path_lookupat+0x330/0x500 [ 281.511956][T18308] filename_lookup+0x190/0x390 [ 281.516756][T18308] filename_getxattr+0x54/0x1a0 [ 281.521636][T18308] io_getxattr+0x50/0xe0 [ 281.525909][T18308] __io_issue_sqe+0xfd/0x2d0 [ 281.530526][T18308] io_issue_sqe+0x20b/0xc20 [ 281.535075][T18308] io_wq_submit_work+0x574/0x770 [ 281.540043][T18308] io_worker_handle_work+0x41e/0x950 [ 281.545363][T18308] io_wq_worker+0x233/0x910 [ 281.549901][T18308] ret_from_fork+0x148/0x280 [ 281.554526][T18308] ret_from_fork_asm+0x1a/0x30 [ 281.559331][T18308] [ 281.561682][T18308] read to 0xffff88815f00a790 of 8 bytes by task 18308 on cpu 1: [ 281.569333][T18308] fast_dput+0x5f/0x2c0 [ 281.573522][T18308] dput+0x24/0x60 [ 281.577178][T18308] step_into_slowpath+0x38c/0x4c0 [ 281.582245][T18308] path_lookupat+0x330/0x500 [ 281.586862][T18308] filename_lookup+0x190/0x390 [ 281.591663][T18308] filename_getxattr+0x54/0x1a0 [ 281.596544][T18308] io_getxattr+0x50/0xe0 [ 281.600818][T18308] __io_issue_sqe+0xfd/0x2d0 [ 281.605446][T18308] io_issue_sqe+0x20b/0xc20 [ 281.609980][T18308] io_wq_submit_work+0x574/0x770 [ 281.614956][T18308] io_worker_handle_work+0x41e/0x950 [ 281.620277][T18308] io_wq_worker+0x233/0x910 [ 281.624816][T18308] ret_from_fork+0x148/0x280 [ 281.629448][T18308] ret_from_fork_asm+0x1a/0x30 [ 281.634245][T18308] [ 281.636586][T18308] value changed: 0xffff8882375be8d8 -> 0x0000000000000000 [ 281.643721][T18308] [ 281.646065][T18308] Reported by Kernel Concurrency Sanitizer on: [ 281.652244][T18308] CPU: 1 UID: 0 PID: 18308 Comm: iou-wrk-18306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.662351][T18308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 281.672440][T18308] ==================================================================