last executing test programs: 10m58.28128882s ago: executing program 32 (id=693): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@sysvgroups}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) ftruncate(r0, 0x2007ffb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendfile(r0, r0, 0x0, 0x1000000201005) ftruncate(r0, 0x6) 10m15.711855633s ago: executing program 33 (id=1572): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = eventfd2(0x6, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x3, &(0x7f0000000740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000040)="4ba6879a", 0x4, 0x200000000000, 0x0, 0x1, r0}, 0x0, 0x0]) 10m8.684491792s ago: executing program 34 (id=1731): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m22.527103504s ago: executing program 35 (id=2617): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000005733f31e4a68232217259dd085fe52a0f96e6d0e4914374623298bf6164c6edc469a100997a1fe5054f283855993aa80d11f0ac4d4575537d4496ae39334e1d5a9c590770d9cc2fac7ad6eb355297bd49a346a15ac2c4d8eb6fe32c15c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141427000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m1.791357049s ago: executing program 36 (id=3111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m38.341927181s ago: executing program 37 (id=3644): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) 7m58.09560402s ago: executing program 38 (id=4514): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7m0.515599435s ago: executing program 6 (id=5535): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0xb00) r0 = syz_clone(0x20800200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) 7m0.391979072s ago: executing program 6 (id=5538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xfff2}, {0x9, 0xfff1}, {0xffff, 0xa}}}, 0x24}}, 0x800) 6m59.969463687s ago: executing program 6 (id=5547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 6m59.969279617s ago: executing program 39 (id=5547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r4, &(0x7f00000006c0)}, 0x20) 6m10.584983287s ago: executing program 40 (id=6495): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x49801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xf6a}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 5m40.473727996s ago: executing program 41 (id=6916): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) flock(0xffffffffffffffff, 0x2) shmctl$SHM_UNLOCK(0x0, 0xc) 5m39.473390264s ago: executing program 1 (id=6937): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000010900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 5m39.339727732s ago: executing program 1 (id=6939): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 5m39.19565393s ago: executing program 1 (id=6942): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x812}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}}}]}]}]}}]}, 0x60}}, 0x40000) 5m38.937214165s ago: executing program 1 (id=6944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) 5m38.842762911s ago: executing program 1 (id=6947): openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x2e0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x29, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff2}, {0x0, 0x13}}}, 0x24}}, 0x0) 5m37.877464577s ago: executing program 1 (id=6948): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd2) creat(&(0x7f0000012b80)='./file0\x00', 0x1be) 5m37.860052198s ago: executing program 42 (id=6948): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd2) creat(&(0x7f0000012b80)='./file0\x00', 0x1be) 5m25.659145037s ago: executing program 3 (id=7117): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m25.390609673s ago: executing program 3 (id=7130): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x480) close(r1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5m24.395162651s ago: executing program 3 (id=7123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xfffffffffffffff7, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x6, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 5m24.23378526s ago: executing program 3 (id=7131): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") 5m23.815756204s ago: executing program 3 (id=7134): r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r3}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82f, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m23.601537487s ago: executing program 3 (id=7137): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 5m23.554530749s ago: executing program 43 (id=7137): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}}}]}]}]}}]}, 0x50}}, 0x0) 4m54.412121184s ago: executing program 0 (id=7681): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m53.529200525s ago: executing program 0 (id=7682): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x3, 0x1, 0x5}, &(0x7f00000000c0)=0x10) 4m53.494404688s ago: executing program 0 (id=7685): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40100330}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m53.399443023s ago: executing program 0 (id=7686): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") 4m53.371131265s ago: executing program 0 (id=7689): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000726) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, 0x0, 0x3e) 4m52.718124263s ago: executing program 0 (id=7722): syz_open_dev$evdev(&(0x7f0000000740), 0x456, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) sendto$packet(r0, &(0x7f0000000600)="d7cbb100000000000000", 0xa, 0x24000800, &(0x7f00000020c0)={0x11, 0x15, r1, 0x1, 0x3, 0x6, @remote}, 0x14) 4m52.680203895s ago: executing program 44 (id=7722): syz_open_dev$evdev(&(0x7f0000000740), 0x456, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) sendto$packet(r0, &(0x7f0000000600)="d7cbb100000000000000", 0xa, 0x24000800, &(0x7f00000020c0)={0x11, 0x15, r1, 0x1, 0x3, 0x6, @remote}, 0x14) 4m50.584690417s ago: executing program 6 (id=7713): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") 4m50.305128113s ago: executing program 6 (id=7767): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x38bd56a6387136e4, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 4m48.801462931s ago: executing program 6 (id=7798): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x85) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 4m48.801258442s ago: executing program 45 (id=7798): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x85) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2m49.862977396s ago: executing program 4 (id=9459): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t||') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2m48.980196267s ago: executing program 4 (id=9467): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$caif_stream(0x25, 0x1, 0x1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 2m48.376104743s ago: executing program 4 (id=9479): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m47.926425469s ago: executing program 4 (id=9490): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0xa1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8080, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x80000) write$tun(r0, &(0x7f0000000200)={@void, @void, @mpls={[], @llc={@snap={0xab, 0x76778d5c6207bbe0, 'E', "e7a932", 0x6558}}}}, 0x8) 2m47.786788567s ago: executing program 4 (id=9492): syz_open_pts(0xffffffffffffffff, 0x80) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@dev, @in=@private}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r2, r2, 0x0) statx(r0, &(0x7f0000000380)='./file0\x00', 0x4000, 0x100, &(0x7f0000000500)) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 2m46.669088962s ago: executing program 4 (id=9504): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5b1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x54) 2m46.643131083s ago: executing program 46 (id=9504): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5b1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x54) 6.591960256s ago: executing program 5 (id=11214): mount(&(0x7f0000000100)=@sg0, &(0x7f00000003c0)='.\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) dup3(r0, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x1, 0x296, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 5.986135421s ago: executing program 5 (id=11218): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.688327238s ago: executing program 5 (id=11220): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) 3.870599294s ago: executing program 8 (id=11226): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(0x3) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) 3.707399114s ago: executing program 8 (id=11227): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) unshare(0x24000400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x44004000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 3.576101851s ago: executing program 2 (id=11228): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4061, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x136}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300004a000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$AUDIT_GET(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x300, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20008044}, 0x4040051) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.231220531s ago: executing program 7 (id=11230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0xbea4fc69cfdbc2a6}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.450508977s ago: executing program 9 (id=11231): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 2.449683837s ago: executing program 2 (id=11242): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b9"], 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.448956017s ago: executing program 8 (id=11232): r0 = socket(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x1000}) getsockname$packet(r0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8604, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x6d2bf171, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") socket(0x23, 0x4, 0x206) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 2.339833813s ago: executing program 5 (id=11233): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2.332627864s ago: executing program 7 (id=11245): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200048d5) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.276251367s ago: executing program 9 (id=11235): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x7fffffff, 0x739, 0x2}, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.2155692s ago: executing program 2 (id=11236): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4c21, 0x8, @empty, 0x99cf}, 0x1c, 0x0}}], 0x1, 0x8c0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0x1}], 0x1, 0x40012160, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.157209124s ago: executing program 9 (id=11237): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 1.692398631s ago: executing program 2 (id=11238): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x8, 0x84, 0x9, 0x8, 0x0, 0x9, 0xa324, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xba32, 0xd}, 0x11401, 0x77d1, 0x6, 0x2, 0x8, 0x6, 0x34b5, 0x0, 0x800000, 0x0, 0xa00000000000}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x15, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x200203}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 1.409269508s ago: executing program 2 (id=11239): creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x229}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0, @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4015}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.409031138s ago: executing program 7 (id=11240): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.257191296s ago: executing program 2 (id=11241): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) recvmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000", 0x4}], 0x1}, 0x0) 1.19938129s ago: executing program 7 (id=11243): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.162792822s ago: executing program 9 (id=11244): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.001388361s ago: executing program 7 (id=11246): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44) 1.001050531s ago: executing program 8 (id=11247): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000714f, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="57355e62c1fc1623b19e1b968ec757987bb8f8c0f6abf71483bc0b84b0bfe5e8f9770b4bcb580dfe019b90f6c8d727b6f5f25c05e5bbd18509ec4de49f6ca6c11df7dd7e530f1b226a7ea5e2b5315f80d892f7a25568f0285b3935624ade2e76555624ea10cf01147a194e502a78a040588a0c0518c71a90ed54eac113946e9a41df7492959e88d5eaee0cda29efcdf05dd7d5cc392297285c7d74b008bf4cb7a1b6a20d33dcb497ab3a5f57aee8abef3cf07b7100ee3a5418528161e13befca9192e9272cf34c8415406dd8fd3b775da95c8c20ab4e79ca47b39ed6d4f193fae061a6d97a7b3e30311de5aaf54b6f", 0xef}], 0x1) 780.967004ms ago: executing program 9 (id=11248): r0 = socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 770.933355ms ago: executing program 5 (id=11249): r0 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 125.399192ms ago: executing program 9 (id=11250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x182) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) fallocate(r1, 0x0, 0x1, 0x2000402) 124.893893ms ago: executing program 8 (id=11251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7, 0x1}, @sack_perm], 0x4) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x4000, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) 0s ago: executing program 7 (id=11252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): #11: block 37: comm syz-executor: path /405/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 556.744359][T24043] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 556.825612][T24043] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /405/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 556.868958][T24043] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 556.888981][T24043] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /405/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 556.907780][ T9318] bond1: (slave macvlan0): failed to get link speed/duplex [ 556.911525][T24043] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 556.956302][T24043] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /405/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 557.012658][T24043] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 557.062985][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.108157][ T28] audit: type=1400 audit(1771103009.010:3816): avc: denied { listen } for pid=30916 comm="syz.5.9496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 557.183200][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.292489][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.402486][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.513017][ T9318] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.622609][ T9318] bond1: (slave macvlan0): failed to get link speed/duplex [ 557.671118][T24953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 557.694764][T30940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9503'. [ 557.752071][ T50] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.829775][ T50] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.893820][ T50] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.969332][ T50] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.414497][ T50] bond1 (unregistering): Released all slaves [ 558.429955][ T50] bond2 (unregistering): Released all slaves [ 558.450245][ T50] bond3 (unregistering): Released all slaves [ 558.471865][ T50] bond4 (unregistering): (slave veth15): Releasing active interface [ 558.489318][ T50] batadv1: entered promiscuous mode [ 558.502961][ T50] bond4 (unregistering): (slave batadv1): Releasing active interface [ 558.627550][ T50] bond4 (unregistering): Released all slaves [ 558.651864][ T50] bond5 (unregistering): Released all slaves [ 558.674846][ T50] bond6 (unregistering): Released all slaves [ 558.697170][ T50] smc: removing net device bond0 with user defined pnetid SYZ2 [ 558.715439][ T50] bond0 (unregistering): Released all slaves [ 558.778115][T30987] bond4: entered allmulticast mode [ 558.879714][T30946] chnl_net:caif_netlink_parms(): no params data found [ 558.961996][T30946] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.981257][T30946] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.013522][T30946] bridge_slave_0: entered allmulticast mode [ 559.043744][T30946] bridge_slave_0: entered promiscuous mode [ 559.067088][T30946] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.182464][T30946] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.282009][T30946] bridge_slave_1: entered allmulticast mode [ 559.294235][T30946] bridge_slave_1: entered promiscuous mode [ 559.345589][T30946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.359489][T30946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.392987][T30946] team0: Port device team_slave_0 added [ 559.399881][T30946] team0: Port device team_slave_1 added [ 559.428660][T30946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.446295][T30946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.492612][T30946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.546476][T30946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.576870][T30946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.614076][T30946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.701540][T30946] hsr_slave_0: entered promiscuous mode [ 559.715708][T30946] hsr_slave_1: entered promiscuous mode [ 559.721657][T30946] debugfs: 'hsr0' already exists in 'hsr' [ 559.730830][T30946] Cannot create hsr debugfs directory [ 560.325934][ T50] hsr_slave_0: left promiscuous mode [ 560.331710][ T50] hsr_slave_1: left promiscuous mode [ 560.337925][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.357678][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.490968][T31045] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9525'. [ 560.526050][ T50] team0 (unregistering): Port device team_slave_1 removed [ 560.557831][ T50] team0 (unregistering): Port device team_slave_0 removed [ 560.782796][T31049] bond10: Removing last arp target with arp_interval on [ 560.804014][T31049] bond10: entered promiscuous mode [ 560.811521][T31049] bond10: entered allmulticast mode [ 560.824632][T31049] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.008375][ T50] IPVS: stop unused estimator thread 0... [ 561.059504][T30946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 561.074598][T30946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.099625][T30946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.125420][T30946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 561.225737][T30946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.250439][T30946] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.263253][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.270464][ T9316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.303792][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.310990][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.363070][ T50] net_ratelimit: 9 callbacks suppressed [ 561.363090][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 561.483476][T30946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.523188][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 561.621308][T30946] veth0_vlan: entered promiscuous mode [ 561.653257][ T30] bond1: (slave macvlan0): failed to get link speed/duplex [ 561.673247][T30946] veth1_vlan: entered promiscuous mode [ 561.729698][T30946] veth0_macvtap: entered promiscuous mode [ 561.754649][T30946] veth1_macvtap: entered promiscuous mode [ 561.809173][T30946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.824047][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 561.833601][T30946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.856106][ T9312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.878769][ T9312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.896233][ T9312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.942478][ T9312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.002630][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.089549][T31169] tipc: Enabling of bearer rejected, failed to enable media [ 562.227191][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.352587][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.463900][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.529562][T31198] raw_sendmsg: syz.9.9555 forgot to set AF_INET. Fix it! [ 562.584268][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.605857][T31217] netlink: 'syz.7.9549': attribute type 10 has an invalid length. [ 562.713887][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 562.781036][T31225] ------------[ cut here ]------------ [ 562.786715][T31225] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 562.803749][T31225] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.9.9551/31225 [ 562.814940][T31225] Modules linked in: [ 562.819252][T31225] CPU: 0 UID: 0 PID: 31225 Comm: syz.9.9551 Tainted: G W syzkaller #0 PREEMPT(full) [ 562.830656][T31225] Tainted: [W]=WARN [ 562.836052][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 562.846546][T31225] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 562.853040][T31225] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 562.874311][T31225] RSP: 0018:ffffc90002367368 EFLAGS: 00010246 [ 562.880584][T31225] RAX: ffff888179d8ed78 RBX: 0000000000000000 RCX: 0000000000000002 [ 562.888731][T31225] RDX: ffffffff86812917 RSI: ffffffff867e6ec3 RDI: ffffffff871d3750 [ 562.896840][T31225] RBP: ffff88816f9afb50 R08: 0000000000000000 R09: 0000000000000002 [ 562.906454][T31225] R10: ffffffff893c9af8 R11: 0000000000000002 R12: ffff88816f9afb10 [ 562.914558][T31225] R13: 0000000000000000 R14: ffff88816f9afb5c R15: ffff88816f9afb48 [ 562.922741][T31225] FS: 00007f6b44cef6c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 562.931741][T31225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.939661][T31225] CR2: 000055557ff32908 CR3: 0000000193234000 CR4: 00000000003506f0 [ 562.947822][T31225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 562.955929][T31225] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 562.965283][T31225] Call Trace: [ 562.968642][T31225] [ 562.971648][T31225] reg_set_min_max+0x21c/0x260 [ 562.976562][T31225] check_cond_jmp_op+0x1355/0x1ab0 [ 562.981817][T31225] do_check+0x4a9b/0x9860 [ 562.986295][T31225] ? irqentry_exit+0x91/0x520 [ 562.991191][T31225] do_check_common+0xd0b/0x1630 [ 562.997423][T31225] bpf_check+0x2f6d/0xcc10 [ 563.001975][T31225] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 563.008155][T31225] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 563.013947][T31225] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 563.019992][T31225] ? css_rstat_updated+0xbb/0x280 [ 563.026621][T31225] ? try_charge_memcg+0x215/0xa10 [ 563.031796][T31225] ? pcpu_block_update+0x232/0x3b0 [ 563.037048][T31225] ? _find_next_zero_bit+0x64/0xa0 [ 563.042289][T31225] ? pcpu_block_refresh_hint+0x157/0x170 [ 563.048069][T31225] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 563.055579][T31225] ? irqentry_exit+0x91/0x520 [ 563.060377][T31225] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 563.066671][T31225] ? css_rstat_updated+0xbb/0x280 [ 563.071833][T31225] ? mod_memcg_state+0x182/0x270 [ 563.076978][T31225] ? __rcu_read_unlock+0x4e/0x70 [ 563.082017][T31225] ? avc_has_perm_noaudit+0xab/0x130 [ 563.088453][T31225] ? avc_has_perm+0x101/0x190 [ 563.093327][T31225] ? selinux_bpf_prog_load+0x197/0x1c0 [ 563.098931][T31225] ? security_bpf_prog_load+0x9e/0x140 [ 563.104638][T31225] bpf_prog_load+0xf76/0x1140 [ 563.109688][T31225] ? security_bpf+0x2b/0x90 [ 563.115626][T31225] __sys_bpf+0x505/0x7e0 [ 563.120072][T31225] __x64_sys_bpf+0x41/0x50 [ 563.124607][T31225] x64_sys_call+0x10cb/0x3020 [ 563.129443][T31225] do_syscall_64+0x12c/0x370 [ 563.134242][T31225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.140301][T31225] RIP: 0033:0x7f6b4629bf79 [ 563.145899][T31225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.165754][T31225] RSP: 002b:00007f6b44cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.175535][T31225] RAX: ffffffffffffffda RBX: 00007f6b46515fa0 RCX: 00007f6b4629bf79 [ 563.183618][T31225] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 563.191684][T31225] RBP: 00007f6b463327e0 R08: 0000000000000000 R09: 0000000000000000 [ 563.199864][T31225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.209337][T31225] R13: 00007f6b46516038 R14: 00007f6b46515fa0 R15: 00007ffd38b66c78 [ 563.217520][T31225] [ 563.220669][T31225] ---[ end trace 0000000000000000 ]--- [ 563.971968][T31314] netlink: 'syz.9.9569': attribute type 10 has an invalid length. [ 563.996826][T31314] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9569'. [ 564.430361][T31338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9574'. [ 564.445086][T31314] dummy0: entered promiscuous mode [ 564.450326][T31314] dummy0: entered allmulticast mode [ 564.456041][T31314] bridge0: port 1(dummy0) entered blocking state [ 564.462722][T31314] bridge0: port 1(dummy0) entered disabled state [ 564.470219][T31314] bridge0: port 1(dummy0) entered blocking state [ 564.476654][T31314] bridge0: port 1(dummy0) entered forwarding state [ 564.650896][T31367] netlink: 'syz.8.9590': attribute type 1 has an invalid length. [ 564.659858][T31367] netlink: 'syz.8.9590': attribute type 4 has an invalid length. [ 564.686499][T31367] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.9590'. [ 564.720220][T31374] bond9: Removing last arp target with arp_interval on [ 564.737020][T31374] bond9: entered promiscuous mode [ 564.775061][T31374] bond9: entered allmulticast mode [ 564.780440][T31374] 8021q: adding VLAN 0 to HW filter on device bond9 [ 564.796185][ T36] bond0: (slave bond_slave_0): interface is now down [ 564.796337][T31382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.820150][ T36] bond0: (slave bond_slave_1): interface is now down [ 564.827851][ T36] bond0: now running without any active interface! [ 564.959579][T31401] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9587'. [ 565.129280][T31390] loop2: detected capacity change from 0 to 1024 [ 565.177290][T31390] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 565.209918][T31390] System zones: 0-1, 3-36 [ 565.238584][T31390] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.9585: bad orphan inode 134217728 [ 565.251201][T31390] loop2: lost filesystem error report for type 5 error -117 [ 565.252393][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 565.266131][ C0] EXT4-fs (loop2): initial error at time 1771103017: ext4_orphan_get:1417 [ 565.274687][ C0] EXT4-fs (loop2): last error at time 1771103017: ext4_orphan_get:1417 [ 565.292856][T31390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.337257][T31427] netlink: 'syz.5.9591': attribute type 4 has an invalid length. [ 565.378835][ T36] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.389098][ T36] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 39524 - 0 [ 565.417829][ T36] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.442630][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.450948][ T36] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 39524 - 0 [ 565.479101][ T36] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.492015][ T36] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 39524 - 0 [ 565.516880][ T36] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.555788][ T36] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 39524 - 0 [ 566.310429][T31454] netlink: 'syz.5.9599': attribute type 4 has an invalid length. [ 566.351512][T31454] netlink: 'syz.5.9599': attribute type 4 has an invalid length. [ 566.472922][ T9312] net_ratelimit: 24 callbacks suppressed [ 566.472985][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 566.592897][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 566.687149][T31462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.707534][T31462] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.728297][T31462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.782963][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 566.892442][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 567.002801][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 567.113099][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 567.223197][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 567.309209][T31492] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9614'. [ 567.342845][ T9312] bond1: (slave macvlan0): failed to get link speed/duplex [ 567.463251][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 568.237439][T31531] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9625'. [ 568.282564][T31537] netlink: 'syz.7.9626': attribute type 1 has an invalid length. [ 568.374491][ T28] audit: type=1400 audit(1771103020.280:3817): avc: denied { create } for pid=31543 comm="syz.5.9628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 568.433930][ T28] audit: type=1400 audit(1771103020.280:3818): avc: denied { write } for pid=31543 comm="syz.5.9628" path="socket:[114221]" dev="sockfs" ino=114221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 568.568664][T31541] bond11: entered promiscuous mode [ 568.573968][T31541] bond11: entered allmulticast mode [ 568.579305][T31541] 8021q: adding VLAN 0 to HW filter on device bond11 [ 568.635333][T31537] bridge21: entered promiscuous mode [ 568.645074][T31537] bridge21: entered allmulticast mode [ 568.659537][T31537] bond11: (slave bridge21): Enslaving as a backup interface with an up link [ 569.180665][T31584] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9643'. [ 570.159442][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9655'. [ 570.223006][T31615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9656'. [ 570.307214][T31614] bond13: entered allmulticast mode [ 570.317001][T31618] bridge13: entered promiscuous mode [ 570.323885][T31618] bridge13: entered allmulticast mode [ 570.356170][T31618] bond13: (slave bridge13): Enslaving as an active interface with an up link [ 571.339207][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9676'. [ 571.544577][T31679] loop2: detected capacity change from 0 to 512 [ 571.572948][ T50] net_ratelimit: 27 callbacks suppressed [ 571.572965][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 571.669074][T31679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.723305][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 571.745723][T31679] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.843290][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 571.921094][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.956298][ T50] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.073173][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.182419][ T1473] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.362485][ T1473] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.483918][ T1473] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.555146][T31715] syz_tun: entered allmulticast mode [ 572.562346][T31715] syz_tun: left allmulticast mode [ 572.592485][ T1473] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.712473][ T9316] bond1: (slave macvlan0): failed to get link speed/duplex [ 572.777554][T31723] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9697'. [ 573.315934][T31730] netlink: 304 bytes leftover after parsing attributes in process `syz.2.9698'. [ 573.506407][T31738] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 573.520987][T31738] ref_ctr increment failed for inode: 0xaf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811ab62880 [ 573.554317][T31734] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 573.572792][T31734] ref_ctr decrement failed for inode: 0xaf offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811ab62880 [ 573.599519][T31734] uprobe: syz.2.9700:31734 failed to unregister, leaking uprobe [ 573.649271][T31748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9701'. [ 573.658365][T31745] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9702'. [ 573.674363][T31752] netlink: 'syz.8.9704': attribute type 1 has an invalid length. [ 573.720383][T31757] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 573.764736][T31752] bond14: (slave gretap3): making interface the new active one [ 573.773479][T31752] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 573.935536][T31789] batadv_slave_1: entered promiscuous mode [ 573.954771][T31789] pimreg: entered allmulticast mode [ 573.967632][T31789] pimreg: left allmulticast mode [ 573.995437][T31793] netlink: 'syz.2.9716': attribute type 4 has an invalid length. [ 574.050000][T31796] netlink: 'syz.2.9716': attribute type 4 has an invalid length. [ 574.088252][T31787] batadv_slave_1: left promiscuous mode [ 574.201225][T31793] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.208532][T31793] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.289995][T31793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.304506][T31793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.393868][ T9318] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.420796][ T9318] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.430669][ T9318] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.439815][ T9318] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.658961][T31823] loop2: detected capacity change from 0 to 128 [ 575.296610][T31845] syz_tun: entered allmulticast mode [ 575.313931][T31845] syz_tun: left allmulticast mode [ 575.494925][ T28] audit: type=1326 audit(1771103027.400:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.5.9736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x0 [ 575.674790][T31866] netlink: 'syz.9.9738': attribute type 4 has an invalid length. [ 575.703856][T31866] netlink: 'syz.9.9738': attribute type 4 has an invalid length. [ 575.885079][T31866] bridge0: port 1(dummy0) entered disabled state [ 576.394759][T31886] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9744'. [ 576.793355][T31900] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 576.947209][ T36] bridge_slave_1: left allmulticast mode [ 576.953453][ T36] bridge_slave_1: left promiscuous mode [ 576.972392][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.994545][ T36] bridge_slave_0: left allmulticast mode [ 577.002821][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9753'. [ 577.013502][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9753'. [ 577.030912][ T36] bridge_slave_0: left promiscuous mode [ 577.056298][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.334593][ T36] bond4 (unregistering): (slave geneve2): Releasing active interface [ 577.422620][ T36] bond6 (unregistering): (slave bridge1): Releasing active interface [ 577.512644][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.562538][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.581676][ T36] bond0 (unregistering): Released all slaves [ 577.596410][ T36] bond1 (unregistering): Released all slaves [ 577.605033][ T36] bond2 (unregistering): Released all slaves [ 577.622909][ T36] bond3 (unregistering): (slave lo): Releasing backup interface [ 577.630920][ T36] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 577.643289][ T36] bond3 (unregistering): Released all slaves [ 577.651822][ T36] bond4 (unregistering): Released all slaves [ 577.677517][ T36] bond5 (unregistering): (slave vxcan3): Releasing backup interface [ 577.690015][ T36] bond5 (unregistering): Released all slaves [ 577.699739][ T36] bond6 (unregistering): Released all slaves [ 577.708594][ T36] bond7 (unregistering): Released all slaves [ 577.718607][ T36] bond8 (unregistering): (slave vcan1): Releasing backup interface [ 577.732489][ T36] vcan1: left promiscuous mode [ 577.740264][ T36] bond8 (unregistering): Released all slaves [ 577.757579][T31943] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.773287][T31943] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 577.825605][ T36] hsr_slave_0: left promiscuous mode [ 577.842759][ T36] hsr_slave_1: left promiscuous mode [ 577.850608][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.886909][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.025085][ T36] team0 (unregistering): Port device team_slave_1 removed [ 578.052769][ T36] team0 (unregistering): Port device team_slave_0 removed [ 578.138852][T31953] syz_tun: entered allmulticast mode [ 578.174471][T31973] bond12: (slave ip6gretap0): making interface the new active one [ 578.240234][T31973] bond12: (slave ip6gretap0): Enslaving as an active interface with an up link [ 579.076471][ T36] IPVS: stop unused estimator thread 0... [ 579.193242][T32006] net_ratelimit: 17 callbacks suppressed [ 579.193303][T32006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 579.844924][T32040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9793'. [ 579.922085][ T28] audit: type=1400 audit(1771103031.820:3820): avc: denied { create } for pid=32041 comm="syz.8.9794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 582.012961][T32114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9818'. [ 582.022999][T32114] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9818'. [ 582.356784][T32143] bond16: (slave ip6gretap2): making interface the new active one [ 582.365540][T32143] bond16: (slave ip6gretap2): Enslaving as an active interface with an up link [ 584.374584][T32216] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9857'. [ 584.385486][T32216] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9857'. [ 585.205175][T32248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9869'. [ 585.298553][T32248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9869'. [ 588.913390][T32336] loop2: detected capacity change from 0 to 128 [ 588.933346][T32336] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 588.965102][T32336] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 589.113494][T30946] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 589.341756][T32349] loop2: detected capacity change from 0 to 512 [ 589.435597][T11194] IPVS: starting estimator thread 0... [ 589.442971][T32349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.481862][T32349] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.552448][T32360] IPVS: using max 1824 ests per chain, 91200 per kthread [ 589.602712][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.853022][ T36] IPVS: stop unused estimator thread 0... [ 589.921384][ T28] audit: type=1326 audit(1771103553.822:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 589.957885][ T28] audit: type=1326 audit(1771103553.852:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 589.981984][ T28] audit: type=1326 audit(1771103553.852:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.023853][ T28] audit: type=1326 audit(1771103553.852:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.048482][ T28] audit: type=1326 audit(1771103553.852:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.072605][ T28] audit: type=1326 audit(1771103553.852:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.096579][ T28] audit: type=1326 audit(1771103553.852:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.122892][ T28] audit: type=1326 audit(1771103553.852:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.167205][ T28] audit: type=1326 audit(1771103553.852:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.222409][ T28] audit: type=1326 audit(1771103553.852:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32382 comm="syz.9.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 590.227550][T32399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9925'. [ 593.966615][T32524] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9974'. [ 594.017449][T32518] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9984'. [ 594.032111][T32518] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 594.037730][T32524] openvswitch: netlink: Message has 8 unknown bytes. [ 594.123186][T32530] loop2: detected capacity change from 0 to 512 [ 594.244260][T32530] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.293483][T32530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.848546][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.499433][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 599.499456][ T28] audit: type=1400 audit(1771103563.402:3848): avc: denied { shutdown } for pid=32659 comm="syz.2.10026" lport=46172 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 600.247931][ T28] audit: type=1400 audit(1771103564.152:3849): avc: denied { lock } for pid=32690 comm="syz.8.10038" path="socket:[118403]" dev="sockfs" ino=118403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 601.976185][T32765] netlink: 'syz.9.10064': attribute type 4 has an invalid length. [ 602.005557][T32765] netlink: 'syz.9.10064': attribute type 4 has an invalid length. [ 602.183357][ T303] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10066'. [ 602.249003][ T307] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10068'. [ 603.171870][ T332] netlink: 'syz.9.10077': attribute type 4 has an invalid length. [ 603.818995][ T342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10082'. [ 603.897436][ T342] 8021q: adding VLAN 0 to HW filter on device bond13 [ 603.971181][ T342] bond13: (slave ip6tnl4): refused to change device type [ 605.523853][ T387] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10097'. [ 605.560893][ T387] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.658717][ T414] netlink: 'syz.2.10107': attribute type 13 has an invalid length. [ 606.697256][ T28] audit: type=1400 audit(1771103570.602:3850): avc: denied { accept } for pid=415 comm="syz.7.10108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 606.920898][ T426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10112'. [ 606.960635][ T426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 606.967978][ T426] IPv6: NLM_F_CREATE should be set when creating new route [ 606.993580][ T426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.000879][ T426] IPv6: NLM_F_CREATE should be set when creating new route [ 607.695002][ T448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.978108][ T468] ref_ctr increment failed for inode: 0x2212 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811d70c380 [ 608.096800][ T475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10129'. [ 608.122165][ T475] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10129'. [ 608.540716][ T499] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10137'. [ 608.550457][ T495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10135'. [ 608.588466][ T495] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.615045][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10137'. [ 608.633248][ T501] bond6: (slave ip6tnl1): refused to change device type [ 611.195947][ T28] audit: type=1326 audit(1771103575.102:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.260053][ T28] audit: type=1326 audit(1771103575.122:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.379204][ T28] audit: type=1326 audit(1771103575.122:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.482797][ T570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'. [ 611.515513][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'. [ 611.528470][ T28] audit: type=1326 audit(1771103575.122:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.572393][ T28] audit: type=1326 audit(1771103575.122:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.596828][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'. [ 611.612447][ T28] audit: type=1326 audit(1771103575.122:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.613006][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'. [ 611.652885][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10164'. [ 611.672412][ T28] audit: type=1326 audit(1771103575.122:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.736671][ T28] audit: type=1326 audit(1771103575.122:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.791499][ T28] audit: type=1326 audit(1771103575.122:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.835143][ T28] audit: type=1326 audit(1771103575.122:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.889170][ T28] audit: type=1326 audit(1771103575.122:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 611.932454][ T28] audit: type=1326 audit(1771103575.122:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.012388][ T28] audit: type=1326 audit(1771103575.122:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.072141][ T28] audit: type=1326 audit(1771103575.122:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.140961][ T28] audit: type=1326 audit(1771103575.122:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.218269][ T28] audit: type=1326 audit(1771103575.122:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.589095][ T28] audit: type=1326 audit(1771103575.132:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=562 comm="syz.5.10162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 612.746544][ T585] netlink: 'syz.2.10169': attribute type 1 has an invalid length. [ 612.778199][ T585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.816346][ T585] vlan2: entered promiscuous mode [ 612.821560][ T585] bond3: entered promiscuous mode [ 612.844364][ T585] bond3: (slave geneve2): making interface the new active one [ 612.862478][ T585] geneve2: entered promiscuous mode [ 612.869355][ T585] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 612.878588][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.887515][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.948879][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.970624][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.986552][ T600] syzkaller0: entered promiscuous mode [ 612.992173][ T600] syzkaller0: entered allmulticast mode [ 613.000853][ T600] tipc: Started in network mode [ 613.006322][ T600] tipc: Node identity c29796046f77, cluster identity 4711 [ 613.016299][ T600] tipc: Enabled bearer , priority 0 [ 613.071727][ T600] tipc: Resetting bearer [ 613.135469][ T595] xt_l2tp: v2 tid > 0xffff: 37482740 [ 613.182627][ T600] tipc: Disabling bearer [ 613.861846][ T647] netlink: 'syz.9.10191': attribute type 4 has an invalid length. [ 613.894014][ T647] netlink: 'syz.9.10191': attribute type 4 has an invalid length. [ 614.036133][ T623] syz.2.10180 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 614.053655][ T623] CPU: 0 UID: 0 PID: 623 Comm: syz.2.10180 Tainted: G W syzkaller #0 PREEMPT(full) [ 614.053688][ T623] Tainted: [W]=WARN [ 614.053714][ T623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 614.053726][ T623] Call Trace: [ 614.053731][ T623] [ 614.053738][ T623] __dump_stack+0x1d/0x30 [ 614.053773][ T623] dump_stack_lvl+0x95/0xd0 [ 614.053794][ T623] dump_stack+0x15/0x1b [ 614.053848][ T623] dump_header+0x80/0x240 [ 614.053875][ T623] oom_kill_process+0x295/0x350 [ 614.053911][ T623] out_of_memory+0x97d/0xb80 [ 614.053972][ T623] try_charge_memcg+0x62e/0xa10 [ 614.054005][ T623] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 614.054093][ T623] __swap_cache_prepare_and_add+0x386/0x530 [ 614.054131][ T623] swap_cache_alloc_folio+0xa2/0x120 [ 614.054171][ T623] swap_cluster_readahead+0x26e/0x3d0 [ 614.054249][ T623] swapin_readahead+0xde/0x840 [ 614.054273][ T623] ? do_try_to_free_pages+0xc6c/0xc80 [ 614.054299][ T623] ? __rcu_read_unlock+0x4e/0x70 [ 614.054317][ T623] ? swap_cache_get_folio+0x26f/0x280 [ 614.054383][ T623] do_swap_page+0x309/0x2210 [ 614.054414][ T623] ? try_to_free_mem_cgroup_pages+0x235/0x470 [ 614.054450][ T623] ? __rcu_read_lock+0x36/0x50 [ 614.054471][ T623] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 614.054514][ T623] handle_mm_fault+0xb40/0x3020 [ 614.054541][ T623] ? mt_find+0x291/0x3d0 [ 614.054572][ T623] do_user_addr_fault+0x3fd/0x1050 [ 614.054613][ T623] exc_page_fault+0x62/0xa0 [ 614.054709][ T623] asm_exc_page_fault+0x26/0x30 [ 614.054729][ T623] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 614.054750][ T623] Code: c9 75 f6 e9 c2 27 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 614.054783][ T623] RSP: 0018:ffffc90001c0bc10 EFLAGS: 00050246 [ 614.054849][ T623] RAX: 0000000000000000 RBX: 00007fd0b2bd5f84 RCX: 0000000000000040 [ 614.054865][ T623] RDX: ffffc90013275000 RSI: 000000000007ffff RDI: 00007fd0b2bd5e40 [ 614.054880][ T623] RBP: ffff888123c84f00 R08: 0001888123c84ed7 R09: 0000000000000000 [ 614.054893][ T623] R10: fffffffffffffe00 R11: 0000000000000002 R12: 00007ffffffff000 [ 614.054905][ T623] R13: 00007fd0b2bd5c40 R14: 00007fd0b2bd5c40 R15: ffff888123c84200 [ 614.054970][ T623] copy_fpstate_to_sigframe+0xaf/0x7f0 [ 614.054996][ T623] ? posixtimer_deliver_signal+0x2dd/0x320 [ 614.055029][ T623] ? dequeue_signal+0x397/0x3a0 [ 614.055115][ T623] ? x86_task_fpu+0x36/0x60 [ 614.055176][ T623] get_sigframe+0x34c/0x470 [ 614.055201][ T623] ? get_signal+0xdc3/0xf60 [ 614.055238][ T623] x64_setup_rt_frame+0xa7/0x4e0 [ 614.055337][ T623] arch_do_signal_or_restart+0x24b/0x450 [ 614.055447][ T623] exit_to_user_mode_loop+0x6a/0x6f0 [ 614.055491][ T623] do_syscall_64+0x249/0x370 [ 614.055521][ T623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.055541][ T623] RIP: 0033:0x7fd0b419bf79 [ 614.055571][ T623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.055593][ T623] RSP: 002b:00007fd0b2bd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.055615][ T623] RAX: fffffffffffffff4 RBX: 00007fd0b4416090 RCX: 00007fd0b419bf79 [ 614.055628][ T623] RDX: 0000000000000031 RSI: 0000200000000000 RDI: 0000000000000000 [ 614.055641][ T623] RBP: 00007fd0b42327e0 R08: 0000000000000000 R09: 0000000000000000 [ 614.055657][ T623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.055731][ T623] R13: 00007fd0b4416128 R14: 00007fd0b4416090 R15: 00007ffd9eadfc98 [ 614.055754][ T623] [ 614.055763][ T623] memory: usage 307200kB, limit 307200kB, failcnt 4813 [ 614.502487][ T623] memory+swap: usage 274524kB, limit 9007199254740988kB, failcnt 0 [ 614.510652][ T623] kmem: usage 257804kB, limit 9007199254740988kB, failcnt 0 [ 614.569861][ T623] Memory cgroup stats for /syz2: [ 614.570051][ T623] cache 0 [ 614.642378][ T623] rss 126976 [ 614.645609][ T623] shmem 0 [ 614.708188][ T649] Set syz1 is full, maxelem 65536 reached [ 614.862729][ T623] mapped_file 0 [ 614.866280][ T623] dirty 0 [ 614.870679][ T623] writeback 20480 [ 614.876546][ T623] workingset_refault_anon 3495 [ 614.893032][ T623] workingset_refault_file 11 [ 614.909694][ T623] swap 16859136 [ 614.932386][ T623] swapcached 32743424 [ 614.944500][ T623] pgpgin 261636 [ 614.948089][ T623] pgpgout 261603 [ 614.951743][ T623] pgfault 244034 [ 614.968328][ T623] pgmajfault 1159 [ 614.971980][ T623] inactive_anon 110592 [ 614.988576][ T623] active_anon 24576 [ 614.994860][ T623] inactive_file 0 [ 615.035196][ T623] active_file 0 [ 615.038700][ T623] unevictable 0 [ 615.049660][ T623] hierarchical_memory_limit 314572800 [ 615.099391][ T623] hierarchical_memsw_limit 9223372036854771712 [ 615.112511][ T623] total_cache 0 [ 615.119614][ T623] total_rss 126976 [ 615.146262][ T623] total_shmem 0 [ 615.156322][ T623] total_mapped_file 0 [ 615.170452][ T623] total_dirty 0 [ 615.182429][ T623] total_writeback 20480 [ 615.190646][ T623] total_workingset_refault_anon 3495 [ 615.205699][ T623] total_workingset_refault_file 11 [ 615.211720][ T623] total_swap 16859136 [ 615.216735][ T623] total_swapcached 32743424 [ 615.221488][ T623] total_pgpgin 261636 [ 615.226029][ T623] total_pgpgout 261603 [ 615.230128][ T623] total_pgfault 244034 [ 615.234432][ T623] total_pgmajfault 1159 [ 615.239042][ T623] total_inactive_anon 110592 [ 615.243874][ T623] total_active_anon 24576 [ 615.248437][ T623] total_inactive_file 0 [ 615.252829][ T623] total_active_file 0 [ 615.256839][ T623] total_unevictable 0 [ 615.260886][ T623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.10180,pid=617,uid=0 [ 615.292444][ T623] Memory cgroup out of memory: Killed process 623 (syz.2.10180) total-vm:96336kB, anon-rss:1336kB, file-rss:22384kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 615.428764][ T681] loop2: detected capacity change from 0 to 128 [ 615.702982][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.722603][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.744399][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.758753][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.772775][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.784383][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.802705][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10208'. [ 615.901620][ T700] netlink: 'syz.9.10212': attribute type 1 has an invalid length. [ 615.931561][ T700] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.959327][ T700] bond11: entered allmulticast mode [ 615.981619][ T700] macvlan1: entered promiscuous mode [ 615.992476][ T700] macvlan1: entered allmulticast mode [ 616.003405][ T700] bond11: entered promiscuous mode [ 616.012939][ T700] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 616.028152][ T700] bond11: left promiscuous mode [ 616.139189][ T708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10214'. [ 616.175381][ T712] netlink: 'syz.7.10216': attribute type 1 has an invalid length. [ 616.189806][ T712] 8021q: adding VLAN 0 to HW filter on device bond14 [ 616.207245][ T712] vlan3: entered promiscuous mode [ 616.212516][ T712] bond14: entered promiscuous mode [ 616.240965][ T717] netlink: 'syz.7.10218': attribute type 4 has an invalid length. [ 616.305651][ T723] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10221'. [ 616.331076][ T723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=723 comm=syz.7.10221 [ 616.343663][ T723] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10221'. [ 617.176278][ T738] loop2: detected capacity change from 0 to 512 [ 617.220857][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 617.220871][ T28] audit: type=1326 audit(1771103581.122:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.266627][ T28] audit: type=1326 audit(1771103581.122:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.312805][ T28] audit: type=1326 audit(1771103581.122:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.336475][ T28] audit: type=1326 audit(1771103581.122:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.361264][ T28] audit: type=1326 audit(1771103581.122:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.414212][ T28] audit: type=1326 audit(1771103581.122:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.456892][ T28] audit: type=1326 audit(1771103581.122:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.505785][ T28] audit: type=1326 audit(1771103581.122:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.665188][ T28] audit: type=1326 audit(1771103581.122:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 617.693932][ T28] audit: type=1326 audit(1771103581.122:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.7.10228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 619.057491][ T790] netlink: 'syz.8.10245': attribute type 11 has an invalid length. [ 620.824565][ T841] bond2: left promiscuous mode [ 620.829553][ T841] bond2: left allmulticast mode [ 620.930648][ T841] geneve2: left promiscuous mode [ 621.154772][ T850] __nla_validate_parse: 3 callbacks suppressed [ 621.154790][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 621.193369][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 621.210027][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 621.239390][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 621.265087][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 621.861445][ T860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.978562][ T860] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.127780][ T860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.175069][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 622.201072][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 622.212596][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10268'. [ 622.290274][ T890] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10281'. [ 622.317228][ T890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=890 comm=syz.8.10281 [ 622.407860][ T902] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10285'. [ 622.435126][ T904] netlink: 'syz.8.10283': attribute type 1 has an invalid length. [ 622.509943][ T902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=902 comm=syz.7.10285 [ 622.728478][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 622.728495][ T28] audit: type=1326 audit(1771103586.632:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 622.830913][ T28] audit: type=1326 audit(1771103586.672:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 622.873142][ T28] audit: type=1326 audit(1771103586.672:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 622.932234][ T28] audit: type=1326 audit(1771103586.682:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 622.956036][ T28] audit: type=1326 audit(1771103586.682:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 622.980201][ T28] audit: type=1326 audit(1771103586.732:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x7ffc0000 [ 623.003985][ T28] audit: type=1326 audit(1771103586.732:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1030cbbce2 code=0x7ffc0000 [ 623.066835][ T28] audit: type=1326 audit(1771103586.732:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1030cbbd77 code=0x7ffc0000 [ 623.099747][ T28] audit: type=1326 audit(1771103586.732:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1030c78d11 code=0x7ffc0000 [ 623.124069][ T28] audit: type=1326 audit(1771103586.732:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=915 comm="syz.7.10289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1030cbcd89 code=0x7ffc0000 [ 624.247525][ T945] netlink: 'syz.8.10297': attribute type 4 has an invalid length. [ 624.281964][ T945] netlink: 'syz.8.10297': attribute type 4 has an invalid length. [ 626.942905][ T970] netlink: 'syz.7.10308': attribute type 1 has an invalid length. [ 626.958171][ T974] __nla_validate_parse: 7 callbacks suppressed [ 626.958185][ T974] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10310'. [ 627.009943][ T970] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 627.019388][ T981] xt_hashlimit: size too large, truncated to 1048576 [ 627.043662][ T970] bond15: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 627.064267][ T985] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10313'. [ 627.075459][ T970] bond15: (slave vxcan1): making interface the new active one [ 627.083805][ T970] bond15: (slave vxcan1): Enslaving as an active interface with an up link [ 627.102998][ T987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10307'. [ 627.127392][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10307'. [ 627.137118][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10307'. [ 627.146912][ T974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=974 comm=syz.9.10310 [ 627.162520][ T985] netlink: 'syz.5.10313': attribute type 5 has an invalid length. [ 627.184704][ T985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10313'. [ 627.199664][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10307'. [ 627.218113][ T979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10307'. [ 627.293182][ T999] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 627.308015][ T1003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10320'. [ 627.318473][ T999] bond17 (unregistering): Released all slaves [ 627.872946][ T1003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10320'. [ 628.333370][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 628.333387][ T28] audit: type=1400 audit(1771103592.242:3955): avc: denied { watch_reads } for pid=1024 comm="syz.5.10328" path="/" dev="ramfs" ino=123058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 629.894914][ T1079] netlink: 'syz.5.10349': attribute type 16 has an invalid length. [ 629.912957][ T1079] netlink: 'syz.5.10349': attribute type 17 has an invalid length. [ 630.263511][ T1079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.941878][ T1125] syz.2.10365 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 631.963393][ T1125] CPU: 0 UID: 0 PID: 1125 Comm: syz.2.10365 Tainted: G W syzkaller #0 PREEMPT(full) [ 631.963424][ T1125] Tainted: [W]=WARN [ 631.963432][ T1125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 631.963461][ T1125] Call Trace: [ 631.963469][ T1125] [ 631.963479][ T1125] __dump_stack+0x1d/0x30 [ 631.963510][ T1125] dump_stack_lvl+0x95/0xd0 [ 631.963608][ T1125] dump_stack+0x15/0x1b [ 631.963634][ T1125] dump_header+0x80/0x240 [ 631.963662][ T1125] oom_kill_process+0x295/0x350 [ 631.963703][ T1125] out_of_memory+0x97d/0xb80 [ 631.963815][ T1125] try_charge_memcg+0x62e/0xa10 [ 631.963927][ T1125] obj_cgroup_charge_pages+0x23/0xc0 [ 631.963959][ T1125] __memcg_kmem_charge_page+0x9e/0x170 [ 631.964007][ T1125] __alloc_frozen_pages_noprof+0x18a/0x360 [ 631.964032][ T1125] alloc_pages_mpol+0xb3/0x260 [ 631.964063][ T1125] alloc_pages_noprof+0x8f/0x130 [ 631.964164][ T1125] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 631.964208][ T1125] __kvmalloc_node_noprof+0x3d4/0x650 [ 631.964230][ T1125] ? ip_set_alloc+0x24/0x30 [ 631.964261][ T1125] ? ip_set_alloc+0x24/0x30 [ 631.964291][ T1125] ? __kmalloc_cache_noprof+0x18a/0x410 [ 631.964402][ T1125] ip_set_alloc+0x24/0x30 [ 631.964426][ T1125] hash_netiface_create+0x282/0x740 [ 631.964459][ T1125] ? __pfx_hash_netiface_create+0x10/0x10 [ 631.964497][ T1125] ip_set_create+0x3cf/0x970 [ 631.964542][ T1125] ? __nla_parse+0x40/0x60 [ 631.964584][ T1125] nfnetlink_rcv_msg+0x509/0x5d0 [ 631.964676][ T1125] netlink_rcv_skb+0x123/0x220 [ 631.964707][ T1125] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 631.964743][ T1125] nfnetlink_rcv+0x167/0x1720 [ 631.964817][ T1125] ? __list_add_valid_or_report+0x38/0xe0 [ 631.964853][ T1125] ? merge_sched_in+0x5d4/0xc70 [ 631.964947][ T1125] ? rb_next+0x5c/0x80 [ 631.964978][ T1125] ? visit_groups_merge+0xf7e/0xfd0 [ 631.965006][ T1125] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 631.965124][ T1125] ? _raw_spin_lock_bh+0x56/0xb0 [ 631.965150][ T1125] ? strlen+0x19/0x40 [ 631.965190][ T1125] ? selinux_nlmsg_lookup+0x99/0x890 [ 631.965225][ T1125] ? __rcu_read_unlock+0x33/0x70 [ 631.965252][ T1125] ? netlink_unicast+0x334/0x690 [ 631.965301][ T1125] netlink_unicast+0x5c0/0x690 [ 631.965324][ T1125] netlink_sendmsg+0x5c8/0x6f0 [ 631.965373][ T1125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.965449][ T1125] ____sys_sendmsg+0x5af/0x600 [ 631.965487][ T1125] ___sys_sendmsg+0x195/0x1e0 [ 631.965534][ T1125] __x64_sys_sendmsg+0xd4/0x160 [ 631.965596][ T1125] x64_sys_call+0x194c/0x3020 [ 631.965627][ T1125] do_syscall_64+0x12c/0x370 [ 631.965662][ T1125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.965743][ T1125] RIP: 0033:0x7fd0b419bf79 [ 631.965808][ T1125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.965832][ T1125] RSP: 002b:00007fd0b2bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.965852][ T1125] RAX: ffffffffffffffda RBX: 00007fd0b4415fa0 RCX: 00007fd0b419bf79 [ 631.965865][ T1125] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 631.965897][ T1125] RBP: 00007fd0b42327e0 R08: 0000000000000000 R09: 0000000000000000 [ 631.965921][ T1125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.965936][ T1125] R13: 00007fd0b4416038 R14: 00007fd0b4415fa0 R15: 00007ffd9eadfc98 [ 631.966007][ T1125] [ 632.303519][ T1125] memory: usage 283256kB, limit 307200kB, failcnt 5667 [ 632.317653][ T1125] memory+swap: usage 291600kB, limit 9007199254740988kB, failcnt 0 [ 632.337739][ T1125] kmem: usage 282888kB, limit 9007199254740988kB, failcnt 0 [ 632.373421][ T1125] Memory cgroup stats for /syz2: [ 632.373660][ T1125] cache 0 [ 632.401688][ T1125] rss 36864 [ 632.405282][ T1125] shmem 0 [ 632.409349][ T1125] mapped_file 0 [ 632.418877][ T1125] dirty 0 [ 632.429797][ T1125] writeback 0 [ 632.436339][ T1125] workingset_refault_anon 3571 [ 632.449254][ T1125] workingset_refault_file 11 [ 632.465984][ T1125] swap 8544256 [ 632.475221][ T1125] swapcached 41259008 [ 632.489295][ T1125] pgpgin 274980 [ 632.500862][ T1125] pgpgout 274966 [ 632.519548][ T1125] pgfault 265307 [ 632.532587][ T1125] pgmajfault 1198 [ 632.608600][ T1125] inactive_anon 20480 [ 632.625860][ T1125] active_anon 36864 [ 632.656092][ T1125] inactive_file 0 [ 632.660201][ T1125] active_file 0 [ 632.682957][ T1125] unevictable 0 [ 632.686443][ T1125] hierarchical_memory_limit 314572800 [ 632.692000][ T1125] hierarchical_memsw_limit 9223372036854771712 [ 632.707237][ T1125] total_cache 0 [ 632.729835][ T1125] total_rss 36864 [ 632.744105][ T1125] total_shmem 0 [ 632.764221][ T1125] total_mapped_file 0 [ 632.768290][ T1125] total_dirty 0 [ 632.771761][ T1125] total_writeback 0 [ 632.825687][ T1125] total_workingset_refault_anon 3571 [ 632.844069][ T1125] total_workingset_refault_file 11 [ 632.849264][ T1125] total_swap 8544256 [ 632.892023][ T1125] total_swapcached 41259008 [ 632.910141][ T1125] total_pgpgin 274980 [ 632.921370][ T1125] total_pgpgout 274966 [ 632.933178][ T1125] total_pgfault 265307 [ 632.942852][ T1125] total_pgmajfault 1198 [ 632.957540][ T1125] total_inactive_anon 20480 [ 632.973168][ T1125] total_active_anon 36864 [ 632.986202][ T1125] total_inactive_file 0 [ 632.999512][ T1125] total_active_file 0 [ 633.009224][ T1125] total_unevictable 0 [ 633.019030][ T1125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.10365,pid=1124,uid=0 [ 633.051725][ T1125] Memory cgroup out of memory: Killed process 1125 (syz.2.10365) total-vm:96336kB, anon-rss:1336kB, file-rss:22420kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 633.179916][ T1125] syz.2.10365 (1125) used greatest stack depth: 5688 bytes left [ 633.223631][ T1151] netlink: 'syz.2.10374': attribute type 1 has an invalid length. [ 633.281378][ T1151] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 633.295815][ T1151] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 633.307482][ T1151] bond4: (slave vxcan1): making interface the new active one [ 633.315844][ T1151] bond4: (slave vxcan1): Enslaving as an active interface with an up link [ 633.365259][ T1158] loop2: detected capacity change from 0 to 1024 [ 633.442031][ T1158] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 633.602874][ T1172] netlink: 'syz.5.10383': attribute type 8 has an invalid length. [ 633.623234][ T1172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10383'. [ 633.645106][ T1172] bond0: entered promiscuous mode [ 633.650975][ T1172] gretap0: entered promiscuous mode [ 633.676890][ T1172] veth1_to_bond: entered promiscuous mode [ 633.723930][ T1172] hsr1: entered promiscuous mode [ 636.160288][ T1254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10410'. [ 636.164176][ T28] audit: type=1400 audit(1771103600.062:3956): avc: denied { read } for pid=1253 comm="syz.8.10410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 636.316191][ T28] audit: type=1326 audit(1771103600.222:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.368813][ T28] audit: type=1326 audit(1771103600.222:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.421952][ T28] audit: type=1326 audit(1771103600.222:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.474503][ T28] audit: type=1326 audit(1771103600.222:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.525969][ T28] audit: type=1326 audit(1771103600.222:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.539675][ T1258] netlink: 277 bytes leftover after parsing attributes in process `syz.7.10411'. [ 636.603855][ T28] audit: type=1326 audit(1771103600.222:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.657490][ T28] audit: type=1326 audit(1771103600.222:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.724642][ T28] audit: type=1326 audit(1771103600.222:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.784026][ T28] audit: type=1326 audit(1771103600.222:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1255 comm="syz.9.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7fc00000 [ 636.827686][ T1285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10418'. [ 636.887315][ T1285] x_tables: duplicate underflow at hook 2 [ 637.463240][ T1312] loop2: detected capacity change from 0 to 1024 [ 637.478780][ T1312] EXT4-fs: Ignoring removed nobh option [ 637.498564][ T1312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 637.533397][ T1312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.964915][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.280536][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10440'. [ 638.289654][ T1356] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10440'. [ 639.990286][ T1392] loop2: detected capacity change from 0 to 512 [ 640.027071][ T1392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.044782][ T1392] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.083351][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10449'. [ 640.155292][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.616444][ T1419] loop2: detected capacity change from 0 to 512 [ 640.634775][ T1419] EXT4-fs: Ignoring removed nobh option [ 640.667728][ T1419] EXT4-fs (loop2): orphan cleanup on readonly fs [ 640.681039][ T1419] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.10459: EA inode hash validation failed [ 640.695426][ T1419] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 640.713407][ T1419] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10459: corrupted inode contents [ 640.726147][ T1419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.726856][ T1419] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.10459: mark_inode_dirty error [ 640.736346][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 640.736497][ C0] EXT4-fs (loop2): initial error at time 1771103604: ext4_do_update_inode:5569: inode 15 [ 640.736717][ C0] EXT4-fs (loop2): last error at time 1771103604: ext4_do_update_inode:5569: inode 15 [ 640.780139][ T1419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.781371][ T1419] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.10459: corrupted inode contents [ 640.803820][ T1419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.810312][ T1419] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.10459: mark_inode_dirty error [ 640.837262][ T1419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.838818][ T1419] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.10459: mark inode dirty (error -117) [ 640.863364][ T1419] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.864058][ T1419] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 640.884565][ T1419] EXT4-fs (loop2): 1 orphan inode deleted [ 640.898268][ T1419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 640.947458][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.658385][ T28] kauditd_printk_skb: 181 callbacks suppressed [ 641.658403][ T28] audit: type=1400 audit(1771103605.562:4147): avc: denied { read } for pid=1450 comm="syz.2.10470" path="socket:[124518]" dev="sockfs" ino=124518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 643.533835][ T30] bridge_slave_1: left allmulticast mode [ 643.539773][ T30] bridge_slave_1: left promiscuous mode [ 643.546048][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.554847][ T30] bridge_slave_0: left allmulticast mode [ 643.560552][ T30] bridge_slave_0: left promiscuous mode [ 643.567124][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.028110][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10487'. [ 644.042868][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.055165][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.066853][ T30] bond0 (unregistering): Released all slaves [ 644.131999][ T1497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1497 comm=syz.5.10484 [ 644.147998][ T1497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10484'. [ 644.174592][ T30] tipc: Left network mode [ 644.181726][ T30] hsr_slave_0: left promiscuous mode [ 644.194060][ T30] hsr_slave_1: left promiscuous mode [ 644.199694][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.213509][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.222605][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.230005][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.250034][ T30] veth1_macvtap: left promiscuous mode [ 644.258873][ T30] veth0_macvtap: left promiscuous mode [ 644.312221][ T30] pimreg (unregistering): left allmulticast mode [ 644.347916][ T30] team0 (unregistering): Port device team_slave_1 removed [ 644.370243][ T30] team0 (unregistering): Port device team_slave_0 removed [ 644.375383][ T1527] tipc: Failed to remove unknown binding: 66,0,0/0:1481148221/1481148222 [ 644.386759][ T1527] tipc: Failed to remove unknown binding: 66,0,0/0:1481148221/1481148222 [ 644.687289][ T30] IPVS: stop unused estimator thread 0... [ 647.183515][ T1635] loop2: detected capacity change from 0 to 128 [ 647.206684][ T1635] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.231049][ T1635] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 647.301678][ T28] audit: type=1400 audit(1771103611.202:4148): avc: denied { watch watch_reads } for pid=1634 comm="syz.2.10530" path="/182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.432166][T30946] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.797568][ T1668] bridge0: entered allmulticast mode [ 648.012119][ T1674] netlink: 'syz.7.10545': attribute type 29 has an invalid length. [ 648.024460][ T1674] netlink: 'syz.7.10545': attribute type 29 has an invalid length. [ 648.037901][ T1674] netlink: 500 bytes leftover after parsing attributes in process `syz.7.10545'. [ 648.050092][ T1673] delete_channel: no stack [ 648.084571][ T1680] netlink: 'syz.7.10548': attribute type 1 has an invalid length. [ 648.098564][ T1680] bond16: entered promiscuous mode [ 648.104235][ T1680] 8021q: adding VLAN 0 to HW filter on device bond16 [ 648.362664][ T28] audit: type=1326 audit(1771103612.272:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.399026][ T28] audit: type=1326 audit(1771103612.272:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.440190][ T28] audit: type=1326 audit(1771103612.272:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.479718][ T28] audit: type=1326 audit(1771103612.272:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.529262][ T28] audit: type=1326 audit(1771103612.272:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.579637][ T28] audit: type=1326 audit(1771103612.272:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.619584][ T28] audit: type=1326 audit(1771103612.272:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.652906][ T28] audit: type=1326 audit(1771103612.272:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 648.732461][ T28] audit: type=1326 audit(1771103612.272:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz.9.10552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 649.509270][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.521651][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.338058][ T1842] netlink: 'syz.9.10568': attribute type 30 has an invalid length. [ 650.897303][ T1851] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10572'. [ 650.908347][ T1851] IPVS: Error connecting to the multicast addr [ 651.626198][ T1869] bridge0: entered promiscuous mode [ 651.632920][ T1869] macvtap1: entered promiscuous mode [ 651.650232][ T1869] macvtap1: entered allmulticast mode [ 651.676104][ T1869] bridge0: entered allmulticast mode [ 651.702732][ T1869] bridge0: port 1(macvtap1) entered blocking state [ 651.730354][ T1869] bridge0: port 1(macvtap1) entered disabled state [ 651.774453][ T1869] bridge0: left allmulticast mode [ 651.784037][ T1869] bridge0: left promiscuous mode [ 652.098878][ T1881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.108448][ T1881] bridge0: port 1(dummy0) entered blocking state [ 652.114877][ T1881] bridge0: port 1(dummy0) entered forwarding state [ 652.146026][ T1881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.674585][ T1906] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 652.674585][ T1906] The task syz.7.10592 (1906) triggered the difference, watch for misbehavior. [ 653.856185][ T1937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10613'. [ 655.955496][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 655.955531][ T28] audit: type=1326 audit(1771103619.852:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1954 comm="syz.7.10609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1030cbbf79 code=0x0 [ 656.238824][ T1963] syzkaller0: entered promiscuous mode [ 656.251154][ T1963] syzkaller0: entered allmulticast mode [ 657.449801][ T1981] syz.9.10621 (1981) used greatest stack depth: 4664 bytes left [ 657.513711][ T1999] loop2: detected capacity change from 0 to 512 [ 657.558118][ T1999] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 657.648171][ T1999] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 657.708015][ T1999] EXT4-fs (loop2): 1 truncate cleaned up [ 657.733020][ T1999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.540604][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.046097][ T2034] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.10641'. [ 659.067080][ T2034] netlink: 3074 bytes leftover after parsing attributes in process `syz.7.10641'. [ 659.853681][ T2062] bridge0: entered promiscuous mode [ 659.860461][ T2062] macvtap2: entered promiscuous mode [ 659.870524][ T2062] macvtap2: entered allmulticast mode [ 659.876807][ T2062] bridge0: entered allmulticast mode [ 659.893761][ T2062] bridge0: port 2(macvtap2) entered blocking state [ 659.901566][ T2062] bridge0: port 2(macvtap2) entered disabled state [ 659.921256][ T2062] bridge0: left allmulticast mode [ 659.929470][ T2062] bridge0: left promiscuous mode [ 660.141252][ T2083] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10659'. [ 660.162977][ T2083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2083 comm=syz.7.10659 [ 660.763638][ T28] audit: type=1400 audit(1771103880.668:4174): avc: denied { setopt } for pid=2097 comm="syz.7.10662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 661.415566][ T2129] tipc: Failed to remove unknown binding: 66,0,0/0:115071905/115071907 [ 661.425377][ T2129] tipc: Failed to remove unknown binding: 66,0,0/0:115071905/115071906 [ 661.435608][ T2129] tipc: Failed to remove unknown binding: 66,0,0/0:115071905/115071907 [ 661.443981][ T2129] tipc: Failed to remove unknown binding: 66,0,0/0:115071905/115071906 [ 661.530266][ T2131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.541332][ T2131] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.574342][ T2131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.231690][ T2140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 662.502037][ T2156] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 662.879628][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10688'. [ 662.948605][ T28] audit: type=1400 audit(1771103882.848:4175): avc: denied { map } for pid=2172 comm="syz.5.10690" path="pipe:[134253]" dev="pipefs" ino=134253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 663.010475][ T2175] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10691'. [ 663.034416][ T2175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2175 comm=syz.5.10691 [ 664.804238][ T2198] loop2: detected capacity change from 0 to 512 [ 664.834564][ T2198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 664.879222][ T2198] EXT4-fs (loop2): 1 truncate cleaned up [ 664.905140][ T2198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.488384][ T2223] tipc: Failed to remove unknown binding: 66,0,0/0:503485979/503485981 [ 665.512288][ T2223] tipc: Failed to remove unknown binding: 66,0,0/0:503485979/503485980 [ 665.539121][ T2223] tipc: Failed to remove unknown binding: 66,0,0/0:503485979/503485981 [ 665.589264][ T2223] tipc: Failed to remove unknown binding: 66,0,0/0:503485979/503485980 [ 665.655898][ T2229] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10706'. [ 665.703009][ T2229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2229 comm=syz.7.10706 [ 665.723625][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.792626][ T2280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 666.919599][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10728'. [ 666.934308][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10728'. [ 667.065889][ T2308] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=2308 comm=syz.7.10738 [ 667.096134][ T2310] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10739'. [ 667.117841][ T2310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10739'. [ 667.193870][ T2316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.533923][ T28] audit: type=1326 audit(1771103887.438:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.568786][ T28] audit: type=1326 audit(1771103887.438:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.596774][ T28] audit: type=1326 audit(1771103887.438:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.621998][ T28] audit: type=1326 audit(1771103887.438:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.645858][ T28] audit: type=1326 audit(1771103887.438:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.669658][ T28] audit: type=1326 audit(1771103887.438:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.693690][ T28] audit: type=1326 audit(1771103887.438:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.722918][ T28] audit: type=1326 audit(1771103887.438:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 667.749294][ T28] audit: type=1326 audit(1771103887.438:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2333 comm="syz.9.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 668.055760][ T2362] syz_tun: entered allmulticast mode [ 668.138934][ T2366] netlink: 'syz.8.10763': attribute type 1 has an invalid length. [ 668.154899][ T2366] 8021q: adding VLAN 0 to HW filter on device bond17 [ 668.177096][ T2366] bond17: entered allmulticast mode [ 668.205741][ T2366] bond17: (slave ip6gretap3): making interface the new active one [ 668.214956][ T2366] ip6gretap3: entered allmulticast mode [ 668.221879][ T2366] bond17: (slave ip6gretap3): Enslaving as an active interface with an up link [ 668.234877][ T2358] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10757'. [ 668.533696][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10768'. [ 668.982441][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 668.982459][ T28] audit: type=1326 audit(1771103888.868:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2389 comm="syz.5.10773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x0 [ 670.519925][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10786'. [ 670.683618][ T2450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10789'. [ 670.718422][ T2459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10792'. [ 670.728527][ T2459] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10792'. [ 671.848263][ T2481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 671.859429][ T2483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10799'. [ 672.061898][ T2481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 672.086437][ T2483] bond2: (slave syz_tun): Releasing active interface [ 672.104261][ T2481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10800'. [ 672.279354][ T2505] loop2: detected capacity change from 0 to 128 [ 672.501055][ T28] audit: type=1400 audit(1771103892.388:4317): avc: denied { accept } for pid=2507 comm="syz.2.10809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 673.674368][ T2546] loop2: detected capacity change from 0 to 512 [ 673.686815][ T2546] EXT4-fs: Ignoring removed orlov option [ 673.776464][ T2546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.801308][ T2546] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.855060][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.676198][ T2606] bridge8: entered promiscuous mode [ 675.701862][ T2606] bridge8: entered allmulticast mode [ 675.724716][ T2606] team0: Port device bridge8 added [ 675.740366][ T2607] bridge0: port 1(team0) entered blocking state [ 675.767394][ T2607] bridge0: port 1(team0) entered disabled state [ 675.799323][ T2607] team0: entered allmulticast mode [ 675.823818][ T2607] team0: entered promiscuous mode [ 676.010558][ T2615] loop2: detected capacity change from 0 to 4096 [ 676.073356][ T2615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.206872][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.402893][ T2609] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10849'. [ 676.502117][ T2636] loop2: detected capacity change from 0 to 128 [ 677.286503][ T2625] bio_check_eod: 53 callbacks suppressed [ 677.286521][ T2625] syz.2.10853: attempt to access beyond end of device [ 677.286521][ T2625] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 677.779960][ T2653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10862'. [ 677.873650][ T2653] syz_tun (unregistering): left allmulticast mode [ 678.557908][ T2678] loop2: detected capacity change from 0 to 128 [ 678.927752][ T2690] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 679.036713][ T28] audit: type=1326 audit(1771103898.938:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.092553][ T28] audit: type=1326 audit(1771103898.938:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.147861][ T28] audit: type=1326 audit(1771103898.938:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.197485][ T28] audit: type=1326 audit(1771103898.938:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.237951][ T28] audit: type=1326 audit(1771103898.938:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.395490][ T28] audit: type=1326 audit(1771103898.938:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.419312][ T28] audit: type=1326 audit(1771103898.958:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.457105][ T28] audit: type=1326 audit(1771103898.958:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.492821][ T28] audit: type=1326 audit(1771103898.958:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 679.516659][ T28] audit: type=1326 audit(1771103898.958:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2696 comm="syz.5.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aedb8bf79 code=0x7ffc0000 [ 680.255200][ T2735] netlink: 'syz.5.10892': attribute type 10 has an invalid length. [ 680.274147][ T2735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.322012][ T2735] batadv0: entered promiscuous mode [ 680.328296][ T2735] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 680.955572][ T2754] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=2754 comm=syz.9.10898 [ 680.982991][ T2754] netlink: 232 bytes leftover after parsing attributes in process `syz.9.10898'. [ 681.041354][ T2761] tipc: Failed to remove unknown binding: 66,0,0/0:3862248488/3862248490 [ 681.061443][ T2761] tipc: Failed to remove unknown binding: 66,0,0/0:3862248488/3862248489 [ 681.104680][ T2761] tipc: Failed to remove unknown binding: 66,0,0/0:3862248488/3862248490 [ 681.145640][ T2761] tipc: Failed to remove unknown binding: 66,0,0/0:3862248488/3862248489 [ 682.102705][ T2788] netlink: 'syz.7.10911': attribute type 83 has an invalid length. [ 682.787600][ T2809] netlink: 'syz.2.10917': attribute type 25 has an invalid length. [ 682.802374][ T2809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10917'. [ 682.828744][ T2809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10917'. [ 682.865495][ T2809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10917'. [ 683.206535][ T2824] loop2: detected capacity change from 0 to 1024 [ 683.232781][ T2824] EXT4-fs: Ignoring removed orlov option [ 683.302854][ T2824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.886424][ T2838] tipc: Failed to remove unknown binding: 66,0,0/0:3136560853/3136560855 [ 683.895130][ T2838] tipc: Failed to remove unknown binding: 66,0,0/0:3136560853/3136560854 [ 683.904376][ T2838] tipc: Failed to remove unknown binding: 66,0,0/0:3136560853/3136560855 [ 683.904477][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.913201][ T2838] tipc: Failed to remove unknown binding: 66,0,0/0:3136560853/3136560854 [ 683.960986][ T2844] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10931'. [ 684.055912][ T2844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2844 comm=syz.8.10931 [ 685.054829][ T2875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10940'. [ 685.266156][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 685.266218][ T28] audit: type=1326 audit(1771103905.168:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2893 comm="syz.8.10947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24a1f2bf79 code=0x0 [ 685.304327][ T2900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10950'. [ 685.336553][ T2900] loop2: detected capacity change from 0 to 512 [ 685.363056][ T2900] EXT4-fs (loop2): bad s_min_extra_isize: 2304 [ 685.746604][ T2916] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10955'. [ 689.322842][ T2984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.330092][ T2984] IPv6: NLM_F_CREATE should be set when creating new route [ 689.412913][ T28] audit: type=1400 audit(1771103909.308:4381): avc: denied { read write } for pid=2991 comm="syz.2.10986" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 689.485285][ T28] audit: type=1400 audit(1771103909.308:4382): avc: denied { open } for pid=2991 comm="syz.2.10986" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 690.827171][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10981'. [ 691.358821][ T3020] loop2: detected capacity change from 0 to 512 [ 691.381753][ T3020] msdos: Bad value for 'check' [ 691.821151][ T3034] loop2: detected capacity change from 0 to 512 [ 692.426099][ T3056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11002'. [ 692.445502][ T3057] loop2: detected capacity change from 0 to 1024 [ 692.489474][ T3057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 692.528326][ T3057] System zones: 0-1, 3-36 [ 692.555578][ T3056] hsr_slave_0: left promiscuous mode [ 692.652992][ T3057] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.11001: bad orphan inode 134217728 [ 692.664004][ T3056] hsr_slave_1: left promiscuous mode [ 692.683495][ T3057] loop2: lost filesystem error report for type 5 error -117 [ 692.684039][ T3057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.796078][ T3063] team0 (unregistering): Failed to send options change via netlink (err -105) [ 692.815840][ T3063] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 692.842995][ T3063] team0 (unregistering): Port device team_slave_0 removed [ 692.850872][ T3063] team0 (unregistering): Failed to send options change via netlink (err -105) [ 692.860228][ T3063] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 692.872173][ T3063] team0 (unregistering): Port device team_slave_1 removed [ 693.134377][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.234732][ T3085] syzkaller0: entered promiscuous mode [ 693.247789][ T3085] syzkaller0: entered allmulticast mode [ 693.271684][ T3085] loop2: detected capacity change from 0 to 512 [ 693.285091][ T3085] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11010: couldn't read orphan inode 26 (err -116) [ 693.311123][ T3085] loop2: lost filesystem error report for type 5 error -116 [ 693.313048][ T3085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.333571][ T3085] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.769109][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.847967][ T3098] netlink: 'syz.2.11014': attribute type 12 has an invalid length. [ 693.985781][ T3109] smc: net device hsr0 applied user defined pnetid SYZ2 [ 693.993453][ T3109] smc: net device hsr0 erased user defined pnetid SYZ2 [ 694.378576][ T3114] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 694.395539][ T3114] team0 (unregistering): Port device team_slave_0 removed [ 694.413557][ T3114] team0 (unregistering): Failed to send options change via netlink (err -105) [ 694.435747][ T3114] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 694.476539][ T3114] team0 (unregistering): Port device team_slave_1 removed [ 694.984108][ T3143] bond1: option mode: unable to set because the bond device has slaves [ 695.025346][ T3143] vlan2: entered allmulticast mode [ 695.037449][ T3143] bond1: entered allmulticast mode [ 695.053789][ T3143] ip6gretap1: entered allmulticast mode [ 695.066868][ T3143] macvlan0: entered allmulticast mode [ 695.812292][ T28] audit: type=1326 audit(1771103915.678:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 695.907625][ T28] audit: type=1326 audit(1771103915.678:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 695.931442][ T28] audit: type=1326 audit(1771103915.678:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 696.428891][ T28] audit: type=1326 audit(1771103915.678:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 696.452608][ T28] audit: type=1326 audit(1771103915.678:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0b419bce2 code=0x7ffc0000 [ 696.476131][ T28] audit: type=1326 audit(1771103915.698:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0b419bce2 code=0x7ffc0000 [ 696.545491][ T28] audit: type=1326 audit(1771103915.698:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 696.702474][ T28] audit: type=1326 audit(1771103915.738:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 696.843692][ T28] audit: type=1326 audit(1771103915.758:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 696.925981][ T28] audit: type=1326 audit(1771103915.768:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.11042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd0b419bf79 code=0x7ffc0000 [ 697.271447][ T3189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.403892][ T3189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.545838][ T3189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.744068][ T3189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.030956][ T1473] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.055203][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.080306][ T1473] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.114556][ T1473] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.345648][ T3225] netlink: 'syz.2.11060': attribute type 1 has an invalid length. [ 698.374318][ T3225] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11060'. [ 698.380459][ T3227] netlink: 'syz.5.11061': attribute type 1 has an invalid length. [ 699.160094][ T3239] loop2: detected capacity change from 0 to 512 [ 699.299207][ T3239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.323473][ T3239] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.914390][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.481647][ T3270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.488903][ T3270] IPv6: NLM_F_CREATE should be set when creating new route [ 700.761336][ T3277] netlink: 'syz.7.11076': attribute type 4 has an invalid length. [ 701.510084][ T3331] loop2: detected capacity change from 0 to 512 [ 701.539233][ T3331] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11081: invalid indirect mapped block 4294967295 (level 1) [ 701.562620][ T3331] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.562737][ T3331] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.11081: invalid indirect mapped block 4294967295 (level 1) [ 701.585975][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 701.585988][ C1] EXT4-fs (loop2): initial error at time 1771103921: ext4_free_branches:1023: inode 11 [ 701.586019][ C1] EXT4-fs (loop2): last error at time 1771103921: ext4_free_branches:1023: inode 11 [ 701.652573][ T3331] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.667272][ T3331] EXT4-fs (loop2): 2 truncates cleaned up [ 701.764961][ T3331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.867131][ T3374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11085'. [ 701.893257][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.913355][ T3374] bond0: (slave batadv0): Releasing backup interface [ 701.921603][ T3374] batadv0 (unregistering): left promiscuous mode [ 702.156334][ T3390] uprobe: syz.5.11091:3390 failed to unregister, leaking uprobe [ 703.128047][ T3417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11099'. [ 703.537444][ T3425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11102'. [ 703.552814][ T3425] 8021q: adding VLAN 0 to HW filter on device bond7 [ 703.906634][ T3425] 8021q: adding VLAN 0 to HW filter on device bond7 [ 703.923001][ T3425] bond7: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 703.943433][ T3425] bond7: (slave ip6tnl1): Error -95 calling set_mac_address [ 703.998639][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 703.998652][ T28] audit: type=1326 audit(1771103923.898:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3435 comm="syz.9.11105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4629bf79 code=0x0 [ 704.042553][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11107'. [ 705.263087][ T3479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11118'. [ 706.604136][ T3493] Cannot find del_set index 4 as target [ 706.979381][ T3503] bond8: (slave veth17): Enslaving as an active interface with a down link [ 707.299641][ T3501] bond8: (slave veth19): Enslaving as an active interface with a down link [ 707.405526][ T3510] GPL: port 1(erspan0) entered blocking state [ 707.432769][ T3510] GPL: port 1(erspan0) entered disabled state [ 707.444190][ T3510] erspan0: entered allmulticast mode [ 707.464380][ T3510] erspan0: entered promiscuous mode [ 707.657242][ T3528] /dev/sg0: Can't lookup blockdev [ 707.799987][ T3528] loop2: detected capacity change from 0 to 512 [ 707.865032][ T3528] FAT-fs (loop2): Directory bread(block 199916) failed [ 707.895738][ T3528] FAT-fs (loop2): Directory bread(block 199917) failed [ 707.925037][ T3528] FAT-fs (loop2): Directory bread(block 199918) failed [ 707.949731][ T3528] FAT-fs (loop2): Directory bread(block 199919) failed [ 707.978864][ T3528] FAT-fs (loop2): Directory bread(block 199920) failed [ 708.007595][ T3528] FAT-fs (loop2): Directory bread(block 199921) failed [ 708.034411][ T3528] FAT-fs (loop2): Directory bread(block 199922) failed [ 708.058863][ T3528] FAT-fs (loop2): Directory bread(block 199923) failed [ 708.154866][ T3539] FAT-fs (loop2): Directory bread(block 199916) failed [ 708.188115][ T3539] FAT-fs (loop2): Directory bread(block 199917) failed [ 708.689393][ T3542] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 708.827984][ T3547] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11143'. [ 709.948834][ T3566] wg1: entered promiscuous mode [ 709.953806][ T3566] wg1: entered allmulticast mode [ 710.150907][ T3574] loop2: detected capacity change from 0 to 8192 [ 710.272871][ T3574] loop2: p1 p2 p4 [ 710.354715][ T3574] loop2: p4 size 262144 extends beyond EOD, truncated [ 710.753650][ T3000] loop2: p1 p2 p4 [ 710.760996][ T3000] loop2: p4 size 262144 extends beyond EOD, truncated [ 710.806989][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11154'. [ 711.178050][ T1174] udevd[1174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 711.192035][ T976] udevd[976]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 711.202126][ T1083] udevd[1083]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 711.993848][ T3610] ipvlan0: Caught tx_queue_len zero misconfig [ 712.539705][ T3621] loop2: detected capacity change from 0 to 512 [ 712.591439][ T3621] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.11167: iget: bad i_size value: 38620345925642 [ 712.642417][ T3621] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 712.642718][ T3621] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11167: couldn't read orphan inode 15 (err -117) [ 712.663818][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 712.663837][ C1] EXT4-fs (loop2): initial error at time 1771103932: ext4_orphan_get:1391: inode 15 [ 712.663907][ C1] EXT4-fs (loop2): last error at time 1771103932: ext4_orphan_get:1391: inode 15 [ 712.775703][ T3621] loop2: lost filesystem error report for type 5 error -117 [ 712.777389][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.346388][ T3633] netlink: 'syz.8.11170': attribute type 1 has an invalid length. [ 713.373509][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.407478][ T3636] loop2: detected capacity change from 0 to 1024 [ 713.463589][ T3633] 8021q: adding VLAN 0 to HW filter on device bond18 [ 713.492702][ T3636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.528964][ T3634] bond18: (slave geneve5): making interface the new active one [ 713.583954][ T3634] bond18: (slave geneve5): Enslaving as an active interface with an up link [ 713.620030][ T9319] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.648470][ T9319] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.696171][ T9319] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.734497][ T9319] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.793260][ T28] audit: type=1326 audit(1771103933.688:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 713.888761][ T28] audit: type=1326 audit(1771103933.688:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 713.964140][ T28] audit: type=1326 audit(1771103933.688:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.143087][ T28] audit: type=1326 audit(1771103933.718:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.192363][ T28] audit: type=1326 audit(1771103933.738:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.417287][ T28] audit: type=1326 audit(1771103933.738:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.683310][ T28] audit: type=1326 audit(1771103933.738:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.791266][ T28] audit: type=1326 audit(1771103933.738:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.795116][T30946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.821976][ T28] audit: type=1326 audit(1771103933.748:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.847787][ T28] audit: type=1326 audit(1771103933.748:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3640 comm="syz.9.11172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f6b4629bf79 code=0x7ffc0000 [ 714.986134][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11184'. [ 715.024716][ T3679] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11187'. [ 715.049628][ T3679] 8021q: adding VLAN 0 to HW filter on device bond17 [ 715.094221][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.135787][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.247527][ T3692] netlink: 'syz.5.11191': attribute type 1 has an invalid length. [ 715.256053][ T3679] 8021q: adding VLAN 0 to HW filter on device bond17 [ 715.270273][ T3679] bond17: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 715.292026][ T3679] bond17: (slave ip6tnl4): Error -95 calling set_mac_address [ 715.328280][ T3692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 715.442957][ T3694] bond9: (slave geneve3): making interface the new active one [ 715.452228][ T3694] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 715.472424][ T3698] netlink: 207496 bytes leftover after parsing attributes in process `syz.7.11194'. [ 715.481841][ T9316] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.513243][ T9316] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.521514][ T9316] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.576755][ T9321] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.878489][ T9325] bridge_slave_1: left allmulticast mode [ 715.916541][ T9325] bridge_slave_1: left promiscuous mode [ 715.935930][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.976953][ T9325] bridge_slave_0: left allmulticast mode [ 715.986222][ T9325] bridge_slave_0: left promiscuous mode [ 716.003163][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.122796][ T9325] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 716.342158][ T9325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.402668][ T9325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.412992][ T9325] bond0 (unregistering): Released all slaves [ 716.439476][ T9325] bond1 (unregistering): Released all slaves [ 716.453906][ T9325] bond2 (unregistering): (slave veth5): Releasing active interface [ 716.475905][ T9325] bond2 (unregistering): Released all slaves [ 716.500500][ T9325] bond3 (unregistering): Released all slaves [ 716.519784][ T9325] bond4 (unregistering): Released all slaves [ 716.691226][ T3728] /dev/sg0: Can't lookup blockdev [ 716.802474][ T9325] hsr_slave_0: left promiscuous mode [ 716.836866][ T9325] hsr_slave_1: left promiscuous mode [ 716.917643][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.946748][ T3735] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11199'. [ 717.034208][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.259511][ T9325] team0 (unregistering): Port device team_slave_1 removed [ 717.282364][ T9325] team0 (unregistering): Port device team_slave_0 removed [ 717.685157][ T3767] netlink: 'syz.8.11210': attribute type 1 has an invalid length. [ 717.732626][ T3767] netlink: 668 bytes leftover after parsing attributes in process `syz.8.11210'. [ 717.795094][ T9325] IPVS: stop unused estimator thread 0... [ 717.858511][ T3786] /dev/sg0: Can't lookup blockdev [ 718.804293][ T28] kauditd_printk_skb: 357 callbacks suppressed [ 718.804311][ T28] audit: type=1326 audit(1771103938.708:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 718.929795][ T28] audit: type=1326 audit(1771103938.768:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.006670][ T28] audit: type=1326 audit(1771103938.768:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.076757][ T28] audit: type=1326 audit(1771103938.768:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.138495][ T28] audit: type=1326 audit(1771103938.768:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.202534][ T28] audit: type=1326 audit(1771103938.768:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.281651][ T28] audit: type=1326 audit(1771103938.768:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.346964][ T28] audit: type=1326 audit(1771103938.768:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.422666][ T28] audit: type=1326 audit(1771103938.778:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 719.493210][ T28] audit: type=1326 audit(1771103938.778:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.8.11217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f24a1eec84e code=0x7ffc0000 [ 721.079476][ T3860] wg1: entered promiscuous mode [ 721.084419][ T3860] wg1: entered allmulticast mode [ 721.972618][ T3877] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 721.983452][ T3877] ref_ctr increment failed for inode: 0x6a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881054d9440 [ 722.073005][ T3884] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 722.081896][ T3884] ref_ctr decrement failed for inode: 0x6a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881054d9440 [ 722.096856][ T3884] uprobe: syz.2.11242:3884 failed to unregister, leaking uprobe [ 722.209942][ T3893] netlink: 'syz.2.11236': attribute type 1 has an invalid length. [ 722.289355][ T3893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 722.390777][ T3897] bond5: (slave geneve3): making interface the new active one [ 722.604168][ T3897] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 722.778720][ T3899] cgroup: fork rejected by pids controller in /syz2 [ 723.267107][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11244'. [ 723.313797][ T3911] team0: entered promiscuous mode [ 723.334367][ T3911] team0: entered allmulticast mode [ 723.355094][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11244'. [ 723.510694][ T3911] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 723.528998][ T3911] team3: entered promiscuous mode [ 723.534197][ T3911] team3: entered allmulticast mode [ 723.615150][ T3926] wg1: entered promiscuous mode [ 723.620172][ T3926] wg1: entered allmulticast mode [ 723.779679][ T3932] netlink: 'syz.9.11248': attribute type 13 has an invalid length. [ 723.981626][ T3932] bridge0: port 1(dummy0) entered disabled state [ 724.575345][ T3912] chnl_net:caif_netlink_parms(): no params data found [ 725.080081][ T3912] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.107031][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.129715][ T3912] bridge_slave_0: entered allmulticast mode [ 725.146597][ T3912] bridge_slave_0: entered promiscuous mode [ 725.168246][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.193573][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.214428][ T3912] bridge_slave_1: entered allmulticast mode [ 725.235907][ T3912] bridge_slave_1: entered promiscuous mode [ 725.323596][ T3912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.353513][ T3912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.412869][ T3912] team0: Port device team_slave_0 added [ 725.432868][ T3912] team0: Port device team_slave_1 added [ 725.468632][ T3937] ================================================================== [ 725.476776][ T3937] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 725.484644][ T3937] [ 725.486986][ T3937] write to 0xffffea00042d4dd8 of 8 bytes by task 3944 on cpu 1: [ 725.494647][ T3937] __filemap_remove_folio+0x201/0x310 [ 725.500062][ T3937] filemap_remove_folio+0x6d/0x1d0 [ 725.501120][ T3912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.505248][ T3937] truncate_inode_folio+0x42/0x50 [ 725.517234][ T3937] shmem_undo_range+0x26d/0xb10 [ 725.522114][ T3937] shmem_fallocate+0x881/0x920 [ 725.526918][ T3937] vfs_fallocate+0x3b6/0x450 [ 725.531541][ T3937] __x64_sys_fallocate+0x7a/0xd0 [ 725.536507][ T3937] x64_sys_call+0x298e/0x3020 [ 725.541206][ T3937] do_syscall_64+0x12c/0x370 [ 725.545827][ T3937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.551744][ T3937] [ 725.552446][ T3912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.554086][ T3937] read to 0xffffea00042d4dd8 of 8 bytes by task 3937 on cpu 0: [ 725.587493][ T3937] folio_mapping+0xa1/0xe0 [ 725.591960][ T3937] evict_folios+0x2b79/0x35c0 [ 725.596681][ T3937] try_to_shrink_lruvec+0x606/0x980 [ 725.601908][ T3937] shrink_lruvec+0x24e/0x1b60 [ 725.606609][ T3937] shrink_node+0x67e/0x20c0 [ 725.611149][ T3937] do_try_to_free_pages+0x408/0xc80 [ 725.616469][ T3937] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 725.620563][ T3912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.622386][ T3937] try_charge_memcg+0x37e/0xa10 [ 725.637757][ T3937] obj_cgroup_charge_pages+0x23/0xc0 [ 725.643099][ T3937] __memcg_kmem_charge_page+0x9e/0x170 [ 725.648590][ T3937] __alloc_frozen_pages_noprof+0x18a/0x360 [ 725.654419][ T3937] alloc_pages_mpol+0xb3/0x260 [ 725.657469][ T3912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.659241][ T3937] alloc_pages_noprof+0x8f/0x130 [ 725.671142][ T3937] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 725.677073][ T3937] __kvmalloc_node_noprof+0x3d4/0x650 [ 725.682481][ T3937] ip_set_alloc+0x24/0x30 [ 725.682962][ T3912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.686836][ T3937] hash_netiface_create+0x282/0x740 [ 725.717928][ T3937] ip_set_create+0x3cf/0x970 [ 725.722552][ T3937] nfnetlink_rcv_msg+0x509/0x5d0 [ 725.727515][ T3937] netlink_rcv_skb+0x123/0x220 [ 725.732317][ T3937] nfnetlink_rcv+0x167/0x1720 [ 725.737024][ T3937] netlink_unicast+0x5c0/0x690 [ 725.741831][ T3937] netlink_sendmsg+0x5c8/0x6f0 [ 725.746629][ T3937] ____sys_sendmsg+0x5af/0x600 [ 725.751425][ T3937] ___sys_sendmsg+0x195/0x1e0 [ 725.756137][ T3937] __x64_sys_sendmsg+0xd4/0x160 [ 725.761016][ T3937] x64_sys_call+0x194c/0x3020 [ 725.762385][ T3912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.765715][ T3937] do_syscall_64+0x12c/0x370 [ 725.780811][ T3937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.786736][ T3937] [ 725.789085][ T3937] value changed: 0xffff88810f163c10 -> 0x0000000000000000 [ 725.796204][ T3937] [ 725.798546][ T3937] Reported by Kernel Concurrency Sanitizer on: [ 725.804720][ T3937] CPU: 0 UID: 0 PID: 3937 Comm: syz.9.11250 Tainted: G W syzkaller #0 PREEMPT(full) [ 725.815703][ T3937] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.819522][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 725.829603][ T3937] ================================================================== [ 725.840100][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 725.840113][ T28] audit: type=1400 audit(1771103945.748:4991): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[622]" dev="pipefs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 725.910763][ T3912] hsr_slave_0: entered promiscuous mode [ 725.954621][ T3912] hsr_slave_1: entered promiscuous mode [ 726.435675][T20237] syz_tun (unregistering): left allmulticast mode [ 726.549114][T27870] bridge_slave_1: left allmulticast mode [ 726.556131][T27870] bridge_slave_1: left promiscuous mode [ 726.561798][T27870] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.571553][T27870] bridge_slave_0: left allmulticast mode [ 726.582350][T27870] bridge_slave_0: left promiscuous mode [ 726.588096][T27870] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.674444][T27870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.684409][T27870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.694300][T27870] bond0 (unregistering): Released all slaves [ 726.746852][T27870] hsr_slave_0: left promiscuous mode [ 726.753189][T27870] hsr_slave_1: left promiscuous mode [ 726.758928][T27870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.766818][T27870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.802520][T27870] team0 (unregistering): Port device team_slave_1 removed [ 726.813036][T27870] team0 (unregistering): Port device team_slave_0 removed [ 727.145611][T27870] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.185108][T27870] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.245257][T27870] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.295075][T27870] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.404008][T27870] team0: left allmulticast mode [ 727.408909][T27870] team0: left promiscuous mode [ 727.414289][T27870] bridge0: port 1(team0) entered disabled state [ 727.431561][T27870] erspan0: left allmulticast mode [ 727.436653][T27870] erspan0: left promiscuous mode [ 727.441743][T27870] GPL: port 1(erspan0) entered disabled state [ 727.479730][T27870] gretap0 (unregistering): left promiscuous mode [ 727.489956][T27870] bond9 (unregistering): (slave geneve3): Releasing active interface [ 727.814858][T27870] team0: Port device bridge8 removed [ 727.896358][T27870] bond0 (unregistering): left promiscuous mode [ 727.903430][T27870] bond0 (unregistering): Released all slaves [ 727.912465][T27870] bond1 (unregistering): Released all slaves [ 727.921327][T27870] bond2 (unregistering): Released all slaves [ 727.930535][T27870] bond3 (unregistering): (slave veth5): Releasing active interface [ 727.938969][T27870] batadv1: entered promiscuous mode [ 727.945272][T27870] bond3 (unregistering): (slave batadv1): Releasing active interface [ 727.954435][T27870] bond3 (unregistering): Released all slaves [ 727.962706][T27870] bond4 (unregistering): left allmulticast mode [ 727.969402][T27870] bond4 (unregistering): Released all slaves [ 727.977980][T27870] bond5 (unregistering): Released all slaves [ 727.989581][T27870] bond6 (unregistering): Released all slaves [ 727.998497][T27870] bond7 (unregistering): Released all slaves [ 728.009483][T27870] bond8 (unregistering): (slave veth17): Releasing active interface [ 728.019079][T27870] bond8 (unregistering): (slave veth19): Releasing active interface [ 728.028168][T27870] bond8 (unregistering): Released all slaves [ 728.037382][T27870] bond9 (unregistering): Released all slaves [ 729.644945][T27870] veth1_to_bond: left promiscuous mode