last executing test programs: 10m59.94629772s ago: executing program 32 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 10m50.839204307s ago: executing program 33 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 10m2.911598479s ago: executing program 34 (id=2236): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9m41.499534381s ago: executing program 35 (id=2922): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r1, r1, 0x2f, 0x1c, 0x4, @void, @value=r0}, 0x20) 8m17.80412105s ago: executing program 36 (id=5624): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 7m38.048258952s ago: executing program 37 (id=6606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x10, "702ab9909c0d13b7fe73decceda0f91f"}, &(0x7f0000000340)=0x18) 7m25.408288936s ago: executing program 38 (id=6906): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xa, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000780), &(0x7f0000000740)=r0}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, &(0x7f00000001c0), 0x0}, 0x20) 6m51.617235777s ago: executing program 39 (id=7771): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000500)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x240c4044}, 0x0) 5m52.569074864s ago: executing program 40 (id=9593): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m17.115588912s ago: executing program 41 (id=10498): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) 4m50.585740635s ago: executing program 42 (id=11177): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev={0xac, 0x14, 0x14, 0x84}, 0x40}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2, 0x20000}}]}, 0xfffffffffffffde7}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x41380, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x240080c1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4m49.241464745s ago: executing program 43 (id=11195): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m24.775839476s ago: executing program 3 (id=11712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x6c140, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r0, 0x0, 0x0) 4m24.418932996s ago: executing program 3 (id=11718): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffd, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x55aa, 0x81, 0x8, 0x1, 0xf, "7fff7a2004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7) 4m24.259124716s ago: executing program 3 (id=11721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 4m24.135261054s ago: executing program 3 (id=11723): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@max_batch_time}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0xad55}}]}, 0x1, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 4m23.893469878s ago: executing program 3 (id=11725): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m23.376342418s ago: executing program 3 (id=11731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 4m23.361263949s ago: executing program 44 (id=11731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 4m4.049758866s ago: executing program 1 (id=12128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 4m3.99232636s ago: executing program 1 (id=12131): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x47a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 4m3.868233317s ago: executing program 1 (id=12133): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m3.827594759s ago: executing program 1 (id=12134): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000ac0)=ANY=[@ANYBLOB='tz=UTC,shortname=winnt,shortname=win95,discard,uni_xlate=1,uni_xlate=0,sys_immutable,nfs=stale_rw,time_offset=0x0000000000000584,shortname=mixed,utf8=0,utf8=0,utf8=1,uid=', @ANYRESDEC, @ANYBLOB="2c7063723d30303030303030303030303030303030b03033392c00e9059e41b028f45525e6f2f7272ff04f4362ae6d277e276bf9c7b23de899e3b60383a24e550a6b3084641dc538223c712bbc5f3fced9943640baeabe5ab21c328cc1160560a8a26876d6ed49040534896efc99f932"], 0x0, 0x2aa, &(0x7f0000000580)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 4m3.720394826s ago: executing program 1 (id=12136): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000001240)={0xa, 0x4e24, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001280)='.', 0x1}], 0x1}}], 0x1, 0x20000810) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) 4m3.533012007s ago: executing program 1 (id=12139): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff88}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m3.48404419s ago: executing program 45 (id=12139): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff88}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m59.789168797s ago: executing program 4 (id=12140): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 3m59.73514703s ago: executing program 4 (id=12210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x439, 0x70bd2c, 0xffffffed, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3m59.668593485s ago: executing program 4 (id=12214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 3m59.180761443s ago: executing program 4 (id=12228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000300)={[{@barrier}, {@noblock_validity}, {@abort}, {@inlinecrypt}, {@errors_remount}, {@quota}]}, 0x3, 0x443, &(0x7f0000000440)="$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") mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000342000/0x2000)=nil) creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 3m58.760283108s ago: executing program 4 (id=12236): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0907000000000400000005000000080003"], 0x24}}, 0x40) 3m57.820877674s ago: executing program 4 (id=12273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x10, 0x4000009, 0x9c4, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x67, 0x0, 0xf7, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 3m57.764281566s ago: executing program 46 (id=12273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x10, 0x4000009, 0x9c4, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x67, 0x0, 0xf7, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) 2m57.254277957s ago: executing program 7 (id=13838): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000f973fe79dafabfe615fff67af2dd5c909f1690641a50f323d498a8d922439aa695bb423929cb7cf7614f7cf06c", @ANYRESHEX=0xee01, @ANYRES32=0x0, @ANYRES32=0x0], 0x1, 0x207, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r0, &(0x7f0000000300)=""/123, 0x7b) 2m57.20441753s ago: executing program 7 (id=13841): syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6572726f72733d636f6e74696e75652c63f4a1558cc185e3a76963742c646f733178666c6f7070792c646f74732c646d61736b3d30303030303030303030303030303030303030303030352c747a3d5554432c6e6f646f74732c6e6f646f74732c6e6f646f74732c00"], 0x0, 0x237, &(0x7f0000000480)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)=0x0) timer_getoverrun(r0) 2m57.153104363s ago: executing program 7 (id=13842): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x6e}], 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2m56.728323928s ago: executing program 7 (id=13852): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 2m56.655898902s ago: executing program 7 (id=13854): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2m55.452157453s ago: executing program 7 (id=13867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) 2m55.421324624s ago: executing program 47 (id=13867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) 27.384192817s ago: executing program 6 (id=16929): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2448ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb9923918a967f67c55799ecf0f6aaccbbeba00809f8977a0a5b", 0xa0}], 0x3}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(0x4) 27.329565849s ago: executing program 6 (id=16930): eventfd2(0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 26.790251721s ago: executing program 6 (id=16950): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x2, @mcast1}}}, &(0x7f0000000040)=0x84) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={r3}, &(0x7f0000000100)=0x8) 26.585874714s ago: executing program 6 (id=16955): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000006c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000800)='./file0/../file0/../file0/../file0/file0\x00') 26.500329888s ago: executing program 6 (id=16957): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @local}, 0x14) 26.390744085s ago: executing program 6 (id=16962): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x5495, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0x1d}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 26.370812756s ago: executing program 48 (id=16962): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x5495, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0x1d}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 1.811905174s ago: executing program 0 (id=17487): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 1.782262946s ago: executing program 0 (id=17488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x40}}, 0x2) 1.72080379s ago: executing program 0 (id=17490): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.603158597s ago: executing program 8 (id=17495): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x6, 0x37, 0x2, 0x9}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x1a}, @void, @eth={@multicast, @local, @void, {@generic={0x4305}}}}, 0x12) 1.54129689s ago: executing program 8 (id=17496): syz_io_uring_setup(0x62ea, 0x0, &(0x7f0000000000), 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1.463844345s ago: executing program 8 (id=17498): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_create(0xb, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) personality(0x5000002) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) timer_settime(r0, 0x1, &(0x7f0000000600)={{}, {0x0, 0x3938700}}, 0x0) 1.453631066s ago: executing program 0 (id=17499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.301949774s ago: executing program 0 (id=17500): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000001, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.283764825s ago: executing program 0 (id=17501): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 994.884133ms ago: executing program 2 (id=17512): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000440)={0xff7f, 0x2000, 0x3, 0x3, 0x1a, "db2d416fbecfb84b5452b768e08ee2df361089"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10) 971.701133ms ago: executing program 9 (id=17514): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) 916.634997ms ago: executing program 2 (id=17515): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 868.36307ms ago: executing program 2 (id=17516): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200f67f, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) 862.92218ms ago: executing program 9 (id=17517): r0 = inotify_init1(0x800) creat(&(0x7f0000000000)='./file0\x00', 0x40) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60000804) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x860001b1) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x804) creat(&(0x7f0000000080)='./file0\x00', 0x140) 827.277752ms ago: executing program 9 (id=17518): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000800030003"], 0x68}}, 0x64000004) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 768.312916ms ago: executing program 2 (id=17519): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)="5cdd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 741.033017ms ago: executing program 9 (id=17520): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 691.21003ms ago: executing program 2 (id=17521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d0001"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 560.364038ms ago: executing program 5 (id=17522): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x7, 0xd) syz_emit_ethernet(0x32, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 560.046168ms ago: executing program 2 (id=17523): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 542.087019ms ago: executing program 8 (id=17524): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x100c2, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 490.952522ms ago: executing program 5 (id=17525): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="bc", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="10000016"], 0x10}}], 0x2, 0x440440c4) 424.333336ms ago: executing program 5 (id=17526): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x10000000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 305.070013ms ago: executing program 5 (id=17527): r0 = syz_open_dev$loop(0x0, 0x7, 0x8000) ioctl$BLKRASET(r0, 0x1262, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c0001400000000000000004"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 258.634125ms ago: executing program 9 (id=17528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 196.314719ms ago: executing program 8 (id=17529): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1fc9, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x0) 175.982031ms ago: executing program 5 (id=17530): r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(0x0, 0x5) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0xa400080a) 157.448952ms ago: executing program 9 (id=17531): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) timer_gettime(r0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x822b01) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 121.178893ms ago: executing program 8 (id=17532): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x20000000016b, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x138) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=17533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) kernel console output (not intermixed with test programs): pfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 610.534603][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15432'. [ 610.647037][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15437'. [ 610.750450][ T29] audit: type=1326 audit(2000000007.060:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.822778][ T29] audit: type=1326 audit(2000000007.070:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.847511][ T29] audit: type=1326 audit(2000000007.070:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.871997][ T29] audit: type=1326 audit(2000000007.070:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.895626][ T29] audit: type=1326 audit(2000000007.070:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.920093][ T29] audit: type=1326 audit(2000000007.070:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.943766][ T29] audit: type=1326 audit(2000000007.070:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.968114][ T29] audit: type=1326 audit(2000000007.070:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 610.992375][ T29] audit: type=1326 audit(2000000007.070:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12677 comm="syz.5.15443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 611.414296][T12720] loop6: detected capacity change from 0 to 128 [ 612.096268][T19359] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.119470][T19329] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.149429][T19329] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.181645][T19329] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.905168][T12791] loop6: detected capacity change from 0 to 32768 [ 613.380811][T12841] tipc: Failed to remove unknown binding: 66,1,1/10463914:3490492927/3490492929 [ 613.390096][T12841] tipc: Failed to remove unknown binding: 66,1,1/10463914:3490492927/3490492929 [ 613.671615][T12863] xfrm0 speed is unknown, defaulting to 1000 [ 613.700543][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 613.708891][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.753883][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 613.773098][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.167789][T11271] IPVS: starting estimator thread 0... [ 614.285760][T12892] netlink: 'syz.2.15527': attribute type 13 has an invalid length. [ 614.299440][T12890] IPVS: using max 1920 ests per chain, 96000 per kthread [ 615.318460][T12915] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.15533'. [ 615.336057][T19359] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.345112][T19359] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.369013][T19359] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.378099][T19359] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.389012][T19359] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.398153][T19359] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.410649][T19359] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.419666][T19359] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.600281][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 615.600300][ T29] audit: type=1326 audit(2000000011.920:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.631097][ T29] audit: type=1326 audit(2000000011.920:5255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.669815][ T29] audit: type=1326 audit(2000000011.980:5256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.695674][ T29] audit: type=1326 audit(2000000012.010:5257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.719561][ T29] audit: type=1326 audit(2000000012.010:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.743264][ T29] audit: type=1326 audit(2000000012.010:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.767033][ T29] audit: type=1326 audit(2000000012.010:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.790797][ T29] audit: type=1326 audit(2000000012.010:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.865433][ T29] audit: type=1326 audit(2000000012.130:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.889049][ T29] audit: type=1326 audit(2000000012.130:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.6.15546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df836aeb9 code=0x7ffc0000 [ 615.965030][T12961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.994965][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15553'. [ 616.036494][T12970] loop6: detected capacity change from 0 to 128 [ 616.100551][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15561'. [ 616.110431][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15561'. [ 616.872385][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15589'. [ 616.883213][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15589'. [ 616.884438][ T7442] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.901651][ T7442] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.909992][ T7442] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.918269][ T7442] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.257091][T13082] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15604'. [ 617.588624][T13095] loop6: detected capacity change from 0 to 512 [ 617.750666][T13102] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 617.946981][T13109] netlink: 'syz.5.15616': attribute type 1 has an invalid length. [ 617.990298][T13109] bond6: entered promiscuous mode [ 618.000172][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.044824][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.068755][T13109] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 618.078940][T13109] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 618.116675][T13109] bond6: (slave vcan0): making interface the new active one [ 618.124080][T13109] vcan0: entered promiscuous mode [ 618.147186][T13109] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 618.698002][T13138] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15628'. [ 619.050218][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15629'. [ 619.219815][T13162] syzkaller0: entered allmulticast mode [ 619.226281][T13160] bond5: entered allmulticast mode [ 619.231556][T13160] vti0: entered allmulticast mode [ 619.259926][T13162] syzkaller0: entered promiscuous mode [ 619.265745][T13159] bond5: left allmulticast mode [ 619.271405][T13159] vti0: left allmulticast mode [ 619.280856][T13162] syzkaller0 (unregistering): left allmulticast mode [ 619.287613][T13162] syzkaller0 (unregistering): left promiscuous mode [ 620.749102][T13287] loop6: detected capacity change from 0 to 32768 [ 620.795145][T13287] loop6: p1 p3 < p5 p6 > [ 620.799653][T13287] loop6: partition table partially beyond EOD, truncated [ 620.826643][T13291] xfrm0 speed is unknown, defaulting to 1000 [ 621.109069][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 621.112628][ T5042] udevd[5042]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 621.122650][T31915] udevd[31915]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 621.140382][ T5040] udevd[5040]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 621.183346][T13307] xfrm0 speed is unknown, defaulting to 1000 [ 622.499840][T13366] netlink: 566 bytes leftover after parsing attributes in process `syz.5.15680'. [ 622.784688][T13386] loop6: detected capacity change from 0 to 128 [ 623.181350][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15700'. [ 623.852350][T13441] xfrm0 speed is unknown, defaulting to 1000 [ 624.004580][T13441] chnl_net:caif_netlink_parms(): no params data found [ 624.083932][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.091108][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.098469][T13441] bridge_slave_0: entered allmulticast mode [ 624.105372][T13441] bridge_slave_0: entered promiscuous mode [ 624.112526][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.119720][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.128106][T13441] bridge_slave_1: entered allmulticast mode [ 624.134867][T13441] bridge_slave_1: entered promiscuous mode [ 624.154592][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.165602][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.187420][T13441] team0: Port device team_slave_0 added [ 624.194414][T13441] team0: Port device team_slave_1 added [ 624.212375][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.219563][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.245619][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.257690][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.264807][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.291031][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.335045][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 624.335063][ T29] audit: type=1326 audit(2000000020.650:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13456 comm="syz.9.15717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa984d7aeb9 code=0x0 [ 624.402176][T13441] hsr_slave_0: entered promiscuous mode [ 624.413133][T13441] hsr_slave_1: entered promiscuous mode [ 624.429647][T13441] debugfs: 'hsr0' already exists in 'hsr' [ 624.435528][T13441] Cannot create hsr debugfs directory [ 624.609087][T13441] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.673037][T13441] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.755543][T13441] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.795532][T13480] xfrm0 speed is unknown, defaulting to 1000 [ 624.864832][T13441] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.980179][T13441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 625.010445][T13441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 625.028959][T13441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 625.041391][T13441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 625.097411][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.117258][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.138566][T19335] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.145769][T19335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.187530][T19335] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.194784][T19335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.214065][T13441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.224726][T13441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.316318][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.436528][T13441] veth0_vlan: entered promiscuous mode [ 625.445469][T13441] veth1_vlan: entered promiscuous mode [ 625.462389][T13441] veth0_macvtap: entered promiscuous mode [ 625.471358][T13441] veth1_macvtap: entered promiscuous mode [ 625.483609][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.496648][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.508684][T19351] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.518792][T19351] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.530706][T19351] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.539796][T19351] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.996883][T13540] xfrm0 speed is unknown, defaulting to 1000 [ 626.530131][T13563] netlink: 'syz.9.15748': attribute type 1 has an invalid length. [ 626.595294][T20895] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 626.606413][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 626.606556][T20895] Tainted: [W]=WARN [ 626.606634][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 626.606650][T20895] Call Trace: [ 626.606659][T20895] [ 626.606670][T20895] __dump_stack+0x1d/0x30 [ 626.606706][T20895] dump_stack_lvl+0x95/0xd0 [ 626.606740][T20895] dump_stack+0x15/0x1b [ 626.606759][T20895] dump_header+0x80/0x240 [ 626.606802][T20895] oom_kill_process+0x295/0x350 [ 626.606908][T20895] out_of_memory+0x97d/0xb80 [ 626.607000][T20895] try_charge_memcg+0x62e/0xa10 [ 626.607037][T20895] __mem_cgroup_charge+0x65/0x150 [ 626.607114][T20895] filemap_add_folio+0x110/0x350 [ 626.607185][T20895] __filemap_get_folio_mpol+0x326/0x680 [ 626.607215][T20895] filemap_fault+0x473/0xbb0 [ 626.607319][T20895] __do_fault+0xbc/0x200 [ 626.607339][T20895] handle_mm_fault+0x11d7/0x3030 [ 626.607375][T20895] ? vma_start_read+0x1c7/0x2c0 [ 626.607452][T20895] do_user_addr_fault+0x62f/0x1050 [ 626.607483][T20895] exc_page_fault+0x62/0xa0 [ 626.607633][T20895] asm_exc_page_fault+0x26/0x30 [ 626.607669][T20895] RIP: 0033:0x7f0e86ac8fb4 [ 626.607690][T20895] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 626.607710][T20895] RSP: 002b:00007ffd74f7f830 EFLAGS: 00010206 [ 626.607727][T20895] RAX: 0000001b2e424000 RBX: 000000000000108b RCX: 0000000000098d50 [ 626.607778][T20895] RDX: 000000000870b843 RSI: 00007ffd74f7f8c0 RDI: 0000000000000001 [ 626.607795][T20895] RBP: 00007ffd74f7f86c R08: 0000000020327dea R09: 7fffffffffffffff [ 626.607813][T20895] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 626.607870][T20895] R13: 00000000000927c0 R14: 0000000000098d33 R15: 00007ffd74f7f8c0 [ 626.607896][T20895] [ 626.607905][T20895] memory: usage 307200kB, limit 307200kB, failcnt 4740 [ 626.801685][T20895] memory+swap: usage 305800kB, limit 9007199254740988kB, failcnt 0 [ 626.809635][T20895] kmem: usage 287084kB, limit 9007199254740988kB, failcnt 0 [ 626.816954][T20895] Memory cgroup stats for /syz0: [ 626.819935][T13565] bond5: (slave geneve5): making interface the new active one [ 626.844802][T13565] bond5: (slave geneve5): Enslaving as an active interface with an up link [ 626.869461][T19339] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 626.877817][T19339] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 626.899644][T20895] cache 0 [ 626.902645][T20895] rss 8192 [ 626.905710][T20895] shmem 0 [ 626.908725][T20895] mapped_file 0 [ 626.912252][T20895] dirty 0 [ 626.915323][T20895] writeback 0 [ 626.918630][T20895] workingset_refault_anon 4300 [ 626.923561][T20895] workingset_refault_file 909 [ 626.928363][T20895] swap 19058688 [ 626.931882][T20895] swapcached 0 [ 626.935274][T20895] pgpgin 567433 [ 626.938751][T20895] pgpgout 567431 [ 626.942343][T20895] pgfault 508569 [ 626.945967][T20895] pgmajfault 683 [ 626.949603][T20895] inactive_anon 0 [ 626.953292][T20895] active_anon 8192 [ 626.957027][T20895] inactive_file 0 [ 626.960728][T20895] active_file 0 [ 626.964221][T20895] unevictable 0 [ 626.967805][T20895] hierarchical_memory_limit 314572800 [ 626.971137][T19339] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 626.973224][T20895] hierarchical_memsw_limit 9223372036854771712 [ 626.987671][T20895] total_cache 0 [ 626.991194][T20895] total_rss 8192 [ 626.994762][T20895] total_shmem 0 [ 626.998259][T20895] total_mapped_file 0 [ 627.002330][T20895] total_dirty 0 [ 627.005897][T20895] total_writeback 0 [ 627.009808][T20895] total_workingset_refault_anon 4300 [ 627.015118][T20895] total_workingset_refault_file 909 [ 627.020368][T20895] total_swap 19058688 [ 627.024380][T20895] total_swapcached 0 [ 627.028335][T20895] total_pgpgin 567433 [ 627.032373][T20895] total_pgpgout 567431 [ 627.036693][T20895] total_pgfault 508569 [ 627.040811][T20895] total_pgmajfault 683 [ 627.044939][T20895] total_inactive_anon 0 [ 627.049113][T20895] total_active_anon 8192 [ 627.053407][T20895] total_inactive_file 0 [ 627.057637][T20895] total_active_file 0 [ 627.061746][T20895] total_unevictable 0 [ 627.065744][T20895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.12112,pid=3336,uid=0 [ 627.080889][T20895] Memory cgroup out of memory: Killed process 3336 (syz.0.12112) total-vm:96192kB, anon-rss:1256kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 627.099964][T19339] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 627.189824][ T29] audit: type=1326 audit(2000000023.510:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13575 comm="syz.6.15751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd94639aeb9 code=0x0 [ 627.569929][ T29] audit: type=1400 audit(2000000023.890:5321): avc: denied { create } for pid=13606 comm="syz.9.15767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 627.597872][ T29] audit: type=1400 audit(2000000023.910:5322): avc: denied { write } for pid=13606 comm="syz.9.15767" path="socket:[135003]" dev="sockfs" ino=135003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 627.646332][T13614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15769'. [ 627.674600][T13614] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15769'. [ 627.980566][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15772'. [ 627.993214][T13617] tipc: Resetting bearer [ 628.512870][ T29] audit: type=1400 audit(2000000024.830:5323): avc: denied { connect } for pid=13647 comm="syz.2.15783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 628.614948][T19329] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.623624][T19329] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.632669][T19329] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.658460][T13629] xfrm0 speed is unknown, defaulting to 1000 [ 628.706825][T19329] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.715327][T19329] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.724017][T19329] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.784813][T19329] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.793497][T19329] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.801933][T19329] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 628.820078][T13655] netlink: 'syz.2.15786': attribute type 3 has an invalid length. [ 628.828051][T13655] netlink: 'syz.2.15786': attribute type 1 has an invalid length. [ 628.836034][T13655] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.15786'. [ 628.890203][T19329] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.894677][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15787'. [ 628.898615][T19329] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.916188][T19329] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 629.024958][ T29] audit: type=1326 audit(2000000025.340:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13661 comm="syz.6.15788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd94639aeb9 code=0x0 [ 629.388117][T13684] netlink: 566 bytes leftover after parsing attributes in process `syz.0.15797'. [ 629.600750][ T29] audit: type=1326 audit(2000000025.920:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.624586][ T29] audit: type=1326 audit(2000000025.920:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.648352][ T29] audit: type=1326 audit(2000000025.920:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.672310][ T29] audit: type=1326 audit(2000000025.920:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.696263][ T29] audit: type=1326 audit(2000000025.920:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.720076][ T29] audit: type=1326 audit(2000000025.920:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.743801][ T29] audit: type=1326 audit(2000000025.920:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.768733][ T29] audit: type=1326 audit(2000000025.920:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.792382][ T29] audit: type=1326 audit(2000000025.920:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.816352][ T29] audit: type=1326 audit(2000000025.970:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.5.15800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7ffc0000 [ 629.971614][T13711] io-wq is not configured for unbound workers [ 630.223083][T13738] ip6tnl4: entered promiscuous mode [ 630.601484][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15824'. [ 631.079590][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15829'. [ 631.427130][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15839'. [ 631.942024][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15843'. [ 632.137656][T13782] xfrm0 speed is unknown, defaulting to 1000 [ 632.626430][T13834] lo: entered allmulticast mode [ 632.631548][T13834] tunl0: entered allmulticast mode [ 632.636771][T13834] gre0: entered allmulticast mode [ 632.642055][T13834] gretap0: entered allmulticast mode [ 632.647558][T13834] erspan0: entered allmulticast mode [ 632.652976][T13834] ip_vti0: entered allmulticast mode [ 632.658398][T13834] ip6_vti0: entered allmulticast mode [ 632.663957][T13834] sit0: entered allmulticast mode [ 632.669093][T13834] ip6tnl0: entered allmulticast mode [ 632.674526][T13834] ip6gre0: entered allmulticast mode [ 632.680115][T13834] ip6gretap0: entered allmulticast mode [ 632.685781][T13834] bridge0: entered allmulticast mode [ 632.691326][T13834] vcan0: entered allmulticast mode [ 632.696585][T13834] bond0: entered allmulticast mode [ 632.701984][T13834] team0: entered allmulticast mode [ 632.716048][T13834] dummy0: entered allmulticast mode [ 632.721610][T13834] nlmon0: entered allmulticast mode [ 632.726945][T13834] caif0: entered allmulticast mode [ 632.732249][T13834] vxcan0: entered allmulticast mode [ 632.737544][T13834] vxcan1: entered allmulticast mode [ 632.742877][T13834] veth0: entered allmulticast mode [ 632.748494][T13834] veth1: entered allmulticast mode [ 632.753733][T13834] wg0: entered allmulticast mode [ 632.758905][T13834] wg1: entered allmulticast mode [ 632.764149][T13834] wg2: entered allmulticast mode [ 632.769259][T13834] veth0_to_bridge: entered allmulticast mode [ 632.775531][T13834] bridge_slave_0: entered allmulticast mode [ 632.781655][T13834] veth1_to_bridge: entered allmulticast mode [ 632.787784][T13834] bridge_slave_1: entered allmulticast mode [ 632.793913][T13834] veth0_to_bond: entered allmulticast mode [ 632.799954][T13834] bond_slave_0: entered allmulticast mode [ 632.805898][T13834] veth1_to_bond: entered allmulticast mode [ 632.812065][T13834] bond_slave_1: entered allmulticast mode [ 632.817890][T13834] veth0_to_team: entered allmulticast mode [ 632.823866][T13834] team_slave_0: entered allmulticast mode [ 632.829764][T13834] veth1_to_team: entered allmulticast mode [ 632.835673][T13834] team_slave_1: entered allmulticast mode [ 632.841576][T13834] veth0_to_batadv: entered allmulticast mode [ 632.847730][T13834] batadv_slave_0: entered allmulticast mode [ 632.853872][T13834] xfrm0: entered allmulticast mode [ 632.859155][T13834] veth0_to_hsr: entered allmulticast mode [ 632.865013][T13834] hsr_slave_0: entered allmulticast mode [ 632.870876][T13834] veth1_to_hsr: entered allmulticast mode [ 632.876697][T13834] hsr_slave_1: entered allmulticast mode [ 632.882527][T13834] hsr0: entered allmulticast mode [ 632.887740][T13834] veth1_virt_wifi: entered allmulticast mode [ 632.893971][T13834] veth0_virt_wifi: entered allmulticast mode [ 632.900101][T13834] veth1_vlan: entered allmulticast mode [ 632.905900][T13834] veth0_vlan: entered allmulticast mode [ 632.911606][T13834] vlan0: entered allmulticast mode [ 632.916863][T13834] vlan1: entered allmulticast mode [ 632.922213][T13834] macvlan0: entered allmulticast mode [ 632.927844][T13834] macvlan1: entered allmulticast mode [ 632.933359][T13834] ipvlan0: entered allmulticast mode [ 632.938789][T13834] ipvlan1: entered allmulticast mode [ 632.944383][T13834] veth1_macvtap: entered allmulticast mode [ 632.950518][T13834] veth0_macvtap: entered allmulticast mode [ 632.956698][T13834] macvtap0: entered allmulticast mode [ 632.962226][T13834] macsec0: entered allmulticast mode [ 632.967693][T13834] geneve0: entered allmulticast mode [ 632.973137][T13834] geneve1: entered allmulticast mode [ 632.978940][T13834] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 632.986646][T13834] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 632.994562][T13834] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 633.002361][T13834] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 633.009969][T13834] bond1: entered allmulticast mode [ 633.015224][T13834] ip6gre1: entered allmulticast mode [ 633.020756][T13834] sit1: entered allmulticast mode [ 633.026103][T13834] macvtap1: left promiscuous mode [ 633.031393][T13834] gre1: entered allmulticast mode [ 633.037007][T13834] ipip0: entered allmulticast mode [ 633.042309][T13834] bridge1: entered allmulticast mode [ 633.047929][T13834] bond2: entered allmulticast mode [ 633.053115][T13834] bridge2: entered allmulticast mode [ 633.058677][T13834] vxlan0: entered allmulticast mode [ 633.070554][T13834] bridge3: entered allmulticast mode [ 633.115514][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15860'. [ 633.124998][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15860'. [ 633.134287][T13840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15860'. [ 633.145725][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15860'. [ 633.687822][T13842] loop6: detected capacity change from 0 to 1024 [ 633.942714][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.949998][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.070694][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15885'. [ 634.100024][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.111127][T13885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.170447][T19327] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.185175][T19327] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.199225][T19327] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.208559][T19327] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.862579][T13927] xfrm0 speed is unknown, defaulting to 1000 [ 635.349569][T13947] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.15905'. [ 635.358922][T13947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15905'. [ 635.443468][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15908'. [ 635.686994][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15913'. [ 635.839047][T13968] netlink: 'syz.6.15916': attribute type 4 has an invalid length. [ 636.014512][T13976] loop6: detected capacity change from 0 to 512 [ 636.532266][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 636.532284][ T29] audit: type=1326 audit(2000000032.850:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.578262][ T29] audit: type=1326 audit(2000000032.880:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.601956][ T29] audit: type=1326 audit(2000000032.880:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.625654][ T29] audit: type=1326 audit(2000000032.880:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.649379][ T29] audit: type=1326 audit(2000000032.890:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.673221][ T29] audit: type=1326 audit(2000000032.890:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.697045][ T29] audit: type=1326 audit(2000000032.890:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 636.720804][ T29] audit: type=1326 audit(2000000032.890:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e86bbb78e code=0x7ffc0000 [ 636.744496][ T29] audit: type=1326 audit(2000000032.890:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e86bbb78e code=0x7ffc0000 [ 636.768033][ T29] audit: type=1326 audit(2000000032.890:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.15927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 637.355194][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15940'. [ 639.853776][T14105] xfrm0 speed is unknown, defaulting to 1000 [ 640.163450][T14116] __nla_validate_parse: 2 callbacks suppressed [ 640.163471][T14116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15974'. [ 640.298192][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15975'. [ 640.308313][T14118] chnl_net:caif_netlink_parms(): no params data found [ 640.597975][T14143] xfrm0 speed is unknown, defaulting to 1000 [ 640.604831][T14145] tipc: Failed to remove unknown binding: 66,1,1/4293197824:3681508671/3681508673 [ 640.700702][T14152] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 640.719919][T14143] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15986'. [ 641.007202][T14170] netlink: 'syz.9.15997': attribute type 4 has an invalid length. [ 641.035428][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15999'. [ 641.053379][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16000'. [ 641.073636][T14177] team1: entered promiscuous mode [ 641.078845][T14177] team1: entered allmulticast mode [ 641.084611][T14177] 8021q: adding VLAN 0 to HW filter on device team1 [ 641.094231][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16000'. [ 641.150511][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16004'. [ 641.172613][T14187] geneve3: entered promiscuous mode [ 641.192382][T19339] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.208943][T19339] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.236699][T19339] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.246091][T19339] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.383681][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16013'. [ 641.398877][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16013'. [ 641.410660][T14209] 9p: Bad value for 'rfdno' [ 641.580756][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 641.580776][ T29] audit: type=1400 audit(2000000037.900:5496): avc: denied { lock } for pid=14226 comm="syz.9.16021" path="socket:[137417]" dev="sockfs" ino=137417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 641.620506][T14227] netlink: 'syz.9.16021': attribute type 10 has an invalid length. [ 642.354449][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16029'. [ 642.472144][T14267] ref_ctr_offset mismatch. inode: 0x7c2 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 642.558201][T14271] netlink: 'syz.9.16037': attribute type 4 has an invalid length. [ 642.795255][T14276] xfrm0 speed is unknown, defaulting to 1000 [ 643.357767][T14302] xfrm0 speed is unknown, defaulting to 1000 [ 643.379369][ T29] audit: type=1326 audit(2000000039.680:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.404273][ T29] audit: type=1326 audit(2000000039.680:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.428134][ T29] audit: type=1326 audit(2000000039.680:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.452495][ T29] audit: type=1326 audit(2000000039.690:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.476162][ T29] audit: type=1326 audit(2000000039.690:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.500534][ T29] audit: type=1326 audit(2000000039.690:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0e86bbb78e code=0x7ffc0000 [ 643.638675][ T29] audit: type=1326 audit(2000000039.850:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.662396][ T29] audit: type=1326 audit(2000000039.880:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.686054][ T29] audit: type=1326 audit(2000000039.880:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14305 comm="syz.0.16052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 643.877292][T14316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.906262][T14316] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.917619][T14316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.040388][T14320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.092635][T14326] netlink: 'syz.2.16061': attribute type 29 has an invalid length. [ 644.121539][T14326] netlink: 'syz.2.16061': attribute type 29 has an invalid length. [ 644.262101][T14345] geneve2: entered promiscuous mode [ 644.268941][T19329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.285822][T19329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.309800][T19329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.340270][T19329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.227751][T14401] __nla_validate_parse: 11 callbacks suppressed [ 645.227769][T14401] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16089'. [ 646.070123][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16100'. [ 646.330026][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16107'. [ 646.361396][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16109'. [ 646.381274][T14444] netlink: 'syz.5.16107': attribute type 1 has an invalid length. [ 646.429973][T14451] xfrm0 speed is unknown, defaulting to 1000 [ 647.045748][T14488] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 647.163542][T14493] bond0: option lp_interval: invalid value (0) [ 647.169912][T14493] bond0: option lp_interval: allowed values 1 - 2147483647 [ 647.463951][T14512] xfrm0 speed is unknown, defaulting to 1000 [ 647.544026][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 647.544046][ T29] audit: type=1326 audit(2000000043.860:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14517 comm="syz.6.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 647.574053][ T29] audit: type=1326 audit(2000000043.860:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14517 comm="syz.6.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 647.597793][ T29] audit: type=1326 audit(2000000043.860:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14517 comm="syz.6.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 647.621529][ T29] audit: type=1326 audit(2000000043.860:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14517 comm="syz.6.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 647.645184][ T29] audit: type=1326 audit(2000000043.860:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14517 comm="syz.6.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 647.713204][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16140'. [ 647.740255][T14520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.109565][ T29] audit: type=1400 audit(2000000044.430:5513): avc: denied { watch } for pid=14549 comm="syz.0.16152" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 648.158458][ T29] audit: type=1326 audit(2000000044.470:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.0.16154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 648.182913][ T29] audit: type=1326 audit(2000000044.470:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.0.16154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 648.206808][ T29] audit: type=1326 audit(2000000044.470:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.0.16154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 648.231202][ T29] audit: type=1326 audit(2000000044.470:5517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14554 comm="syz.0.16154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 648.948948][T14590] netlink: 'syz.2.16167': attribute type 4 has an invalid length. [ 648.961897][T14590] netlink: 'syz.2.16167': attribute type 4 has an invalid length. [ 649.074345][T14607] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16174'. [ 649.083120][T14604] bridge0: left allmulticast mode [ 649.084073][T14607] netlink: 188 bytes leftover after parsing attributes in process `syz.0.16174'. [ 649.098276][T14601] xfrm0 speed is unknown, defaulting to 1000 [ 649.314874][T14634] netem: change failed [ 649.380684][T14644] veth14: entered promiscuous mode [ 649.385941][T14644] veth14: entered allmulticast mode [ 649.406839][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16197'. [ 649.822254][T14677] xfrm0 speed is unknown, defaulting to 1000 [ 649.892172][T14680] xfrm0 speed is unknown, defaulting to 1000 [ 650.745486][T14712] netlink: 'syz.5.16214': attribute type 8 has an invalid length. [ 650.753562][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16214'. [ 650.822010][T14712] bond0: entered promiscuous mode [ 650.850756][T14712] gretap0: entered promiscuous mode [ 650.867867][T14712] bond0: left promiscuous mode [ 650.888069][T14712] gretap0: left promiscuous mode [ 650.999995][T14721] netlink: 'syz.5.16217': attribute type 1 has an invalid length. [ 651.085643][T14721] bond7: entered promiscuous mode [ 651.130112][T14721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 651.187346][T14727] bond7: (slave bridge4): making interface the new active one [ 651.194990][T14727] bridge4: entered promiscuous mode [ 651.237980][T14727] bridge4: left promiscuous mode [ 651.530205][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.564232][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.609509][T14732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.649622][T16091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 651.752979][T14737] netlink: 86172 bytes leftover after parsing attributes in process `syz.2.16221'. [ 651.780014][T14737] netlink: zone id is out of range [ 651.785208][T14737] netlink: zone id is out of range [ 651.801993][T14737] netlink: zone id is out of range [ 651.808842][T14741] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16224'. [ 651.822963][T14737] netlink: zone id is out of range [ 651.849108][T14737] netlink: zone id is out of range [ 651.868818][T14737] netlink: zone id is out of range [ 651.874078][T14737] netlink: zone id is out of range [ 651.879326][T14737] netlink: zone id is out of range [ 651.884462][T14737] netlink: zone id is out of range [ 651.930087][T14745] netlink: 204 bytes leftover after parsing attributes in process `syz.5.16226'. [ 652.074714][T14766] netlink: 'syz.9.16236': attribute type 1 has an invalid length. [ 652.082643][T14766] netlink: 'syz.9.16236': attribute type 2 has an invalid length. [ 652.082903][T19339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 652.091409][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16236'. [ 652.130118][T14766] xfrm0 speed is unknown, defaulting to 1000 [ 652.198729][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16240'. [ 652.221824][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16240'. [ 652.450760][T16091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 652.509081][T14797] netlink: 'syz.0.16247': attribute type 13 has an invalid length. [ 652.767742][T14811] dvmrp0: entered allmulticast mode [ 652.850022][T14815] netlink: 'syz.0.16255': attribute type 13 has an invalid length. [ 652.862474][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 652.862491][ T29] audit: type=1400 audit(2000000049.180:5614): avc: denied { ioctl } for pid=14817 comm="syz.2.16256" path="socket:[138891]" dev="sockfs" ino=138891 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 653.159743][T19339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 653.167669][T19339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 653.364879][T14857] xfrm0 speed is unknown, defaulting to 1000 [ 653.445648][T14858] xfrm0 speed is unknown, defaulting to 1000 [ 653.800433][T14873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=14873 comm=syz.9.16276 [ 653.890652][ T29] audit: type=1400 audit(2000000050.200:5615): avc: denied { watch_reads } for pid=14878 comm="syz.5.16279" path="/" dev="ramfs" ino=140922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 653.929326][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16281'. [ 654.138315][T14896] veth1_to_bond: entered allmulticast mode [ 654.160732][T14894] veth1_to_bond: left allmulticast mode [ 654.166446][T14897] xfrm0 speed is unknown, defaulting to 1000 [ 654.199577][T12912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.321758][T14898] xfrm0 speed is unknown, defaulting to 1000 [ 654.343078][T14909] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 655.065151][ T29] audit: type=1326 audit(2000000051.380:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14919 comm="syz.6.16293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd94639aeb9 code=0x0 [ 655.293521][T14933] xfrm0 speed is unknown, defaulting to 1000 [ 655.340166][T14936] netlink: 'syz.5.16299': attribute type 6 has an invalid length. [ 656.954992][ T29] audit: type=1326 audit(2000000053.270:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14960 comm="syz.5.16309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7fc00000 [ 657.239389][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.820732][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16321'. [ 658.023331][T15003] xfrm0 speed is unknown, defaulting to 1000 [ 658.223778][T15014] loop6: detected capacity change from 0 to 1024 [ 658.230349][T15013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.249462][T16091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.253014][T15014] EXT4-fs: inline encryption not supported [ 658.274355][T15014] EXT4-fs: Ignoring removed bh option [ 658.298924][T15016] gretap2: entered promiscuous mode [ 658.999654][T16091] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 659.580109][T15057] net_ratelimit: 56 callbacks suppressed [ 659.580128][T15057] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 659.600112][T15052] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 661.540596][ T29] audit: type=1326 audit(2000000057.860:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.565754][ T29] audit: type=1326 audit(2000000057.860:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.590169][ T29] audit: type=1326 audit(2000000057.870:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.614006][ T29] audit: type=1326 audit(2000000057.880:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.637844][ T29] audit: type=1326 audit(2000000057.880:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.662257][ T29] audit: type=1326 audit(2000000057.890:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.685779][T15026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.686069][ T29] audit: type=1326 audit(2000000057.890:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.719040][ T29] audit: type=1326 audit(2000000057.890:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.744230][ T29] audit: type=1326 audit(2000000057.890:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 661.767773][ T29] audit: type=1326 audit(2000000057.890:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15080 comm="syz.9.16356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 662.798152][T15141] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 662.811401][T15141] bond3 (unregistering): Released all slaves [ 662.819367][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16383'. [ 662.927232][T15156] syzkaller0: entered allmulticast mode [ 662.935105][T15156] syzkaller0: entered promiscuous mode [ 662.990848][T15156] syzkaller0 (unregistering): left allmulticast mode [ 662.997623][T15156] syzkaller0 (unregistering): left promiscuous mode [ 663.072307][T15160] netlink: 120 bytes leftover after parsing attributes in process `syz.2.16390'. [ 663.085695][T15162] netlink: 392 bytes leftover after parsing attributes in process `syz.5.16391'. [ 663.120893][T15162] netlink: 248 bytes leftover after parsing attributes in process `syz.5.16391'. [ 663.316545][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16401'. [ 663.335362][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16401'. [ 663.457826][T15197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16404'. [ 663.692929][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16408'. [ 663.710192][T15205] hsr_slave_0: left promiscuous mode [ 663.716447][T15205] hsr_slave_1: left promiscuous mode [ 663.824991][T15213] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 664.446865][T15248] bridge_slave_1: left allmulticast mode [ 664.453119][T15248] bridge_slave_1: left promiscuous mode [ 664.458908][T15248] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.580516][T15254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16430'. [ 664.778458][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16435'. [ 664.792754][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16435'. [ 665.035291][T15282] netlink: 'syz.2.16443': attribute type 7 has an invalid length. [ 665.043305][T15282] netlink: 'syz.2.16443': attribute type 8 has an invalid length. [ 665.208383][T15299] netlink: zone id is out of range [ 665.214275][T15299] netlink: zone id is out of range [ 665.225719][T15299] netlink: zone id is out of range [ 665.264317][T15299] netlink: set zone limit has 8 unknown bytes [ 665.674975][T15312] netlink: 'syz.9.16455': attribute type 10 has an invalid length. [ 665.719383][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 666.145254][T15338] loop6: detected capacity change from 0 to 1024 [ 666.174565][T15340] netlink: 'syz.2.16466': attribute type 1 has an invalid length. [ 666.221644][T15340] bond3: entered promiscuous mode [ 666.226784][T15340] bond3: entered allmulticast mode [ 666.233439][T15340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.245717][T15343] macvlan2: entered promiscuous mode [ 666.251223][T15343] macvlan2: entered allmulticast mode [ 666.258425][T15343] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.386665][T12912] kernel write not supported for file bpf-prog (pid: 12912 comm: kworker/1:16) [ 666.448317][T15359] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 667.280849][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 667.280878][ T29] audit: type=1326 audit(2000000063.600:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.311372][ T29] audit: type=1326 audit(2000000063.600:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.446091][ T29] audit: type=1326 audit(2000000063.660:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.470495][ T29] audit: type=1326 audit(2000000063.660:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.494171][ T29] audit: type=1326 audit(2000000063.660:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.518578][ T29] audit: type=1326 audit(2000000063.670:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.542827][ T29] audit: type=1326 audit(2000000063.670:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.566643][ T29] audit: type=1326 audit(2000000063.670:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.591012][ T29] audit: type=1326 audit(2000000063.670:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 667.614784][ T29] audit: type=1326 audit(2000000063.670:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15411 comm="syz.6.16496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94639aeb9 code=0x7ffc0000 [ 668.368500][T15463] __nla_validate_parse: 8 callbacks suppressed [ 668.368578][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16516'. [ 668.647014][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16520'. [ 669.101504][T15491] IPVS: Error connecting to the multicast addr [ 669.534029][T15506] VFS: Mount too revealing [ 669.689179][T15512] netlink: 'syz.0.16536': attribute type 4 has an invalid length. [ 669.954232][T15528] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16542'. [ 670.197185][T15526] bridge0: entered promiscuous mode [ 670.227085][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16546'. [ 670.275073][T15526] macvtap1: entered promiscuous mode [ 670.286144][T15526] macvtap1: entered allmulticast mode [ 670.292424][T15526] bridge0: entered allmulticast mode [ 670.399551][T15526] bridge0: port 2(macvtap1) entered blocking state [ 670.408181][T15526] bridge0: port 2(macvtap1) entered disabled state [ 670.567670][T15526] bridge0: left allmulticast mode [ 670.594527][T15526] bridge0: left promiscuous mode [ 670.744922][T15536] bond6: (slave vcan0): Releasing backup interface [ 670.773647][T15536] vcan0 (unregistering): left promiscuous mode [ 670.807347][T15536] bond6: Destroying bond [ 670.825248][T15536] bond6 (unregistering): Released all slaves [ 670.884716][T15554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16553'. [ 671.129869][T15560] SELinux: failed to load policy [ 671.176891][T15568] netlink: 'syz.0.16559': attribute type 4 has an invalid length. [ 671.186021][T15568] netlink: 'syz.0.16559': attribute type 4 has an invalid length. [ 671.210416][T15571] netlink: 'syz.2.16560': attribute type 1 has an invalid length. [ 671.218405][T15571] netlink: 'syz.2.16560': attribute type 4 has an invalid length. [ 671.226425][T15571] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16560'. [ 671.260794][T15575] netlink: 'syz.2.16560': attribute type 1 has an invalid length. [ 671.268678][T15575] netlink: 'syz.2.16560': attribute type 4 has an invalid length. [ 671.277329][T15575] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16560'. [ 671.671017][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16568'. [ 672.016493][T15634] netlink: 'syz.9.16584': attribute type 1 has an invalid length. [ 672.043550][T15634] 8021q: adding VLAN 0 to HW filter on device bond6 [ 672.074169][T15634] bond6: (slave veth9): Enslaving as an active interface with a down link [ 672.093574][T15634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.102668][T15634] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 672.798918][T15752] xfrm0 speed is unknown, defaulting to 1000 [ 672.826399][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 672.826419][ T29] audit: type=1326 audit(2000000069.140:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15629 comm="syz.5.16581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a8eaeb9 code=0x7fc00000 [ 673.356676][T15805] loop6: detected capacity change from 0 to 8192 [ 673.501651][T15829] netlink: 'syz.2.16604': attribute type 4 has an invalid length. [ 673.521838][T15829] netlink: 'syz.2.16604': attribute type 4 has an invalid length. [ 673.570490][T19356] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.609745][T19356] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.618857][T19356] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.658329][ T29] audit: type=1326 audit(2000000069.970:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15834 comm="syz.2.16607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1e175aeb9 code=0x0 [ 673.697971][T19356] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.137407][T15855] netlink: 'syz.0.16613': attribute type 29 has an invalid length. [ 674.571179][ T29] audit: type=1326 audit(2000000070.890:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.2.16624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x0 [ 674.708496][T15902] uprobe: syz.0.16630:15902 failed to unregister, leaking uprobe [ 674.800033][T15901] uprobe: syz.0.16630:15901 failed to unregister, leaking uprobe [ 674.930961][T15905] lo: Caught tx_queue_len zero misconfig [ 674.936917][T15905] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 674.946137][T15905] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 675.238211][T15934] xfrm0 speed is unknown, defaulting to 1000 [ 675.691501][T15954] xfrm0 speed is unknown, defaulting to 1000 [ 675.940355][T15953] Set syz1 is full, maxelem 65536 reached [ 676.073520][ T29] audit: type=1326 audit(2000000072.390:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.097365][ T29] audit: type=1326 audit(2000000072.390:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.122044][ T29] audit: type=1326 audit(2000000072.390:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.146048][ T29] audit: type=1326 audit(2000000072.390:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.170424][ T29] audit: type=1326 audit(2000000072.390:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.194482][ T29] audit: type=1326 audit(2000000072.390:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.218088][ T29] audit: type=1326 audit(2000000072.390:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.9.16661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 676.275116][T15982] netlink: 48 bytes leftover after parsing attributes in process `syz.6.16663'. [ 676.461811][T15993] xfrm0 speed is unknown, defaulting to 1000 [ 677.241127][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16685'. [ 677.787230][T16074] xt_hashlimit: max too large, truncated to 1048576 [ 677.828967][T16024] syz.2.16680 (16024) used greatest stack depth: 6008 bytes left [ 677.855578][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 677.855596][ T29] audit: type=1326 audit(2000000074.170:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 677.898631][ T29] audit: type=1326 audit(2000000074.170:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 677.923285][ T29] audit: type=1326 audit(2000000074.170:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 677.947085][ T29] audit: type=1326 audit(2000000074.180:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 677.971391][ T29] audit: type=1326 audit(2000000074.180:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 677.995074][ T29] audit: type=1326 audit(2000000074.180:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 678.019546][ T29] audit: type=1326 audit(2000000074.180:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 678.043306][ T29] audit: type=1326 audit(2000000074.180:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 678.067603][ T29] audit: type=1326 audit(2000000074.180:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 678.091923][ T29] audit: type=1326 audit(2000000074.180:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.9.16704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 678.189138][T16107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16710'. [ 679.200144][T16120] syz.0.16715 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 679.211167][T16120] CPU: 1 UID: 0 PID: 16120 Comm: syz.0.16715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 679.211219][T16120] Tainted: [W]=WARN [ 679.211226][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 679.211238][T16120] Call Trace: [ 679.211247][T16120] [ 679.211258][T16120] __dump_stack+0x1d/0x30 [ 679.211289][T16120] dump_stack_lvl+0x95/0xd0 [ 679.211381][T16120] dump_stack+0x15/0x1b [ 679.211406][T16120] dump_header+0x80/0x240 [ 679.211429][T16120] oom_kill_process+0x295/0x350 [ 679.211454][T16120] out_of_memory+0x97d/0xb80 [ 679.211621][T16120] try_charge_memcg+0x62e/0xa10 [ 679.211658][T16120] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 679.211773][T16120] __read_swap_cache_async+0x17b/0x2d0 [ 679.211857][T16120] swap_cluster_readahead+0x262/0x3c0 [ 679.211906][T16120] swapin_readahead+0xde/0x840 [ 679.211969][T16120] ? __perf_event_task_sched_in+0xa65/0xad0 [ 679.212003][T16120] ? __rcu_read_unlock+0x4e/0x70 [ 679.212042][T16120] ? swap_cache_get_folio+0x26f/0x280 [ 679.212083][T16120] do_swap_page+0x59b/0x2a50 [ 679.212122][T16120] ? finish_task_switch+0x79/0x280 [ 679.212167][T16120] ? __schedule+0x82d/0xc90 [ 679.212223][T16120] ? __rcu_read_lock+0x36/0x50 [ 679.212267][T16120] ? __pfx_default_wake_function+0x10/0x10 [ 679.212314][T16120] handle_mm_fault+0xb40/0x3030 [ 679.212370][T16120] ? vma_start_read+0x1c7/0x2c0 [ 679.212409][T16120] do_user_addr_fault+0x62f/0x1050 [ 679.212441][T16120] exc_page_fault+0x62/0xa0 [ 679.212553][T16120] asm_exc_page_fault+0x26/0x30 [ 679.212578][T16120] RIP: 0033:0x7f0e86bbb78e [ 679.212599][T16120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.212623][T16120] RSP: 002b:00007ffd74f7f5a8 EFLAGS: 00010246 [ 679.212716][T16120] RAX: 0000000000000000 RBX: 000055555de23500 RCX: 00007f0e86bbb78e [ 679.212736][T16120] RDX: 00007ffd74f7f600 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.212753][T16120] RBP: 00007f0e86e77da0 R08: 0000000000000000 R09: 0000000000000000 [ 679.212769][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a5cd4 [ 679.212786][T16120] R13: 00007f0e86e7609c R14: 00000000000a5a59 R15: 00007f0e86e76090 [ 679.212812][T16120] [ 679.212822][T16120] memory: usage 307200kB, limit 307200kB, failcnt 5214 [ 679.415809][T16175] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16737'. [ 679.425399][T16120] memory+swap: usage 308856kB, limit 9007199254740988kB, failcnt 0 [ 679.468047][T16120] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 679.475525][T16120] Memory cgroup stats for /syz0: [ 679.545867][T16120] cache 36864 [ 679.554445][T16120] rss 0 [ 679.557239][T16120] shmem 0 [ 679.560319][T16120] mapped_file 0 [ 679.563805][T16120] dirty 0 [ 679.566760][T16120] writeback 0 [ 679.570797][T16120] workingset_refault_anon 4852 [ 679.575592][T16120] workingset_refault_file 1460 [ 679.580520][T16120] swap 1695744 [ 679.584018][T16120] swapcached 0 [ 679.587419][T16120] pgpgin 664799 [ 679.590987][T16120] pgpgout 664790 [ 679.594557][T16120] pgfault 580312 [ 679.598126][T16120] pgmajfault 795 [ 679.602406][T16120] inactive_anon 0 [ 679.606061][T16120] active_anon 0 [ 679.609586][T16120] inactive_file 28672 [ 679.613582][T16120] active_file 8192 [ 679.617331][T16120] unevictable 0 [ 679.620860][T16120] hierarchical_memory_limit 314572800 [ 679.626293][T16120] hierarchical_memsw_limit 9223372036854771712 [ 679.633107][T16120] total_cache 36864 [ 679.636931][T16120] total_rss 0 [ 679.640313][T16120] total_shmem 0 [ 679.643815][T16120] total_mapped_file 0 [ 679.647818][T16120] total_dirty 0 [ 679.651332][T16120] total_writeback 0 [ 679.655213][T16120] total_workingset_refault_anon 4852 [ 679.661317][T16120] total_workingset_refault_file 1460 [ 679.666892][T16120] total_swap 1695744 [ 679.670911][T16120] total_swapcached 0 [ 679.674881][T16120] total_pgpgin 664799 [ 679.678883][T16120] total_pgpgout 664790 [ 679.683022][T16120] total_pgfault 580312 [ 679.687147][T16120] total_pgmajfault 795 [ 679.691966][T16120] total_inactive_anon 0 [ 679.696159][T16120] total_active_anon 0 [ 679.700377][T16120] total_inactive_file 28672 [ 679.704920][T16120] total_active_file 8192 [ 679.709209][T16120] total_unevictable 0 [ 679.713278][T16120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10581,pid=30538,uid=0 [ 679.729172][T16120] Memory cgroup out of memory: Killed process 30538 (syz.0.10581) total-vm:94012kB, anon-rss:1248kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 679.866910][T16120] syz.0.16715 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 679.878579][T16120] CPU: 1 UID: 0 PID: 16120 Comm: syz.0.16715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 679.878660][T16120] Tainted: [W]=WARN [ 679.878717][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 679.878732][T16120] Call Trace: [ 679.878741][T16120] [ 679.878752][T16120] __dump_stack+0x1d/0x30 [ 679.878884][T16120] dump_stack_lvl+0x95/0xd0 [ 679.878909][T16120] dump_stack+0x15/0x1b [ 679.878935][T16120] dump_header+0x80/0x240 [ 679.879006][T16120] oom_kill_process+0x295/0x350 [ 679.879062][T16120] out_of_memory+0x97d/0xb80 [ 679.879088][T16120] try_charge_memcg+0x62e/0xa10 [ 679.879188][T16120] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 679.879305][T16120] __read_swap_cache_async+0x17b/0x2d0 [ 679.879346][T16120] swap_cluster_readahead+0x262/0x3c0 [ 679.879453][T16120] swapin_readahead+0xde/0x840 [ 679.879554][T16120] ? __perf_event_task_sched_in+0xa65/0xad0 [ 679.879658][T16120] ? __rcu_read_unlock+0x4e/0x70 [ 679.879722][T16120] ? swap_cache_get_folio+0x26f/0x280 [ 679.879761][T16120] do_swap_page+0x59b/0x2a50 [ 679.879890][T16120] ? finish_task_switch+0x79/0x280 [ 679.879923][T16120] ? __schedule+0x82d/0xc90 [ 679.879947][T16120] ? __rcu_read_lock+0x36/0x50 [ 679.880014][T16120] ? __pfx_default_wake_function+0x10/0x10 [ 679.880055][T16120] handle_mm_fault+0xb40/0x3030 [ 679.880194][T16120] ? vma_start_read+0x1c7/0x2c0 [ 679.880233][T16120] do_user_addr_fault+0x62f/0x1050 [ 679.880270][T16120] exc_page_fault+0x62/0xa0 [ 679.880377][T16120] asm_exc_page_fault+0x26/0x30 [ 679.880405][T16120] RIP: 0033:0x7f0e86bbb78e [ 679.880426][T16120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 679.880504][T16120] RSP: 002b:00007ffd74f7f5a8 EFLAGS: 00010246 [ 679.880554][T16120] RAX: 0000000000000000 RBX: 000055555de23500 RCX: 00007f0e86bbb78e [ 679.880573][T16120] RDX: 00007ffd74f7f600 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.880590][T16120] RBP: 00007f0e86e77da0 R08: 0000000000000000 R09: 0000000000000000 [ 679.880604][T16120] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a5cd4 [ 679.880662][T16120] R13: 00007f0e86e7609c R14: 00000000000a5a59 R15: 00007f0e86e76090 [ 679.880690][T16120] [ 680.105883][T16120] memory: usage 307200kB, limit 307200kB, failcnt 5317 [ 680.112976][T16120] memory+swap: usage 308676kB, limit 9007199254740988kB, failcnt 0 [ 680.121026][T16120] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 680.128349][T16120] Memory cgroup stats for /syz0: [ 680.128539][T16120] cache 36864 [ 680.137500][T16120] rss 0 [ 680.140312][T16120] shmem 0 [ 680.143266][T16120] mapped_file 0 [ 680.146743][T16120] dirty 0 [ 680.149733][T16120] writeback 4096 [ 680.153312][T16120] workingset_refault_anon 4854 [ 680.158095][T16120] workingset_refault_file 1460 [ 680.163576][T16120] swap 1511424 [ 680.166969][T16120] swapcached 4096 [ 680.170645][T16120] pgpgin 664801 [ 680.174228][T16120] pgpgout 664791 [ 680.177862][T16120] pgfault 580313 [ 680.181537][T16120] pgmajfault 796 [ 680.185160][T16120] inactive_anon 4096 [ 680.190171][T16120] active_anon 0 [ 680.193655][T16120] inactive_file 20480 [ 680.197660][T16120] active_file 16384 [ 680.201558][T16120] unevictable 0 [ 680.205040][T16120] hierarchical_memory_limit 314572800 [ 680.210508][T16120] hierarchical_memsw_limit 9223372036854771712 [ 680.216679][T16120] total_cache 36864 [ 680.221189][T16120] total_rss 0 [ 680.224576][T16120] total_shmem 0 [ 680.228104][T16120] total_mapped_file 0 [ 680.232211][T16120] total_dirty 0 [ 680.235733][T16120] total_writeback 4096 [ 680.239852][T16120] total_workingset_refault_anon 4854 [ 680.245156][T16120] total_workingset_refault_file 1460 [ 680.251158][T16120] total_swap 1511424 [ 680.255121][T16120] total_swapcached 4096 [ 680.259430][T16120] total_pgpgin 664801 [ 680.263442][T16120] total_pgpgout 664791 [ 680.267527][T16120] total_pgfault 580313 [ 680.271725][T16120] total_pgmajfault 796 [ 680.275834][T16120] total_inactive_anon 4096 [ 680.281130][T16120] total_active_anon 0 [ 680.285197][T16120] total_inactive_file 20480 [ 680.289756][T16120] total_active_file 16384 [ 680.294109][T16120] total_unevictable 0 [ 680.298145][T16120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9073,pid=26598,uid=0 [ 680.313903][T16120] Memory cgroup out of memory: Killed process 26598 (syz.0.9073) total-vm:94012kB, anon-rss:1224kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 680.438294][T16121] syz.0.16715 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 680.452610][T16121] CPU: 1 UID: 0 PID: 16121 Comm: syz.0.16715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 680.452684][T16121] Tainted: [W]=WARN [ 680.452762][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 680.452871][T16121] Call Trace: [ 680.452881][T16121] [ 680.452892][T16121] __dump_stack+0x1d/0x30 [ 680.452924][T16121] dump_stack_lvl+0x95/0xd0 [ 680.452989][T16121] dump_stack+0x15/0x1b [ 680.453017][T16121] dump_header+0x80/0x240 [ 680.453045][T16121] oom_kill_process+0x295/0x350 [ 680.453081][T16121] out_of_memory+0x97d/0xb80 [ 680.453189][T16121] try_charge_memcg+0x62e/0xa10 [ 680.453241][T16121] obj_cgroup_charge_pages+0x23/0xc0 [ 680.453277][T16121] __memcg_kmem_charge_page+0x9e/0x170 [ 680.453318][T16121] __alloc_frozen_pages_noprof+0x18a/0x350 [ 680.453435][T16121] alloc_pages_mpol+0xb3/0x260 [ 680.453468][T16121] alloc_pages_noprof+0x8f/0x130 [ 680.453550][T16121] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 680.453623][T16121] __kvmalloc_node_noprof+0x471/0x680 [ 680.453703][T16121] ? ip_set_alloc+0x24/0x30 [ 680.453816][T16121] ? ip_set_alloc+0x24/0x30 [ 680.453884][T16121] ip_set_alloc+0x24/0x30 [ 680.453913][T16121] hash_netiface_create+0x282/0x740 [ 680.453968][T16121] ? __pfx_hash_netiface_create+0x10/0x10 [ 680.454064][T16121] ip_set_create+0x3cf/0x970 [ 680.454120][T16121] ? __nla_parse+0x40/0x60 [ 680.454145][T16121] nfnetlink_rcv_msg+0x509/0x5d0 [ 680.454214][T16121] netlink_rcv_skb+0x123/0x220 [ 680.454247][T16121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 680.454335][T16121] nfnetlink_rcv+0x167/0x1720 [ 680.454373][T16121] ? mas_wr_walk_descend+0x36e/0x470 [ 680.454475][T16121] ? mas_wr_store_type+0xa75/0xcd0 [ 680.454515][T16121] ? mas_prealloc_calc+0x253/0x2a0 [ 680.454551][T16121] ? mas_alloc_cyclic+0xa94/0xb20 [ 680.454581][T16121] ? obj_cgroup_charge_account+0x122/0x1a0 [ 680.454640][T16121] ? __rcu_read_unlock+0x4e/0x70 [ 680.454761][T16121] ? _raw_spin_lock_bh+0x56/0xb0 [ 680.454947][T16121] ? should_fail_ex+0x30/0x280 [ 680.454999][T16121] ? selinux_nlmsg_lookup+0x99/0x890 [ 680.455073][T16121] ? __rcu_read_unlock+0x33/0x70 [ 680.455107][T16121] ? __netlink_lookup+0x276/0x2b0 [ 680.455132][T16121] netlink_unicast+0x5c0/0x690 [ 680.455222][T16121] netlink_sendmsg+0x5c8/0x6f0 [ 680.455246][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.455266][T16121] ____sys_sendmsg+0x5af/0x600 [ 680.455291][T16121] ___sys_sendmsg+0x195/0x1e0 [ 680.455355][T16121] __x64_sys_sendmsg+0xd4/0x160 [ 680.455381][T16121] x64_sys_call+0x17ba/0x3000 [ 680.455408][T16121] do_syscall_64+0xc0/0x2a0 [ 680.455441][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.455533][T16121] RIP: 0033:0x7f0e86bfaeb9 [ 680.455552][T16121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.455573][T16121] RSP: 002b:00007f0e85657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.455595][T16121] RAX: ffffffffffffffda RBX: 00007f0e86e75fa0 RCX: 00007f0e86bfaeb9 [ 680.455610][T16121] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 680.455634][T16121] RBP: 00007f0e86c68c1f R08: 0000000000000000 R09: 0000000000000000 [ 680.455696][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.455709][T16121] R13: 00007f0e86e76038 R14: 00007f0e86e75fa0 R15: 00007ffd74f7f4c8 [ 680.455731][T16121] [ 680.455803][T16121] memory: usage 307200kB, limit 307200kB, failcnt 5402 [ 680.803723][T16121] memory+swap: usage 308576kB, limit 9007199254740988kB, failcnt 0 [ 680.811705][T16121] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 680.819101][T16121] Memory cgroup stats for /syz0: [ 680.831063][T16121] cache 36864 [ 680.839457][T16121] rss 0 [ 680.842406][T16121] shmem 0 [ 680.845371][T16121] mapped_file 0 [ 680.848899][T16121] dirty 0 [ 680.851968][T16121] writeback 0 [ 680.855293][T16121] workingset_refault_anon 4856 [ 680.860741][T16121] workingset_refault_file 1461 [ 680.865530][T16121] swap 1409024 [ 680.868922][T16121] swapcached 0 [ 680.872359][T16121] pgpgin 664804 [ 680.875837][T16121] pgpgout 664795 [ 680.879431][T16121] pgfault 580321 [ 680.883050][T16121] pgmajfault 799 [ 680.886626][T16121] inactive_anon 0 [ 680.890873][T16121] active_anon 0 [ 680.894365][T16121] inactive_file 12288 [ 680.898417][T16121] active_file 24576 [ 680.902334][T16121] unevictable 0 [ 680.905814][T16121] hierarchical_memory_limit 314572800 [ 680.911294][T16121] hierarchical_memsw_limit 9223372036854771712 [ 680.917461][T16121] total_cache 36864 [ 680.922011][T16121] total_rss 0 [ 680.925324][T16121] total_shmem 0 [ 680.928804][T16121] total_mapped_file 0 [ 680.932844][T16121] total_dirty 0 [ 680.936357][T16121] total_writeback 0 [ 680.940264][T16121] total_workingset_refault_anon 4856 [ 680.945578][T16121] total_workingset_refault_file 1461 [ 680.951566][T16121] total_swap 1409024 [ 680.955531][T16121] total_swapcached 0 [ 680.959475][T16121] total_pgpgin 664804 [ 680.963579][T16121] total_pgpgout 664795 [ 680.967742][T16121] total_pgfault 580321 [ 680.971857][T16121] total_pgmajfault 799 [ 680.975954][T16121] total_inactive_anon 0 [ 680.980949][T16121] total_active_anon 0 [ 680.985021][T16121] total_inactive_file 12288 [ 680.989577][T16121] total_active_file 24576 [ 680.994011][T16121] total_unevictable 0 [ 680.998028][T16121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.16715,pid=16120,uid=0 [ 681.013900][T16121] Memory cgroup out of memory: Killed process 16120 (syz.0.16715) total-vm:96228kB, anon-rss:1212kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 681.082714][T16207] validate_nla: 2 callbacks suppressed [ 681.082745][T16207] netlink: 'syz.2.16747': attribute type 2 has an invalid length. [ 681.096170][T16207] netlink: 'syz.2.16747': attribute type 1 has an invalid length. [ 681.214139][T16215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16750'. [ 681.246210][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16750'. [ 681.324854][T16218] xfrm0 speed is unknown, defaulting to 1000 [ 681.548821][T16241] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16760'. [ 681.894983][T16268] loop6: detected capacity change from 0 to 164 [ 682.359367][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 682.586316][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16780'. [ 682.598572][T16294] gtp1: entered promiscuous mode [ 682.711785][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16783'. [ 682.720865][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16783'. [ 682.872623][T16309] 9p: Bad value for 'rfdno' [ 683.617309][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16797'. [ 683.636802][T16338] IPv6: Can't replace route, no match found [ 684.054891][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16809'. [ 684.737196][T16397] 9p: Bad value for 'wfdno' [ 685.689635][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 685.689657][ T29] audit: type=1326 audit(2000000082.000:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.720121][ T29] audit: type=1326 audit(2000000082.000:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.844744][ T29] audit: type=1326 audit(2000000082.060:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.868615][ T29] audit: type=1326 audit(2000000082.060:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.893264][ T29] audit: type=1326 audit(2000000082.060:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.916973][ T29] audit: type=1326 audit(2000000082.080:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.941904][ T29] audit: type=1326 audit(2000000082.080:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.965613][ T29] audit: type=1326 audit(2000000082.080:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 685.990107][ T29] audit: type=1326 audit(2000000082.080:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 686.013906][ T29] audit: type=1326 audit(2000000082.080:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.0.16837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e86bfaeb9 code=0x7ffc0000 [ 686.176184][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16843'. [ 686.201268][T16452] ref_ctr increment failed for inode: 0x413 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104b11440 [ 686.269683][T16451] uprobe: syz.6.16844:16451 failed to unregister, leaking uprobe [ 686.775780][T16469] sctp: [Deprecated]: syz.9.16852 (pid 16469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.775780][T16469] Use struct sctp_sack_info instead [ 687.039952][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16858'. [ 687.072714][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16859'. [ 687.158609][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16864'. [ 687.257412][T16505] IPv6: NLM_F_CREATE should be specified when creating new route [ 687.335063][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16872'. [ 687.423502][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16877'. [ 687.443103][T16526] team2: entered promiscuous mode [ 687.448283][T16526] team2: entered allmulticast mode [ 687.454140][T16526] 8021q: adding VLAN 0 to HW filter on device team2 [ 688.213104][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16900'. [ 688.394035][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16903'. [ 688.540597][T16598] xfrm0 speed is unknown, defaulting to 1000 [ 689.352753][T16633] netlink: 72 bytes leftover after parsing attributes in process `syz.9.16920'. [ 689.482989][T16639] xt_hashlimit: size too large, truncated to 1048576 [ 689.590692][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16923'. [ 690.007483][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16940'. [ 690.302593][T16711] xfrm0 speed is unknown, defaulting to 1000 [ 690.826606][T16746] ip6gre2: entered promiscuous mode [ 690.833615][T16746] ip6gre2: entered allmulticast mode [ 691.034841][T16747] xfrm0 speed is unknown, defaulting to 1000 [ 691.231685][T16747] chnl_net:caif_netlink_parms(): no params data found [ 691.292992][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.300792][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.308412][T16747] bridge_slave_0: entered allmulticast mode [ 691.315588][T16747] bridge_slave_0: entered promiscuous mode [ 691.325803][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.333581][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.341431][T16747] bridge_slave_1: entered allmulticast mode [ 691.348211][T16747] bridge_slave_1: entered promiscuous mode [ 691.369745][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.380684][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.402952][T16747] team0: Port device team_slave_0 added [ 691.411086][T16747] team0: Port device team_slave_1 added [ 691.430038][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.437173][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.463931][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.475377][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.482536][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.509212][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.542576][T16747] hsr_slave_0: entered promiscuous mode [ 691.548806][T16747] hsr_slave_1: entered promiscuous mode [ 691.554854][T16747] debugfs: 'hsr0' already exists in 'hsr' [ 691.561476][T16747] Cannot create hsr debugfs directory [ 691.682192][T16796] xt_hashlimit: size too large, truncated to 1048576 [ 692.012388][ T3421] kernel read not supported for file bpf-prog (pid: 3421 comm: kworker/1:5) [ 692.038926][T16747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 692.074620][T16747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 692.111274][T16747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 692.142629][T16747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 692.339188][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.370960][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.399342][T19339] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.406558][T19339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.470669][T19339] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.477878][T19339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.632908][T16867] __nla_validate_parse: 2 callbacks suppressed [ 692.632938][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16991'. [ 692.785211][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.130030][T16926] syzkaller0: entered allmulticast mode [ 693.141757][T16926] syzkaller0: entered promiscuous mode [ 693.157296][T16926] syzkaller0 (unregistering): left promiscuous mode [ 693.164076][T16926] syzkaller0 (unregistering): left allmulticast mode [ 693.230813][T16747] veth0_vlan: entered promiscuous mode [ 693.237024][T16932] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.17001'. [ 693.254015][T16747] veth1_vlan: entered promiscuous mode [ 693.318455][T16747] veth0_macvtap: entered promiscuous mode [ 693.353559][T16747] veth1_macvtap: entered promiscuous mode [ 693.369583][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.394929][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.418211][T19356] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.483128][T19356] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.523335][T19356] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.538124][T19356] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.665410][T19327] bridge_slave_0: left allmulticast mode [ 693.671226][T19327] bridge_slave_0: left promiscuous mode [ 693.677094][T19327] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.694410][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17012'. [ 693.743097][T16983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17017'. [ 693.744307][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17012'. [ 693.762605][ T3387] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 693.832082][T19327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.858124][T19327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.881004][T19327] bond0 (unregistering): Released all slaves [ 694.000523][T19356] tipc: Subscription rejected, illegal request [ 694.052693][T17016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17022'. [ 694.086614][T19327] hsr_slave_0: left promiscuous mode [ 694.099875][T19327] hsr_slave_1: left promiscuous mode [ 694.105709][T19327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.245817][T19327] team0 (unregistering): Port device team_slave_1 removed [ 694.263848][T19327] team0 (unregistering): Port device team_slave_0 removed [ 694.394820][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 694.394839][ T29] audit: type=1326 audit(2000000090.710:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.430583][ T29] audit: type=1326 audit(2000000090.750:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.454201][ T29] audit: type=1326 audit(2000000090.750:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.477851][ T29] audit: type=1326 audit(2000000090.750:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.501546][ T29] audit: type=1326 audit(2000000090.750:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.525309][ T29] audit: type=1326 audit(2000000090.750:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.549375][ T29] audit: type=1326 audit(2000000090.750:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.573257][ T29] audit: type=1326 audit(2000000090.750:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.596793][ T29] audit: type=1326 audit(2000000090.750:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.620533][ T29] audit: type=1326 audit(2000000090.750:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.9.17030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 694.686726][T17064] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 694.922723][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.17043'. [ 695.068103][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17046'. [ 695.457229][T17168] xfrm0 speed is unknown, defaulting to 1000 [ 696.313879][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17063'. [ 696.557243][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17069'. [ 697.222930][T17323] SET target dimension over the limit! [ 697.403780][T17338] xt_hashlimit: size too large, truncated to 1048576 [ 697.642501][T17351] lo speed is unknown, defaulting to 1000 [ 697.652287][T17351] lo speed is unknown, defaulting to 1000 [ 697.658637][T17351] lo speed is unknown, defaulting to 1000 [ 697.666167][T17351] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 697.681506][T17351] lo speed is unknown, defaulting to 1000 [ 697.687701][T17351] lo speed is unknown, defaulting to 1000 [ 697.694644][T17351] lo speed is unknown, defaulting to 1000 [ 697.701567][T17351] lo speed is unknown, defaulting to 1000 [ 697.707619][T17351] lo speed is unknown, defaulting to 1000 [ 697.715094][T17351] lo speed is unknown, defaulting to 1000 [ 697.724092][T17351] lo speed is unknown, defaulting to 1000 [ 697.730521][T17351] lo speed is unknown, defaulting to 1000 [ 697.757444][T17357] bond4: entered promiscuous mode [ 697.763054][T17357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 697.785991][T17357] bridge6: entered promiscuous mode [ 698.044217][T17380] netlink: 'syz.8.17108': attribute type 2 has an invalid length. [ 698.052214][T17380] netlink: 'syz.8.17108': attribute type 8 has an invalid length. [ 698.060116][T17380] __nla_validate_parse: 4 callbacks suppressed [ 698.060133][T17380] netlink: 132 bytes leftover after parsing attributes in process `syz.8.17108'. [ 698.296427][T17406] 8021q: adding VLAN 0 to HW filter on device bond7 [ 698.316718][T17406] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 698.399513][T19339] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 698.529465][ T7442] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 699.440581][T17494] bond5: entered allmulticast mode [ 699.445780][T17494] vti0: entered allmulticast mode [ 699.765387][T17513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17162'. [ 699.809275][T17515] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 699.991711][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17178'. [ 700.000771][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 700.000796][ T29] audit: type=1326 audit(2000000096.310:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 700.030600][ T29] audit: type=1326 audit(2000000096.310:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 700.068503][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17178'. [ 700.078195][ T29] audit: type=1326 audit(2000000096.320:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e171b78e code=0x7ffc0000 [ 700.102230][ T29] audit: type=1326 audit(2000000096.320:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e171b78e code=0x7ffc0000 [ 700.126110][ T29] audit: type=1326 audit(2000000096.320:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e171b78e code=0x7ffc0000 [ 700.149845][ T29] audit: type=1326 audit(2000000096.320:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe1e171b78e code=0x7ffc0000 [ 700.173652][ T29] audit: type=1326 audit(2000000096.320:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1e1754cd7 code=0x7ffc0000 [ 700.197193][ T29] audit: type=1326 audit(2000000096.320:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1e16fc2d9 code=0x7ffc0000 [ 700.220824][ T29] audit: type=1326 audit(2000000096.320:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 700.244514][ T29] audit: type=1326 audit(2000000096.320:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.2.17175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 700.593161][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17193'. [ 700.608874][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17193'. [ 700.760520][T17615] team0: Caught tx_queue_len zero misconfig [ 700.883592][T17614] IPv6: sit1: Disabled Multicast RS [ 701.078380][T17637] netlink: 'syz.9.17213': attribute type 3 has an invalid length. [ 701.723151][T17694] xfrm0 speed is unknown, defaulting to 1000 [ 701.807721][T17694] lo speed is unknown, defaulting to 1000 [ 701.868173][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17243'. [ 701.877385][T17706] netlink: 'syz.0.17243': attribute type 7 has an invalid length. [ 701.885734][T17706] netlink: 'syz.0.17243': attribute type 8 has an invalid length. [ 701.893676][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17243'. [ 701.946618][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17244'. [ 701.956576][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17244'. [ 702.020285][T17717] bridge0: port 1(veth0_to_bridge) entered blocking state [ 702.027510][T17717] bridge0: port 1(veth0_to_bridge) entered disabled state [ 702.037628][T17717] veth0_to_bridge: entered allmulticast mode [ 702.053734][T17717] veth0_to_bridge: entered promiscuous mode [ 702.169812][T17733] xfrm0 speed is unknown, defaulting to 1000 [ 702.286666][T17733] lo speed is unknown, defaulting to 1000 [ 702.292854][T17738] xfrm0 speed is unknown, defaulting to 1000 [ 702.451736][T17738] lo speed is unknown, defaulting to 1000 [ 702.889102][T17762] ref_ctr increment failed for inode: 0xd09 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812e9e0d80 [ 702.922678][T17764] netlink: 'syz.9.17265': attribute type 14 has an invalid length. [ 702.941686][T17761] uprobe: syz.2.17263:17761 failed to unregister, leaking uprobe [ 702.971270][T17764] netlink: 'syz.9.17265': attribute type 14 has an invalid length. [ 702.979457][ T7442] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.987794][T19329] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.996119][T17764] netlink: 'syz.9.17265': attribute type 14 has an invalid length. [ 703.021300][T19329] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.044838][T19329] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.292182][T17802] __nla_validate_parse: 3 callbacks suppressed [ 703.292204][T17802] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17279'. [ 703.425605][T17810] netlink: 'syz.9.17283': attribute type 10 has an invalid length. [ 703.442447][T17810] syz_tun: entered promiscuous mode [ 703.458476][T17810] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 704.612230][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17305'. [ 704.621392][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17305'. [ 704.917694][T17889] xfrm0 speed is unknown, defaulting to 1000 [ 705.017497][T17896] netlink: 'syz.2.17317': attribute type 1 has an invalid length. [ 705.074431][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17317'. [ 705.083562][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17317'. [ 705.100483][T17896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 705.139129][T17889] lo speed is unknown, defaulting to 1000 [ 705.187076][T17898] macsec1: entered promiscuous mode [ 705.192381][T17898] bond5: entered promiscuous mode [ 705.197593][T17898] macsec1: entered allmulticast mode [ 705.203628][T17898] bond5: entered allmulticast mode [ 705.815119][T17925] bridge0: port 1(veth0_to_bridge) entered blocking state [ 705.822661][T17925] bridge0: port 1(veth0_to_bridge) entered disabled state [ 705.896153][T17925] veth0_to_bridge: entered promiscuous mode [ 706.842543][T17944] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.944034][T17944] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.011683][T17944] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.083082][T17944] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.145579][T17954] IPv6: sit4: Disabled Multicast RS [ 707.220962][ T7442] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.261555][ T7442] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.310817][ T7442] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.371069][ T7442] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.556062][T17958] netlink: 199828 bytes leftover after parsing attributes in process `syz.9.17336'. [ 707.674222][T17965] bridge0: port 1(veth0_to_bridge) entered blocking state [ 707.681540][T17965] bridge0: port 1(veth0_to_bridge) entered disabled state [ 707.689650][T17965] veth0_to_bridge: entered allmulticast mode [ 707.706527][T17965] veth0_to_bridge: entered promiscuous mode [ 707.834521][T17979] netlink: 'syz.0.17345': attribute type 32 has an invalid length. [ 708.673996][T18040] xfrm0 speed is unknown, defaulting to 1000 [ 708.829321][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17353'. [ 708.867657][T18092] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17353'. [ 708.896351][T18040] lo speed is unknown, defaulting to 1000 [ 709.011075][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 709.011096][ T29] audit: type=1326 audit(2000000105.330:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.105329][ T29] audit: type=1326 audit(2000000105.330:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.129211][ T29] audit: type=1326 audit(2000000105.330:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.152872][ T29] audit: type=1326 audit(2000000105.330:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.176509][ T29] audit: type=1326 audit(2000000105.330:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.200322][ T29] audit: type=1326 audit(2000000105.330:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.224030][ T29] audit: type=1326 audit(2000000105.330:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1e1754cd7 code=0x7ffc0000 [ 709.247777][ T29] audit: type=1326 audit(2000000105.330:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1e16fc2d9 code=0x7ffc0000 [ 709.271306][ T29] audit: type=1326 audit(2000000105.330:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1e175aeb9 code=0x7ffc0000 [ 709.294989][ T29] audit: type=1326 audit(2000000105.330:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18111 comm="syz.2.17357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1e1754cd7 code=0x7ffc0000 [ 710.365094][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17376'. [ 710.384142][T18190] veth0_to_bridge: left allmulticast mode [ 710.390094][T18190] veth0_to_bridge: left promiscuous mode [ 710.395883][T18190] bridge0: port 1(veth0_to_bridge) entered disabled state [ 710.439378][T18194] netlink: 'syz.2.17378': attribute type 4 has an invalid length. [ 710.488216][T18194] netlink: 'syz.2.17378': attribute type 4 has an invalid length. [ 710.569515][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17382'. [ 710.833042][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17385'. [ 710.842302][T18215] netlink: 'syz.9.17385': attribute type 7 has an invalid length. [ 710.850944][T18215] netlink: 'syz.9.17385': attribute type 8 has an invalid length. [ 710.858779][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17385'. [ 710.889116][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17389'. [ 710.947102][T18225] uprobe: syz.9.17390:18225 failed to unregister, leaking uprobe [ 711.006020][T18230] dummy0: left allmulticast mode [ 711.205450][ T7440] tipc: Subscription rejected, illegal request [ 711.245132][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17400'. [ 711.255692][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17400'. [ 711.404803][T18265] xfrm0 speed is unknown, defaulting to 1000 [ 711.482777][T18265] lo speed is unknown, defaulting to 1000 [ 711.533475][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17410'. [ 712.993464][T18356] xt_CT: No such helper "pptp" [ 713.682214][T18397] netlink: 'syz.2.17458': attribute type 27 has an invalid length. [ 713.691850][T18397] lo: left allmulticast mode [ 713.697546][T18397] tunl0: left allmulticast mode [ 713.702811][T18397] gre0: left allmulticast mode [ 713.707666][T18397] gretap0: left allmulticast mode [ 713.712911][T18397] erspan0: left allmulticast mode [ 713.718032][T18397] ip_vti0: left allmulticast mode [ 713.723436][T18397] ip6_vti0: left allmulticast mode [ 713.728688][T18397] sit0: left allmulticast mode [ 713.733585][T18397] ip6tnl0: left allmulticast mode [ 713.738763][T18397] ip6gre0: left allmulticast mode [ 713.743976][T18397] ip6gretap0: left allmulticast mode [ 713.749535][T18397] bond0: left allmulticast mode [ 713.754552][T18397] team0: left allmulticast mode [ 713.771898][T18397] nlmon0: left allmulticast mode [ 713.776978][T18397] caif0: left allmulticast mode [ 713.782728][T18397] vxcan0: left allmulticast mode [ 713.787882][T18397] vxcan1: left allmulticast mode [ 713.792998][T18397] veth0: left allmulticast mode [ 713.797946][T18397] veth1: left allmulticast mode [ 713.803051][T18397] wg0: left allmulticast mode [ 713.807854][T18397] wg1: left allmulticast mode [ 713.813454][T18397] wg2: left allmulticast mode [ 713.818380][T18397] bridge_slave_0: left allmulticast mode [ 713.824351][T18397] veth1_to_bridge: left allmulticast mode [ 713.830261][T18397] bridge_slave_1: left allmulticast mode [ 713.836091][T18397] veth0_to_bond: left allmulticast mode [ 713.836726][T18403] loop8: detected capacity change from 0 to 512 [ 713.841872][T18397] bond_slave_0: left allmulticast mode [ 713.854345][T18397] veth1_to_bond: left allmulticast mode [ 713.860157][T18397] bond_slave_1: left allmulticast mode [ 713.865824][T18397] veth0_to_team: left allmulticast mode [ 713.871528][T18397] team_slave_0: left allmulticast mode [ 713.877216][T18397] veth1_to_team: left allmulticast mode [ 713.883513][T18397] team_slave_1: left allmulticast mode [ 713.889057][T18397] veth0_to_batadv: left allmulticast mode [ 713.894957][T18397] batadv_slave_0: left allmulticast mode [ 713.900713][T18397] xfrm0: left allmulticast mode [ 713.905744][T18397] veth0_to_hsr: left allmulticast mode [ 713.906146][T18403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 713.911537][T18397] veth1_to_hsr: left allmulticast mode [ 713.926072][T18397] hsr0: left allmulticast mode [ 713.930976][T18397] hsr_slave_0: left allmulticast mode [ 713.936390][T18397] hsr_slave_1: left allmulticast mode [ 713.941908][T18397] veth1_virt_wifi: left allmulticast mode [ 713.947777][T18397] veth0_virt_wifi: left allmulticast mode [ 713.954363][T18397] veth1_vlan: left allmulticast mode [ 713.959893][T18397] vlan0: left allmulticast mode [ 713.964854][T18397] vlan1: left allmulticast mode [ 713.969875][T18397] macvlan0: left allmulticast mode [ 713.975132][T18397] macvlan1: left allmulticast mode [ 713.981136][T18397] ipvlan0: left allmulticast mode [ 713.986362][T18397] ipvlan1: left allmulticast mode [ 713.991463][T18397] veth0_vlan: left allmulticast mode [ 713.996897][T18397] veth1_macvtap: left allmulticast mode [ 714.002641][T18397] veth0_macvtap: left allmulticast mode [ 714.008335][T18397] macvtap0: left allmulticast mode [ 714.014258][T18397] macsec0: left allmulticast mode [ 714.019619][T18397] geneve0: left allmulticast mode [ 714.024767][T18397] geneve1: left allmulticast mode [ 714.030057][T18397] bond1: left allmulticast mode [ 714.035130][T18397] ip6gre1: left allmulticast mode [ 714.040914][T18397] sit1: left allmulticast mode [ 714.045761][T18397] macvtap1: left allmulticast mode [ 714.051225][T18397] gre1: left allmulticast mode [ 714.056124][T18397] ipip0: left allmulticast mode [ 714.061103][T18397] bridge1: left allmulticast mode [ 714.066223][T18397] bond2: left allmulticast mode [ 714.071946][T18397] bridge2: left allmulticast mode [ 714.077147][T18397] vxlan0: left allmulticast mode [ 714.082241][T18397] bridge3: left allmulticast mode [ 714.087489][T18397] geneve2: left promiscuous mode [ 714.092669][T18397] bond3: left promiscuous mode [ 714.097470][T18397] bond3: left allmulticast mode [ 714.130641][T18403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.154988][T18397] bond4: left promiscuous mode [ 714.169060][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 714.169080][ T29] audit: type=1326 audit(2000000110.480:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.172310][T18403] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 714.175511][ T29] audit: type=1326 audit(2000000110.480:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.271473][ T29] audit: type=1326 audit(2000000110.480:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.295349][ T29] audit: type=1326 audit(2000000110.480:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.319075][ T29] audit: type=1326 audit(2000000110.550:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.342939][ T29] audit: type=1326 audit(2000000110.550:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.366628][ T29] audit: type=1326 audit(2000000110.550:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.418979][T18397] bond5: left allmulticast mode [ 714.423987][T18397] bond5: left promiscuous mode [ 714.429103][T18397] macsec1: left promiscuous mode [ 714.434190][T18397] macsec1: left allmulticast mode [ 714.474656][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.531607][ T29] audit: type=1326 audit(2000000110.710:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.555403][ T29] audit: type=1326 audit(2000000110.710:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.579162][ T29] audit: type=1326 audit(2000000110.710:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.9.17462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa984d7aeb9 code=0x7ffc0000 [ 714.651021][T16747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.677480][T18398] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.686807][T18398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.889328][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.896784][T18434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.915650][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.923421][T18434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.992097][T18440] bridge5: entered allmulticast mode [ 715.130075][T18465] __nla_validate_parse: 4 callbacks suppressed [ 715.130090][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17483'. [ 715.153848][T18462] smc: net device bond0 applied user defined pnetid SYZ2 [ 715.163383][T18462] netlink: 14 bytes leftover after parsing attributes in process `syz.8.17482'. [ 715.184308][T18462] smc: removing net device bond0 with user defined pnetid SYZ2 [ 715.197647][T18462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.220407][T18462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.237154][T18462] bond0 (unregistering): Released all slaves [ 715.335820][T18493] netlink: 176 bytes leftover after parsing attributes in process `syz.5.17491'. [ 715.530764][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17497'. [ 715.862235][T18526] netlink: 'syz.2.17502': attribute type 39 has an invalid length. [ 716.035966][T18547] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17509'. [ 716.232241][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17518'. [ 716.256305][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17518'. [ 716.361771][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17521'. [ 717.007889][T18595] ================================================================== [ 717.016031][T18595] BUG: KCSAN: data-race in __d_drop / fast_dput [ 717.022321][T18595] [ 717.024678][T18595] write to 0xffff8881b4dfdc10 of 8 bytes by task 18596 on cpu 0: [ 717.032423][T18595] __d_drop+0x14d/0x240 [ 717.036618][T18595] __dentry_kill+0x122/0x460 [ 717.041255][T18595] finish_dput+0x2b/0x200 [ 717.045624][T18595] dput+0x52/0x60 [ 717.049296][T18595] step_into_slowpath+0x38c/0x4c0 [ 717.054369][T18595] path_lookupat+0x330/0x500 [ 717.058995][T18595] filename_lookup+0x190/0x390 [ 717.063818][T18595] filename_getxattr+0x54/0x1a0 [ 717.068812][T18595] io_getxattr+0x50/0xe0 [ 717.073091][T18595] __io_issue_sqe+0xfd/0x2d0 [ 717.077722][T18595] io_issue_sqe+0x20b/0xc20 [ 717.082259][T18595] io_wq_submit_work+0x574/0x770 [ 717.087236][T18595] io_worker_handle_work+0x41e/0x950 [ 717.092561][T18595] io_wq_worker+0x233/0x910 [ 717.097132][T18595] ret_from_fork+0x148/0x280 [ 717.101852][T18595] ret_from_fork_asm+0x1a/0x30 [ 717.106658][T18595] [ 717.109010][T18595] read to 0xffff8881b4dfdc10 of 8 bytes by task 18595 on cpu 1: [ 717.116663][T18595] fast_dput+0x5f/0x2c0 [ 717.120855][T18595] dput+0x24/0x60 [ 717.124529][T18595] step_into_slowpath+0x38c/0x4c0 [ 717.129599][T18595] path_lookupat+0x330/0x500 [ 717.134220][T18595] filename_lookup+0x190/0x390 [ 717.139015][T18595] filename_getxattr+0x54/0x1a0 [ 717.143942][T18595] io_getxattr+0x50/0xe0 [ 717.148224][T18595] __io_issue_sqe+0xfd/0x2d0 [ 717.152858][T18595] io_issue_sqe+0x20b/0xc20 [ 717.157390][T18595] io_wq_submit_work+0x574/0x770 [ 717.162361][T18595] io_worker_handle_work+0x41e/0x950 [ 717.167682][T18595] io_wq_worker+0x233/0x910 [ 717.172214][T18595] ret_from_fork+0x148/0x280 [ 717.176851][T18595] ret_from_fork_asm+0x1a/0x30 [ 717.181650][T18595] [ 717.183998][T18595] value changed: 0xffff888237addc68 -> 0x0000000000000000 [ 717.191124][T18595] [ 717.193466][T18595] Reported by Kernel Concurrency Sanitizer on: [ 717.199639][T18595] CPU: 1 UID: 0 PID: 18595 Comm: iou-wrk-18594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 717.211315][T18595] Tainted: [W]=WARN [ 717.215144][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 717.225264][T18595] ================================================================== [ 717.286478][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17533'. [ 717.559481][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!