last executing test programs: 7m33.966432515s ago: executing program 2 (id=5073): readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x2}, 0x48) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ee0000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10) 7m33.758170273s ago: executing program 2 (id=5079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) 3.476054938s ago: executing program 1 (id=8927): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x5000000, 0x0) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b52, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000240)=""/91) 3.390938466s ago: executing program 1 (id=8929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x25, 0x401}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x0, 0x0, 0xd, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x14, @val=@tcx={@void, @value=r1, @void, @void, r4}}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mknod(0x0, 0x8001420, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FIONCLEX(r2, 0x5450) recvfrom(r3, &(0x7f0000000400)=""/240, 0xf0, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @nested={0x4, 0x3c}]}, 0x1c}], 0x1}, 0x0) socket(0x1f, 0x1, 0xd) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.714717269s ago: executing program 3 (id=8935): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) nanosleep(&(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xbf, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) open(0x0, 0x240000, 0x110) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000000340)={0xa, 0x2, 0x800000, @loopback, 0x3}, 0x1c) r8 = dup(r7) sendto$packet(r8, &(0x7f0000000180)='\x00', 0x1, 0x5e0ffc3d130561ca, 0x0, 0x0) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2.597438019s ago: executing program 5 (id=8936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000340)="f8e70fba617f88371a23395334932cdeb235cb29f4202f9f186da7268cb52e63996375c91f56e7bcb13d8cdae5c82afe6c96ce0fad96d11ca47c95855313c05959b73cbfe60660b5ee511374a0131c327604c963264c91f64c6b577ccc52bcdb92d8f99b9d2668afd098c95c6486da87d26473cdf9433de04a871e3d6a9e3832f6cbf8660737a8c3b417b241a65f784c3c8461cbdd8aa24b377bd8ad5d9a9352f49835b6d2ac634a2d2b28fa2f6515f4d709993269840d3db542deb62135cdc4ec17e290", 0xc4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x19, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40060) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='btrfs_convert_extent_bit\x00', r3, 0x0, 0x80}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r2, 0x0, 0x4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2020000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0x9) 2.568265412s ago: executing program 3 (id=8937): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x554, &(0x7f0000000e40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000e804000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a40)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk2\xea\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xa9\x9aO\x9f\xf2\x00f\xb1\xa7\xb4w\xc4\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x10\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xebP\x91\x9b3v\x9c\x05`1A\xf2\x11z\xc2|d\x1b$\xd2\xf9\a\x00\xb2\x1b\bLA\x02\x00\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\x19\xc6V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j\xcc\xe9\xaa{]\xef\xd3\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef\xbaQ\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\xc1N\xb0\xc6\xbdZ\xe1\x91\x1c\x83\xb1J\xec\x926\r\x00\x00\x00\xe2\xf9\x88\xe1\x94\xe2EY.\xd5\xcd\xa5%xd\xb4N\xca\x8c\xe0\xb9P\xbbQ\xb4\xac\xc0\xfb\xff\xe1\xda\x04\x00\x00\x00\xfc\xed\x19\xd4\xb5~cn\xd6\x94Z&aby\x16\xec@prd\x15sr\x7fc\x9a\x96\xf5\x1a\xd5\xc4a\xe2\xaf\xc3b\xd5\xab\x0e\xb9\xf2R\x8aDX~SH\xc8\xd6\xc0\xc3\v\xaa\xd3\xdec\xff{\x8b\xb4\x1f\xa36\x80\xa8\xcf\xcc\xec\v<|\xf2\xe7\xc5\xfa\\,\xee\xe2\xbeYbKo\xb7\v\xf4T', 0x42, 0x11a, 0x0) mq_notify(r5, &(0x7f0000000280)={0x0, 0x2a, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) close(r6) 2.564153092s ago: executing program 4 (id=8938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004cc4c9a07fa8583ea8b46f740f7e41298d44a4d900000000009600000000000000000000aeed344b09c4ca61b259bb8b848f95b8797eaf52ffdaaf22fd54865b474b662f63acc35f4360a08b654e120c5bb3711070f3688111ad4bb92b2c7b742f9769e94a9ec5c479d6b6e2cb7478f12229dac95c32fd2efa4f2ed1b361490f157b6f4cc622a83a0cde3749d3b28ff594bc209c41c0ff5721cdb4e6cb62"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = getpgrp(0x0) syz_open_procfs$pagemap(r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xf4}}, 0x0) 2.518009307s ago: executing program 5 (id=8940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = getpid() r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r7, 0x0, 0xffffffffffffffff}, 0x18) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.513779317s ago: executing program 0 (id=8941): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) eventfd(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") open(0x0, 0x10000, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.495312839s ago: executing program 0 (id=8942): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="38c60400fe0000000000d7032ebe7ba9f2726c64513105d8cb5033fd65b736e274b6bd020087966e5da26c3959efeccf61000000"], 0x4c}}, 0x0) 2.462569922s ago: executing program 1 (id=8943): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000050000000000000050000000180d0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095", @ANYRES32=r0, @ANYRESDEC=r2, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xf96d, 0x800, 0x4, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092, 0x1}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r8, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknodat$loop(r10, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880300001e0a05010000000000000000070000010900020073797a31000000000900010073797a30000000005c0303800c0000800800034000000002"], 0x40c}}, 0x40000) 2.300039107s ago: executing program 3 (id=8944): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x4, 0x8001, "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", 0x9, 0x8, 0x2, 0x6, 0x1, 0x1, 0x51, 0x1}, r1}}, 0x120) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7}, &(0x7f00000002c0), &(0x7f0000000140)='%pS \x00'}, 0x20) r9 = getpgrp(0x0) r10 = syz_pidfd_open(r9, 0x0) fremovexattr(r10, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') preadv(r11, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) socket$can_j1939(0x1d, 0x2, 0x7) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 1.906405423s ago: executing program 3 (id=8945): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x561a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_hash}]}, 0xff, 0x599, &(0x7f0000001500)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000fb5a244b1e2e35d0b69b0bbd66c8ec"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x22000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0x101, 0x7ffd, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.777848805s ago: executing program 3 (id=8946): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xa, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 1.7245686s ago: executing program 4 (id=8947): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000600)='udf\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r6, r7}, 0x5) iopl(0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) 1.679123834s ago: executing program 3 (id=8948): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa0b11000) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb0c9fa2cdd4cf720}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@gettaction={0x14, 0x32, 0x261, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_io_uring_setup(0x112, &(0x7f0000000400)={0x0, 0x1000, 0x2, 0x4}, 0x0, 0x0) 1.627527629s ago: executing program 1 (id=8949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) 1.606475471s ago: executing program 5 (id=8950): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x80000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0xfffb, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r2, r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="570100000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000340)={r7, 0x9}, &(0x7f0000000380)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x24, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffff58, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r7, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x6a31, 0x9, 0xb, 0x83, 0x30, 0x5, 0x7}, &(0x7f00000001c0)=0x9c) 1.452594915s ago: executing program 0 (id=8951): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be", @ANYRES32], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x7c}}, 0x944) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x550}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x101, 0xfffffffb}, 0x10) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.417143558s ago: executing program 4 (id=8952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000404000000080000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x5, @local, 0x2}]}, &(0x7f0000000500)=0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xf}, {0xfff1}}}, 0x24}}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x408) 1.363620263s ago: executing program 0 (id=8953): r0 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=':\'-\'\'**,\x00', &(0x7f00000002c0)=',\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x4, 0x7fff, 0x7, 0x6, 0x40, 0x77}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x0, 0x7}, 0xa00, 0x81, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000008500000061000000180100002064682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.310676938s ago: executing program 5 (id=8954): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0xc000850) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xce, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xba, 0x0, @opaque="87fc4f59a62c5eadc88f3aa9e2df2e42c413481ed8b4b413ad0b87968879dff2940d80b7147f9bf0e76c4e7e4ba1983424ed389c5355ce2bd1e909e11536c5a1b02c3e52b6257a6ecee2538f66e677156ec259fe39320f95371d1a37fae1f742b2f2d8f616165f5fab0d0f4f9c51046185130e6f7bc3cec0fee91658ab50c1b162d03b242d25721028995c7a4f16faa8caab13eba067e930d982dfb132a631ebd031a8963707088fe883e5a142945f0ed074"}}}, 0xdc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = io_uring_setup(0x6f6, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 650.03998ms ago: executing program 5 (id=8955): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x5}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001500010027bd7000ecdbdf2502"], 0x34}}, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x143142, 0x80) 642.28058ms ago: executing program 1 (id=8956): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2b68756765603ac4"], 0x9) syz_io_uring_setup(0x49e, &(0x7f00000004c0)={0x0, 0x79af, 0x80, 0x7fff, 0x2b6, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="4692c4fb21b4618d02fbd71790474573eeb3214abf0172204e7ba54b5dc6c36180fc759a35db5837e38e3f26d14a3ddae92def797beaf11123247fc57583f5003aa6b348e49ee44649fbf8a42733730e232d8639146af54be1cc4eca9900bf113bdcdc28ae5d0f78ffedf6a36566a41fe317b245dede119ec14b00fe2e3788f1ce19e0de0041c4e0cfdb743b"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e255"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pidfd_send_signal(0xffffffffffffffff, 0x19, &(0x7f0000001fc0)={0x19, 0x546d0581, 0xc}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e1504511602000000", 0x13}, {&(0x7f0000000000)='S', 0x1}], 0x2}}], 0x1, 0x4004040) 586.685795ms ago: executing program 4 (id=8957): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000eb00001811ff7f8e64500f0aba0cb4b6713cd791cd2656aba3f40a4cd315030100000007af00f0ffff91"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48) close(r1) open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 585.918765ms ago: executing program 4 (id=8958): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0xc, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 545.196259ms ago: executing program 0 (id=8959): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) chown(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x20000) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r1 = syz_io_uring_setup(0x1107, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0x0, 0x1cb}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x120, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 61.339544ms ago: executing program 5 (id=8960): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x6a040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) sync() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 0s ago: executing program 0 (id=8961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, 0x0, &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf2508"], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) kernel console output (not intermixed with test programs): d=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.464036][ T29] audit: type=1326 audit(919.284:65474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.488048][ T29] audit: type=1326 audit(919.284:65475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.511691][ T29] audit: type=1326 audit(919.294:65476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.534782][ T29] audit: type=1326 audit(919.294:65477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.558361][ T29] audit: type=1326 audit(919.294:65478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27774 comm="syz.4.7842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e07d2005 code=0x7ffc0000 [ 663.616384][T27782] siw: device registration error -23 [ 664.058939][T27799] lo speed is unknown, defaulting to 1000 [ 664.066596][T27799] lo speed is unknown, defaulting to 1000 [ 664.778983][T27811] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.883219][T27811] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.995153][T27811] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.043717][T27811] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.137069][ T5902] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.166753][ T5902] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.188073][ T5902] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.205126][ T5902] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.356891][T27820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7856'. [ 665.416803][T27822] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7857'. [ 665.458761][T27828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7859'. [ 665.469520][T27828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7859'. [ 665.494269][T27822] lo speed is unknown, defaulting to 1000 [ 665.500377][T27822] lo speed is unknown, defaulting to 1000 [ 665.524079][T27832] netlink: 'syz.3.7861': attribute type 10 has an invalid length. [ 665.592666][T27835] vlan0: entered allmulticast mode [ 665.743582][T27846] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 665.782429][T27848] tipc: Bearer : already 2 bearers with priority 10 [ 665.790020][T27848] tipc: Bearer : trying with adjusted priority [ 665.798398][T27848] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 666.049755][T27852] lo speed is unknown, defaulting to 1000 [ 666.056023][T27852] lo speed is unknown, defaulting to 1000 [ 666.808025][T27875] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 667.387087][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7878'. [ 667.518622][T27895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7879'. [ 667.529577][T27891] SELinux: security_context_str_to_sid (+v)m.Tf?–wŽ6%106‰(&ÂFYj¼¯!U# [ 667.529577][T27891] B›îÿy¨;(JEèwQ· “’à3U-0@tó]î9ÒšâúE‘gV›éé{ÂäKºÄ!îxwìBïyp§Ñ!L¯^[o©Œ¹­R’TJÅô_Y‘@u…À4ôðÄÖgRO'N÷­×yñÕÓÖÊ娿 ʇïÏÖˆµ£½Á³õÄ¢ëû_ aPÅ)¼åàÛ¾6ÕýDyöócü€ŽÄe6) failed with errno=-22 [ 667.558948][T27895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7879'. [ 667.734660][T27906] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7884'. [ 668.749578][T27930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7890'. [ 668.809529][T27930] netlink: 'syz.0.7890': attribute type 10 has an invalid length. [ 669.043971][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 669.044036][ T29] audit: type=1326 audit(925.024:66102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.108974][T27938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.116863][T27938] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 669.125816][T27938] audit: backlog limit exceeded [ 669.142389][ T29] audit: type=1326 audit(925.054:66103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.166886][ T29] audit: type=1326 audit(925.054:66104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.191225][ T29] audit: type=1326 audit(925.054:66105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.215480][ T29] audit: type=1326 audit(925.054:66106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.239751][ T29] audit: type=1326 audit(925.064:66107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.264016][ T29] audit: type=1326 audit(925.064:66108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27932 comm="syz.3.7891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 669.302076][T27946] Cannot find add_set index 0 as target [ 669.447712][T27953] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 669.590047][T27949] lo speed is unknown, defaulting to 1000 [ 669.679474][T27949] lo speed is unknown, defaulting to 1000 [ 670.069239][T27979] netlink: 'syz.1.7902': attribute type 1 has an invalid length. [ 670.242495][T27986] tipc: Bearer : already 2 bearers with priority 10 [ 670.250028][T27986] tipc: Bearer : trying with adjusted priority [ 670.257839][T27986] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 670.322994][T27987] tipc: Enabling of bearer rejected, already enabled [ 670.406953][T27992] __nla_validate_parse: 7 callbacks suppressed [ 670.406985][T27992] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7910'. [ 670.607475][T28001] lo speed is unknown, defaulting to 1000 [ 670.614839][T28001] lo speed is unknown, defaulting to 1000 [ 670.937476][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7912'. [ 672.563002][T28028] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 672.589773][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7931'. [ 672.646379][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7931'. [ 672.815490][T28044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28044 comm=syz.0.7926 [ 672.849875][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7923'. [ 672.919366][T28049] netlink: 'syz.3.7925': attribute type 6 has an invalid length. [ 672.924878][T28046] lo speed is unknown, defaulting to 1000 [ 672.973594][T28046] lo speed is unknown, defaulting to 1000 [ 673.262506][T28062] wireguard0: entered promiscuous mode [ 673.268031][T28062] wireguard0: entered allmulticast mode [ 674.069103][ T29] kauditd_printk_skb: 1214 callbacks suppressed [ 674.069118][ T29] audit: type=1326 audit(930.044:67323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.108377][ T29] audit: type=1326 audit(930.084:67324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.132817][ T29] audit: type=1326 audit(930.084:67325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.157162][ T29] audit: type=1326 audit(930.084:67326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.181555][ T29] audit: type=1326 audit(930.084:67327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.206297][ T29] audit: type=1326 audit(930.084:67328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.230901][ T29] audit: type=1326 audit(930.084:67329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 674.255248][ T29] audit: type=1326 audit(930.084:67330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f949815f783 code=0x7ffc0000 [ 674.279492][ T29] audit: type=1326 audit(930.084:67331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f949815e1ff code=0x7ffc0000 [ 674.303835][ T29] audit: type=1326 audit(930.084:67332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28076 comm="syz.3.7938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f949815f7d7 code=0x7ffc0000 [ 674.365951][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7937'. [ 674.385529][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7937'. [ 674.852947][T28104] netlink: 'syz.4.7946': attribute type 10 has an invalid length. [ 674.862747][T28104] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 674.872950][T28104] team0: Failed to send options change via netlink (err -105) [ 674.880424][T28104] team0: Port device dummy0 added [ 674.886052][T28105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28105 comm=syz.5.7955 [ 674.905130][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7946'. [ 674.938429][T28105] net_ratelimit: 2 callbacks suppressed [ 674.938445][T28105] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.951656][T28105] tipc: Enabled bearer , priority 10 [ 674.978480][T28105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7955'. [ 675.000500][T28105] tipc: Enabled bearer , priority 10 [ 675.071502][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.340771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.412885][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7950'. [ 675.438135][T28130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7962'. [ 675.447813][T28122] netlink: 'syz.5.7950': attribute type 1 has an invalid length. [ 675.447831][T28122] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7950'. [ 675.568390][T28129] lo speed is unknown, defaulting to 1000 [ 675.602404][T28129] lo speed is unknown, defaulting to 1000 [ 675.719831][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7957'. [ 675.845827][T28146] SELinux: security_context_str_to_sid (-i˜Nf™“DcŠóER¾SÁ0k¶²Ä4“füìÚJ­­ØQ!ÎF°J¤H*'ub}iÜ2'ó~§Px€ƒ›¶ÄáÛ$¶"– äÅqÞ‹=l-Â06ÓI'çÍÎðþ‡Û6r÷ö­×D¹W a¾/h %Iy©y4ÐìÙ²ÉNŠLµó  [ 675.845827][T28146] TÑÀš¯µÒ}Æ:%‡Ãpû ‹Ô\Ü·­èsV‘%oöÇq) failed with errno=-22 [ 675.873570][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.097898][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7962'. [ 676.921437][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.032289][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7969'. [ 677.052479][T28179] netlink: 'syz.4.7970': attribute type 10 has an invalid length. [ 677.062354][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7970'. [ 677.075867][T28179] tipc: Disabling bearer [ 677.093682][T28179] team0 (unregistering): Port device dummy0 removed [ 677.442776][T28191] xt_policy: too many policy elements [ 677.449841][T28191] rdma_op ffff88812b956580 conn xmit_rdma 0000000000000000 [ 677.534044][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7974'. [ 677.960766][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.269622][T28207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7981'. [ 678.397985][T28208] lo speed is unknown, defaulting to 1000 [ 678.404550][T28208] lo speed is unknown, defaulting to 1000 [ 678.741609][T28222] rdma_rxe: rxe_newlink: failed to add bond0 [ 678.758348][T28220] bond14: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 678.770285][T28220] bond14 (unregistering): Released all slaves [ 678.775395][T28225] netlink: 'syz.3.7985': attribute type 27 has an invalid length. [ 678.798578][T28225] 1ªX¹¦À: left allmulticast mode [ 678.805083][T28225] ªªªªªª: left allmulticast mode [ 678.810552][T28225] veth0_to_team: left promiscuous mode [ 678.818717][T28225] bond1: left allmulticast mode [ 678.825278][T28225] ip6gre1: left allmulticast mode [ 678.830535][T28225] veth12: left allmulticast mode [ 678.837244][T28225] ip6gre2: left promiscuous mode [ 678.843598][T28225] ip6gre2: left allmulticast mode [ 678.848926][T28225] veth20: left promiscuous mode [ 678.855040][T28225] veth20: left allmulticast mode [ 678.860354][T28225] bond6: left promiscuous mode [ 678.866558][T28225] bond6: left allmulticast mode [ 678.873412][T28225] veth25: left promiscuous mode [ 678.879016][T28225] bridge8: left promiscuous mode [ 678.885269][T28225] bridge8: left allmulticast mode [ 678.890457][T28225] veth0: left promiscuous mode [ 679.000781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.193028][T28236] lo speed is unknown, defaulting to 1000 [ 679.199258][T28236] lo speed is unknown, defaulting to 1000 [ 679.717920][T28243] tipc: Enabling of bearer rejected, already enabled [ 679.856468][T28243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7990'. [ 679.882826][T28243] tipc: Bearer : already 2 bearers with priority 10 [ 679.890763][T28243] tipc: Bearer : trying with adjusted priority [ 679.898149][T28243] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 679.969420][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 679.969435][ T29] audit: type=1326 audit(935.944:68034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.001374][ T29] audit: type=1326 audit(935.944:68035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.006402][T28247] vlan0: entered allmulticast mode [ 680.038692][ T29] audit: type=1326 audit(936.004:68036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.063215][ T29] audit: type=1326 audit(936.004:68037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.070756][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.087435][ T29] audit: type=1326 audit(936.004:68038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.118650][ T29] audit: type=1326 audit(936.014:68039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.142846][ T29] audit: type=1326 audit(936.014:68040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.167036][ T29] audit: type=1326 audit(936.014:68041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.191380][ T29] audit: type=1326 audit(936.014:68042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.215668][ T29] audit: type=1326 audit(936.014:68043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28249 comm="syz.0.7996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 680.257780][T28254] Process accounting resumed [ 680.393211][T28266] lo speed is unknown, defaulting to 1000 [ 680.404348][T28266] lo speed is unknown, defaulting to 1000 [ 680.429151][T28271] __nla_validate_parse: 2 callbacks suppressed [ 680.429166][T28271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8002'. [ 680.577538][T28284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8004'. [ 680.906696][T28294] tipc: Enabling of bearer rejected, already enabled [ 680.944449][T28294] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8007'. [ 681.003448][T28294] tipc: Enabling of bearer rejected, already enabled [ 681.080782][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.087897][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.300177][T28304] netlink: 'syz.5.8010': attribute type 29 has an invalid length. [ 681.656719][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8013'. [ 682.120777][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.127849][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.313462][T28312] vlan0: entered allmulticast mode [ 683.160784][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.167886][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.335959][T28339] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 683.350355][T28335] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8023'. [ 683.358398][T28341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8020'. [ 683.389034][T28339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8021'. [ 683.399960][T28342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8022'. [ 683.409094][T28338] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 683.448340][T28338] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.473639][T28350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8025'. [ 683.473860][T28350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8025'. [ 683.711141][T28350] vlan0: entered allmulticast mode [ 684.079331][T28338] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.214521][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.224976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.388245][T28365] tipc: Bearer : already 2 bearers with priority 10 [ 684.395832][T28365] tipc: Bearer : trying with adjusted priority [ 684.403183][T28365] tipc: Enabling of bearer rejected, failed to enable media [ 684.416833][T28365] tipc: Bearer : already 2 bearers with priority 10 [ 684.424866][T28365] tipc: Bearer : trying with adjusted priority [ 684.432687][T28365] tipc: Enabled bearer , priority 9 [ 684.459423][T28338] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.546583][T28338] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.561431][T28376] IPVS: Error connecting to the multicast addr [ 684.579393][T28371] tipc: Disabling bearer [ 684.622484][T28379] wireguard0: entered promiscuous mode [ 684.628067][T28379] wireguard0: entered allmulticast mode [ 684.804690][ T5960] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.818179][T28390] netlink: 'syz.5.8038': attribute type 21 has an invalid length. [ 684.826224][T28390] netlink: 'syz.5.8038': attribute type 1 has an invalid length. [ 684.875105][ T5960] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.932789][ T5960] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.965890][ T5960] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.985074][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 684.985162][ T29] audit: type=1326 audit(940.964:68392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.050600][T28402] xt_ecn: cannot match TCP bits for non-tcp packets [ 685.060481][T28402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28402 comm=syz.4.8045 [ 685.073500][ T29] audit: type=1326 audit(941.004:68393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.097823][ T29] audit: type=1326 audit(941.014:68394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.120926][ T29] audit: type=1326 audit(941.014:68395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.145197][ T29] audit: type=1326 audit(941.014:68396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.169586][ T29] audit: type=1326 audit(941.014:68397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.194000][ T29] audit: type=1326 audit(941.014:68398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.218425][ T29] audit: type=1326 audit(941.014:68399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.242824][ T29] audit: type=1326 audit(941.014:68400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.267225][ T29] audit: type=1326 audit(941.014:68401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28396 comm="syz.5.8042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 685.367813][T28410] IPVS: Unknown mcast interface: hsr0 [ 685.394004][T28411] tipc: Enabling of bearer rejected, already enabled [ 685.412027][T28411] tipc: Bearer : already 2 bearers with priority 10 [ 685.419948][T28411] tipc: Bearer : trying with adjusted priority [ 685.428732][T28411] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 685.964119][T28422] ip6gre0: entered promiscuous mode [ 685.982413][T28422] __nla_validate_parse: 7 callbacks suppressed [ 685.982431][T28422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8051'. [ 686.088253][T28430] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 686.179935][T28426] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 686.300219][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8056'. [ 686.609120][T28454] bond10: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 686.623082][T28454] bond10 (unregistering): Released all slaves [ 686.812914][T28472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28472 comm=syz.0.8065 [ 687.349765][T28483] Invalid ELF header magic: != ELF [ 687.418995][T28483] lo speed is unknown, defaulting to 1000 [ 687.427006][T28483] lo speed is unknown, defaulting to 1000 [ 687.621281][T28480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28480 comm=syz.3.8068 [ 688.099220][T28501] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 688.178758][T28500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8074'. [ 688.432240][T28515] bond4: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 688.447577][T28515] bond4 (unregistering): Released all slaves [ 688.490917][T28504] lo speed is unknown, defaulting to 1000 [ 688.516888][T28504] lo speed is unknown, defaulting to 1000 [ 688.593956][T28524] wireguard0: entered promiscuous mode [ 688.599474][T28524] wireguard0: entered allmulticast mode [ 689.307879][T28535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8083'. [ 689.389419][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 689.444633][T28548] bond4: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 689.468480][T28548] bond4 (unregistering): Released all slaves [ 689.636054][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8089'. [ 689.678881][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8091'. [ 689.765161][T28578] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 689.798165][T28570] bond2: (slave bridge0): Releasing active interface [ 690.048473][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 690.048489][ T29] audit: type=1326 audit(946.024:68789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.136193][T28567] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8089'. [ 690.179616][ T29] audit: type=1326 audit(946.064:68790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.204596][ T29] audit: type=1326 audit(946.064:68791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.229084][ T29] audit: type=1326 audit(946.064:68792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.253309][ T29] audit: type=1326 audit(946.074:68793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.277493][ T29] audit: type=1326 audit(946.074:68794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.301914][ T29] audit: type=1326 audit(946.074:68795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.326155][ T29] audit: type=1326 audit(946.074:68796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.350494][ T29] audit: type=1326 audit(946.074:68797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.374814][ T29] audit: type=1326 audit(946.074:68798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28585 comm="syz.5.8094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 690.472873][T28558] netlink: 'syz.1.8089': attribute type 13 has an invalid length. [ 690.836780][T28595] netlink: 'syz.0.8096': attribute type 10 has an invalid length. [ 690.845422][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8096'. [ 690.887376][T28599] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8098'. [ 690.901931][T28558] lo: entered promiscuous mode [ 690.906789][T28558] lo: entered allmulticast mode [ 690.913108][T28599] netlink: 'syz.4.8098': attribute type 4 has an invalid length. [ 690.936960][T28558] tunl0: entered promiscuous mode [ 690.942141][T28558] tunl0: entered allmulticast mode [ 690.948085][T28558] gre0: entered promiscuous mode [ 690.953765][T28558] gre0: entered allmulticast mode [ 690.962702][T28558] gretap0: entered allmulticast mode [ 690.968548][T28558] gretap0: refused to change device tx_queue_len [ 690.975500][T28558] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 691.086924][T28602] lo speed is unknown, defaulting to 1000 [ 691.103557][T28602] lo speed is unknown, defaulting to 1000 [ 691.490497][T28620] bond12: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 691.534565][T28620] bond12 (unregistering): Released all slaves [ 691.650161][T28627] netlink: 'syz.5.8105': attribute type 27 has an invalid length. [ 691.667787][T28627] erspan0: left promiscuous mode [ 691.673523][T28627] erspan0: left allmulticast mode [ 691.678670][T28627] ip_vti0: left promiscuous mode [ 691.683817][T28627] ip_vti0: left allmulticast mode [ 691.689002][T28627] ip6_vti0: left promiscuous mode [ 691.694044][T28627] ip6_vti0: left allmulticast mode [ 691.699235][T28627] sit0: left promiscuous mode [ 691.704646][T28627] sit0: left allmulticast mode [ 691.709530][T28627] ip6tnl0: left promiscuous mode [ 691.714511][T28627] ip6tnl0: left allmulticast mode [ 691.719739][T28627] ip6gre0: left promiscuous mode [ 691.725081][T28627] ip6gre0: left allmulticast mode [ 691.730166][T28627] syz_tun: left promiscuous mode [ 691.735762][T28627] syz_tun: left allmulticast mode [ 691.740939][T28627] vcan0: left promiscuous mode [ 691.745700][T28627] vcan0: left allmulticast mode [ 691.752484][T28631] netlink: 'syz.3.8107': attribute type 29 has an invalid length. [ 691.777419][T28627] dummy0: left promiscuous mode [ 691.782401][T28627] dummy0: left allmulticast mode [ 691.787440][T28627] nlmon0: left promiscuous mode [ 691.792959][T28627] nlmon0: left allmulticast mode [ 691.797949][T28627] caif0: left promiscuous mode [ 691.802778][T28627] caif0: left allmulticast mode [ 691.810104][T28627] syzkaller0: left promiscuous mode [ 691.815354][T28627] syzkaller0: left allmulticast mode [ 691.821447][T28627] gtp0: left promiscuous mode [ 691.826134][T28627] gtp0: left allmulticast mode [ 691.830964][T28627] ip6gre1: left promiscuous mode [ 691.835972][T28627] ip6gre1: left allmulticast mode [ 691.841176][T28627] ip6gre2: left promiscuous mode [ 691.846146][T28627] ip6gre2: left allmulticast mode [ 691.852051][T28627] macvtap1: left promiscuous mode [ 691.857114][T28627] macvtap1: left allmulticast mode [ 691.862502][T28627] gre1: left promiscuous mode [ 691.867197][T28627] gre1: left allmulticast mode [ 691.872036][T28627] team1: left promiscuous mode [ 691.876805][T28627] team1: left allmulticast mode [ 691.928181][T28627] gretap1: left promiscuous mode [ 692.368231][T28649] lo speed is unknown, defaulting to 1000 [ 692.375953][T28649] lo speed is unknown, defaulting to 1000 [ 693.325395][T28657] xt_hashlimit: max too large, truncated to 1048576 [ 693.348000][T28657] netlink: 'syz.4.8117': attribute type 21 has an invalid length. [ 693.362890][T28657] netlink: 'syz.4.8117': attribute type 1 has an invalid length. [ 693.370699][T28657] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8117'. [ 694.428055][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8127'. [ 694.454526][T28692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8127'. [ 694.763558][T28704] pimreg: entered allmulticast mode [ 694.777483][T28704] pimreg: left allmulticast mode [ 694.825966][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8132'. [ 694.837121][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8132'. [ 694.972424][T28713] vlan0: entered allmulticast mode [ 695.063863][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 695.063876][ T29] audit: type=1326 audit(951.024:69383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b9df92005 code=0x7ffc0000 [ 695.094567][ T29] audit: type=1326 audit(951.044:69384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.117721][ T29] audit: type=1326 audit(951.044:69385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.177176][ T29] audit: type=1326 audit(951.044:69386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.201583][ T29] audit: type=1326 audit(951.074:69387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.225945][ T29] audit: type=1326 audit(951.104:69388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.250485][ T29] audit: type=1326 audit(951.124:69389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 695.273557][ T29] audit: type=1326 audit(951.124:69390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b9df92005 code=0x7ffc0000 [ 695.297971][ T29] audit: type=1326 audit(951.124:69391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b9df92005 code=0x7ffc0000 [ 695.322376][ T29] audit: type=1326 audit(951.124:69392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28699 comm="syz.0.8129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b9df92005 code=0x7ffc0000 [ 695.353673][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8138'. [ 695.384823][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8138'. [ 695.446563][T28728] lo speed is unknown, defaulting to 1000 [ 695.453966][T28728] lo speed is unknown, defaulting to 1000 [ 696.296606][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8141'. [ 696.307097][T28757] netlink: 'syz.0.8141': attribute type 1 has an invalid length. [ 696.316222][T28757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8141'. [ 696.595983][T28763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=28763 comm=syz.4.8146 [ 697.079266][T28777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8151'. [ 697.133673][T28778] lo speed is unknown, defaulting to 1000 [ 697.139698][T28778] lo speed is unknown, defaulting to 1000 [ 697.609058][T28790] wireguard0: entered promiscuous mode [ 697.614680][T28790] wireguard0: entered allmulticast mode [ 698.022656][T28812] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 700.259605][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 700.259621][ T29] audit: type=1326 audit(955.534:69642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28823 comm="syz.5.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 700.289523][ T29] audit: type=1326 audit(955.534:69643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28823 comm="syz.5.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 700.313189][ T29] audit: type=1326 audit(955.534:69644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28823 comm="syz.5.8166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 700.427233][T28827] lo speed is unknown, defaulting to 1000 [ 700.435462][T28827] lo speed is unknown, defaulting to 1000 [ 700.457567][T28839] lo speed is unknown, defaulting to 1000 [ 700.486527][ T29] audit: type=1326 audit(956.464:69645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.607875][ T29] audit: type=1326 audit(956.484:69646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.631750][ T29] audit: type=1326 audit(956.494:69647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.654852][ T29] audit: type=1326 audit(956.494:69648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.678475][ T29] audit: type=1326 audit(956.494:69649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.702060][ T29] audit: type=1326 audit(956.494:69650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.725135][ T29] audit: type=1326 audit(956.494:69651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28844 comm="syz.3.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 700.750602][T28839] lo speed is unknown, defaulting to 1000 [ 701.091172][T28852] lo speed is unknown, defaulting to 1000 [ 701.116004][T28852] lo speed is unknown, defaulting to 1000 [ 701.941155][T28875] __nla_validate_parse: 6 callbacks suppressed [ 701.941170][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8179'. [ 701.989769][T28875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8179'. [ 702.068999][T28879] lo speed is unknown, defaulting to 1000 [ 702.084508][T28879] lo speed is unknown, defaulting to 1000 [ 703.315868][T28879] Set syz1 is full, maxelem 65536 reached [ 703.437097][T28894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8184'. [ 703.695849][T28902] lo speed is unknown, defaulting to 1000 [ 703.702076][T28902] lo speed is unknown, defaulting to 1000 [ 704.352373][T28921] Cannot find add_set index 0 as target [ 705.674621][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8198'. [ 705.685556][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8198'. [ 705.694794][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8198'. [ 705.704690][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8198'. [ 706.101946][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 706.101961][ T29] audit: type=1326 audit(962.074:69948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.132208][ T29] audit: type=1326 audit(962.074:69949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.241690][T28956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.248310][T28956] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 706.256619][T28956] audit: backlog limit exceeded [ 706.258292][ T29] audit: type=1326 audit(962.144:69950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.287036][ T29] audit: type=1326 audit(962.144:69951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.292780][T28960] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 706.311469][ T29] audit: type=1326 audit(962.144:69952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.346744][ T29] audit: type=1326 audit(962.144:69953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.371275][ T29] audit: type=1326 audit(962.144:69954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28954 comm="syz.3.8201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 706.600362][T28970] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.8204'. [ 706.623740][T28970] netlink: zone id is out of range [ 706.628904][T28970] netlink: zone id is out of range [ 706.637634][T28970] netlink: zone id is out of range [ 706.644058][T28970] netlink: zone id is out of range [ 706.669821][T28970] netlink: zone id is out of range [ 706.672918][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8205'. [ 706.692073][T28970] netlink: zone id is out of range [ 706.697273][T28970] netlink: zone id is out of range [ 706.703717][T28970] netlink: zone id is out of range [ 706.708838][T28970] netlink: zone id is out of range [ 707.046025][T28976] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 707.057135][T28976] sch_tbf: burst 380 is lower than device syzkaller0 mtu (1514) ! [ 708.398761][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 708.423850][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8222'. [ 708.495577][T29024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8233'. [ 708.526549][T29027] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8224'. [ 708.630186][T29020] vlan0: entered allmulticast mode [ 708.780832][T29033] lo speed is unknown, defaulting to 1000 [ 708.787160][T29033] lo speed is unknown, defaulting to 1000 [ 709.649810][T29049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.809082][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8230'. [ 710.544590][T29070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=29070 comm=syz.5.8232 [ 710.693558][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8238'. [ 710.731342][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8238'. [ 710.869980][T29079] lo speed is unknown, defaulting to 1000 [ 710.876181][T29079] lo speed is unknown, defaulting to 1000 [ 711.129896][T29076] vlan0: entered allmulticast mode [ 711.302030][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 711.302046][ T29] audit: type=1326 audit(967.224:70678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.332660][ T29] audit: type=1326 audit(967.224:70679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.356942][ T29] audit: type=1326 audit(967.224:70680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.381304][ T29] audit: type=1326 audit(967.224:70681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e5861f783 code=0x7ffc0000 [ 711.405377][ T29] audit: type=1326 audit(967.224:70682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e5861f783 code=0x7ffc0000 [ 711.429469][ T29] audit: type=1326 audit(967.224:70683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.452465][ T29] audit: type=1326 audit(967.234:70684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.476953][ T29] audit: type=1326 audit(967.234:70685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.501309][ T29] audit: type=1326 audit(967.234:70686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.525656][ T29] audit: type=1326 audit(967.234:70687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29084 comm="syz.5.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 711.823077][T29104] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.8247'. [ 711.843667][T29104] net_ratelimit: 12 callbacks suppressed [ 711.843684][T29104] netlink: zone id is out of range [ 711.855142][T29104] netlink: zone id is out of range [ 711.873983][T29104] netlink: zone id is out of range [ 711.879179][T29104] netlink: zone id is out of range [ 711.897477][T29104] netlink: zone id is out of range [ 711.909365][T29104] netlink: zone id is out of range [ 711.915193][T29104] netlink: zone id is out of range [ 711.920388][T29104] netlink: zone id is out of range [ 711.925524][T29104] netlink: zone id is out of range [ 711.930646][T29104] netlink: zone id is out of range [ 712.282166][T10335] page_pool_release_retry() stalled pool shutdown: id 191, 41 inflight 121 sec [ 712.478524][T29125] lo speed is unknown, defaulting to 1000 [ 712.486051][T29125] lo speed is unknown, defaulting to 1000 [ 712.843919][T29129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8255'. [ 712.870097][T29133] ªªªªªª: renamed from vlan0 [ 713.277568][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8263'. [ 713.828857][T29163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8265'. [ 714.507617][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 714.577988][T29181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8278'. [ 714.625106][T29178] lo speed is unknown, defaulting to 1000 [ 714.631330][T29178] lo speed is unknown, defaulting to 1000 [ 714.899592][T29207] ip6_vti0: MTU too low for tipc bearer [ 714.906595][T29207] tipc: Disabling bearer [ 714.969970][T29207] tipc: Bearer : already 2 bearers with priority 10 [ 714.978937][T29207] tipc: Bearer : trying with adjusted priority [ 714.987504][T29207] tipc: Enabling of bearer rejected, failed to enable media [ 715.094855][T29216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8279'. [ 715.250311][T29222] tipc: Failed to remove unknown binding: 66,0,0/2126:2821895611/2821895612 [ 715.262166][T29222] tipc: Failed to remove unknown binding: 66,0,0/2126:2821895611/2821895612 [ 715.348439][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8285'. [ 715.482059][T29239] lo speed is unknown, defaulting to 1000 [ 715.488619][T29239] lo speed is unknown, defaulting to 1000 [ 715.661829][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8285'. [ 716.308925][T29251] netlink: 'syz.5.8288': attribute type 1 has an invalid length. [ 716.376283][T29251] bond4: entered promiscuous mode [ 716.383252][T29251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 716.409139][T29252] bond4: (slave bridge0): making interface the new active one [ 716.418175][T29252] bridge0: entered promiscuous mode [ 716.436089][T29252] bridge0: left promiscuous mode [ 716.466750][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 716.466765][ T29] audit: type=1326 audit(972.444:71189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.499841][ T29] audit: type=1326 audit(972.484:71190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.528750][T29235] vlan0: entered allmulticast mode [ 716.536383][ T29] audit: type=1326 audit(972.504:71191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.567186][ T29] audit: type=1326 audit(972.544:71192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.591730][ T29] audit: type=1326 audit(972.544:71193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.616145][ T29] audit: type=1326 audit(972.544:71194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.639236][ T29] audit: type=1326 audit(972.544:71195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 716.663689][ T29] audit: type=1326 audit(972.544:71196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0ee01f783 code=0x7ffc0000 [ 716.686499][ T29] audit: type=1326 audit(972.544:71197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe0ee01f807 code=0x7ffc0000 [ 716.710706][ T29] audit: type=1326 audit(972.544:71198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29256 comm="syz.1.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe0edfd6bdd code=0x7ffc0000 [ 716.918005][T29279] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8292'. [ 718.443360][T29316] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 718.693295][T29324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8309'. [ 718.709918][T29324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8309'. [ 719.560305][T29342] lo speed is unknown, defaulting to 1000 [ 719.568176][T29342] lo speed is unknown, defaulting to 1000 [ 719.939263][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8322'. [ 719.989229][T29362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=29362 comm=syz.4.8321 [ 720.265520][T29374] netlink: 'syz.3.8328': attribute type 30 has an invalid length. [ 721.377206][T29390] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 721.677452][T29413] 9p: Bad value for 'wfdno' [ 722.628419][ T29] kauditd_printk_skb: 1455 callbacks suppressed [ 722.628433][ T29] audit: type=1326 audit(978.604:72654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.723759][ T29] audit: type=1326 audit(978.604:72655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.746789][ T29] audit: type=1326 audit(978.634:72656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.770509][ T29] audit: type=1326 audit(978.634:72657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.794165][ T29] audit: type=1326 audit(978.634:72658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.817117][ T29] audit: type=1326 audit(978.634:72659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.840854][ T29] audit: type=1326 audit(978.634:72660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.863872][ T29] audit: type=1326 audit(978.634:72661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.887395][ T29] audit: type=1326 audit(978.634:72662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 722.910417][ T29] audit: type=1326 audit(978.634:72663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29423 comm="syz.3.8342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 723.165168][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8348'. [ 723.292738][T29455] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 723.379856][T29462] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 725.480422][T29523] bond8: (slave bridge6): Releasing active interface [ 725.487800][T29523] bond8: (slave bridge6): the permanent HWaddr of slave - 86:cc:df:84:23:7d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 725.506457][T29523] bond8: (slave gretap0): making interface the new active one [ 725.635333][T29523] bond8: (slave gretap0): Releasing active interface [ 725.679966][T29523] bond0: (slave gretap1): Releasing active interface [ 725.751951][T29523] bond13: (slave wireguard0): Releasing backup interface [ 725.796076][T29523] wireguard0: left promiscuous mode [ 725.802372][T29523] bond13: (slave wireguard1): making interface the new active one [ 725.810175][T29523] wireguard1: entered promiscuous mode [ 725.930742][T29523] bond13: (slave wireguard1): Releasing backup interface [ 725.971479][T29523] wireguard1: left promiscuous mode [ 726.136377][T29534] lo speed is unknown, defaulting to 1000 [ 726.144765][T29534] lo speed is unknown, defaulting to 1000 [ 726.267611][T29537] lo speed is unknown, defaulting to 1000 [ 726.289660][T29537] lo speed is unknown, defaulting to 1000 [ 726.428260][T29548] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 726.565663][T29549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8376'. [ 726.643440][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8376'. [ 726.866250][T29556] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 726.960362][T29565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8382'. [ 727.015278][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8384'. [ 727.294105][T29571] ip6gre3: entered promiscuous mode [ 727.299423][T29571] ip6gre3: entered allmulticast mode [ 727.306599][T29580] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 727.316384][ T5916] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 727.324141][ T5916] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 727.353572][T11126] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 727.584700][T29590] sctp: [Deprecated]: syz.3.8390 (pid 29590) Use of int in max_burst socket option. [ 727.584700][T29590] Use struct sctp_assoc_value instead [ 727.618361][T29590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8390'. [ 727.677253][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8391'. [ 727.698865][T29593] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.747157][T29593] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.800003][T29593] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.819606][T29594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29594 comm=syz.5.8392 [ 727.907557][T29593] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.986063][ T5940] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.211418][T10329] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 728.696842][T10329] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 728.809038][T29619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8400'. [ 728.819415][T29619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8400'. [ 728.834816][T29621] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 728.849776][ T5918] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.053542][T29623] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 729.116586][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 729.116600][ T29] audit: type=1326 audit(985.094:73031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.216207][ T29] audit: type=1326 audit(985.094:73032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.239200][ T29] audit: type=1326 audit(985.094:73033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.262946][ T29] audit: type=1326 audit(985.124:73034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.269878][ T5918] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.285834][ T29] audit: type=1326 audit(985.124:73035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.285862][ T29] audit: type=1326 audit(985.124:73036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.285891][ T29] audit: type=1326 audit(985.124:73037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.285978][ T29] audit: type=1326 audit(985.124:73038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.285997][ T29] audit: type=1326 audit(985.124:73039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.286025][ T29] audit: type=1326 audit(985.124:73040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29624 comm="syz.0.8402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 729.852095][ T5918] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.873734][T29627] net_ratelimit: 11 callbacks suppressed [ 729.873749][T29627] Set syz1 is full, maxelem 65536 reached [ 730.942996][T29668] FAT-fs (loop9): unable to read boot sector [ 731.286284][T29674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8418'. [ 731.480725][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 733.596831][T29712] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 733.816429][T29727] siw: device registration error -23 [ 733.998916][T29739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8437'. [ 734.027540][T29741] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8439'. [ 734.146273][T29741] 0ªX¹¦À: renamed from caif0 [ 734.186150][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 734.186161][ T29] audit: type=1326 audit(990.134:73488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 734.218218][ T29] audit: type=1326 audit(990.134:73489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 734.241191][ T29] audit: type=1326 audit(990.134:73490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 734.265552][ T29] audit: type=1326 audit(990.134:73491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9498161667 code=0x7ffc0000 [ 734.273384][T10329] Process accounting resumed [ 734.290153][ T29] audit: type=1326 audit(990.134:73492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f94981615dc code=0x7ffc0000 [ 734.318276][ T29] audit: type=1326 audit(990.134:73493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9498161514 code=0x7ffc0000 [ 734.342430][ T29] audit: type=1326 audit(990.134:73494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9498161514 code=0x7ffc0000 [ 734.366675][ T29] audit: type=1326 audit(990.134:73495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f949815e3aa code=0x7ffc0000 [ 734.390859][ T29] audit: type=1326 audit(990.134:73496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 734.414757][ T29] audit: type=1326 audit(990.144:73497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29744 comm="syz.3.8440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 734.482849][T29741] 0ªX¹¦À: entered allmulticast mode [ 734.488527][T29741] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 734.530488][T29733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8438'. [ 734.586928][T29756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8443'. [ 735.444249][T29780] FAT-fs (loop11): unable to read boot sector [ 735.746639][T29784] netlink: 'syz.0.8451': attribute type 13 has an invalid length. [ 736.294158][T29802] Cannot find del_set index 0 as target [ 736.388361][T29808] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 736.455793][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8460'. [ 736.654438][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8461'. [ 736.670506][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8461'. [ 737.239210][T29831] SELinux: Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐ r: is not valid (left unmapped). [ 738.856287][T29869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8477'. [ 739.650736][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 739.650752][ T29] audit: type=1326 audit(995.544:73926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.680634][ T29] audit: type=1326 audit(995.544:73927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.704319][ T29] audit: type=1326 audit(995.544:73928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.731378][ T29] audit: type=1326 audit(995.544:73929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.754407][ T29] audit: type=1326 audit(995.544:73930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.756450][T29918] lo speed is unknown, defaulting to 1000 [ 739.777378][ T29] audit: type=1326 audit(995.544:73931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.777403][ T29] audit: type=1326 audit(995.544:73932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.777443][ T29] audit: type=1326 audit(995.554:73933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.777469][ T29] audit: type=1326 audit(995.554:73934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.777493][ T29] audit: type=1326 audit(995.554:73935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.0.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 739.788659][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8485'. [ 739.879080][T29918] lo speed is unknown, defaulting to 1000 [ 739.978112][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8485'. [ 740.120675][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 740.169568][T29936] netlink: 'syz.0.8489': attribute type 10 has an invalid length. [ 740.178179][T29936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8489'. [ 740.193852][T29939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8490'. [ 740.351291][T29946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8493'. [ 740.421396][T29948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8491'. [ 740.898089][T29954] lo speed is unknown, defaulting to 1000 [ 740.921151][T29954] lo speed is unknown, defaulting to 1000 [ 741.114031][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8496'. [ 741.122970][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8496'. [ 741.256955][T29971] rdma_rxe: rxe_newlink: failed to add lo [ 741.407804][T29979] netlink: 'syz.5.8503': attribute type 10 has an invalid length. [ 741.418240][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8505'. [ 741.428595][T29983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8505'. [ 741.442386][T29979] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 741.467029][T29979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 741.485841][T29979] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 741.494890][T29979] bond5: (slave macvlan0): Enslaving as a backup interface with an up link [ 741.647003][T29998] siw: device registration error -23 [ 743.595531][T30038] syzkaller0: entered allmulticast mode [ 743.756550][T30036] syzkaller0: left allmulticast mode [ 744.814162][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 744.814250][ T29] audit: type=1326 audit(1000.764:74841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 744.961063][ T29] audit: type=1326 audit(1000.874:74842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 744.984818][ T29] audit: type=1400 audit(1000.904:74843): avc: denied { getopt } for pid=30051 comm="syz.0.8526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 745.120230][ T29] audit: type=1326 audit(1001.044:74844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.143981][ T29] audit: type=1326 audit(1001.044:74845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.167200][ T29] audit: type=1326 audit(1001.044:74846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.190987][ T29] audit: type=1326 audit(1001.044:74847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.214046][ T29] audit: type=1326 audit(1001.044:74848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.237778][ T29] audit: type=1326 audit(1001.044:74849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30039 comm="syz.4.8522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 745.261539][ T29] audit: type=1326 audit(1001.064:74850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30051 comm="syz.0.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7fc00000 [ 745.308797][T30063] netlink: 'syz.0.8526': attribute type 3 has an invalid length. [ 745.523262][T30070] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.711613][T30070] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.972171][T30083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30083 comm=syz.4.8534 [ 745.984759][T30083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30083 comm=syz.4.8534 [ 745.999995][T30082] ip6tnl0: Caught tx_queue_len zero misconfig [ 746.074740][T30083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30083 comm=syz.4.8534 [ 746.110513][T30070] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.365877][T30093] __nla_validate_parse: 2 callbacks suppressed [ 746.365892][T30093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8537'. [ 746.390663][T30093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8537'. [ 746.399746][T30093] netlink: 'syz.5.8537': attribute type 1 has an invalid length. [ 746.426296][T30096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8538'. [ 746.465307][T30070] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.476795][T30098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.548688][T29876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.699498][ T2668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.708063][ T2668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.716564][ T2668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.795560][T30114] macvtap1: mtu less than device minimum [ 747.091598][T30122] netlink: 'syz.4.8545': attribute type 21 has an invalid length. [ 747.099531][T30122] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8545'. [ 747.275044][T30125] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8546'. [ 747.393769][T30122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8545'. [ 747.572250][T30136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8551'. [ 747.887104][T30145] lo speed is unknown, defaulting to 1000 [ 747.906100][T30145] lo speed is unknown, defaulting to 1000 [ 748.373247][T30153] syz1: rxe_newlink: already configured on lo [ 748.519398][T30162] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 748.531258][T30162] sch_fq: defrate 0 ignored. [ 748.618334][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8561'. [ 748.627813][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8561'. [ 748.818757][T30164] netlink: 'syz.4.8560': attribute type 13 has an invalid length. [ 749.289128][T30180] lo speed is unknown, defaulting to 1000 [ 749.295937][T30180] lo speed is unknown, defaulting to 1000 [ 749.301958][T30180] lo speed is unknown, defaulting to 1000 [ 749.309050][T30180] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 749.319981][T30180] lo speed is unknown, defaulting to 1000 [ 749.327280][T30180] lo speed is unknown, defaulting to 1000 [ 749.333659][T30180] lo speed is unknown, defaulting to 1000 [ 749.340411][T30180] lo speed is unknown, defaulting to 1000 [ 749.353003][T30180] lo speed is unknown, defaulting to 1000 [ 749.359446][T30180] lo speed is unknown, defaulting to 1000 [ 749.539747][T30189] wireguard0: entered promiscuous mode [ 749.545328][T30189] wireguard0: entered allmulticast mode [ 750.188351][ T29] kauditd_printk_skb: 611 callbacks suppressed [ 750.188367][ T29] audit: type=1326 audit(1006.164:75462): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30186 comm="syz.5.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.299910][ T29] audit: type=1326 audit(1006.204:75463): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30186 comm="syz.5.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.324189][ T29] audit: type=1326 audit(1006.264:75464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.347326][ T29] audit: type=1326 audit(1006.264:75465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.371194][ T29] audit: type=1326 audit(1006.264:75466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.394238][ T29] audit: type=1326 audit(1006.264:75467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.417952][ T29] audit: type=1326 audit(1006.264:75468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.441719][ T29] audit: type=1326 audit(1006.264:75469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.464667][ T29] audit: type=1326 audit(1006.274:75470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 750.488462][ T29] audit: type=1326 audit(1006.274:75471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30192 comm="syz.5.8567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 751.054210][T30213] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8569'. [ 751.412602][T30227] __nla_validate_parse: 1 callbacks suppressed [ 751.412623][T30227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8577'. [ 751.500439][T30230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8575'. [ 752.423325][T30251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 752.488164][T30255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8586'. [ 752.502545][T30255] tipc: Resetting bearer [ 752.737920][T30255] tipc: Disabling bearer [ 752.753369][T30258] pimreg: entered allmulticast mode [ 752.759411][T30258] pimreg: left allmulticast mode [ 752.803896][T30260] syzkaller0: entered allmulticast mode [ 752.813745][T30260] syzkaller0 (unregistering): left allmulticast mode [ 752.876289][T30263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30263 comm=syz.5.8589 [ 752.974109][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8594'. [ 753.895901][T30295] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 754.014565][T30310] syzkaller0: entered allmulticast mode [ 754.026360][T30310] syzkaller0 (unregistering): left allmulticast mode [ 754.040051][T30310] tipc: Disabling bearer [ 755.132540][T30341] netlink: 'syz.0.8622': attribute type 21 has an invalid length. [ 755.142349][T30341] netlink: 'syz.0.8622': attribute type 1 has an invalid length. [ 755.150096][T30341] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8622'. [ 755.845082][T30341] netlink: 'syz.0.8622': attribute type 49 has an invalid length. [ 756.033846][T30356] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8616'. [ 756.155576][T30358] lo speed is unknown, defaulting to 1000 [ 756.163470][T30358] lo speed is unknown, defaulting to 1000 [ 756.277528][T30358] lo speed is unknown, defaulting to 1000 [ 756.434473][ T29] kauditd_printk_skb: 1313 callbacks suppressed [ 756.434488][ T29] audit: type=1326 audit(1012.414:76785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.497322][ T29] audit: type=1326 audit(1012.444:76786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.521847][ T29] audit: type=1326 audit(1012.444:76787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.546034][ T29] audit: type=1326 audit(1012.444:76788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.570400][ T29] audit: type=1326 audit(1012.444:76789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.594763][ T29] audit: type=1326 audit(1012.444:76790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.619081][ T29] audit: type=1326 audit(1012.444:76791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.643520][ T29] audit: type=1326 audit(1012.444:76792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.667431][ T29] audit: type=1326 audit(1012.444:76793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 756.691842][ T29] audit: type=1326 audit(1012.444:76794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.4.8619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 757.325817][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8625'. [ 757.338012][T30390] 9p: Bad value for 'wfdno' [ 757.400702][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 757.634172][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8628'. [ 757.654439][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8628'. [ 757.857835][T30399] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8628'. [ 758.586497][T30419] lo speed is unknown, defaulting to 1000 [ 758.592817][T30419] lo speed is unknown, defaulting to 1000 [ 758.625550][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8635'. [ 758.661480][T30419] lo speed is unknown, defaulting to 1000 [ 758.698290][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8635'. [ 758.832213][T30431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8635'. [ 759.046686][T30434] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8637'. [ 759.094173][T30434] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8637'. [ 759.445460][T30439] netlink: 'syz.0.8639': attribute type 21 has an invalid length. [ 759.454714][T30439] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8639'. [ 759.957512][T30459] lo speed is unknown, defaulting to 1000 [ 759.965368][T30459] lo speed is unknown, defaulting to 1000 [ 760.090789][T30459] lo speed is unknown, defaulting to 1000 [ 760.347499][T30473] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 760.381246][T30471] lo speed is unknown, defaulting to 1000 [ 760.398811][T30471] lo speed is unknown, defaulting to 1000 [ 760.493959][T30471] lo speed is unknown, defaulting to 1000 [ 760.517266][T30463] netlink: 'syz.1.8647': attribute type 13 has an invalid length. [ 760.625338][T30480] bond12: option resend_igmp: invalid value (1024) [ 760.632835][T30480] bond12: option resend_igmp: allowed values 0 - 255 [ 760.640193][T30480] bond12 (unregistering): Released all slaves [ 760.650128][T30482] syzkaller0: entered allmulticast mode [ 760.659337][T30482] syzkaller0 (unregistering): left allmulticast mode [ 761.572491][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 761.572508][ T29] audit: type=1326 audit(1017.534:77633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 761.627187][T30507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30507 comm=syz.1.8658 [ 761.663990][ T29] audit: type=1326 audit(1017.644:77634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30478 comm="syz.3.8661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 761.758543][ T29] audit: type=1326 audit(1017.734:77635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 761.797474][ T29] audit: type=1326 audit(1017.764:77636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 761.821393][ T29] audit: type=1326 audit(1017.764:77637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 761.844552][ T29] audit: type=1326 audit(1017.764:77638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 761.868367][ T29] audit: type=1326 audit(1017.764:77639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 761.892054][ T29] audit: type=1326 audit(1017.764:77640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b9df5f783 code=0x7ffc0000 [ 761.914935][ T29] audit: type=1326 audit(1017.764:77641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b9df5e1ff code=0x7ffc0000 [ 761.938546][ T29] audit: type=1326 audit(1017.764:77642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30511 comm="syz.0.8662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6b9df5f7d7 code=0x7ffc0000 [ 762.757433][T30544] netlink: 'syz.0.8670': attribute type 13 has an invalid length. [ 763.056428][T30565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30565 comm=syz.3.8676 [ 763.108995][T30570] __nla_validate_parse: 10 callbacks suppressed [ 763.109063][T30570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8678'. [ 763.142542][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8678'. [ 763.773995][T30574] lo speed is unknown, defaulting to 1000 [ 763.780377][T30574] lo speed is unknown, defaulting to 1000 [ 763.955424][T30574] lo speed is unknown, defaulting to 1000 [ 764.013126][T30580] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8691'. [ 764.615726][T30609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8690'. [ 765.018295][T30617] siw: device registration error -23 [ 765.280078][T30629] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30629 comm=syz.1.8689 [ 766.212713][T30668] lo speed is unknown, defaulting to 1000 [ 766.219109][T30668] lo speed is unknown, defaulting to 1000 [ 766.329308][T30668] lo speed is unknown, defaulting to 1000 [ 766.583107][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 766.583125][ T29] audit: type=1326 audit(1022.494:78307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30650 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 766.613369][ T29] audit: type=1326 audit(1022.494:78308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30650 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 766.697739][ T29] audit: type=1326 audit(1022.674:78309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.745370][ T29] audit: type=1326 audit(1022.704:78310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.772747][ T29] audit: type=1326 audit(1022.704:78311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.795860][ T29] audit: type=1326 audit(1022.704:78312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.819564][ T29] audit: type=1326 audit(1022.704:78313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.843342][ T29] audit: type=1326 audit(1022.704:78314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.866458][ T29] audit: type=1326 audit(1022.704:78315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 766.890134][ T29] audit: type=1326 audit(1022.704:78316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30676 comm="syz.0.8707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9df5f749 code=0x7ffc0000 [ 767.216970][T30703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8715'. [ 767.398664][T30706] netlink: 'syz.3.8716': attribute type 39 has an invalid length. [ 767.488302][T30713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8719'. [ 767.621473][T30726] blktrace: Concurrent blktraces are not allowed on loop9 [ 767.788821][T30734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8725'. [ 767.808571][T30734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8725'. [ 767.872987][T30738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8725'. [ 768.004749][T30737] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8726'. [ 768.097274][T30744] 9pnet_virtio: no channels available for device syz [ 768.853611][T30765] process '/newroot/1724/file0' started with executable stack [ 768.888152][T30769] __nla_validate_parse: 1 callbacks suppressed [ 768.888168][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8738'. [ 768.952141][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8738'. [ 769.069320][T30771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8738'. [ 769.079888][T30771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8738'. [ 769.246461][T30781] bridge7: entered promiscuous mode [ 769.253102][T30781] bridge7: entered allmulticast mode [ 769.765020][T30798] lo speed is unknown, defaulting to 1000 [ 769.771304][T30798] lo speed is unknown, defaulting to 1000 [ 769.856214][T30798] lo speed is unknown, defaulting to 1000 [ 769.927911][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8750'. [ 769.938370][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8750'. [ 770.126031][T30819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8750'. [ 770.135786][T30819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8750'. [ 770.576180][T30823] lo speed is unknown, defaulting to 1000 [ 770.593942][T30823] lo speed is unknown, defaulting to 1000 [ 770.976125][T30823] lo speed is unknown, defaulting to 1000 [ 771.743518][ T29] kauditd_printk_skb: 1891 callbacks suppressed [ 771.743533][ T29] audit: type=1326 audit(1027.724:80208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 771.774427][ T29] audit: type=1326 audit(1027.754:80209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 771.824635][ T29] audit: type=1326 audit(1027.784:80210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 771.889827][T30859] bridge0: port 1(gretap0) entered blocking state [ 771.896777][T30859] bridge0: port 1(gretap0) entered disabled state [ 771.903404][T30859] gretap0: entered allmulticast mode [ 771.909490][T30859] gretap0: entered promiscuous mode [ 771.954265][ T29] audit: type=1326 audit(1027.834:80211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 771.981729][ T29] audit: type=1326 audit(1027.834:80212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.004812][ T29] audit: type=1326 audit(1027.934:80213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.028480][ T29] audit: type=1326 audit(1027.934:80214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.052359][ T29] audit: type=1326 audit(1027.934:80215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.075436][ T29] audit: type=1326 audit(1027.934:80216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.099200][ T29] audit: type=1326 audit(1027.934:80217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.8758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 772.769219][T10334] page_pool_release_retry() stalled pool shutdown: id 191, 41 inflight 181 sec [ 772.954047][T30880] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 773.391801][T30892] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8776'. [ 773.472011][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8776'. [ 773.639489][T30899] 9p: Bad value for 'source' [ 773.653507][T30899] netlink: 'syz.0.8777': attribute type 6 has an invalid length. [ 773.776569][T30906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30906 comm=syz.4.8780 [ 773.893799][T30904] __nla_validate_parse: 2 callbacks suppressed [ 773.893812][T30904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8778'. [ 773.910317][T30904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8778'. [ 774.005002][T30918] bond0: Caught tx_queue_len zero misconfig [ 774.698138][T30939] lo speed is unknown, defaulting to 1000 [ 774.733085][T30939] lo speed is unknown, defaulting to 1000 [ 774.908230][T30947] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 774.968833][T30939] lo speed is unknown, defaulting to 1000 [ 775.203743][T30957] lo: Caught tx_queue_len zero misconfig [ 775.350450][T30966] tc_dump_action: action bad kind [ 775.526690][T30961] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8798'. [ 775.603762][T30968] netlink: 16350 bytes leftover after parsing attributes in process `syz.3.8798'. [ 775.657052][T30970] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8801'. [ 775.784511][T30974] netlink: 83992 bytes leftover after parsing attributes in process `LX[X'. [ 775.794935][T30974] netlink: zone id is out of range [ 775.800067][T30974] netlink: zone id is out of range [ 775.806776][T30974] netlink: zone id is out of range [ 775.813255][T30974] netlink: zone id is out of range [ 775.818379][T30974] netlink: zone id is out of range [ 775.825012][T30974] netlink: zone id is out of range [ 775.830210][T30974] netlink: zone id is out of range [ 775.945462][T30981] lo speed is unknown, defaulting to 1000 [ 775.952576][T30981] lo speed is unknown, defaulting to 1000 [ 776.049593][T30981] lo speed is unknown, defaulting to 1000 [ 776.419019][T30987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30987 comm=syz.3.8805 [ 776.440177][T30983] siw: device registration error -23 [ 776.446266][T30974] netlink: zone id is out of range [ 776.452851][T30974] netlink: zone id is out of range [ 776.457977][T30974] netlink: zone id is out of range [ 777.441382][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 777.441397][ T29] audit: type=1326 audit(1033.404:80475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.471453][ T29] audit: type=1326 audit(1033.404:80476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.494659][ T29] audit: type=1326 audit(1033.404:80477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.518240][ T29] audit: type=1326 audit(1033.404:80478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.542077][ T29] audit: type=1326 audit(1033.404:80479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.565234][ T29] audit: type=1326 audit(1033.404:80480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.589085][ T29] audit: type=1326 audit(1033.404:80481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.612637][ T29] audit: type=1326 audit(1033.404:80482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.635706][ T29] audit: type=1326 audit(1033.404:80483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.658699][ T29] audit: type=1326 audit(1033.404:80484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31003 comm="syz.3.8809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949815f749 code=0x7ffc0000 [ 777.784481][T31010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8811'. [ 778.186552][T31026] lo speed is unknown, defaulting to 1000 [ 778.193438][T31026] lo speed is unknown, defaulting to 1000 [ 778.299629][T31026] lo speed is unknown, defaulting to 1000 [ 779.328161][T31041] lo speed is unknown, defaulting to 1000 [ 779.335739][T31041] lo speed is unknown, defaulting to 1000 [ 779.417134][T31041] lo speed is unknown, defaulting to 1000 [ 779.583193][T31045] ip6tnl0: Caught tx_queue_len zero misconfig [ 779.627773][T31046] lo speed is unknown, defaulting to 1000 [ 779.633954][T31046] lo speed is unknown, defaulting to 1000 [ 779.698193][T31052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8820'. [ 779.751782][T31046] lo speed is unknown, defaulting to 1000 [ 779.797423][T31055] bond10: option resend_igmp: invalid value (1024) [ 779.804701][T31055] bond10: option resend_igmp: allowed values 0 - 255 [ 779.813031][T31055] bond10 (unregistering): Released all slaves [ 780.093050][T31067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8818'. [ 780.345293][T31080] netlink: 'syz.3.8829': attribute type 13 has an invalid length. [ 780.544353][T31076] syz.0.8828: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 780.558985][T31076] CPU: 1 UID: 0 PID: 31076 Comm: syz.0.8828 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 780.559095][T31076] Tainted: [W]=WARN [ 780.559101][T31076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.559112][T31076] Call Trace: [ 780.559120][T31076] [ 780.559128][T31076] __dump_stack+0x1d/0x30 [ 780.559215][T31076] dump_stack_lvl+0x95/0xd0 [ 780.559239][T31076] dump_stack+0x15/0x1b [ 780.559260][T31076] warn_alloc+0x12b/0x1a0 [ 780.559288][T31076] ? arch_irq_work_raise+0x46/0x50 [ 780.559322][T31076] ? __irq_work_queue_local+0x10f/0x2c0 [ 780.559355][T31076] __vmalloc_node_range_noprof+0xa0/0x1310 [ 780.559408][T31076] ? bpf_send_signal_common+0x25b/0x2e0 [ 780.559496][T31076] ? __rcu_read_unlock+0x4f/0x70 [ 780.559524][T31076] ? avc_has_perm_noaudit+0xab/0x130 [ 780.559557][T31076] vmalloc_user_noprof+0x7d/0xb0 [ 780.559579][T31076] ? xskq_create+0x80/0xe0 [ 780.559662][T31076] xskq_create+0x80/0xe0 [ 780.559686][T31076] xsk_init_queue+0x95/0xf0 [ 780.559765][T31076] xsk_setsockopt+0x3f5/0x640 [ 780.559844][T31076] ? __pfx_xsk_setsockopt+0x10/0x10 [ 780.559872][T31076] __sys_setsockopt+0x184/0x200 [ 780.559895][T31076] __x64_sys_setsockopt+0x64/0x80 [ 780.559982][T31076] x64_sys_call+0x21d5/0x3000 [ 780.560007][T31076] do_syscall_64+0xca/0x2b0 [ 780.560036][T31076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.560105][T31076] RIP: 0033:0x7f6b9df5f749 [ 780.560161][T31076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.560176][T31076] RSP: 002b:00007f6b9c9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 780.560198][T31076] RAX: ffffffffffffffda RBX: 00007f6b9e1b5fa0 RCX: 00007f6b9df5f749 [ 780.560213][T31076] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 780.560228][T31076] RBP: 00007f6b9dfe3f91 R08: 0000000000000004 R09: 0000000000000000 [ 780.560242][T31076] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.560256][T31076] R13: 00007f6b9e1b6038 R14: 00007f6b9e1b5fa0 R15: 00007ffe5a181f38 [ 780.560339][T31076] [ 780.560345][T31076] Mem-Info: [ 780.777892][T31076] active_anon:64239 inactive_anon:7786 isolated_anon:0 [ 780.777892][T31076] active_file:13686 inactive_file:12224 isolated_file:0 [ 780.777892][T31076] unevictable:18456 dirty:247 writeback:0 [ 780.777892][T31076] slab_reclaimable:4044 slab_unreclaimable:128347 [ 780.777892][T31076] mapped:38538 shmem:50828 pagetables:3196 [ 780.777892][T31076] sec_pagetables:0 bounce:0 [ 780.777892][T31076] kernel_misc_reclaimable:0 [ 780.777892][T31076] free:1596710 free_pcp:10178 free_cma:0 [ 780.824514][T31076] Node 0 active_anon:257420kB inactive_anon:31144kB active_file:54744kB inactive_file:48896kB unevictable:73824kB isolated(anon):0kB isolated(file):0kB mapped:154152kB dirty:988kB writeback:0kB shmem:203776kB kernel_stack:5792kB pagetables:12784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 780.853661][T31076] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 780.884028][T31076] lowmem_reserve[]: 0 2880 7859 7859 [ 780.889415][T31076] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 780.921536][T31076] lowmem_reserve[]: 0 0 4978 4978 [ 780.926614][T31076] Node 0 Normal free:3425492kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:257072kB inactive_anon:31144kB active_file:54744kB inactive_file:48896kB unevictable:73824kB writepending:988kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:37140kB local_pcp:32696kB free_cma:0kB [ 780.961090][T31076] lowmem_reserve[]: 0 0 0 0 [ 780.965767][T31076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 780.967704][T31087] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8830'. [ 780.978520][T31076] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 780.978826][T31076] Node 0 Normal: 36*4kB (UME) 177*8kB (U) 84*16kB (UE) 212*32kB (UME) 1338*64kB (UME) 1166*128kB (UME) 679*256kB (UM) 715*512kB (UME) 581*1024kB (UME) 385*2048kB (UME) 307*4096kB (UM) = 3425368kB [ 780.979059][T31076] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 780.979075][T31076] 93241 total pagecache pages [ 780.979084][T31076] 77 pages in swap cache [ 780.979119][T31076] Free swap = 87704kB [ 780.979125][T31076] Total swap = 124996kB [ 780.979132][T31076] 2097051 pages RAM [ 780.979139][T31076] 0 pages HighMem/MovableOnly [ 780.979146][T31076] 81272 pages reserved [ 781.286844][T31095] lo speed is unknown, defaulting to 1000 [ 781.295002][T31095] lo speed is unknown, defaulting to 1000 [ 781.418063][T31095] lo speed is unknown, defaulting to 1000 [ 781.612008][T31085] netlink: 16350 bytes leftover after parsing attributes in process `syz.4.8830'. [ 782.498914][T31133] lo speed is unknown, defaulting to 1000 [ 782.505465][T31133] lo speed is unknown, defaulting to 1000 [ 782.607823][T31133] lo speed is unknown, defaulting to 1000 [ 782.903064][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 782.909288][ T29] audit: type=1326 audit(1038.834:80874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31097 comm="syz.5.8834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 782.945174][ T29] audit: type=1326 audit(1038.924:80875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31054 comm="syz.1.8821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 783.376019][ T29] audit: type=1326 audit(1039.024:80876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31141 comm="syz.1.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 783.399856][ T29] audit: type=1326 audit(1039.254:80877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31141 comm="syz.1.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 783.426938][ T29] audit: type=1326 audit(1039.354:80878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.450023][ T29] audit: type=1326 audit(1039.354:80879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.473862][ T29] audit: type=1326 audit(1039.354:80880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.496855][ T29] audit: type=1326 audit(1039.354:80881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.520608][ T29] audit: type=1326 audit(1039.354:80882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.544394][ T29] audit: type=1326 audit(1039.354:80883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31139 comm="syz.4.8846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff9e079f749 code=0x7ffc0000 [ 783.732052][T31151] netlink: 'syz.3.8848': attribute type 9 has an invalid length. [ 783.739820][T31151] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.8848'. [ 783.977638][T31160] dvmrp6: entered allmulticast mode [ 784.055262][T31162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8852'. [ 784.101355][T31162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8852'. [ 784.662787][T31159] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8850'. [ 784.756295][T31164] netlink: 16350 bytes leftover after parsing attributes in process `syz.5.8850'. [ 784.767073][T31176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8857'. [ 784.776184][T31176] netlink: 'syz.4.8857': attribute type 26 has an invalid length. [ 784.785396][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8857'. [ 784.816011][T31176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8857'. [ 784.826300][T31176] netlink: 'syz.4.8857': attribute type 26 has an invalid length. [ 784.835589][T31176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8857'. [ 784.867276][T31178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8858'. [ 785.238961][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8864'. [ 785.289533][T31194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8864'. [ 785.378993][T31194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8864'. [ 785.606613][T31212] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.8870'. [ 785.624244][T31212] net_ratelimit: 389 callbacks suppressed [ 785.624261][T31212] netlink: zone id is out of range [ 785.635242][T31212] netlink: zone id is out of range [ 785.640910][T31212] netlink: zone id is out of range [ 785.646073][T31212] netlink: zone id is out of range [ 785.652679][T31212] netlink: del zone limit has 8 unknown bytes [ 786.162461][T31237] netlink: 'syz.0.8878': attribute type 12 has an invalid length. [ 786.351109][T31257] ip6tnl0: Caught tx_queue_len zero misconfig [ 786.425404][T31257] lo speed is unknown, defaulting to 1000 [ 786.432468][T31257] lo speed is unknown, defaulting to 1000 [ 786.541369][T31257] lo speed is unknown, defaulting to 1000 [ 786.742896][T31262] xt_hashlimit: size too large, truncated to 1048576 [ 787.335494][T31289] lo speed is unknown, defaulting to 1000 [ 787.352417][T31289] lo speed is unknown, defaulting to 1000 [ 787.579750][T31289] lo speed is unknown, defaulting to 1000 [ 788.226062][T31330] lo speed is unknown, defaulting to 1000 [ 788.232528][T31330] lo speed is unknown, defaulting to 1000 [ 788.330979][T31330] lo speed is unknown, defaulting to 1000 [ 788.711286][ T29] kauditd_printk_skb: 1271 callbacks suppressed [ 788.711302][ T29] audit: type=1326 audit(1044.674:82155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.741469][ T29] audit: type=1326 audit(1044.674:82156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.764779][ T29] audit: type=1326 audit(1044.674:82157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.787857][ T29] audit: type=1326 audit(1044.674:82158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.811645][ T29] audit: type=1326 audit(1044.674:82159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.834758][ T29] audit: type=1326 audit(1044.674:82160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.857799][ T29] audit: type=1326 audit(1044.674:82161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.881653][ T29] audit: type=1326 audit(1044.674:82162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.888211][T31342] netlink: 'syz.0.8909': attribute type 10 has an invalid length. [ 788.904738][ T29] audit: type=1326 audit(1044.684:82163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 788.904769][ T29] audit: type=1326 audit(1044.684:82164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31338 comm="syz.5.8908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5861f749 code=0x7ffc0000 [ 789.397601][T31367] lo speed is unknown, defaulting to 1000 [ 789.405634][T31367] lo speed is unknown, defaulting to 1000 [ 789.792951][T31367] lo speed is unknown, defaulting to 1000 [ 789.815267][T31361] lo speed is unknown, defaulting to 1000 [ 789.829907][T31361] lo speed is unknown, defaulting to 1000 [ 789.934984][T31361] lo speed is unknown, defaulting to 1000 [ 790.125632][T31398] netlink: 'syz.3.8925': attribute type 10 has an invalid length. [ 790.315721][T31400] lo speed is unknown, defaulting to 1000 [ 790.322915][T31400] lo speed is unknown, defaulting to 1000 [ 790.430424][T31400] lo speed is unknown, defaulting to 1000 [ 790.552903][T31401] netlink: 'syz.3.8925': attribute type 10 has an invalid length. [ 790.692866][T31398] __nla_validate_parse: 21 callbacks suppressed [ 790.692883][T31398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8925'. [ 791.720080][T31442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8939'. [ 791.762257][T31449] sctp: [Deprecated]: syz.5.8940 (pid 31449) Use of int in max_burst socket option. [ 791.762257][T31449] Use struct sctp_assoc_value instead [ 791.771661][T31451] netlink: 'syz.0.8942': attribute type 1 has an invalid length. [ 791.922555][T31451] 8021q: adding VLAN 0 to HW filter on device bond14 [ 791.934687][T31457] 8021q: adding VLAN 0 to HW filter on device bond14 [ 791.942770][T31457] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 791.954404][T31457] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 791.961782][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 792.007877][T31451] macvlan1: entered promiscuous mode [ 792.013928][T31451] macvlan1: entered allmulticast mode [ 792.035669][T31451] bond14: entered promiscuous mode [ 792.042256][T31451] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 792.064070][T31451] bond14: left promiscuous mode [ 792.090240][T31443] lo speed is unknown, defaulting to 1000 [ 792.109800][T31443] lo speed is unknown, defaulting to 1000 [ 792.292768][T31443] lo speed is unknown, defaulting to 1000 [ 792.660050][T31479] tc_dump_action: action bad kind [ 792.660570][T31481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8950'. [ 792.687262][T31481] smc: removing net device ip6gretap0 with user defined pnetid SYZ2 [ 792.810398][T31482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8950'. [ 792.819389][T31482] tc_dump_action: action bad kind [ 793.293772][T31493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8952'. [ 793.660047][T31508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8955'. [ 793.881540][T31518] lo speed is unknown, defaulting to 1000 [ 793.888864][T31518] lo speed is unknown, defaulting to 1000 [ 794.031462][T31518] lo speed is unknown, defaulting to 1000 [ 794.334686][ T29] kauditd_printk_skb: 814 callbacks suppressed [ 794.334699][ T29] audit: type=1326 audit(1050.314:82979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 794.372102][ T29] audit: type=1326 audit(1050.344:82980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 794.499680][T31527] ================================================================== [ 794.507882][T31527] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 794.515263][T31527] [ 794.517585][T31527] read-write to 0xffff88810bde1470 of 8 bytes by interrupt on cpu 1: [ 794.525654][T31527] __xa_clear_mark+0xf5/0x1e0 [ 794.530341][T31527] __folio_end_writeback+0xf4/0x360 [ 794.535642][T31527] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 794.541887][T31527] folio_end_writeback+0x1c/0x70 [ 794.546823][T31527] ext4_finish_bio+0x459/0x8c0 [ 794.551591][T31527] ext4_end_bio+0x27b/0x380 [ 794.556096][T31527] bio_endio+0x37e/0x420 [ 794.560336][T31527] blk_update_request+0x336/0x730 [ 794.565355][T31527] scsi_end_request+0x53/0x4c0 [ 794.570118][T31527] scsi_io_completion+0x7f/0x1d0 [ 794.575057][T31527] scsi_finish_command+0x1c7/0x1e0 [ 794.580155][T31527] scsi_complete+0x155/0x4f0 [ 794.584742][T31527] blk_done_softirq+0x77/0xb0 [ 794.589409][T31527] handle_softirqs+0xba/0x290 [ 794.594080][T31527] __irq_exit_rcu+0x3a/0xc0 [ 794.598579][T31527] common_interrupt+0x83/0x90 [ 794.603244][T31527] asm_common_interrupt+0x26/0x40 [ 794.608257][T31527] kcsan_setup_watchpoint+0x406/0x420 [ 794.613624][T31527] mutex_lock+0x50/0x90 [ 794.617769][T31527] __unix_dgram_recvmsg+0x156/0x810 [ 794.622959][T31527] unix_dgram_recvmsg+0x81/0x90 [ 794.627802][T31527] sock_recvmsg_nosec+0x107/0x130 [ 794.632811][T31527] ____sys_recvmsg+0x26f/0x280 [ 794.637566][T31527] ___sys_recvmsg+0x11f/0x370 [ 794.642237][T31527] do_recvmmsg+0x1ef/0x540 [ 794.646645][T31527] __x64_sys_recvmmsg+0xe5/0x170 [ 794.651575][T31527] x64_sys_call+0x2b75/0x3000 [ 794.656252][T31527] do_syscall_64+0xca/0x2b0 [ 794.660748][T31527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.666632][T31527] [ 794.668938][T31527] read to 0xffff88810bde1470 of 8 bytes by task 31527 on cpu 0: [ 794.676550][T31527] xas_find_marked+0x218/0x620 [ 794.681310][T31527] find_get_entry+0x5d/0x380 [ 794.685888][T31527] filemap_get_folios_tag+0x13b/0x210 [ 794.691255][T31527] filemap_fdatawait_keep_errors+0x6c/0x180 [ 794.697143][T31527] sync_inodes_sb+0x3b3/0x460 [ 794.701818][T31527] sync_inodes_one_sb+0x3d/0x50 [ 794.706666][T31527] __iterate_supers+0x110/0x220 [ 794.711519][T31527] iterate_supers+0x1f/0x30 [ 794.716028][T31527] ksys_sync+0x5c/0xe0 [ 794.720098][T31527] __ia32_sys_sync+0xe/0x20 [ 794.724594][T31527] x64_sys_call+0x29b2/0x3000 [ 794.729269][T31527] do_syscall_64+0xca/0x2b0 [ 794.733773][T31527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.739655][T31527] [ 794.741965][T31527] value changed: 0xffe0000000000000 -> 0xc000000000000000 [ 794.749057][T31527] [ 794.751365][T31527] Reported by Kernel Concurrency Sanitizer on: [ 794.757504][T31527] CPU: 0 UID: 0 PID: 31527 Comm: syz.5.8960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 794.768866][T31527] Tainted: [W]=WARN [ 794.772655][T31527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.782694][T31527] ================================================================== [ 794.893201][T31524] lo speed is unknown, defaulting to 1000 [ 794.955681][T31524] lo speed is unknown, defaulting to 1000 [ 795.052796][ T29] audit: type=1326 audit(1051.034:82981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 795.103892][T31524] lo speed is unknown, defaulting to 1000 [ 795.250379][ T29] audit: type=1326 audit(1051.224:82982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 795.274838][ T29] audit: type=1326 audit(1051.224:82983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 795.374470][ T29] audit: type=1326 audit(1051.354:82984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 795.398712][ T29] audit: type=1326 audit(1051.354:82985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000 [ 795.422596][ T29] audit: type=1326 audit(1051.384:82986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31509 comm="syz.1.8956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0ee01f749 code=0x7ffc0000