last executing test programs: 1m29.870706436s ago: executing program 2 (id=17689): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r2, 0x0, 0x0) 1m28.639165634s ago: executing program 2 (id=17710): socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4ff0, &(0x7f0000000040)={0x0, 0x835a, 0xf000, 0x20000a, 0x29}) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x743a, 0x16, 0x0, 0x0) 1m28.545960686s ago: executing program 2 (id=17716): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m27.425467896s ago: executing program 2 (id=17729): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m27.377103647s ago: executing program 2 (id=17732): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0118020003110000280012800b00010065727370616e000018000280040012000600020007000000050016"], 0x48}}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1m27.29047015s ago: executing program 2 (id=17734): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m27.264707145s ago: executing program 32 (id=17734): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 1m25.96659881s ago: executing program 0 (id=17751): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x8, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m25.903572778s ago: executing program 0 (id=17752): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x1f99, 0x7721, 0x16, 0x0, 0x0) 1m25.81524097s ago: executing program 0 (id=17754): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="ceb2105ed08e207fa34ff723c6e40d8c22061b2a8c6a8953ab6d6ccedd6dbd90b8cdd67abd07d3beb1316aefda766f7843cf91e31f68fb972b7a2d4b45368e4a19d5e5df54f3a28af3be8f54a5e885c3ce90a51680b2f56127552135f7cfb6d364bece0319b94e297e7a65fb79accb01a36d7ac158a3509ebaa63c69f2ade6e6cc79e9c0a8de", 0x86}, {&(0x7f0000000840)="807d8d9923d05efda0458968240b7f729875d82e98a54030e9f2cc6588658e615a8267d56b6c3ae5fde56391244a964dbbc4fbd38186f083e0f21356ea3135", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000300)="81cddaf07480b56a29046d8aced7f563611d1307d34319651551ae6485a0af475125b5288bdba1cf8b6996f2fb249a96b93c5e6dddd193be987576a37b6bf19f36bef0be1bb60f3678cf8403e76aff7f487541f996e617d18ee50afebd56b0a0719353a06c9ca1b658de630e7a7b1aafede117e849871ae77fa69339e61326e73b59240094e63d904f8c34d6361d5691bd07fe39d2bf496520ea7adde9a44ed6f323855dc1d6483a77b9c74d9f30dc5a3ce0e7f6cf117cb2bbe1d63d1313e49e5b2b98c7f8d73f50faff70d0", 0xcc}, {&(0x7f0000000680)="545f82417bb5262ee7919f765ca5a7537d4576bb8fae115eb5606b85e8ed07f3d58bb4488969dfd32f27e62442740efd9ad5f2f5c2bb1470b19eac4cdafffd663154e839ea40165820197e010c1e4ffc87131b885cf746a05edc14cd3c7da3e5263bc3fb2a81f7f76569ce24c01568656557e8babe7a477f5c5ac6ac11f90c2cc1238a206bcb5a923c16781daff205e413ede1c835", 0x95}, {&(0x7f0000000c80)="a2a8fe313ac281acc385f8f5b4105a97d82ac0d41d6711e4ee3f1065f7ebf918fdab45655999ca03baa1fec0bd3d90cf75a312f4bf7a43d32dfb5d39d87b51ebc741e8c117", 0x45}, {&(0x7f0000000d00)="69c28b021b156ba77a5c1963a580", 0xe}], 0x4}}], 0x2, 0x4090) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc", 0x52}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='j', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m25.746282117s ago: executing program 0 (id=17755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 1m25.699089868s ago: executing program 0 (id=17756): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000880) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m25.458266781s ago: executing program 0 (id=17757): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, 0x0) pread64(r2, &(0x7f0000000100)=""/31, 0x1f, 0x4) 1m25.45801868s ago: executing program 33 (id=17757): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, 0x0) pread64(r2, &(0x7f0000000100)=""/31, 0x1f, 0x4) 1m17.976381373s ago: executing program 6 (id=17839): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m17.406968161s ago: executing program 5 (id=17838): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10, 0x80}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x1f99, 0x7721, 0x16, 0x0, 0x0) 1m17.318464394s ago: executing program 5 (id=17841): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1414aa0000000000000000000000000000000000400300000003000300"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300faffffff480001"], 0x140}}, 0x4000040) 1m17.251782371s ago: executing program 5 (id=17843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0xb0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0xb0}}, 0x0) 1m17.251566151s ago: executing program 5 (id=17844): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 1m17.219255724s ago: executing program 5 (id=17845): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd"], 0x1000f) 1m17.020112855s ago: executing program 6 (id=17850): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff0, &(0x7f0000000040)={0x0, 0x835a, 0xf000, 0x20000a, 0x29}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r1, 0x2219, 0x743a, 0x16, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 1m16.970635226s ago: executing program 5 (id=17852): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10, 0x80}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x1f99, 0x7721, 0x16, 0x0, 0x0) 1m16.955433713s ago: executing program 34 (id=17852): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10, 0x80}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x1f99, 0x7721, 0x16, 0x0, 0x0) 1m16.617045847s ago: executing program 6 (id=17854): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000040) 1m16.559500535s ago: executing program 6 (id=17855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 1m16.504336094s ago: executing program 6 (id=17856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0xac}}, 0x0) 1m16.166396818s ago: executing program 6 (id=17857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0xb703, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1m16.150939195s ago: executing program 35 (id=17857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0xb703, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1m15.071799253s ago: executing program 3 (id=17863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x3, 0x6}, 0x1, 0xfb, [{0x1ff, 0x777d2411, 0x5, 0x101, 0x1}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x485, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x8, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8347, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x5, 0x9}, {0x4d, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0xfffffffb, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0xca2f, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x7f, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x6, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdc7, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x1}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m14.833631327s ago: executing program 3 (id=17864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m14.766460213s ago: executing program 3 (id=17865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000040) 1m14.752875781s ago: executing program 3 (id=17866): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x3243005, 0x0) chdir(&(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) 1m14.727371456s ago: executing program 3 (id=17867): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x7c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x71}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x7c}}, 0x0) 1m14.580682787s ago: executing program 3 (id=17868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 1m14.580575447s ago: executing program 36 (id=17868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 1.925219988s ago: executing program 8 (id=18884): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.874957558s ago: executing program 8 (id=18885): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.844663222s ago: executing program 8 (id=18886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.774426918s ago: executing program 8 (id=18888): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1}, 0x0) 1.774163938s ago: executing program 8 (id=18889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xbcff, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 1.42849219s ago: executing program 4 (id=18895): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.350647085s ago: executing program 4 (id=18898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.334432052s ago: executing program 4 (id=18900): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x9, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="18000000000000002900000004000000320000000000000018"], 0x30}}], 0x1, 0x1) 1.309656907s ago: executing program 4 (id=18901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = io_uring_setup(0x303c, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001680), 0x0) r1 = getpid() ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0xc0d0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 802.232528ms ago: executing program 8 (id=18904): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) 746.578497ms ago: executing program 7 (id=18906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 746.210587ms ago: executing program 7 (id=18907): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 696.326227ms ago: executing program 7 (id=18909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 694.963366ms ago: executing program 7 (id=18911): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018", @ANYRES32, @ANYBLOB="0000000000d9bd00950000000000200045"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 626.686043ms ago: executing program 7 (id=18913): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 626.011533ms ago: executing program 7 (id=18915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = io_uring_setup(0x303c, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001680), 0x0) r1 = getpid() ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 344.544778ms ago: executing program 4 (id=18922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="ceb2105ed08e207fa34ff723c6e40d8c22061b2a8c6a8953ab6d6ccedd6dbd90b8cdd67abd07d3beb1316aefda766f7843cf91e31f68fb972b7a2d4b45368e4a19d5e5df54f3a28af3be8f54a5e885c3ce90a51680b2f56127552135f7cfb6d364bece0319b94e297e7a65fb79accb01a36d7ac158a3509ebaa63c69f2ade6e6cc79e9c0a8de", 0x86}, {&(0x7f0000000840)="807d8d9923d05efda0458968240b7f729875d82e98a54030e9f2cc6588658e615a8267d56b6c3ae5fde56391244a964dbbc4fbd38186f083e0f21356ea3135", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000680)="545f82417bb5262ee7919f765ca5a7537d4576bb8fae115eb5606b85e8ed07f3d58bb4488969dfd32f27e62442740efd9ad5f2f5c2bb1470b19eac4cdafffd663154e839ea40165820197e010c1e4ffc87131b885cf746a05edc14cd3c7da3e5263bc3fb2a81f7f76569ce24c01568656557e8babe7a477f5c5ac6ac11f90c2cc1238a206bcb5a923c16781daff205e413ede1c835", 0x95}, {&(0x7f0000000c80)="a2a8fe313ac281acc385f8f5b4105a97d82ac0d41d6711e4ee3f1065f7ebf918fdab45655999ca03baa1fec0bd3d90cf75a312f4bf7a43d32dfb5d39d87b51ebc741e8c117", 0x45}], 0x2}}], 0x2, 0x4090) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10", 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='j', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 256.63663ms ago: executing program 4 (id=18924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc0400000105010400000000000000000a000000540201"], 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x8, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000200)='FREEZING\x00', 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x424}}, 0xc810) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x81, 0x0, 0x4, 0x0, 0x0, 0x40004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1948}, 0x4000, 0x0, 0xfffffffd, 0x6, 0x300000000, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x11) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x97, @mcast2}, 0x80, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 231.160266ms ago: executing program 9 (id=18925): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9", 0x15}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 178.292945ms ago: executing program 1 (id=18926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000008000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a31000000001400058008000240000000020800"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 114.615973ms ago: executing program 9 (id=18927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 114.084593ms ago: executing program 9 (id=18928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 113.698172ms ago: executing program 9 (id=18929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 105.790801ms ago: executing program 1 (id=18930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 80.662816ms ago: executing program 1 (id=18931): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50) 72.321084ms ago: executing program 9 (id=18932): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d5778621d46}, 0x4) 35.172017ms ago: executing program 1 (id=18933): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 34.495737ms ago: executing program 9 (id=18934): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 670.98µs ago: executing program 1 (id=18935): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg(r0, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="ceb2105ed08e207fa34ff723c6e40d8c22061b2a8c6a8953ab6d6ccedd6dbd90b8cdd67abd07d3beb1316aefda766f7843cf91e31f68fb972b7a2d4b45368e4a19d5e5df54f3a28af3be8f54a5e885c3ce90a51680b2f56127552135f7cfb6d364bece0319b94e297e7a65fb79accb01a36d7ac158a3509ebaa63c69f2ade6e6cc79e9c0a8de", 0x86}, {&(0x7f0000000840)="807d8d9923d05efda0458968240b7f729875d82e98a54030e9f2cc6588658e615a8267d56b6c3ae5fde56391244a964dbbc4fbd38186f083e0f21356ea3135", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000680)="545f82417bb5262ee7919f765ca5a7537d4576bb8fae115eb5606b85e8ed07f3d58bb4488969dfd32f27e62442740efd9ad5f2f5c2bb1470b19eac4cdafffd663154e839ea40165820197e010c1e4ffc87131b885cf746a05edc14cd3c7da3e5263bc3fb2a81f7f76569ce24c01568656557e8babe7a477f5c5ac6ac11f90c2cc1238a206bcb5a923c16781daff205e413ede1c835", 0x95}, {&(0x7f0000000c80)="a2a8fe313ac281acc385f8f5b4105a97d82ac0d41d6711e4ee3f1065f7ebf918fdab45655999ca03baa1fec0bd3d90cf75a312f4bf7a43d32dfb5d39d87b51ebc741e8c117", 0x45}], 0x2}}], 0x2, 0x4090) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2", 0xb3}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb", 0x3b}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='j', 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=18936): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x9, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000290000000400000032000000000000001800000000"], 0x30}}], 0x1, 0x1) kernel console output (not intermixed with test programs): 532311][T20922] syzkaller0: entered allmulticast mode [ 1031.653644][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17425'. [ 1031.768784][T20951] tipc: Enabling of bearer rejected, failed to enable media [ 1032.768812][T20985] tipc: Enabling of bearer rejected, failed to enable media [ 1033.989053][T21031] tipc: Enabling of bearer rejected, failed to enable media [ 1034.652009][T21025] syz.3.17456 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1034.673873][T21025] CPU: 0 UID: 0 PID: 21025 Comm: syz.3.17456 Tainted: G W syzkaller #0 PREEMPT(full) [ 1034.673987][T21025] Tainted: [W]=WARN [ 1034.673995][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.674012][T21025] Call Trace: [ 1034.674020][T21025] [ 1034.674027][T21025] __dump_stack+0x1d/0x30 [ 1034.674054][T21025] dump_stack_lvl+0x95/0xd0 [ 1034.674081][T21025] dump_stack+0x15/0x1b [ 1034.674234][T21025] dump_header+0x80/0x240 [ 1034.674265][T21025] oom_kill_process+0x295/0x350 [ 1034.674293][T21025] out_of_memory+0x97d/0xb80 [ 1034.674350][T21025] try_charge_memcg+0x62e/0xa10 [ 1034.674402][T21025] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1034.674585][T21025] __swap_cache_prepare_and_add+0x386/0x530 [ 1034.674623][T21025] swap_cache_alloc_folio+0xa2/0x120 [ 1034.674660][T21025] swap_cluster_readahead+0x26e/0x3d0 [ 1034.674766][T21025] swapin_readahead+0xde/0x840 [ 1034.674806][T21025] ? _raw_spin_unlock+0x9/0x30 [ 1034.674905][T21025] ? swap_put_entries_cluster+0x385/0x3a0 [ 1034.675001][T21025] ? swap_put_entries_cluster+0x111/0x3a0 [ 1034.675033][T21025] ? __rcu_read_unlock+0x4e/0x70 [ 1034.675062][T21025] ? swap_cache_get_folio+0x26f/0x280 [ 1034.675098][T21025] do_swap_page+0x30d/0x2220 [ 1034.675170][T21025] ? css_rstat_updated+0xbb/0x280 [ 1034.675197][T21025] ? __rcu_read_lock+0x36/0x50 [ 1034.675224][T21025] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1034.675264][T21025] handle_mm_fault+0xb40/0x3020 [ 1034.675304][T21025] ? vma_start_read+0x1c7/0x2c0 [ 1034.675343][T21025] do_user_addr_fault+0x62f/0x1050 [ 1034.675447][T21025] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1034.675542][T21025] ? trace_page_fault_user+0x1f/0xe0 [ 1034.675585][T21025] exc_page_fault+0x62/0xa0 [ 1034.675615][T21025] asm_exc_page_fault+0x26/0x30 [ 1034.675641][T21025] RIP: 0033:0x7f18a651d2b6 [ 1034.675703][T21025] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 1034.675724][T21025] RSP: 002b:00007fff52270dc0 EFLAGS: 00010246 [ 1034.675743][T21025] RAX: 00000000000f9697 RBX: 00007f18a6795fa0 RCX: 00000000000f9448 [ 1034.675756][T21025] RDX: 000000000000024f RSI: 0000000000000000 RDI: 00000000000003e8 [ 1034.675778][T21025] RBP: 00007f18a6797da0 R08: 00000000233b8dba R09: 7fffffffffffffff [ 1034.675793][T21025] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000f971b [ 1034.675811][T21025] R13: 00007f18a679609c R14: 00000000000f9453 R15: 00007fff52270ef0 [ 1034.675836][T21025] [ 1034.676620][T21025] memory: usage 307200kB, limit 307200kB, failcnt 4450 [ 1034.963305][T21025] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 1034.985893][T21025] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 1034.993955][T21025] Memory cgroup stats for /syz3: [ 1034.994250][T21025] cache 0 [ 1035.002290][T21025] rss 0 [ 1035.010654][T21025] shmem 0 [ 1035.019888][T21025] mapped_file 0 [ 1035.023467][T21025] dirty 0 [ 1035.033100][T21025] writeback 4096 [ 1035.041168][T21025] workingset_refault_anon 6953 [ 1035.055228][T21025] workingset_refault_file 5423 [ 1035.076031][T21025] swap 188416 [ 1035.095153][T21025] swapcached 75272192 [ 1035.102126][T21025] pgpgin 1130379 [ 1035.105785][T21025] pgpgout 1130373 [ 1035.109680][T21025] pgfault 1052066 [ 1035.113427][T21025] pgmajfault 230 [ 1035.117017][T21025] inactive_anon 12288 [ 1035.121384][T21025] active_anon 0 [ 1035.124964][T21025] inactive_file 12288 [ 1035.128990][T21025] active_file 0 [ 1035.132733][T21025] unevictable 0 [ 1035.136262][T21025] hierarchical_memory_limit 314572800 [ 1035.142025][T21025] hierarchical_memsw_limit 9223372036854771712 [ 1035.148324][T21025] total_cache 0 [ 1035.151839][T21025] total_rss 0 [ 1035.155386][T21025] total_shmem 0 [ 1035.158973][T21025] total_mapped_file 0 [ 1035.163288][T21025] total_dirty 0 [ 1035.167222][T21025] total_writeback 4096 [ 1035.171594][T21025] total_workingset_refault_anon 6953 [ 1035.177058][T21025] total_workingset_refault_file 5423 [ 1035.182503][T21025] total_swap 188416 [ 1035.186517][T21025] total_swapcached 75272192 [ 1035.191084][T21025] total_pgpgin 1130379 [ 1035.195762][T21025] total_pgpgout 1130373 [ 1035.199935][T21025] total_pgfault 1052066 [ 1035.204213][T21025] total_pgmajfault 230 [ 1035.208660][T21025] total_inactive_anon 12288 [ 1035.213200][T21025] total_active_anon 0 [ 1035.217361][T21025] total_inactive_file 12288 [ 1035.221880][T21025] total_active_file 0 [ 1035.225882][T21025] total_unevictable 0 [ 1035.230172][T21025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17456,pid=21025,uid=0 [ 1035.246204][T21025] Memory cgroup out of memory: Killed process 21025 (syz.3.17456) total-vm:94160kB, anon-rss:1232kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1036.249988][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.257251][T21067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.321664][T21067] bridge_slave_0: left allmulticast mode [ 1036.328490][T21067] bridge_slave_0: left promiscuous mode [ 1036.334276][T21067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.346905][T21067] bridge_slave_1: left allmulticast mode [ 1036.352680][T21067] bridge_slave_1: left promiscuous mode [ 1036.358856][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.386906][T21067] team0: Port device team_slave_0 removed [ 1036.403929][T21067] team0: Port device team_slave_1 removed [ 1036.412037][T21067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.421674][T21067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.435388][T21067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.445279][T21067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.459867][T21067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.476134][T21076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.492538][T21076] batadv_slave_0: entered promiscuous mode [ 1036.506757][T21076] batadv_slave_0: entered allmulticast mode [ 1036.592872][T21105] syzkaller0: entered promiscuous mode [ 1036.598549][T21105] syzkaller0: entered allmulticast mode [ 1036.878804][T21111] netlink: 'syz.2.17482': attribute type 10 has an invalid length. [ 1036.894592][T21111] loop2: detected capacity change from 0 to 512 [ 1036.928258][T21111] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1036.935444][T21111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.17482: ea_inode with extended attributes [ 1036.948286][T21111] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1036.948903][T21111] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.17482: error while reading EA inode 11 err=-117 [ 1036.958111][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1036.958131][ C1] EXT4-fs (loop2): initial error at time 1773123518: ext4_xattr_inode_iget:441: inode 11 [ 1036.958164][ C1] EXT4-fs (loop2): last error at time 1773123518: ext4_xattr_inode_iget:441: inode 11 [ 1036.996844][T21111] loop2: lost filesystem error report for type 5 error -117 [ 1036.997682][T21111] EXT4-fs (loop2): 1 orphan inode deleted [ 1037.011428][T21111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1037.523955][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17488'. [ 1037.611827][T15522] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.803579][T21128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.810816][T21128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.872722][T21128] bridge_slave_0: left allmulticast mode [ 1037.878760][T21128] bridge_slave_0: left promiscuous mode [ 1037.884627][T21128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.896665][T21128] bridge_slave_1: left allmulticast mode [ 1037.902364][T21128] bridge_slave_1: left promiscuous mode [ 1037.909151][T21128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.924579][T21128] team0: Port device team_slave_0 removed [ 1037.933468][T21128] team0: Port device team_slave_1 removed [ 1037.941042][T21128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.950125][T21128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.959216][T21128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.968364][T21128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.980476][T21128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1038.046017][T21138] syzkaller0: entered promiscuous mode [ 1038.051791][T21138] syzkaller0: entered allmulticast mode [ 1038.090603][T21142] syzkaller0: entered promiscuous mode [ 1038.096156][T21142] syzkaller0: entered allmulticast mode [ 1038.129301][T21157] syzkaller0: entered promiscuous mode [ 1038.134975][T21157] syzkaller0: entered allmulticast mode [ 1038.242398][T21166] 9pnet_fd: Insufficient options for proto=fd [ 1038.269011][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17501'. [ 1038.326391][T21176] syzkaller0: entered promiscuous mode [ 1038.331927][T21176] syzkaller0: entered allmulticast mode [ 1038.761746][T21185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.768983][T21185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.798945][T21185] bridge_slave_0: left allmulticast mode [ 1038.804980][T21185] bridge_slave_0: left promiscuous mode [ 1038.810879][T21185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.830688][T21185] bridge_slave_1: left allmulticast mode [ 1038.840086][T21185] bridge_slave_1: left promiscuous mode [ 1038.845887][T21185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.864399][T21185] team0: Port device team_slave_0 removed [ 1038.873933][T21185] team0: Port device team_slave_1 removed [ 1038.881935][T21185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.891311][T21185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.900076][T21185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.912231][T21185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1038.956450][T21188] syzkaller0: entered promiscuous mode [ 1038.970315][T21188] syzkaller0: entered allmulticast mode [ 1039.003928][T21174] syz.3.17505 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1039.026322][T21174] CPU: 1 UID: 0 PID: 21174 Comm: syz.3.17505 Tainted: G W syzkaller #0 PREEMPT(full) [ 1039.026384][T21174] Tainted: [W]=WARN [ 1039.026394][T21174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.026412][T21174] Call Trace: [ 1039.026421][T21174] [ 1039.026430][T21174] __dump_stack+0x1d/0x30 [ 1039.026466][T21174] dump_stack_lvl+0x95/0xd0 [ 1039.026498][T21174] dump_stack+0x15/0x1b [ 1039.026583][T21174] dump_header+0x80/0x240 [ 1039.026610][T21174] oom_kill_process+0x295/0x350 [ 1039.026640][T21174] out_of_memory+0x97d/0xb80 [ 1039.026702][T21174] try_charge_memcg+0x62e/0xa10 [ 1039.026802][T21174] obj_cgroup_charge_pages+0x23/0xc0 [ 1039.026901][T21174] __memcg_kmem_charge_page+0x9e/0x170 [ 1039.026929][T21174] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1039.027045][T21174] alloc_pages_mpol+0xb3/0x260 [ 1039.027085][T21174] alloc_pages_noprof+0x8f/0x130 [ 1039.027121][T21174] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1039.027223][T21174] __kvmalloc_node_noprof+0x3d4/0x650 [ 1039.027254][T21174] ? ip_set_alloc+0x24/0x30 [ 1039.027285][T21174] ? ip_set_alloc+0x24/0x30 [ 1039.027315][T21174] ? __kmalloc_cache_noprof+0x18a/0x410 [ 1039.027382][T21174] ip_set_alloc+0x24/0x30 [ 1039.027406][T21174] hash_netiface_create+0x282/0x740 [ 1039.027438][T21174] ? __pfx_hash_netiface_create+0x10/0x10 [ 1039.027554][T21174] ip_set_create+0x3cf/0x970 [ 1039.027600][T21174] ? __nla_parse+0x40/0x60 [ 1039.027637][T21174] nfnetlink_rcv_msg+0x509/0x5d0 [ 1039.027796][T21174] netlink_rcv_skb+0x123/0x220 [ 1039.027843][T21174] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1039.027898][T21174] nfnetlink_rcv+0x167/0x1720 [ 1039.027930][T21174] ? __kfree_skb+0x109/0x150 [ 1039.028034][T21174] ? nlmon_xmit+0x4f/0x60 [ 1039.028089][T21174] ? consume_skb+0x4b/0x160 [ 1039.028250][T21174] ? nlmon_xmit+0x4f/0x60 [ 1039.028308][T21174] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 1039.028344][T21174] ? __dev_queue_xmit+0x136c/0x1f20 [ 1039.028408][T21174] ? __dev_queue_xmit+0x148/0x1f20 [ 1039.028444][T21174] ? ref_tracker_free+0x37d/0x3e0 [ 1039.028477][T21174] ? __netlink_deliver_tap+0x4dc/0x500 [ 1039.028555][T21174] netlink_unicast+0x5c0/0x690 [ 1039.028621][T21174] netlink_sendmsg+0x5c8/0x6f0 [ 1039.028658][T21174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.028699][T21174] ____sys_sendmsg+0x563/0x5b0 [ 1039.028810][T21174] ___sys_sendmsg+0x195/0x1e0 [ 1039.028862][T21174] __x64_sys_sendmsg+0xd4/0x160 [ 1039.028900][T21174] x64_sys_call+0x194c/0x3020 [ 1039.028928][T21174] do_syscall_64+0x12c/0x370 [ 1039.028954][T21174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.029034][T21174] RIP: 0033:0x7f18a651c799 [ 1039.029055][T21174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.029077][T21174] RSP: 002b:00007f18a4f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.029102][T21174] RAX: ffffffffffffffda RBX: 00007f18a6795fa0 RCX: 00007f18a651c799 [ 1039.029169][T21174] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 1039.029186][T21174] RBP: 00007f18a65b2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1039.029247][T21174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.029261][T21174] R13: 00007f18a6796038 R14: 00007f18a6795fa0 R15: 00007fff52270c88 [ 1039.029354][T21174] [ 1039.361208][T21174] memory: usage 307200kB, limit 307200kB, failcnt 4862 [ 1039.368461][T21174] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1039.377076][T21174] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1039.384554][T21174] Memory cgroup stats for /syz3: [ 1039.384767][T21174] cache 0 [ 1039.392840][T21174] rss 0 [ 1039.395710][T21174] shmem 0 [ 1039.398665][T21174] mapped_file 0 [ 1039.402427][T21174] dirty 0 [ 1039.405392][T21174] writeback 0 [ 1039.413149][T21174] workingset_refault_anon 7055 [ 1039.417952][T21174] workingset_refault_file 6067 [ 1039.443976][T21174] swap 196608 [ 1039.447501][T21174] swapcached 75399168 [ 1039.453248][T21197] 9pnet_fd: Insufficient options for proto=fd [ 1039.454011][T21195] syzkaller0: entered promiscuous mode [ 1039.465289][T21174] pgpgin 1133433 [ 1039.469072][T21195] syzkaller0: entered allmulticast mode [ 1039.474982][T21174] pgpgout 1133429 [ 1039.486076][T21174] pgfault 1053684 [ 1039.491773][T21174] pgmajfault 305 [ 1039.495508][T21174] inactive_anon 4096 [ 1039.499701][T21174] active_anon 0 [ 1039.503190][T21174] inactive_file 12288 [ 1039.510321][T21174] active_file 0 [ 1039.513834][T21174] unevictable 0 [ 1039.517338][T21174] hierarchical_memory_limit 314572800 [ 1039.523107][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17515'. [ 1039.533600][T21174] hierarchical_memsw_limit 9223372036854771712 [ 1039.539805][T21174] total_cache 0 [ 1039.543467][T21174] total_rss 0 [ 1039.562786][T21174] total_shmem 0 [ 1039.566341][T21174] total_mapped_file 0 [ 1039.571595][T21174] total_dirty 0 [ 1039.575245][T21174] total_writeback 0 [ 1039.579291][T21174] total_workingset_refault_anon 7055 [ 1039.600243][T21205] batadv_slave_0: entered promiscuous mode [ 1039.609304][T21174] total_workingset_refault_file 6067 [ 1039.612505][T21205] batadv_slave_0: entered allmulticast mode [ 1039.620471][T21174] total_swap 196608 [ 1039.626494][T21174] total_swapcached 75399168 [ 1039.631040][T21174] total_pgpgin 1133433 [ 1039.643471][T21209] syzkaller0: entered promiscuous mode [ 1039.647989][T21174] total_pgpgout 1133429 [ 1039.653312][T21174] total_pgfault 1053684 [ 1039.653757][T21209] syzkaller0: entered allmulticast mode [ 1039.657483][T21174] total_pgmajfault 305 [ 1039.657495][T21174] total_inactive_anon 4096 [ 1039.677005][T21174] total_active_anon 0 [ 1039.681809][T21174] total_inactive_file 12288 [ 1039.687661][T21174] total_active_file 0 [ 1039.695910][T21174] total_unevictable 0 [ 1039.704871][T21174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17505,pid=21173,uid=0 [ 1039.741804][T21174] Memory cgroup out of memory: Killed process 21173 (syz.3.17505) total-vm:94160kB, anon-rss:1232kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1040.189121][T21231] syzkaller0: entered promiscuous mode [ 1040.195558][T21231] syzkaller0: entered allmulticast mode [ 1040.254341][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17529'. [ 1040.300890][T21238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.308275][T21238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.339702][T21238] bridge_slave_0: left allmulticast mode [ 1040.345635][T21238] bridge_slave_0: left promiscuous mode [ 1040.351481][T21238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.362856][T21238] bridge_slave_1: left allmulticast mode [ 1040.368775][T21238] bridge_slave_1: left promiscuous mode [ 1040.374989][T21238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.391042][T21238] team0: Port device team_slave_0 removed [ 1040.400212][T21238] team0: Port device team_slave_1 removed [ 1040.410216][T21238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.419512][T21238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.428486][T21238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.439161][T21238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.476837][T21251] syzkaller0: entered promiscuous mode [ 1040.499151][T21251] syzkaller0: entered allmulticast mode [ 1040.574409][T21266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1040.700402][T21276] syzkaller0: entered promiscuous mode [ 1040.711344][T21276] syzkaller0: entered allmulticast mode [ 1041.040786][T21290] syzkaller0: entered promiscuous mode [ 1041.046381][T21290] syzkaller0: entered allmulticast mode [ 1041.111310][T21294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17546'. [ 1041.157620][T21265] syz.4.17535 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1041.183708][T21265] CPU: 1 UID: 0 PID: 21265 Comm: syz.4.17535 Tainted: G W syzkaller #0 PREEMPT(full) [ 1041.183795][T21265] Tainted: [W]=WARN [ 1041.183805][T21265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1041.183820][T21265] Call Trace: [ 1041.183826][T21265] [ 1041.183833][T21265] __dump_stack+0x1d/0x30 [ 1041.183935][T21265] dump_stack_lvl+0x95/0xd0 [ 1041.184010][T21265] dump_stack+0x15/0x1b [ 1041.184038][T21265] dump_header+0x80/0x240 [ 1041.184068][T21265] oom_kill_process+0x295/0x350 [ 1041.184103][T21265] out_of_memory+0x97d/0xb80 [ 1041.184191][T21265] try_charge_memcg+0x62e/0xa10 [ 1041.184240][T21265] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1041.184282][T21265] __swap_cache_prepare_and_add+0x386/0x530 [ 1041.184406][T21265] swap_cache_alloc_folio+0xa2/0x120 [ 1041.184453][T21265] swap_cluster_readahead+0x26e/0x3d0 [ 1041.184495][T21265] swapin_readahead+0xde/0x840 [ 1041.184550][T21265] ? _raw_spin_unlock+0x9/0x30 [ 1041.184571][T21265] ? swap_put_entries_cluster+0x385/0x3a0 [ 1041.184665][T21265] ? swap_put_entries_cluster+0x111/0x3a0 [ 1041.184699][T21265] ? __rcu_read_unlock+0x4e/0x70 [ 1041.184794][T21265] ? swap_cache_get_folio+0x26f/0x280 [ 1041.184831][T21265] do_swap_page+0x30d/0x2220 [ 1041.184870][T21265] ? css_rstat_updated+0xbb/0x280 [ 1041.184894][T21265] ? __rcu_read_lock+0x36/0x50 [ 1041.185022][T21265] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1041.185049][T21265] handle_mm_fault+0xb40/0x3020 [ 1041.185083][T21265] ? vma_start_read+0x1c7/0x2c0 [ 1041.185125][T21265] do_user_addr_fault+0x62f/0x1050 [ 1041.185196][T21265] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1041.185230][T21265] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 1041.185260][T21265] ? trace_page_fault_user+0x1f/0xe0 [ 1041.185342][T21265] exc_page_fault+0x62/0xa0 [ 1041.185376][T21265] asm_exc_page_fault+0x26/0x30 [ 1041.185396][T21265] RIP: 0033:0x7f714456d2b6 [ 1041.185412][T21265] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 1041.185429][T21265] RSP: 002b:00007ffe974f9ed0 EFLAGS: 00010246 [ 1041.185466][T21265] RAX: 00000000000fae67 RBX: 00007f71447e5fa0 RCX: 00000000000fabb8 [ 1041.185482][T21265] RDX: 00000000000002af RSI: 0000000000000000 RDI: 00000000000003e8 [ 1041.185498][T21265] RBP: 00007f71447e7da0 R08: 0000000028f4fc9d R09: 7fffffffffffffff [ 1041.185515][T21265] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000faf6b [ 1041.185530][T21265] R13: 00007f71447e609c R14: 00000000000faca8 R15: 00007ffe974fa000 [ 1041.185560][T21265] [ 1041.458460][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17550'. [ 1041.463416][T21265] memory: usage 307200kB, limit 307200kB, failcnt 1532 [ 1041.486707][T21298] syzkaller0: entered promiscuous mode [ 1041.492253][T21298] syzkaller0: entered allmulticast mode [ 1041.502904][T21265] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 1041.519490][T21265] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 1041.527177][T21265] Memory cgroup stats for /syz4: [ 1041.528469][T21265] cache 0 [ 1041.536430][T21265] rss 0 [ 1041.539622][T21265] shmem 0 [ 1041.542670][T21265] mapped_file 0 [ 1041.546247][T21265] dirty 0 [ 1041.549489][T21265] writeback 4096 [ 1041.553282][T21265] workingset_refault_anon 5440 [ 1041.558135][T21265] workingset_refault_file 1848 [ 1041.564059][T21265] swap 192512 [ 1041.567459][T21265] swapcached 19505152 [ 1041.595432][T21306] syzkaller0: entered promiscuous mode [ 1041.601195][T21306] syzkaller0: entered allmulticast mode [ 1041.607117][T21265] pgpgin 1086060 [ 1041.611820][T21265] pgpgout 1086047 [ 1041.620284][T21265] pgfault 1078204 [ 1041.624612][T21265] pgmajfault 283 [ 1041.628231][T21265] inactive_anon 4096 [ 1041.632306][T21265] active_anon 28672 [ 1041.636514][T21265] inactive_file 0 [ 1041.640206][T21265] active_file 20480 [ 1041.644125][T21265] unevictable 0 [ 1041.647910][T21265] hierarchical_memory_limit 314572800 [ 1041.653340][T21265] hierarchical_memsw_limit 9223372036854771712 [ 1041.659964][T21265] total_cache 0 [ 1041.663471][T21265] total_rss 0 [ 1041.666978][T21265] total_shmem 0 [ 1041.670716][T21265] total_mapped_file 0 [ 1041.674760][T21265] total_dirty 0 [ 1041.679512][T21265] total_writeback 4096 [ 1041.683753][T21265] total_workingset_refault_anon 5440 [ 1041.690378][T21265] total_workingset_refault_file 1848 [ 1041.695785][T21265] total_swap 192512 [ 1041.700072][T21265] total_swapcached 19505152 [ 1041.704658][T21265] total_pgpgin 1086060 [ 1041.709087][T21265] total_pgpgout 1086047 [ 1041.713308][T21265] total_pgfault 1078204 [ 1041.717526][T21265] total_pgmajfault 283 [ 1041.722000][T21265] total_inactive_anon 4096 [ 1041.726475][T21265] total_active_anon 28672 [ 1041.731160][T21265] total_inactive_file 0 [ 1041.735436][T21265] total_active_file 20480 [ 1041.739806][T21265] total_unevictable 0 [ 1041.744096][T21265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.17535,pid=21265,uid=0 [ 1041.763139][T21265] Memory cgroup out of memory: Killed process 21265 (syz.4.17535) total-vm:94160kB, anon-rss:1220kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1041.847887][T21303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17550'. [ 1041.895681][T21313] syzkaller0: entered promiscuous mode [ 1041.901505][T21313] syzkaller0: entered allmulticast mode [ 1041.913110][T21315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17555'. [ 1041.978234][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17558'. [ 1042.233704][T21334] sch_tbf: burst 4095 is lower than device lo mtu (65550) ! [ 1042.319871][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17566'. [ 1042.383899][T21353] syzkaller0: entered promiscuous mode [ 1042.389677][T21353] syzkaller0: entered allmulticast mode [ 1043.038197][T21369] netlink: 'syz.0.17572': attribute type 10 has an invalid length. [ 1043.157053][T21371] __nla_validate_parse: 2 callbacks suppressed [ 1043.157071][T21371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17573'. [ 1043.434840][T21381] syzkaller0: entered promiscuous mode [ 1043.440433][T21381] syzkaller0: entered allmulticast mode [ 1043.447271][T21385] syzkaller0: entered promiscuous mode [ 1043.453710][T21385] syzkaller0: entered allmulticast mode [ 1043.693885][T21396] sch_tbf: burst 4095 is lower than device lo mtu (65550) ! [ 1043.731103][T21409] syzkaller0: entered promiscuous mode [ 1043.736851][T21409] syzkaller0: entered allmulticast mode [ 1044.516975][T17332] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1044.529941][T17332] CPU: 0 UID: 0 PID: 17332 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1044.529997][T17332] Tainted: [W]=WARN [ 1044.530019][T17332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1044.530035][T17332] Call Trace: [ 1044.530045][T17332] [ 1044.530055][T17332] __dump_stack+0x1d/0x30 [ 1044.530148][T17332] dump_stack_lvl+0x95/0xd0 [ 1044.530188][T17332] dump_stack+0x15/0x1b [ 1044.530213][T17332] dump_header+0x80/0x240 [ 1044.530235][T17332] oom_kill_process+0x295/0x350 [ 1044.530355][T17332] out_of_memory+0x97d/0xb80 [ 1044.530386][T17332] try_charge_memcg+0x62e/0xa10 [ 1044.530456][T17332] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1044.530501][T17332] __swap_cache_prepare_and_add+0x386/0x530 [ 1044.530611][T17332] swap_cache_alloc_folio+0xa2/0x120 [ 1044.530651][T17332] swap_cluster_readahead+0x26e/0x3d0 [ 1044.530782][T17332] swapin_readahead+0xde/0x840 [ 1044.530823][T17332] ? __rcu_read_unlock+0x4e/0x70 [ 1044.530849][T17332] ? __perf_event_task_sched_in+0xa65/0xad0 [ 1044.530885][T17332] ? __list_add_valid_or_report+0x38/0xe0 [ 1044.531003][T17332] ? __rcu_read_unlock+0x4e/0x70 [ 1044.531102][T17332] ? swap_cache_get_folio+0x26f/0x280 [ 1044.531210][T17332] do_swap_page+0x30d/0x2220 [ 1044.531248][T17332] ? __schedule+0x93c/0xd40 [ 1044.531278][T17332] ? __rcu_read_lock+0x36/0x50 [ 1044.531300][T17332] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1044.531463][T17332] handle_mm_fault+0xb40/0x3020 [ 1044.531592][T17332] ? vma_start_read+0x1c7/0x2c0 [ 1044.531628][T17332] do_user_addr_fault+0x62f/0x1050 [ 1044.531738][T17332] ? trace_page_fault_user+0x1f/0xe0 [ 1044.531774][T17332] exc_page_fault+0x62/0xa0 [ 1044.531832][T17332] asm_exc_page_fault+0x26/0x30 [ 1044.531858][T17332] RIP: 0033:0x7f18a64d7917 [ 1044.531878][T17332] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1044.531897][T17332] RSP: 002b:00007fff52270f80 EFLAGS: 00010202 [ 1044.531947][T17332] RAX: 0000000000000000 RBX: 000055557254e500 RCX: 00007f18a64d7917 [ 1044.531963][T17332] RDX: 00007fff52270fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1044.531997][T17332] RBP: 00007fff5227102c R08: 0000000000000000 R09: 0000000000000000 [ 1044.532008][T17332] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1044.532021][T17332] R13: 00000000000927c0 R14: 00000000000fb92e R15: 00007fff52271080 [ 1044.532077][T17332] [ 1044.532123][T17332] memory: usage 307200kB, limit 307200kB, failcnt 5180 [ 1044.801169][T21433] netlink: 'syz.4.17593': attribute type 1 has an invalid length. [ 1044.813112][T21433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17593'. [ 1044.931792][T17332] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 1044.939758][T17332] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1044.947122][T17332] Memory cgroup stats for /syz3: [ 1044.947359][T17332] cache 0 [ 1044.955270][T17332] rss 0 [ 1044.958126][T17332] shmem 0 [ 1044.961121][T17332] mapped_file 0 [ 1044.969440][T17332] dirty 0 [ 1044.973165][T17332] writeback 0 [ 1044.976890][T17332] workingset_refault_anon 7136 [ 1044.981968][T17332] workingset_refault_file 6579 [ 1044.986860][T17332] swap 200704 [ 1044.990573][T17332] swapcached 75542528 [ 1044.994641][T17332] pgpgin 1136241 [ 1044.998263][T17332] pgpgout 1136238 [ 1045.001912][T17332] pgfault 1055717 [ 1045.005618][T17332] pgmajfault 361 [ 1045.009354][T17332] inactive_anon 0 [ 1045.013009][T17332] active_anon 0 [ 1045.017838][T17332] inactive_file 0 [ 1045.021575][T17332] active_file 12288 [ 1045.025447][T17332] unevictable 0 [ 1045.029125][T17332] hierarchical_memory_limit 314572800 [ 1045.034840][T17332] hierarchical_memsw_limit 9223372036854771712 [ 1045.041286][T17332] total_cache 0 [ 1045.044861][T17332] total_rss 0 [ 1045.048263][T17332] total_shmem 0 [ 1045.051807][T17332] total_mapped_file 0 [ 1045.055966][T17332] total_dirty 0 [ 1045.059497][T17332] total_writeback 0 [ 1045.063347][T17332] total_workingset_refault_anon 7136 [ 1045.069224][T17332] total_workingset_refault_file 6579 [ 1045.076576][T17332] total_swap 200704 [ 1045.080651][T17332] total_swapcached 75542528 [ 1045.127380][T17332] total_pgpgin 1136241 [ 1045.131613][T17332] total_pgpgout 1136238 [ 1045.136338][T17332] total_pgfault 1055717 [ 1045.140598][T17332] total_pgmajfault 361 [ 1045.144730][T17332] total_inactive_anon 0 [ 1045.160761][T21441] netlink: 'syz.4.17594': attribute type 10 has an invalid length. [ 1045.176313][T21441] loop4: detected capacity change from 0 to 512 [ 1045.186443][T21441] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1045.194623][T21441] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.17594: ea_inode with extended attributes [ 1045.207554][T21441] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1045.208068][T21441] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17594: error while reading EA inode 11 err=-117 [ 1045.217327][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1045.217345][ C1] EXT4-fs (loop4): initial error at time 1773123526: ext4_xattr_inode_iget:441: inode 11 [ 1045.217390][ C1] EXT4-fs (loop4): last error at time 1773123526: ext4_xattr_inode_iget:441: inode 11 [ 1045.255812][T21441] loop4: lost filesystem error report for type 5 error -117 [ 1045.256694][T17332] total_active_anon 0 [ 1045.271857][T21441] EXT4-fs (loop4): 1 orphan inode deleted [ 1045.278569][T21441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1045.298725][T17332] total_inactive_file 0 [ 1045.303117][T17332] total_active_file 12288 [ 1045.307600][T17332] total_unevictable 0 [ 1045.313237][T17332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17589,pid=21416,uid=0 [ 1045.362586][T17332] Memory cgroup out of memory: Killed process 21416 (syz.3.17589) total-vm:94160kB, anon-rss:1232kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1045.664408][T21446] syzkaller0: entered promiscuous mode [ 1045.677539][T21446] syzkaller0: entered allmulticast mode [ 1045.829158][T21456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17601'. [ 1046.097642][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.108069][T21466] netlink: 'syz.0.17604': attribute type 1 has an invalid length. [ 1046.119816][T21468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17605'. [ 1046.280887][T21466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17604'. [ 1046.296268][T21468] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17605'. [ 1046.393554][T21487] syzkaller0: entered promiscuous mode [ 1046.428530][T21487] syzkaller0: entered allmulticast mode [ 1047.368034][T21526] netlink: 'syz.4.17624': attribute type 1 has an invalid length. [ 1047.380756][T21526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17624'. [ 1047.545312][T21539] syzkaller0: entered promiscuous mode [ 1047.561148][T21539] syzkaller0: entered allmulticast mode [ 1048.761822][T21601] syzkaller0: entered promiscuous mode [ 1048.775007][T21601] syzkaller0: entered allmulticast mode [ 1049.708446][T21634] syzkaller0: entered promiscuous mode [ 1049.726234][T21634] syzkaller0: entered allmulticast mode [ 1050.920280][T21661] syzkaller0: entered promiscuous mode [ 1050.931014][T21661] syzkaller0: entered allmulticast mode [ 1051.102725][T21676] netlink: 'syz.3.17676': attribute type 1 has an invalid length. [ 1051.139535][T21676] netlink: 'syz.3.17676': attribute type 2 has an invalid length. [ 1051.152031][T21676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17676'. [ 1051.239765][T21680] syzkaller0: entered promiscuous mode [ 1051.266217][T21680] syzkaller0: entered allmulticast mode [ 1051.400762][T21683] syzkaller0: entered promiscuous mode [ 1051.440041][T21683] syzkaller0: entered allmulticast mode [ 1052.295559][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17684'. [ 1052.435460][T21707] netlink: 'syz.3.17688': attribute type 1 has an invalid length. [ 1052.459687][T21707] netlink: 'syz.3.17688': attribute type 2 has an invalid length. [ 1052.477146][T21707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17688'. [ 1052.502883][T21711] syzkaller0: entered promiscuous mode [ 1052.514884][T21711] syzkaller0: entered allmulticast mode [ 1052.994265][T21730] syzkaller0: entered promiscuous mode [ 1053.020430][T21730] syzkaller0: entered allmulticast mode [ 1053.244849][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17704'. [ 1053.399443][T21751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17704'. [ 1053.912279][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17720'. [ 1054.061404][T21798] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17720'. [ 1054.682471][T21809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21809 comm=syz.3.17725 [ 1055.420442][T21851] syzkaller0: entered promiscuous mode [ 1055.436875][T21851] syzkaller0: entered allmulticast mode [ 1055.612222][T21832] chnl_net:caif_netlink_parms(): no params data found [ 1055.685618][T21832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.713215][T21832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.734531][T21832] bridge_slave_0: entered allmulticast mode [ 1055.756393][T21832] bridge_slave_0: entered promiscuous mode [ 1055.777600][T21832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.801140][T21832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.823700][T21832] bridge_slave_1: entered allmulticast mode [ 1055.845327][T21832] bridge_slave_1: entered promiscuous mode [ 1055.925312][T21832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.958789][T21832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.010650][T21832] team0: Port device team_slave_0 added [ 1056.017497][T21832] team0: Port device team_slave_1 added [ 1056.040460][T21832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.055840][T21832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.084817][T21832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.099440][T21832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.113526][T21832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.167760][T21832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.248182][T21832] hsr_slave_0: entered promiscuous mode [ 1056.269208][T21832] hsr_slave_1: entered promiscuous mode [ 1056.306624][T21832] debugfs: 'hsr0' already exists in 'hsr' [ 1056.321015][T21832] Cannot create hsr debugfs directory [ 1056.433171][T21832] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.464828][T21832] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1056.475644][T21832] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1056.485146][T21832] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1056.553828][T21832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.573013][T21832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.595677][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.602874][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.633298][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.640423][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.675055][T13888] syz_tun (unregistering): left allmulticast mode [ 1056.726873][T21832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.846775][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.877686][T21832] veth0_vlan: entered promiscuous mode [ 1056.900821][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.926390][T21832] veth1_vlan: entered promiscuous mode [ 1056.951654][T21832] veth0_macvtap: entered promiscuous mode [ 1056.964070][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.980452][T21832] veth1_macvtap: entered promiscuous mode [ 1057.013014][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.034691][T21832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.052936][T21832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.064136][ T4308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.098277][ T4308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.107931][ T4308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.128985][ T50] bridge_slave_1: left allmulticast mode [ 1057.144916][ T50] bridge_slave_1: left promiscuous mode [ 1057.151957][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.160395][ T50] bridge_slave_0: left allmulticast mode [ 1057.166296][ T50] bridge_slave_0: left promiscuous mode [ 1057.171994][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.275682][ T50] bond1 (unregistering): Released all slaves [ 1057.287679][ T4308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.363072][ T50] tipc: Left network mode [ 1057.408725][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17735'. [ 1057.458606][ T50] hsr_slave_0: left promiscuous mode [ 1057.491939][ T50] hsr_slave_1: left promiscuous mode [ 1057.524248][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.568168][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.601935][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.645661][ T50] veth1_macvtap: left promiscuous mode [ 1057.668960][ T50] veth0_macvtap: left promiscuous mode [ 1057.689477][ T50] veth1_vlan: left promiscuous mode [ 1057.695557][ T50] veth0_vlan: left promiscuous mode [ 1058.051987][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1058.066520][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1058.215956][T21949] netlink: 52 bytes leftover after parsing attributes in process `syz.5.17735'. [ 1058.342430][T21975] syzkaller0: entered promiscuous mode [ 1058.351922][T21975] syzkaller0: entered allmulticast mode [ 1058.480224][T21922] chnl_net:caif_netlink_parms(): no params data found [ 1058.538209][T21922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.546437][T21922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.554454][T21922] bridge_slave_0: entered allmulticast mode [ 1058.562259][T21922] bridge_slave_0: entered promiscuous mode [ 1058.571302][T21922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.579252][T21922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.586855][T21922] bridge_slave_1: entered allmulticast mode [ 1058.593811][T21922] bridge_slave_1: entered promiscuous mode [ 1058.615539][T21922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.626926][T21922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.647690][T21922] team0: Port device team_slave_0 added [ 1058.654617][T21922] team0: Port device team_slave_1 added [ 1058.673011][T21922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1058.680172][T21922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.706364][T21922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.720520][T21922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.727895][T21922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.762821][T21922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.794249][T21922] hsr_slave_0: entered promiscuous mode [ 1058.801069][T21922] hsr_slave_1: entered promiscuous mode [ 1058.806948][T21922] debugfs: 'hsr0' already exists in 'hsr' [ 1058.813032][T21922] Cannot create hsr debugfs directory [ 1058.890939][T21922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1058.900980][T21922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1058.910663][T21922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1058.920478][T21922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1058.940927][T21922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.948154][T21922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.955588][T21922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.962738][T21922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.994219][T21922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.006406][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.016123][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.030044][T21922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.041864][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.048986][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.068497][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.075708][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.153951][T21922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.272585][T21922] veth0_vlan: entered promiscuous mode [ 1059.280530][T21922] veth1_vlan: entered promiscuous mode [ 1059.296708][T21922] veth0_macvtap: entered promiscuous mode [ 1059.306312][T21922] veth1_macvtap: entered promiscuous mode [ 1059.321075][T21922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.332710][T21922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.344265][ T4314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.353304][ T4314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.362347][ T4314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.371295][ T4314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.411639][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17775'. [ 1059.719784][T22087] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17775'. [ 1060.164301][T22104] syzkaller0: entered promiscuous mode [ 1060.169973][T22104] syzkaller0: entered allmulticast mode [ 1061.346793][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17792'. [ 1061.517388][T22137] syz.3.17791 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1061.549562][T22144] netlink: 75 bytes leftover after parsing attributes in process `syz.1.17793'. [ 1061.584929][T22137] CPU: 0 UID: 0 PID: 22137 Comm: syz.3.17791 Tainted: G W syzkaller #0 PREEMPT(full) [ 1061.584969][T22137] Tainted: [W]=WARN [ 1061.584978][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.584994][T22137] Call Trace: [ 1061.585002][T22137] [ 1061.585010][T22137] __dump_stack+0x1d/0x30 [ 1061.585076][T22137] dump_stack_lvl+0x95/0xd0 [ 1061.585097][T22137] dump_stack+0x15/0x1b [ 1061.585119][T22137] dump_header+0x80/0x240 [ 1061.585143][T22137] oom_kill_process+0x295/0x350 [ 1061.585165][T22137] out_of_memory+0x97d/0xb80 [ 1061.585197][T22137] try_charge_memcg+0x62e/0xa10 [ 1061.585307][T22137] obj_cgroup_charge_pages+0x23/0xc0 [ 1061.585351][T22137] __memcg_kmem_charge_page+0x9e/0x170 [ 1061.585444][T22137] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1061.585488][T22137] alloc_pages_mpol+0xb3/0x260 [ 1061.585583][T22137] alloc_pages_noprof+0x8f/0x130 [ 1061.585677][T22137] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1061.585756][T22137] __kvmalloc_node_noprof+0x3d4/0x650 [ 1061.585843][T22137] ? ip_set_alloc+0x24/0x30 [ 1061.585869][T22137] ? ip_set_alloc+0x24/0x30 [ 1061.585943][T22137] ? __kmalloc_cache_noprof+0x18a/0x410 [ 1061.585976][T22137] ip_set_alloc+0x24/0x30 [ 1061.586010][T22137] hash_netiface_create+0x282/0x740 [ 1061.586048][T22137] ? __pfx_hash_netiface_create+0x10/0x10 [ 1061.586077][T22137] ip_set_create+0x3cf/0x970 [ 1061.586190][T22137] ? __nla_parse+0x40/0x60 [ 1061.586221][T22137] nfnetlink_rcv_msg+0x509/0x5d0 [ 1061.586339][T22137] netlink_rcv_skb+0x123/0x220 [ 1061.586366][T22137] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1061.586401][T22137] nfnetlink_rcv+0x167/0x1720 [ 1061.586435][T22137] ? __account_obj_stock+0x211/0x350 [ 1061.586488][T22137] ? mas_next_slot+0x69b/0x6f0 [ 1061.586517][T22137] ? __rcu_read_unlock+0x4e/0x70 [ 1061.586546][T22137] ? mt_find+0x291/0x3d0 [ 1061.586659][T22137] ? cmp_ex_search+0x25/0x40 [ 1061.586686][T22137] ? bsearch+0x95/0xc0 [ 1061.586715][T22137] ? __pfx_cmp_ex_search+0x10/0x10 [ 1061.586869][T22137] ? __import_iovec+0x12b/0x530 [ 1061.586912][T22137] ? search_extable+0x53/0x80 [ 1061.586939][T22137] ? __import_iovec+0x12b/0x530 [ 1061.586975][T22137] ? _raw_spin_lock_bh+0x56/0xb0 [ 1061.587042][T22137] ? _raw_spin_unlock_bh+0x18/0x20 [ 1061.587144][T22137] ? selinux_nlmsg_lookup+0x99/0x890 [ 1061.587243][T22137] ? __rcu_read_unlock+0x33/0x70 [ 1061.587297][T22137] ? __netlink_lookup+0x276/0x2b0 [ 1061.587339][T22137] netlink_unicast+0x5c0/0x690 [ 1061.587373][T22137] netlink_sendmsg+0x5c8/0x6f0 [ 1061.587462][T22137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.587527][T22137] ____sys_sendmsg+0x563/0x5b0 [ 1061.587579][T22137] ___sys_sendmsg+0x195/0x1e0 [ 1061.587630][T22137] __x64_sys_sendmsg+0xd4/0x160 [ 1061.587727][T22137] x64_sys_call+0x194c/0x3020 [ 1061.587762][T22137] do_syscall_64+0x12c/0x370 [ 1061.587789][T22137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.587846][T22137] RIP: 0033:0x7f18a651c799 [ 1061.587937][T22137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.587956][T22137] RSP: 002b:00007f18a4f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.587981][T22137] RAX: ffffffffffffffda RBX: 00007f18a6795fa0 RCX: 00007f18a651c799 [ 1061.587998][T22137] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 1061.588013][T22137] RBP: 00007f18a65b2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1061.588072][T22137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.588104][T22137] R13: 00007f18a6796038 R14: 00007f18a6795fa0 R15: 00007fff52270c88 [ 1061.588123][T22137] [ 1061.588141][T22137] memory: usage 307200kB, limit 307200kB, failcnt 5625 [ 1061.718964][T22145] netlink: 52 bytes leftover after parsing attributes in process `syz.6.17792'. [ 1061.721358][T22137] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1061.970044][T22137] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 1061.977414][T22137] Memory cgroup stats for /syz3: [ 1061.977836][T22137] cache 4096 [ 1061.986089][T22137] rss 8192 [ 1061.989167][T22137] shmem 0 [ 1061.992496][T22137] mapped_file 4096 [ 1061.996238][T22137] dirty 0 [ 1061.999220][T22137] writeback 0 [ 1062.005342][T22137] workingset_refault_anon 7161 [ 1062.010289][T22137] workingset_refault_file 7252 [ 1062.015377][T22137] swap 196608 [ 1062.018776][T22137] swapcached 75689984 [ 1062.023069][T22137] pgpgin 1143887 [ 1062.026952][T22137] pgpgout 1143881 [ 1062.030612][T22137] pgfault 1064208 [ 1062.035646][T22137] pgmajfault 381 [ 1062.039344][T22137] inactive_anon 0 [ 1062.043054][T22137] active_anon 8192 [ 1062.047529][T22137] inactive_file 0 [ 1062.051267][T22137] active_file 16384 [ 1062.062016][T22137] unevictable 0 [ 1062.069428][T22137] hierarchical_memory_limit 314572800 [ 1062.083942][T22137] hierarchical_memsw_limit 9223372036854771712 [ 1062.104034][T22137] total_cache 4096 [ 1062.112199][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17804'. [ 1062.127966][T22137] total_rss 8192 [ 1062.134776][T22137] total_shmem 0 [ 1062.138346][T22137] total_mapped_file 4096 [ 1062.143093][T22151] netlink: 75 bytes leftover after parsing attributes in process `syz.1.17804'. [ 1062.152646][T22137] total_dirty 0 [ 1062.161250][T22137] total_writeback 0 [ 1062.171789][T22137] total_workingset_refault_anon 7161 [ 1062.179509][T22137] total_workingset_refault_file 7252 [ 1062.185081][T22137] total_swap 196608 [ 1062.191175][T22137] total_swapcached 75689984 [ 1062.198557][T22137] total_pgpgin 1143887 [ 1062.207249][T22137] total_pgpgout 1143881 [ 1062.211437][T22137] total_pgfault 1064208 [ 1062.215873][T22137] total_pgmajfault 381 [ 1062.220342][T22137] total_inactive_anon 0 [ 1062.224709][T22137] total_active_anon 8192 [ 1062.231186][T22137] total_inactive_file 0 [ 1062.239381][T22137] total_active_file 16384 [ 1062.243983][T22137] total_unevictable 0 [ 1062.342822][T22137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17791,pid=22136,uid=0 [ 1062.372116][T22137] Memory cgroup out of memory: Killed process 22136 (syz.3.17791) total-vm:94160kB, anon-rss:1228kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1062.510551][T22166] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17801'. [ 1063.067778][T22178] syzkaller0: entered promiscuous mode [ 1063.073637][T22178] syzkaller0: entered allmulticast mode [ 1063.160306][T22185] __nla_validate_parse: 1 callbacks suppressed [ 1063.160329][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17808'. [ 1063.461624][T22197] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17808'. [ 1063.899957][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17820'. [ 1063.920834][T22214] netlink: 75 bytes leftover after parsing attributes in process `syz.6.17820'. [ 1064.197060][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17828'. [ 1064.489265][T22240] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17828'. [ 1064.740784][T22249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22249 comm=syz.5.17833 [ 1065.371913][ T4308] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.459056][ T4308] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.507688][ T4308] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.601265][ T4308] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.774193][ T4308] bridge_slave_1: left allmulticast mode [ 1065.779971][ T4308] bridge_slave_1: left promiscuous mode [ 1065.798068][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.816130][ T4308] bridge_slave_0: left allmulticast mode [ 1065.821825][ T4308] bridge_slave_0: left promiscuous mode [ 1065.837294][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.945229][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.964768][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.986127][ T4308] bond0 (unregistering): Released all slaves [ 1066.053807][ T4308] hsr_slave_0: left promiscuous mode [ 1066.079603][ T4308] hsr_slave_1: left promiscuous mode [ 1066.086931][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.104901][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.123923][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.131459][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.150161][ T4308] veth1_macvtap: left promiscuous mode [ 1066.161483][ T4308] veth0_macvtap: left promiscuous mode [ 1066.176923][ T4308] veth1_vlan: left promiscuous mode [ 1066.189335][ T4308] veth0_vlan: left promiscuous mode [ 1066.221225][T22279] syz.1.17849 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1066.275322][T22279] CPU: 1 UID: 0 PID: 22279 Comm: syz.1.17849 Tainted: G W syzkaller #0 PREEMPT(full) [ 1066.275365][T22279] Tainted: [W]=WARN [ 1066.275371][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.275398][T22279] Call Trace: [ 1066.275405][T22279] [ 1066.275414][T22279] __dump_stack+0x1d/0x30 [ 1066.275442][T22279] dump_stack_lvl+0x95/0xd0 [ 1066.275464][T22279] dump_stack+0x15/0x1b [ 1066.275500][T22279] dump_header+0x80/0x240 [ 1066.275527][T22279] oom_kill_process+0x295/0x350 [ 1066.275554][T22279] out_of_memory+0x97d/0xb80 [ 1066.275582][T22279] try_charge_memcg+0x62e/0xa10 [ 1066.275623][T22279] obj_cgroup_charge_pages+0x23/0xc0 [ 1066.275716][T22279] __memcg_kmem_charge_page+0x9e/0x170 [ 1066.275752][T22279] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1066.275790][T22279] alloc_pages_mpol+0xb3/0x260 [ 1066.275872][T22279] alloc_pages_noprof+0x8f/0x130 [ 1066.275907][T22279] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1066.275943][T22279] __kvmalloc_node_noprof+0x3d4/0x650 [ 1066.276023][T22279] ? ip_set_alloc+0x24/0x30 [ 1066.276047][T22279] ? ip_set_alloc+0x24/0x30 [ 1066.276081][T22279] ? __kmalloc_cache_noprof+0x18a/0x410 [ 1066.276205][T22279] ip_set_alloc+0x24/0x30 [ 1066.276234][T22279] hash_netiface_create+0x282/0x740 [ 1066.276262][T22279] ? __pfx_hash_netiface_create+0x10/0x10 [ 1066.276348][T22279] ip_set_create+0x3cf/0x970 [ 1066.276387][T22279] ? __nla_parse+0x40/0x60 [ 1066.276413][T22279] nfnetlink_rcv_msg+0x509/0x5d0 [ 1066.276508][T22279] netlink_rcv_skb+0x123/0x220 [ 1066.276537][T22279] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1066.276593][T22279] nfnetlink_rcv+0x167/0x1720 [ 1066.276644][T22279] ? __account_obj_stock+0x211/0x350 [ 1066.276663][T22279] ? mas_next_slot+0x69b/0x6f0 [ 1066.276682][T22279] ? __rcu_read_unlock+0x4e/0x70 [ 1066.276702][T22279] ? mt_find+0x291/0x3d0 [ 1066.276726][T22279] ? cmp_ex_search+0x25/0x40 [ 1066.276808][T22279] ? bsearch+0x95/0xc0 [ 1066.276842][T22279] ? __pfx_cmp_ex_search+0x10/0x10 [ 1066.276867][T22279] ? __import_iovec+0x12b/0x530 [ 1066.276908][T22279] ? search_extable+0x53/0x80 [ 1066.276927][T22279] ? __import_iovec+0x12b/0x530 [ 1066.277065][T22279] ? _raw_spin_lock_bh+0x56/0xb0 [ 1066.277093][T22279] ? _raw_spin_unlock_bh+0x18/0x20 [ 1066.277122][T22279] ? selinux_nlmsg_lookup+0x99/0x890 [ 1066.277153][T22279] ? __rcu_read_unlock+0x33/0x70 [ 1066.277227][T22279] ? __netlink_lookup+0x276/0x2b0 [ 1066.277332][T22279] netlink_unicast+0x5c0/0x690 [ 1066.277363][T22279] netlink_sendmsg+0x5c8/0x6f0 [ 1066.277406][T22279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.277499][T22279] ____sys_sendmsg+0x563/0x5b0 [ 1066.277579][T22279] ___sys_sendmsg+0x195/0x1e0 [ 1066.277622][T22279] __x64_sys_sendmsg+0xd4/0x160 [ 1066.277661][T22279] x64_sys_call+0x194c/0x3020 [ 1066.277701][T22279] do_syscall_64+0x12c/0x370 [ 1066.277721][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.277792][T22279] RIP: 0033:0x7f0e4628c799 [ 1066.277869][T22279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.277891][T22279] RSP: 002b:00007f0e44ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.277909][T22279] RAX: ffffffffffffffda RBX: 00007f0e46505fa0 RCX: 00007f0e4628c799 [ 1066.277922][T22279] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 1066.277934][T22279] RBP: 00007f0e46322bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1066.277949][T22279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.278021][T22279] R13: 00007f0e46506038 R14: 00007f0e46505fa0 R15: 00007fff44868d68 [ 1066.278044][T22279] [ 1066.280324][T22279] memory: usage 307180kB, limit 307200kB, failcnt 2923 [ 1066.641555][T22279] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 1066.649534][T22279] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 1066.656848][T22279] Memory cgroup stats for /syz1: [ 1066.657071][T22279] cache 4096 [ 1066.665422][T22279] rss 4096 [ 1066.668653][T22279] shmem 0 [ 1066.671634][T22279] mapped_file 4096 [ 1066.675373][T22279] dirty 0 [ 1066.678340][T22279] writeback 0 [ 1066.700093][T22279] workingset_refault_anon 6451 [ 1066.704945][T22279] workingset_refault_file 6161 [ 1066.709743][T22279] swap 204800 [ 1066.721406][T22279] swapcached 19156992 [ 1066.725523][T22279] pgpgin 1228492 [ 1066.729077][T22279] pgpgout 1228479 [ 1066.733713][ T4308] team0 (unregistering): Port device team_slave_1 removed [ 1066.742988][T22279] pgfault 1004620 [ 1066.746892][ T4308] team0 (unregistering): Port device team_slave_0 removed [ 1066.753939][T22279] pgmajfault 177 [ 1066.757662][T22279] inactive_anon 4096 [ 1066.761569][T22279] active_anon 0 [ 1066.765464][T22279] inactive_file 0 [ 1066.769125][T22279] active_file 49152 [ 1066.772944][T22279] unevictable 0 [ 1066.776643][T22279] hierarchical_memory_limit 314572800 [ 1066.782141][T22279] hierarchical_memsw_limit 9223372036854771712 [ 1066.788556][T22279] total_cache 4096 [ 1066.792341][T22279] total_rss 4096 [ 1066.795931][T22279] total_shmem 0 [ 1066.807093][T22279] total_mapped_file 4096 [ 1066.811368][T22279] total_dirty 0 [ 1066.814851][T22279] total_writeback 0 [ 1066.834218][T22279] total_workingset_refault_anon 6451 [ 1066.843338][T22279] total_workingset_refault_file 6161 [ 1066.866391][T22279] total_swap 204800 [ 1066.870385][T22279] total_swapcached 19156992 [ 1066.881671][T22279] total_pgpgin 1228492 [ 1066.885781][T22279] total_pgpgout 1228479 [ 1066.895343][T22279] total_pgfault 1004620 [ 1066.899717][T22279] total_pgmajfault 177 [ 1066.913658][T22279] total_inactive_anon 4096 [ 1066.918211][T22279] total_active_anon 0 [ 1066.922291][T22279] total_inactive_file 0 [ 1066.937125][T22290] chnl_net:caif_netlink_parms(): no params data found [ 1066.944371][T22279] total_active_file 49152 [ 1066.949167][T22279] total_unevictable 0 [ 1066.953180][T22279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.17849,pid=22278,uid=0 [ 1066.968770][T22279] Memory cgroup out of memory: Killed process 22278 (syz.1.17849) total-vm:94160kB, anon-rss:1220kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1067.087799][T22290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.105823][T22290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.116684][T22290] bridge_slave_0: entered allmulticast mode [ 1067.123201][T22290] bridge_slave_0: entered promiscuous mode [ 1067.156983][T22290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.180926][T22290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.202299][T22290] bridge_slave_1: entered allmulticast mode [ 1067.209074][T22290] bridge_slave_1: entered promiscuous mode [ 1067.343012][T22290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.364281][T22290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.402856][T22355] syzkaller0: entered promiscuous mode [ 1067.408443][T22355] syzkaller0: entered allmulticast mode [ 1067.432806][T22290] team0: Port device team_slave_0 added [ 1067.439667][T22290] team0: Port device team_slave_1 added [ 1067.451645][ T4308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.474007][T22290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.482033][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.510391][T22290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.537598][ T4308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.555747][T22290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.562929][T22290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.590987][T22290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.621173][ T4308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.654002][T22290] hsr_slave_0: entered promiscuous mode [ 1067.660370][T22290] hsr_slave_1: entered promiscuous mode [ 1067.666719][T22290] debugfs: 'hsr0' already exists in 'hsr' [ 1067.673854][T22290] Cannot create hsr debugfs directory [ 1067.687269][ T4308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.721111][T22318] chnl_net:caif_netlink_parms(): no params data found [ 1067.859269][T22318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.866540][T22318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.873748][T22318] bridge_slave_0: entered allmulticast mode [ 1067.880357][T22318] bridge_slave_0: entered promiscuous mode [ 1067.890478][T22318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.897810][T22318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.905146][T22318] bridge_slave_1: entered allmulticast mode [ 1067.911960][T22318] bridge_slave_1: entered promiscuous mode [ 1067.955653][ T4308] bridge_slave_1: left allmulticast mode [ 1067.961623][ T4308] bridge_slave_1: left promiscuous mode [ 1067.967290][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.976114][ T4308] bridge_slave_0: left allmulticast mode [ 1067.981877][ T4308] bridge_slave_0: left promiscuous mode [ 1067.987607][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.069303][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.079702][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.089621][ T4308] bond0 (unregistering): Released all slaves [ 1068.098759][T22318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.114938][T22318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.127702][ T4308] hsr_slave_0: left promiscuous mode [ 1068.136197][ T4308] hsr_slave_1: left promiscuous mode [ 1068.141859][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.155019][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.162706][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.170416][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.182228][ T4308] veth1_macvtap: left promiscuous mode [ 1068.188134][ T4308] veth0_macvtap: left promiscuous mode [ 1068.193694][ T4308] veth1_vlan: left promiscuous mode [ 1068.199182][ T4308] veth0_vlan: left promiscuous mode [ 1068.276013][ T4308] team0 (unregistering): Port device team_slave_1 removed [ 1068.286606][ T4308] team0 (unregistering): Port device team_slave_0 removed [ 1068.341390][T22318] team0: Port device team_slave_0 added [ 1068.351582][T22318] team0: Port device team_slave_1 added [ 1068.373298][T22290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1068.383816][T22290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1068.398133][T22290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1068.411971][T22318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.418992][T22318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.445247][T22318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.457605][T22290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1068.522195][T22318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.529912][T22318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.556450][T22318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.605208][T22318] hsr_slave_0: entered promiscuous mode [ 1068.713753][T22318] hsr_slave_1: entered promiscuous mode [ 1068.719808][T22318] debugfs: 'hsr0' already exists in 'hsr' [ 1068.725626][T22318] Cannot create hsr debugfs directory [ 1068.828079][T22290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.954303][T22428] loop4: detected capacity change from 0 to 512 [ 1068.993894][T22428] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1069.001125][T22428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.17872: ea_inode with extended attributes [ 1069.013963][T22428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1069.017788][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1069.033368][ C1] EXT4-fs (loop4): initial error at time 1773123548: ext4_xattr_inode_iget:441: inode 11 [ 1069.043249][ C1] EXT4-fs (loop4): last error at time 1773123548: ext4_xattr_inode_iget:441: inode 11 [ 1069.054057][T22428] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.17872: error while reading EA inode 11 err=-117 [ 1069.066502][T22428] loop4: lost filesystem error report for type 5 error -117 [ 1069.073601][T22428] EXT4-fs (loop4): 1 orphan inode deleted [ 1069.087681][T22428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1069.262012][T22290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.315841][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.323019][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.340087][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.347246][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.372159][ T4308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.383896][T22385] chnl_net:caif_netlink_parms(): no params data found [ 1069.434902][ T4308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.462965][T22385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.472033][T22385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.480561][T22385] bridge_slave_0: entered allmulticast mode [ 1069.487270][T22385] bridge_slave_0: entered promiscuous mode [ 1069.496980][T22318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1069.508335][ T4308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.519984][T22385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.527185][T22385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.535433][T22385] bridge_slave_1: entered allmulticast mode [ 1069.542220][T22385] bridge_slave_1: entered promiscuous mode [ 1069.560889][T22385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.571585][T22385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.591676][T22385] team0: Port device team_slave_0 added [ 1069.598908][T22385] team0: Port device team_slave_1 added [ 1069.607747][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.608761][T22290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1069.630829][T22290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.644239][T22318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1069.668769][T22318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1069.686628][T22452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22452 comm=syz.1.17875 [ 1069.701148][ T4308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.754313][T22318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1069.781267][T22385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.791276][T22385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.820719][T22385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.834770][T22385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.842297][T22385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.868554][T22385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.901593][T22458] syzkaller0: entered promiscuous mode [ 1069.907162][T22458] syzkaller0: entered allmulticast mode [ 1069.964391][T22459] syzkaller0: entered promiscuous mode [ 1069.970086][T22459] syzkaller0: entered allmulticast mode [ 1069.991321][T22385] hsr_slave_0: entered promiscuous mode [ 1069.998742][T22385] hsr_slave_1: entered promiscuous mode [ 1070.005150][T22385] debugfs: 'hsr0' already exists in 'hsr' [ 1070.011020][T22385] Cannot create hsr debugfs directory [ 1070.050873][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17878'. [ 1070.199451][T22290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.674810][T22492] loop1: detected capacity change from 0 to 512 [ 1070.699404][ T4308] bond1 (unregistering): Released all slaves [ 1070.711831][ T4308] bond0 (unregistering): Released all slaves [ 1070.724260][ T4308] bond2 (unregistering): Released all slaves [ 1070.735060][T22492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1070.741975][T22492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.17882: ea_inode with extended attributes [ 1070.754780][T22492] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1070.756572][T22492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.17882: error while reading EA inode 11 err=-117 [ 1070.765752][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1070.765782][ C1] EXT4-fs (loop1): initial error at time 1773123550: ext4_xattr_inode_iget:441: inode 11 [ 1070.765805][ C1] EXT4-fs (loop1): last error at time 1773123550: ext4_xattr_inode_iget:441: inode 11 [ 1070.804119][T22492] loop1: lost filesystem error report for type 5 error -117 [ 1070.809577][T22492] EXT4-fs (loop1): 1 orphan inode deleted [ 1070.823641][T22492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1071.001088][T22476] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17878'. [ 1071.036546][ T4308] tipc: Left network mode [ 1071.057989][ T4308] hsr_slave_0: left promiscuous mode [ 1071.065443][ T4308] hsr_slave_1: left promiscuous mode [ 1071.073108][ T4308] veth1_macvtap: left promiscuous mode [ 1071.089999][ T4308] veth0_macvtap: left promiscuous mode [ 1071.100153][ T4308] veth1_vlan: left promiscuous mode [ 1071.105693][ T4308] veth0_vlan: left promiscuous mode [ 1071.265148][T22318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.279188][T22318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.297321][T22318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1071.307945][T22318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.321906][T15689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.337641][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.344769][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.355912][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.363098][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.393996][T22385] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1071.415705][T22385] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1071.453858][T22385] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1071.462286][T22529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22529 comm=syz.1.17884 [ 1071.482853][T22385] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1071.515380][T22318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.581803][T22544] syzkaller0: entered promiscuous mode [ 1071.587558][T22544] syzkaller0: entered allmulticast mode [ 1071.603842][T22290] veth0_vlan: entered promiscuous mode [ 1071.641631][T22290] veth1_vlan: entered promiscuous mode [ 1071.673337][T22385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.681939][T22290] veth0_macvtap: entered promiscuous mode [ 1071.700701][T22290] veth1_macvtap: entered promiscuous mode [ 1071.733020][T22385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.752796][T22290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.770976][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.778152][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.792605][T22290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.823780][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.830960][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.856739][T22318] veth0_vlan: entered promiscuous mode [ 1071.896142][T22318] veth1_vlan: entered promiscuous mode [ 1071.904310][ T2797] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.938470][T22576] syzkaller0: entered promiscuous mode [ 1071.944086][T22576] syzkaller0: entered allmulticast mode [ 1071.957909][ T2797] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.982984][ T2797] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.004474][ T2797] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.017035][T22318] veth0_macvtap: entered promiscuous mode [ 1072.040190][T22318] veth1_macvtap: entered promiscuous mode [ 1072.068600][T22318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.096691][T22318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.147009][ T3777] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.160563][ T3777] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.179567][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.192552][T22385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.516503][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.772674][T22385] veth0_vlan: entered promiscuous mode [ 1072.802197][T22385] veth1_vlan: entered promiscuous mode [ 1072.834957][T22385] veth0_macvtap: entered promiscuous mode [ 1072.858514][T22385] veth1_macvtap: entered promiscuous mode [ 1072.869716][T22385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.878954][T22385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.905963][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.930066][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.950478][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.987037][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.386796][T22742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22742 comm=syz.9.17925 [ 1073.657142][T22780] syzkaller0: entered promiscuous mode [ 1073.675040][T22780] syzkaller0: entered allmulticast mode [ 1073.895700][T22815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.960293][T22816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.074700][T22828] syzkaller0: entered promiscuous mode [ 1074.080381][T22828] syzkaller0: entered allmulticast mode [ 1074.542096][T22915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.661056][T22925] netlink: 80 bytes leftover after parsing attributes in process `syz.1.17949'. [ 1074.869733][T22937] syzkaller0: entered promiscuous mode [ 1074.879798][T22937] syzkaller0: entered allmulticast mode [ 1074.897592][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17955'. [ 1075.015329][T22955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1075.197565][T22957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17955'. [ 1075.305484][T22973] netlink: 80 bytes leftover after parsing attributes in process `syz.8.17963'. [ 1075.543279][T22990] syzkaller0: entered promiscuous mode [ 1075.549423][T22990] syzkaller0: entered allmulticast mode [ 1075.703943][T23004] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17975'. [ 1075.820435][T23013] netlink: 80 bytes leftover after parsing attributes in process `syz.7.17979'. [ 1075.831595][T23015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17980'. [ 1076.172395][T23029] syzkaller0: entered promiscuous mode [ 1076.178238][T23029] syzkaller0: entered allmulticast mode [ 1076.186174][T23015] netlink: 52 bytes leftover after parsing attributes in process `syz.9.17980'. [ 1076.230291][T23033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1076.249845][T23038] netlink: 'syz.4.17985': attribute type 7 has an invalid length. [ 1076.363657][T23048] netlink: 80 bytes leftover after parsing attributes in process `syz.8.17993'. [ 1076.577282][T23075] netlink: 80 bytes leftover after parsing attributes in process `syz.9.18005'. [ 1076.613402][T23071] syzkaller0: entered promiscuous mode [ 1076.619146][T23071] syzkaller0: entered allmulticast mode [ 1076.878259][T23109] netlink: 24 bytes leftover after parsing attributes in process `syz.9.18019'. [ 1076.887814][T23110] netlink: 80 bytes leftover after parsing attributes in process `syz.1.18020'. [ 1076.897469][T23109] netlink: 87 bytes leftover after parsing attributes in process `syz.9.18019'. [ 1077.231086][T23124] loop9: detected capacity change from 0 to 512 [ 1077.593731][T23124] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1077.600960][T23124] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.18022: ea_inode with extended attributes [ 1077.613909][T23124] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1077.614586][T23124] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.18022: error while reading EA inode 11 err=-117 [ 1077.623776][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1077.623800][ C1] EXT4-fs (loop9): initial error at time 1773123556: ext4_xattr_inode_iget:441: inode 11 [ 1077.623855][ C1] EXT4-fs (loop9): last error at time 1773123556: ext4_xattr_inode_iget:441: inode 11 [ 1077.662276][T23124] loop9: lost filesystem error report for type 5 error -117 [ 1077.669059][T23124] EXT4-fs (loop9): 1 orphan inode deleted [ 1077.694545][T23124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1077.767070][T23125] syzkaller0: entered promiscuous mode [ 1077.772707][T23125] syzkaller0: entered allmulticast mode [ 1077.787262][T23138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.944792][T22385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.956183][T23153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18032'. [ 1078.465028][T23194] loop7: detected capacity change from 0 to 512 [ 1078.578964][T23194] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1078.585886][T23194] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.18045: ea_inode with extended attributes [ 1078.598673][T23194] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1078.599072][T23194] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.18045: error while reading EA inode 11 err=-117 [ 1078.620581][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1078.620601][ C1] EXT4-fs (loop7): initial error at time 1773123557: ext4_xattr_inode_iget:441: inode 11 [ 1078.620640][ C1] EXT4-fs (loop7): last error at time 1773123557: ext4_xattr_inode_iget:441: inode 11 [ 1078.646588][T23194] loop7: lost filesystem error report for type 5 error -117 [ 1078.647000][T23194] EXT4-fs (loop7): 1 orphan inode deleted [ 1078.661019][T23194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1079.158779][T22290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.015450][T23283] loop4: detected capacity change from 0 to 512 [ 1080.114925][T23283] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1080.122546][T23283] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.18074: ea_inode with extended attributes [ 1080.135293][T23283] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1080.137041][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1080.153230][ C1] EXT4-fs (loop4): initial error at time 1773123559: ext4_xattr_inode_iget:441: inode 11 [ 1080.163191][ C1] EXT4-fs (loop4): last error at time 1773123559: ext4_xattr_inode_iget:441: inode 11 [ 1080.176153][T23283] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.18074: error while reading EA inode 11 err=-117 [ 1080.188662][T23283] loop4: lost filesystem error report for type 5 error -117 [ 1080.192450][T23283] EXT4-fs (loop4): 1 orphan inode deleted [ 1080.206520][T23283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1080.720128][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.798637][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.899468][T23357] syzkaller0: entered promiscuous mode [ 1080.905049][T23357] syzkaller0: entered allmulticast mode [ 1081.052433][T23388] __nla_validate_parse: 3 callbacks suppressed [ 1081.052450][T23388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18099'. [ 1081.244547][T23411] sit0: entered allmulticast mode [ 1081.404941][T23413] loop9: detected capacity change from 0 to 512 [ 1081.474093][T23413] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1081.482673][T23413] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.18097: ea_inode with extended attributes [ 1081.495481][T23413] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1081.497030][T23413] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.18097: error while reading EA inode 11 err=-117 [ 1081.506212][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1081.506232][ C1] EXT4-fs (loop9): initial error at time 1773123560: ext4_xattr_inode_iget:441: inode 11 [ 1081.506268][ C1] EXT4-fs (loop9): last error at time 1773123560: ext4_xattr_inode_iget:441: inode 11 [ 1081.544659][T23413] loop9: lost filesystem error report for type 5 error -117 [ 1081.549726][T23413] EXT4-fs (loop9): 1 orphan inode deleted [ 1081.563858][T23413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1081.867095][T23455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18105'. [ 1081.876693][T23455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18105'. [ 1081.980671][T23457] syzkaller0: entered promiscuous mode [ 1081.986496][T23457] syzkaller0: entered allmulticast mode [ 1082.027729][T22385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.071485][T23465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18111'. [ 1083.694256][T23643] loop7: detected capacity change from 0 to 512 [ 1083.735755][T23643] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1083.744533][T23643] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.18120: ea_inode with extended attributes [ 1083.757682][T23643] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1083.757979][T23643] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.18120: error while reading EA inode 11 err=-117 [ 1083.767151][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1083.767169][ C0] EXT4-fs (loop7): initial error at time 1773123562: ext4_xattr_inode_iget:441: inode 11 [ 1083.767211][ C0] EXT4-fs (loop7): last error at time 1773123562: ext4_xattr_inode_iget:441: inode 11 [ 1083.805687][T23643] loop7: lost filesystem error report for type 5 error -117 [ 1083.805990][T23643] EXT4-fs (loop7): 1 orphan inode deleted [ 1083.819692][T23643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1083.967005][T23657] syzkaller0: entered promiscuous mode [ 1083.979457][T23657] syzkaller0: entered allmulticast mode [ 1084.075318][T22290] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.137427][T23674] tipc: Started in network mode [ 1084.142751][T23674] tipc: Node identity 7266b2332e1e, cluster identity 4711 [ 1084.150105][T23674] tipc: Enabled bearer , priority 0 [ 1084.164566][T23674] syzkaller0: entered promiscuous mode [ 1084.170066][T23674] syzkaller0: entered allmulticast mode [ 1084.185557][T23674] tipc: Resetting bearer [ 1084.202919][T23673] tipc: Resetting bearer [ 1084.225185][T23673] tipc: Disabling bearer [ 1084.808111][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18146'. [ 1085.061750][T23766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18148'. [ 1085.090192][T23766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18148'. [ 1085.179035][T23751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18146'. [ 1086.040151][T23823] netlink: 68 bytes leftover after parsing attributes in process `syz.8.18158'. [ 1087.397196][T23918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18170'. [ 1087.437149][T23918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18170'. [ 1087.509343][T23937] tipc: Started in network mode [ 1087.514319][T23937] tipc: Node identity 32f60914d137, cluster identity 4711 [ 1087.521644][T23937] tipc: Enabled bearer , priority 0 [ 1087.529676][T23937] syzkaller0: entered promiscuous mode [ 1087.535282][T23937] syzkaller0: entered allmulticast mode [ 1087.830733][T23944] loop4: detected capacity change from 0 to 512 [ 1088.226435][T23944] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1088.233246][T23944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.18175: ea_inode with extended attributes [ 1088.246355][T23944] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1088.246931][T23944] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.18175: error while reading EA inode 11 err=-117 [ 1088.256131][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1088.256147][ C0] EXT4-fs (loop4): initial error at time 1773123566: ext4_xattr_inode_iget:441: inode 11 [ 1088.256184][ C0] EXT4-fs (loop4): last error at time 1773123566: ext4_xattr_inode_iget:441: inode 11 [ 1088.294605][T23944] loop4: lost filesystem error report for type 5 error -117 [ 1088.301212][T23944] EXT4-fs (loop4): 1 orphan inode deleted [ 1088.314852][T23944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1088.651784][T23941] tipc: Resetting bearer [ 1088.659809][T23936] tipc: Resetting bearer [ 1088.675325][T23936] tipc: Disabling bearer [ 1088.899778][T14899] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.420368][T24011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28815 sclass=netlink_route_socket pid=24011 comm=syz.4.18188 [ 1090.812545][T24109] syzkaller0: entered promiscuous mode [ 1090.883315][T24109] syzkaller0: entered allmulticast mode [ 1091.166146][T24145] syzkaller0: entered promiscuous mode [ 1091.182302][T24145] syzkaller0: entered allmulticast mode [ 1093.073624][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18222'. [ 1093.116909][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18222'. [ 1093.752289][T24242] syzkaller0: entered promiscuous mode [ 1093.769997][T24242] syzkaller0: entered allmulticast mode [ 1094.624412][T24305] syzkaller0: entered promiscuous mode [ 1094.635685][T24305] syzkaller0: entered allmulticast mode [ 1095.608033][T24388] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18256'. [ 1096.734485][T24412] chnl_net:caif_netlink_parms(): no params data found [ 1096.806339][T24412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.813792][T24412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.821156][T24412] bridge_slave_0: entered allmulticast mode [ 1096.829242][T24412] bridge_slave_0: entered promiscuous mode [ 1096.837362][T24412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.846574][T24412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.853916][T24412] bridge_slave_1: entered allmulticast mode [ 1096.860865][T24412] bridge_slave_1: entered promiscuous mode [ 1096.881370][T24412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.892991][T24412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.915610][T24412] team0: Port device team_slave_0 added [ 1096.922261][T24412] team0: Port device team_slave_1 added [ 1096.938123][T24412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.945163][T24412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.971247][T24412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.984305][T24412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.991293][T24412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.019990][ T28] audit: type=1326 audit(1773123575.141:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24485 comm="syz.8.18271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64f0bec799 code=0x0 [ 1097.043281][T24412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.092517][T24412] hsr_slave_0: entered promiscuous mode [ 1097.099581][T24412] hsr_slave_1: entered promiscuous mode [ 1097.106271][T24412] debugfs: 'hsr0' already exists in 'hsr' [ 1097.112216][T24412] Cannot create hsr debugfs directory [ 1097.261713][T24412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.329854][T24412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.395021][T24412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.457687][T24412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.838987][T24412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1097.864746][T24412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1097.985544][T24412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1098.000360][T24502] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1098.018895][T24412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1098.109511][T24412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.136345][T24412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.156433][T22879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.163608][T22879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.195407][T22879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.202587][T22879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.232535][T24412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1098.244271][T24412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1098.319990][T24412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.379821][T24520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.18277'. [ 1098.398186][T24520] netlink: 87 bytes leftover after parsing attributes in process `syz.9.18277'. [ 1098.468382][T24525] syzkaller0: entered promiscuous mode [ 1098.474050][T24525] syzkaller0: entered allmulticast mode [ 1098.594649][T24412] veth0_vlan: entered promiscuous mode [ 1098.607172][T24412] veth1_vlan: entered promiscuous mode [ 1098.627227][T24412] veth0_macvtap: entered promiscuous mode [ 1098.635429][T24412] veth1_macvtap: entered promiscuous mode [ 1098.647871][T24412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.686812][T24412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.711882][ T2794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.727332][ T2794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.750078][ T2794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.758987][ T2794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.584437][T24578] syzkaller0: entered promiscuous mode [ 1099.590049][T24578] syzkaller0: entered allmulticast mode [ 1100.072008][T24633] loop1: detected capacity change from 0 to 512 [ 1100.087971][T24633] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1100.098950][T24633] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.18292: ea_inode with extended attributes [ 1100.111741][T24633] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1100.112385][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1100.127970][ C1] EXT4-fs (loop1): initial error at time 1773123578: ext4_xattr_inode_iget:441: inode 11 [ 1100.137810][ C1] EXT4-fs (loop1): last error at time 1773123578: ext4_xattr_inode_iget:441: inode 11 [ 1100.147576][T24633] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.18292: error while reading EA inode 11 err=-117 [ 1100.159964][T24633] loop1: lost filesystem error report for type 5 error -117 [ 1100.167063][T24633] EXT4-fs (loop1): 1 orphan inode deleted [ 1100.181124][T24633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1100.452095][T24640] syzkaller0: entered promiscuous mode [ 1100.475327][T24640] syzkaller0: entered allmulticast mode [ 1100.763184][T15689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.835630][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18303'. [ 1101.097107][T24712] netlink: 52 bytes leftover after parsing attributes in process `syz.7.18303'. [ 1101.549053][T24770] syzkaller0: entered promiscuous mode [ 1101.565234][T24770] syzkaller0: entered allmulticast mode [ 1101.631936][T24772] syzkaller0: entered promiscuous mode [ 1101.647552][T24772] syzkaller0: entered allmulticast mode [ 1102.451593][ T28] audit: type=1326 audit(1773123580.215:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24790 comm="syz.7.18319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faba5e5c799 code=0x0 [ 1103.602997][T24817] syzkaller0: entered promiscuous mode [ 1103.608901][T24817] syzkaller0: entered allmulticast mode [ 1104.175545][T24702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1104.356683][T24847] syzkaller0: entered promiscuous mode [ 1104.362325][T24847] syzkaller0: entered allmulticast mode [ 1104.369872][T24848] tipc: Started in network mode [ 1104.384548][T24848] tipc: Node identity ee4fdf6ab56d, cluster identity 4711 [ 1104.392201][T24848] tipc: Enabled bearer , priority 0 [ 1104.418156][T24848] syzkaller0: entered promiscuous mode [ 1104.423842][T24848] syzkaller0: entered allmulticast mode [ 1104.434026][T24851] tipc: Started in network mode [ 1104.439152][T24851] tipc: Node identity 9eb2396e8a2e, cluster identity 4711 [ 1104.446474][T24851] tipc: Enabled bearer , priority 0 [ 1104.463256][T24848] tipc: Resetting bearer [ 1104.469359][T24854] syzkaller0: entered promiscuous mode [ 1104.483381][T24854] syzkaller0: entered allmulticast mode [ 1104.491996][T24846] tipc: Resetting bearer [ 1104.502014][T24846] tipc: Disabling bearer [ 1104.518447][T24851] tipc: Resetting bearer [ 1104.546029][T24849] tipc: Resetting bearer [ 1104.555634][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18347'. [ 1104.566185][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18347'. [ 1104.578515][T24849] tipc: Disabling bearer [ 1104.616132][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18347'. [ 1104.626266][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18347'. [ 1104.800635][T24877] syzkaller0: entered promiscuous mode [ 1104.806290][T24877] syzkaller0: entered allmulticast mode [ 1104.868361][T24886] syzkaller0: entered promiscuous mode [ 1104.873913][T24886] syzkaller0: entered allmulticast mode [ 1104.884054][T24886] netlink: 76 bytes leftover after parsing attributes in process `syz.8.18356'. [ 1104.947492][T24890] syzkaller0: entered promiscuous mode [ 1104.953211][T24890] syzkaller0: entered allmulticast mode [ 1105.178076][ T28] audit: type=1400 audit(1773123582.779:2421): avc: denied { read } for pid=24905 comm="syz.4.18365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1105.674059][T24921] netlink: 'syz.7.18371': attribute type 1 has an invalid length. [ 1105.687315][T24921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.706337][T24921] bond1: (slave ip6erspan0): making interface the new active one [ 1105.715299][T24921] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1106.053199][T24945] syzkaller0: entered promiscuous mode [ 1106.058838][T24945] syzkaller0: entered allmulticast mode [ 1107.505030][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18387'. [ 1107.810542][T24862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.846918][ T28] audit: type=1326 audit(1773123585.279:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25084 comm="syz.1.18389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e4628c799 code=0x0 [ 1107.903734][T25093] netlink: 'syz.7.18392': attribute type 1 has an invalid length. [ 1110.070032][T25243] netlink: 'syz.1.18417': attribute type 1 has an invalid length. [ 1110.084937][T25243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.104544][T25243] bond1: (slave ip6erspan0): making interface the new active one [ 1110.114592][T25243] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1110.170513][T25248] netlink: 40 bytes leftover after parsing attributes in process `syz.9.18419'. [ 1110.188490][T25248] netlink: 40 bytes leftover after parsing attributes in process `syz.9.18419'. [ 1111.147911][T25273] vlan2: entered allmulticast mode [ 1111.154977][T25273] dummy0: entered allmulticast mode [ 1111.223557][T25279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18432'. [ 1111.267955][T25279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18432'. [ 1111.332025][T25282] loop5: detected capacity change from 0 to 7 [ 1111.470251][T25292] loop5: detected capacity change from 0 to 7 [ 1111.477048][T12142] loop5: [ 1111.538747][T25292] loop5: [ 1111.550962][T25285] netlink: 'syz.8.18435': attribute type 10 has an invalid length. [ 1111.561692][T25285] loop8: detected capacity change from 0 to 512 [ 1111.578429][T25285] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1111.585083][T25285] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.18435: ea_inode with extended attributes [ 1111.597895][T25285] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1111.617561][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1111.633197][ C1] EXT4-fs (loop8): initial error at time 1773123588: ext4_xattr_inode_iget:441: inode 11 [ 1111.643070][ C1] EXT4-fs (loop8): last error at time 1773123588: ext4_xattr_inode_iget:441: inode 11 [ 1111.720903][T25285] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.18435: error while reading EA inode 11 err=-117 [ 1111.733366][T25285] loop8: lost filesystem error report for type 5 error -117 [ 1111.747043][T25285] EXT4-fs (loop8): 1 orphan inode deleted [ 1111.760701][T25285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1112.135483][T25191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.192641][T25321] loop5: detected capacity change from 0 to 7 [ 1112.198299][T25324] loop7: detected capacity change from 0 to 16384 [ 1112.202190][T25321] loop5: [ 1112.340058][T22318] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.407875][T25339] loop5: detected capacity change from 0 to 7 [ 1112.899537][ T28] audit: type=1326 audit(1773123589.997:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25350 comm="syz.8.18452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64f0bec799 code=0x0 [ 1113.100272][T25420] netlink: 'syz.9.18459': attribute type 10 has an invalid length. [ 1113.112168][T25420] loop9: detected capacity change from 0 to 512 [ 1113.125144][T25420] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1113.131975][T25420] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.18459: ea_inode with extended attributes [ 1113.144847][T25420] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1113.145994][T25420] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.18459: error while reading EA inode 11 err=-117 [ 1113.167566][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1113.167587][ C1] EXT4-fs (loop9): initial error at time 1773123590: ext4_xattr_inode_iget:441: inode 11 [ 1113.167623][ C1] EXT4-fs (loop9): last error at time 1773123590: ext4_xattr_inode_iget:441: inode 11 [ 1113.193567][T25420] loop9: lost filesystem error report for type 5 error -117 [ 1113.198630][T25420] EXT4-fs (loop9): 1 orphan inode deleted [ 1113.213395][T25420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1113.817540][T25434] syzkaller0: entered promiscuous mode [ 1113.960428][T25434] syzkaller0: entered allmulticast mode [ 1114.305367][T22385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.803101][ T28] audit: type=1326 audit(1773123591.747:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25451 comm="syz.9.18472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff874dec799 code=0x0 [ 1115.038313][T25465] loop5: detected capacity change from 0 to 7 [ 1115.140070][T25467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18478'. [ 1115.638865][T23447] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.704376][T23447] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.780575][T23447] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.858543][T25474] chnl_net:caif_netlink_parms(): no params data found [ 1116.132264][T23447] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.238581][T25474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.256612][T25474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.263988][T25474] bridge_slave_0: entered allmulticast mode [ 1116.292449][T25474] bridge_slave_0: entered promiscuous mode [ 1116.303718][T25474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.318146][T25474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.336371][T25474] bridge_slave_1: entered allmulticast mode [ 1116.361571][T25474] bridge_slave_1: entered promiscuous mode [ 1116.397627][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18482'. [ 1116.464931][T25474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.475941][T25474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.520132][T23447] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1116.617557][T23447] erspan0 (unregistering): left allmulticast mode [ 1116.672792][T23447] bond0 (unregistering): Released all slaves [ 1116.684759][T23447] bond1 (unregistering): Released all slaves [ 1116.705495][T25474] team0: Port device team_slave_0 added [ 1116.712485][T25474] team0: Port device team_slave_1 added [ 1116.739429][T25474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.756030][T25474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.800245][T25474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.824552][T23447] tipc: Left network mode [ 1116.829709][T25474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.847595][T25474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.001790][T25474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.020458][T23447] hsr_slave_0: left promiscuous mode [ 1117.026407][T23447] hsr_slave_1: left promiscuous mode [ 1117.042887][T23447] veth1_macvtap: left promiscuous mode [ 1117.048467][T23447] veth0_macvtap: left promiscuous mode [ 1117.054017][T23447] veth1_vlan: left promiscuous mode [ 1117.068782][T23447] veth0_vlan: left promiscuous mode [ 1117.598082][T25583] loop7: detected capacity change from 0 to 16384 [ 1117.612802][T25474] hsr_slave_0: entered promiscuous mode [ 1117.630828][T25474] hsr_slave_1: entered promiscuous mode [ 1117.640657][T25474] debugfs: 'hsr0' already exists in 'hsr' [ 1117.664085][T25474] Cannot create hsr debugfs directory [ 1117.771086][T25586] loop7: detected capacity change from 16384 to 16383 [ 1117.993663][T25605] loop5: detected capacity change from 0 to 7 [ 1118.272622][T25619] syzkaller0: entered promiscuous mode [ 1118.291584][T25619] syzkaller0: entered allmulticast mode [ 1118.308467][T25474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.336482][T25474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.365778][T25474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1118.390455][T25474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1118.546280][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18498'. [ 1118.604754][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18498'. [ 1118.626878][T25474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.682829][T25474] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.711388][T22885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.718614][T22885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.768563][T22885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.775964][T22885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.978425][T25474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.169123][T25474] veth0_vlan: entered promiscuous mode [ 1119.196480][T25474] veth1_vlan: entered promiscuous mode [ 1119.234204][T25474] veth0_macvtap: entered promiscuous mode [ 1119.275122][T25474] veth1_macvtap: entered promiscuous mode [ 1119.323707][T25474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.349759][T25474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.371247][T22881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.395673][T22881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.421094][T22881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.440096][T22881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.834409][T25743] loop5: detected capacity change from 0 to 7 [ 1120.916076][T25752] syzkaller0: entered promiscuous mode [ 1120.921721][T25752] syzkaller0: entered allmulticast mode [ 1122.061937][T25785] netlink: 104 bytes leftover after parsing attributes in process `syz.9.18540'. [ 1122.495643][T25805] syzkaller0: entered promiscuous mode [ 1122.508356][T25805] syzkaller0: entered allmulticast mode [ 1122.760767][T25816] netlink: 104 bytes leftover after parsing attributes in process `syz.9.18553'. [ 1123.389702][T25848] netlink: 'syz.4.18561': attribute type 11 has an invalid length. [ 1123.408142][T25848] loop4: detected capacity change from 0 to 512 [ 1123.426072][T25848] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1123.434022][T25848] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.18561: ea_inode with extended attributes [ 1123.446873][T25848] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1123.448366][T25848] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.18561: error while reading EA inode 11 err=-117 [ 1123.457582][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1123.457598][ C1] EXT4-fs (loop4): initial error at time 1773123599: ext4_xattr_inode_iget:441: inode 11 [ 1123.457630][ C1] EXT4-fs (loop4): last error at time 1773123599: ext4_xattr_inode_iget:441: inode 11 [ 1123.496078][T25848] loop4: lost filesystem error report for type 5 error -117 [ 1123.499007][T25848] EXT4-fs (loop4): 1 orphan inode deleted [ 1123.513738][T25848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1124.091669][T24412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.118519][T25875] netlink: 68 bytes leftover after parsing attributes in process `syz.8.18578'. [ 1125.379379][T25900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18582'. [ 1125.500444][ T28] audit: type=1326 audit(1773123601.801:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25876 comm="syz.9.18579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff874dec799 code=0x0 [ 1126.246857][T25981] loop5: detected capacity change from 0 to 7 [ 1126.559634][ T28] audit: type=1326 audit(1773123602.793:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.4.18586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da454c799 code=0x0 [ 1126.863975][T26001] loop5: detected capacity change from 0 to 7 [ 1128.110651][T26031] netlink: 'syz.8.18604': attribute type 10 has an invalid length. [ 1128.137574][T26031] team0: Port device vlan0 added [ 1128.454227][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18610'. [ 1129.539788][T26069] loop5: detected capacity change from 0 to 7 [ 1129.546456][T26069] loop5: [ 1129.574213][T26071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18621'. [ 1129.642855][T26075] syzkaller0: entered promiscuous mode [ 1129.648712][T26075] syzkaller0: entered allmulticast mode [ 1130.328732][T26104] netlink: 104 bytes leftover after parsing attributes in process `syz.7.18635'. [ 1130.374951][T26108] syzkaller0: entered promiscuous mode [ 1130.380813][T26108] syzkaller0: entered allmulticast mode [ 1130.648859][T26124] loop5: detected capacity change from 0 to 7 [ 1130.821619][T26136] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18650'. [ 1130.978645][T26151] loop5: detected capacity change from 0 to 7 [ 1131.789521][T26174] netlink: 104 bytes leftover after parsing attributes in process `syz.9.18666'. [ 1132.080073][T26182] netlink: 'syz.8.18669': attribute type 10 has an invalid length. [ 1132.236782][T26196] syzkaller0: entered promiscuous mode [ 1132.242325][T26196] syzkaller0: entered allmulticast mode [ 1132.357657][T26211] netlink: 72 bytes leftover after parsing attributes in process `syz.8.18683'. [ 1132.390586][T26211] netlink: 72 bytes leftover after parsing attributes in process `syz.8.18683'. [ 1132.641331][T26238] syzkaller0: entered promiscuous mode [ 1132.653730][T26238] syzkaller0: entered allmulticast mode [ 1132.667036][T26240] netlink: 'syz.8.18697': attribute type 13 has an invalid length. [ 1132.697380][T26242] netlink: 72 bytes leftover after parsing attributes in process `syz.9.18698'. [ 1132.748847][T26244] netlink: 'syz.1.18699': attribute type 10 has an invalid length. [ 1132.765756][T26245] netlink: 72 bytes leftover after parsing attributes in process `syz.9.18698'. [ 1133.120784][T26240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.128072][T26240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.430442][T26240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.443719][T26240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.542206][T26244] team0: Port device vlan0 added [ 1133.664989][T26282] syzkaller0: entered promiscuous mode [ 1133.670693][T26282] syzkaller0: entered allmulticast mode [ 1133.688005][ T2794] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.718457][ T2794] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.727720][ T2794] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.738320][ T2794] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.753301][T26292] syzkaller0: entered promiscuous mode [ 1133.758845][T26292] syzkaller0: entered allmulticast mode [ 1134.578124][T26340] netlink: 72 bytes leftover after parsing attributes in process `syz.7.18720'. [ 1134.600969][T26340] netlink: 72 bytes leftover after parsing attributes in process `syz.7.18720'. [ 1134.757871][T26350] netlink: 'syz.7.18723': attribute type 10 has an invalid length. [ 1134.796471][T26350] team0: Port device vlan0 added [ 1134.879890][T26387] syzkaller0: entered promiscuous mode [ 1134.896034][T26387] syzkaller0: entered allmulticast mode [ 1134.977136][T26394] loop5: detected capacity change from 0 to 7 [ 1135.174446][T26414] netlink: 104 bytes leftover after parsing attributes in process `syz.7.18739'. [ 1135.256734][ T28] audit: type=1400 audit(1773123610.927:2427): avc: denied { write } for pid=26417 comm="syz.9.18741" name="file0" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1135.298767][ T28] audit: type=1400 audit(1773123610.927:2428): avc: denied { open } for pid=26417 comm="syz.9.18741" path="/193/file0" dev="tmpfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1135.343328][ T28] audit: type=1400 audit(1773123610.927:2429): avc: denied { ioctl } for pid=26417 comm="syz.9.18741" path="/193/file0" dev="tmpfs" ino=1003 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1135.688298][T26430] loop5: detected capacity change from 0 to 7 [ 1135.696503][T26430] loop5: [ 1135.721177][T26435] netlink: 'syz.1.18742': attribute type 10 has an invalid length. [ 1135.736662][T26435] loop1: detected capacity change from 0 to 512 [ 1135.751056][T26435] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1135.758073][T26435] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.18742: ea_inode with extended attributes [ 1135.770871][T26435] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1135.771449][T26435] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.18742: error while reading EA inode 11 err=-117 [ 1135.780640][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1135.780659][ C1] EXT4-fs (loop1): initial error at time 1773123611: ext4_xattr_inode_iget:441: inode 11 [ 1135.780698][ C1] EXT4-fs (loop1): last error at time 1773123611: ext4_xattr_inode_iget:441: inode 11 [ 1135.818947][T26435] loop1: lost filesystem error report for type 5 error -117 [ 1135.826684][T26435] EXT4-fs (loop1): 1 orphan inode deleted [ 1135.840902][T26435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1136.061094][T26434] syzkaller0: entered promiscuous mode [ 1136.079335][T26434] syzkaller0: entered allmulticast mode [ 1136.181628][T26446] netlink: 'syz.4.18752': attribute type 10 has an invalid length. [ 1136.226395][T26450] syzkaller0: entered promiscuous mode [ 1136.238427][T26450] syzkaller0: entered allmulticast mode [ 1136.394062][T25474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.413945][T26460] netlink: 'syz.9.18759': attribute type 10 has an invalid length. [ 1136.762257][T26481] netlink: 104 bytes leftover after parsing attributes in process `syz.7.18766'. [ 1137.393468][T26507] netlink: 'syz.1.18771': attribute type 10 has an invalid length. [ 1137.408587][T26507] loop1: detected capacity change from 0 to 512 [ 1137.469209][T26507] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1137.476650][T26507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.18771: ea_inode with extended attributes [ 1137.489449][T26507] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1137.490101][T26507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.18771: error while reading EA inode 11 err=-117 [ 1137.499361][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1137.499375][ C1] EXT4-fs (loop1): initial error at time 1773123613: ext4_xattr_inode_iget:441: inode 11 [ 1137.499415][ C1] EXT4-fs (loop1): last error at time 1773123613: ext4_xattr_inode_iget:441: inode 11 [ 1137.537752][T26507] loop1: lost filesystem error report for type 5 error -117 [ 1137.538763][T26507] EXT4-fs (loop1): 1 orphan inode deleted [ 1137.553276][T26507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1137.774288][T26510] netlink: 104 bytes leftover after parsing attributes in process `syz.8.18779'. [ 1137.900879][T26518] loop5: detected capacity change from 0 to 7 [ 1137.907389][T26518] loop5: [ 1137.975567][T26525] netlink: 'syz.7.18785': attribute type 10 has an invalid length. [ 1137.985055][T26527] loop5: detected capacity change from 0 to 7 [ 1138.010655][T26529] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18788'. [ 1138.025093][T26529] netlink: 60 bytes leftover after parsing attributes in process `syz.8.18788'. [ 1138.074229][T26532] netlink: 596 bytes leftover after parsing attributes in process `syz.9.18789'. [ 1138.092714][T26536] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18791'. [ 1138.103456][ T28] audit: type=1400 audit(1773123613.595:2430): avc: denied { nlmsg_write } for pid=26531 comm="syz.9.18789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1138.182946][T25474] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.228759][T26539] netlink: 'syz.9.18789': attribute type 13 has an invalid length. [ 1138.414397][T26539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.421893][T26539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.529812][T26539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.543392][T26539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.662854][T22879] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.686505][T22879] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.715433][T22879] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.740804][T22879] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.008606][T26605] netlink: 104 bytes leftover after parsing attributes in process `syz.8.18821'. [ 1139.049067][T26611] netlink: 'syz.8.18825': attribute type 10 has an invalid length. [ 1139.093387][T26614] netlink: 'syz.9.18823': attribute type 13 has an invalid length. [ 1139.295133][T26645] netlink: 'syz.4.18840': attribute type 10 has an invalid length. [ 1139.307592][T26645] team0: Port device vlan0 added [ 1139.785548][T26706] syzkaller0: entered promiscuous mode [ 1139.793215][T26706] syzkaller0: entered allmulticast mode [ 1141.072849][T26897] loop5: detected capacity change from 0 to 7 [ 1141.626895][T26924] loop5: detected capacity change from 0 to 7 [ 1141.696150][T26932] netlink: 'syz.7.18913': attribute type 10 has an invalid length. [ 1142.026641][T26954] loop5: detected capacity change from 0 to 7 [ 1142.126656][T26960] __nla_validate_parse: 3 callbacks suppressed [ 1142.126677][T26960] netlink: 596 bytes leftover after parsing attributes in process `syz.4.18924'. [ 1142.258990][T26964] netlink: 'syz.4.18924': attribute type 13 has an invalid length. [ 1142.364042][T26278] ================================================================== [ 1142.372207][T26278] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 1142.379271][T26278] [ 1142.381591][T26278] read-write to 0xffff888237d2a8a4 of 4 bytes by task 22801 on cpu 1: [ 1142.389749][T26278] wq_worker_running+0x95/0x120 [ 1142.394622][T26278] schedule_timeout+0xca/0x180 [ 1142.399390][T26278] msleep+0x4f/0x90 [ 1142.403197][T26278] nsim_fib_event+0x2934/0x4d70 [ 1142.408048][T26278] nsim_fib_event_work+0x13d/0x210 [ 1142.413154][T26278] process_scheduled_works+0x4de/0x9e0 [ 1142.418651][T26278] worker_thread+0x581/0x770 [ 1142.423240][T26278] kthread+0x22a/0x280 [ 1142.427303][T26278] ret_from_fork+0x150/0x360 [ 1142.431909][T26278] ret_from_fork_asm+0x1a/0x30 [ 1142.436703][T26278] [ 1142.439028][T26278] read to 0xffff888237d2a8a4 of 4 bytes by task 26278 on cpu 0: [ 1142.446656][T26278] kick_pool+0x49/0x2d0 [ 1142.450839][T26278] __queue_work+0x896/0xaf0 [ 1142.455370][T26278] queue_work_on+0xa9/0x140 [ 1142.459880][T26278] wg_packet_encrypt_worker+0xbdd/0xde0 [ 1142.465446][T26278] process_scheduled_works+0x4de/0x9e0 [ 1142.470914][T26278] worker_thread+0x581/0x770 [ 1142.475515][T26278] kthread+0x22a/0x280 [ 1142.479583][T26278] ret_from_fork+0x150/0x360 [ 1142.484187][T26278] ret_from_fork_asm+0x1a/0x30 [ 1142.488958][T26278] [ 1142.491283][T26278] value changed: 0x00000000 -> 0x00000001 [ 1142.496992][T26278] [ 1142.499303][T26278] Reported by Kernel Concurrency Sanitizer on: [ 1142.505464][T26278] CPU: 0 UID: 0 PID: 26278 Comm: kworker/0:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 1142.516476][T26278] Tainted: [W]=WARN [ 1142.520268][T26278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1142.530358][T26278] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 1142.536922][T26278] ================================================================== [ 1142.553860][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.561331][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.570666][T26986] netlink: 'syz.9.18934': attribute type 1 has an invalid length. [ 1142.651933][T26964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.665898][T26964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.682079][T26987] netlink: 44 bytes leftover after parsing attributes in process `syz.9.18934'. [ 1142.781169][T26986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1142.796168][T22879] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.812704][T22879] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.825586][T22879] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.834621][T22879] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0