last executing test programs: 6m8.384640648s ago: executing program 4 (id=598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in=@rand_addr=0x64010109, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0xe0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0xa, 0x6, 0xffff, 0x8251c, 0x2, 0xfff}, {0x6, 0x0, 0x1f, 0x1ff}, {0x8, 0xbb0}, 0x70bd2a, 0x350c, 0xa, 0x2, 0xfd, 0x36}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket(0x2, 0x1, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000d40)=""/4082, &(0x7f0000000140)=0xff2) 6m8.312656365s ago: executing program 4 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x53}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x80008000, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) 6m7.408337754s ago: executing program 4 (id=610): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x82}, 0x100b28, 0x5, 0x0, 0x8, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x10000, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfa}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 6m6.442243041s ago: executing program 4 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 6m6.412640556s ago: executing program 4 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 6m6.276388402s ago: executing program 4 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 6m6.246476346s ago: executing program 32 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 5m31.030159108s ago: executing program 5 (id=1202): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000d00)=[{r1, 0x4200}, {r1, 0xd044}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5m30.943719613s ago: executing program 5 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a836"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 5m30.775762692s ago: executing program 5 (id=1208): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x9, 0x1, 0x3, 0xfffffffffffffff9}) mq_timedreceive(r1, &(0x7f0000000080)=""/168, 0xa8, 0x0, &(0x7f0000000140)={0x77359400}) 5m29.002712386s ago: executing program 5 (id=1229): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 5m28.63158813s ago: executing program 5 (id=1232): r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x4503, 0x20, 0x0, 0x0, 0x0) 5m28.337879407s ago: executing program 5 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000000f00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 5m28.29789175s ago: executing program 33 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000000f00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 5m24.495053131s ago: executing program 3 (id=1267): r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 5m24.358186837s ago: executing program 3 (id=1277): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xff21, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x10}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x3ed9, 0x0, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@phonet={0x23, 0x6, 0x6}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m24.070023525s ago: executing program 3 (id=1285): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80000025a5, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x8001, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100004, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x5, 0xb, 0x7, 0xbedc, 0x8, 0x8000100, 0x10000003, 0x6, 0x11000, 0x8, 0x5, 0xb, 0x2867, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x4, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0xd0, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x1ff, 0x0, 0x1015, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xfff, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x80, 0xb, 0x9, 0x20006, 0x1, 0x6, 0xb, 0x1, 0xd9a, 0xd, 0x5, 0xfffffffd, 0x3, 0x6, 0x5, 0x8, 0x0, 0x4, 0x4, 0x40, 0x8, 0x6, 0x3, 0x401, 0x66cf, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 5m23.805335398s ago: executing program 3 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 5m23.75961956s ago: executing program 3 (id=1287): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23) 5m23.59503295s ago: executing program 3 (id=1290): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, 0x0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015"], 0x44}}, 0x0) 5m23.542920791s ago: executing program 34 (id=1290): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, 0x0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015"], 0x44}}, 0x0) 5m5.554092439s ago: executing program 7 (id=1567): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 5m5.497153909s ago: executing program 7 (id=1568): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x31652042, 0xa) 5m5.496250499s ago: executing program 7 (id=1570): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000280)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 5m4.575779394s ago: executing program 7 (id=1585): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x11, r0, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 5m4.314777027s ago: executing program 7 (id=1589): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m4.095486588s ago: executing program 7 (id=1592): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 5m4.095089578s ago: executing program 35 (id=1592): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 4m50.118215113s ago: executing program 1 (id=1869): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m50.071815644s ago: executing program 1 (id=1870): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m50.04911247s ago: executing program 1 (id=1871): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) 4m49.947357602s ago: executing program 1 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 4m49.885431261s ago: executing program 1 (id=1873): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xc080, 0x400, 0x2, 0x1040288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 4m49.736190794s ago: executing program 1 (id=1875): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}}, 0x24}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m49.729872443s ago: executing program 36 (id=1875): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}}, 0x24}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.579994367s ago: executing program 6 (id=6299): syz_open_dev$tty20(0xc, 0x4, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x0, 0x3, 0x6d}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 4.696166008s ago: executing program 6 (id=6304): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.196971999s ago: executing program 8 (id=6307): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) rseq(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 2.671581657s ago: executing program 8 (id=6320): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) 2.529752592s ago: executing program 6 (id=6322): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x735bda1f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP]}]}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x0, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ICMPV4_CODE]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.238409s ago: executing program 8 (id=6325): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x1) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x203, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 2.155930375s ago: executing program 6 (id=6327): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'wg0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 1.941439297s ago: executing program 9 (id=6329): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 1.937689166s ago: executing program 2 (id=6330): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x120, 0x120, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0x8}, 0x0, 0x70, 0xa0, 0x0, {0x100000000000000}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x5, 0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_virt_wifi\x00'}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.852115901s ago: executing program 9 (id=6331): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 1.73603412s ago: executing program 9 (id=6332): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) ioprio_set$pid(0x3, 0x0, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) 1.727515589s ago: executing program 2 (id=6333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000380)={@val={0xa, 0x88b5}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x48, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "ac02fa73aebacad10e553b8f02dad9583291dbe3820f1c8c", "20bcdb0fa9aa07c691ddf267b0e36a91bbf5524300e8860742480c720ccfd4df"}}}}}}}}, 0x82) 1.660706436s ago: executing program 2 (id=6335): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000d0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="be7b921eb3aa45497b2ecb7400009a6cc2cc4eb1f4d530d4545a29aaf57c05eb9c7e3fe4761356033a2afed65a276777a78f0e16a6d596dd7748a365cdd52a533f33d23f78b9779589c5b8f9a2e41961d56a53d4e3d0ffa142181ec4606c78bfb801fd317ebf6cbadbaed9c3ae1020ffa97e007087bc2ee9b71327c2e9f3d04099cf08ebf2257c1107a61c9fddb02009e630205fa2281883c2f4179c6e3886bbf85ed545de0f6c17940cb21f97f0fbb91a05aea8ebf4a15d13f7a5e27005557f4b0989b158ed2ac24915593a132ea029eafa9ebbdbb046f988838fef21e0fd21cbc12cd3de4437c07068da11bd4a2afedcd99402e2c52e2000"/262, @ANYRES32, @ANYRES32, @ANYRES8], 0x8, 0x2f0, &(0x7f0000000e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000140)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 1.612783698s ago: executing program 8 (id=6336): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.472109103s ago: executing program 2 (id=6338): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) 1.17478886s ago: executing program 6 (id=6341): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r3, 0x0, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.127662032s ago: executing program 2 (id=6342): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) fcntl$notify(r1, 0x402, 0x1c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd0) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 1.065217851s ago: executing program 0 (id=6343): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0xa5fa5cd532db900e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c841}, 0x1004) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchmod(r0, 0x18a) 931.824267ms ago: executing program 2 (id=6344): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_usb_connect(0x3, 0x48, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 828.595189ms ago: executing program 9 (id=6345): perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x89, 0x58, 0xe, 0x5, 0x0, 0x8, 0x80001, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x80, 0xf, 0x0, 0x3, 0x3, 0x2, 0x7, 0x0, 0x7ff, 0x0, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x27fffffe}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 817.278736ms ago: executing program 0 (id=6346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 708.181327ms ago: executing program 0 (id=6347): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) 707.801987ms ago: executing program 9 (id=6348): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffd}, {0x0, 0x10}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) 707.651837ms ago: executing program 9 (id=6349): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xe}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x6, 0x8, 0x2}, 0x8, 0x7, 0x80200, 0x0, 0x0, 0x20000, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 548.793048ms ago: executing program 0 (id=6350): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200040, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466183d312c757466383d302c757466383d312c736865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4ff653f3440fb21c877da1d1101fd722e01b9b5d22f08b5fc0500cbf33f9853a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f60359c09364ebda314cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba090000002e4122bb46aa57a75dab0288098e42f886f09b4a7e7dac3c3000"/230, @ANYRES64=0x0], 0x3, 0x263, &(0x7f0000000600)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c000004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 481.309086ms ago: executing program 8 (id=6351): getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x0, 0x10000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000040)={[{@quota}, {@noblock_validity}, {@abort}, {@nojournal_checksum}, {@abort}, {@i_version}]}, 0x1, 0x797, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 405.973653ms ago: executing program 0 (id=6352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 264.177888ms ago: executing program 0 (id=6353): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 170.5538ms ago: executing program 8 (id=6354): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 0s ago: executing program 6 (id=6355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): 2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.682133][ T28] audit: type=1326 audit(1773196582.267:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.708272][ T28] audit: type=1326 audit(1773196582.267:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.746006][ T28] audit: type=1326 audit(1773196582.267:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.770787][ T28] audit: type=1326 audit(1773196582.267:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.794986][ T28] audit: type=1326 audit(1773196582.267:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.819887][ T28] audit: type=1326 audit(1773196582.267:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 289.844056][ T28] audit: type=1326 audit(1773196582.267:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16136 comm="syz.8.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 290.109842][T16157] syzkaller0: entered promiscuous mode [ 290.115391][T16157] syzkaller0: entered allmulticast mode [ 290.971157][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4476'. [ 291.296728][T16206] netlink: 'syz.9.4478': attribute type 39 has an invalid length. [ 291.441786][T16215] netlink: 'syz.2.4482': attribute type 2 has an invalid length. [ 292.364631][T16258] netlink: 'syz.8.4508': attribute type 1 has an invalid length. [ 292.399101][T16258] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 292.418381][T16258] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 292.447058][T16258] bond0: (slave ip6gre2): making interface the new active one [ 292.465467][T16258] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 293.163191][T16304] xt_hashlimit: size too large, truncated to 1048576 [ 293.314413][T16320] tipc: Enabled bearer , priority 0 [ 293.585182][T16327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4528'. [ 293.977079][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4533'. [ 294.571981][T16350] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4538'. [ 294.762624][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4542'. [ 294.771683][ T28] kauditd_printk_skb: 4961 callbacks suppressed [ 294.771696][ T28] audit: type=1400 audit(1773196587.407:7287): avc: denied { name_bind } for pid=16361 comm="syz.8.4543" src=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 294.879520][T16368] netlink: 896 bytes leftover after parsing attributes in process `syz.6.4546'. [ 294.926404][T16368] netlink: 896 bytes leftover after parsing attributes in process `syz.6.4546'. [ 295.039817][T16380] netlink: 'syz.0.4550': attribute type 22 has an invalid length. [ 295.058844][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'. [ 295.111188][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.119521][T16380] netlink: 'syz.0.4550': attribute type 22 has an invalid length. [ 295.127527][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.147273][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.155631][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'. [ 295.175532][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.245595][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 295.255076][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4557'. [ 296.461170][T16426] ref_ctr_offset mismatch. inode: 0x12a0 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 296.499089][T16432] netlink: 'syz.9.4571': attribute type 3 has an invalid length. [ 299.397561][T16511] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 299.441017][T16511] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 299.592837][ T28] audit: type=1326 audit(1773196592.237:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.670355][ T28] audit: type=1326 audit(1773196592.237:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.697297][ T28] audit: type=1326 audit(1773196592.237:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.722421][ T28] audit: type=1326 audit(1773196592.237:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.746978][ T28] audit: type=1326 audit(1773196592.237:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.809232][ T28] audit: type=1326 audit(1773196592.267:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.859875][ T28] audit: type=1326 audit(1773196592.297:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 299.964264][ T28] audit: type=1326 audit(1773196592.297:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.033790][ T28] audit: type=1326 audit(1773196592.297:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.057997][T16540] netlink: 'syz.8.4615': attribute type 1 has an invalid length. [ 300.086514][ T28] audit: type=1326 audit(1773196592.297:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.164322][ T28] audit: type=1326 audit(1773196592.297:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.221374][ T28] audit: type=1326 audit(1773196592.297:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16524 comm="syz.9.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 300.266279][ T28] audit: type=1326 audit(1773196592.297:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.316969][ T28] audit: type=1326 audit(1773196592.297:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 300.366327][ T28] audit: type=1326 audit(1773196592.297:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.4607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 301.890869][T16587] tipc: Enabling of bearer rejected, failed to enable media [ 302.119219][T16610] xt_hashlimit: size too large, truncated to 1048576 [ 302.726983][T16628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.764387][T16628] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 302.837022][ T5167] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 302.978378][ T376] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 303.428129][T16667] __nla_validate_parse: 2 callbacks suppressed [ 303.428226][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4662'. [ 303.475005][T16669] netlink: 'syz.2.4663': attribute type 1 has an invalid length. [ 303.502243][T16669] 8021q: adding VLAN 0 to HW filter on device bond6 [ 303.629204][T16669] bond6: (slave veth11): Enslaving as an active interface with a down link [ 303.696238][T16669] bond6: (slave dummy0): making interface the new active one [ 303.711352][T16669] dummy0: entered promiscuous mode [ 303.734123][T16669] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 303.755198][T16680] bond6 (unregistering): (slave veth11): Releasing active interface [ 303.764619][T16680] bond6 (unregistering): (slave dummy0): Releasing active interface [ 303.773914][T16680] bond6 (unregistering): Released all slaves [ 303.873710][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 303.896178][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4667'. [ 305.166067][ T28] kauditd_printk_skb: 860 callbacks suppressed [ 305.166085][ T28] audit: type=1326 audit(1773196597.807:8163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.216019][ T28] audit: type=1326 audit(1773196597.807:8164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.274329][ T28] audit: type=1326 audit(1773196597.817:8165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.316862][ T28] audit: type=1326 audit(1773196597.817:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.345385][ T28] audit: type=1326 audit(1773196597.887:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.370314][ T28] audit: type=1326 audit(1773196597.887:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.448239][ T28] audit: type=1326 audit(1773196597.887:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.485694][ T28] audit: type=1326 audit(1773196597.887:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.485808][T16744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4689'. [ 305.520364][T16744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4689'. [ 305.529796][ T28] audit: type=1326 audit(1773196597.887:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.557990][ T28] audit: type=1326 audit(1773196597.907:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16725 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 305.692121][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4695'. [ 305.731863][T16759] vlan3: entered promiscuous mode [ 305.740008][T16759] syz_tun: entered promiscuous mode [ 305.826387][T16762] loop7: detected capacity change from 8192 to 0 [ 306.687128][T16761] kthread_run failed with err -4 [ 306.731372][T16780] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4703'. [ 306.756458][T16780] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4703'. [ 306.782893][T16780] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4703'. [ 306.794571][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4706'. [ 309.032279][T16895] macsec2: entered promiscuous mode [ 310.358552][T16947] netlink: 'syz.6.4768': attribute type 1 has an invalid length. [ 310.374475][T16947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.438736][T16947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 310.446379][T16947] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 310.457733][T16947] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 311.011469][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 311.011484][ T28] audit: type=1326 audit(1773196603.657:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.057618][ T28] audit: type=1326 audit(1773196603.687:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.082329][ T28] audit: type=1326 audit(1773196603.687:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.130031][T16979] __nla_validate_parse: 5 callbacks suppressed [ 311.130081][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'. [ 311.147050][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'. [ 311.157093][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'. [ 311.167729][ T28] audit: type=1326 audit(1773196603.687:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.259255][ T28] audit: type=1326 audit(1773196603.687:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.283297][ T28] audit: type=1326 audit(1773196603.687:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.307919][ T28] audit: type=1326 audit(1773196603.687:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.466307][ T28] audit: type=1326 audit(1773196603.687:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.516860][ T28] audit: type=1326 audit(1773196603.687:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 311.565425][ T28] audit: type=1326 audit(1773196603.687:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16975 comm="syz.6.4779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 312.165531][T17010] xt_hashlimit: size too large, truncated to 1048576 [ 312.651833][T17019] bond0: entered promiscuous mode [ 312.689784][T17022] macvlan2: entered promiscuous mode [ 312.695259][T17022] macvlan2: entered allmulticast mode [ 312.701938][T17022] bond0: (slave macvlan2): Opening slave failed [ 313.767028][T17045] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4805'. [ 313.930108][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4811'. [ 313.952527][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 313.966610][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4811'. [ 313.975662][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 314.099589][T17068] netlink: 'syz.8.4816': attribute type 1 has an invalid length. [ 314.228193][T17068] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 314.238617][T17068] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 314.249767][T17068] bond4: (slave vxcan1): making interface the new active one [ 314.262416][T17068] bond4: (slave vxcan1): Enslaving as an active interface with an up link [ 314.285884][T17068] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 314.301645][T17068] bond4: (slave vxcan3): Enslaving as a backup interface with an up link [ 314.475388][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4821'. [ 314.485801][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4821'. [ 316.558118][T17169] __nla_validate_parse: 8 callbacks suppressed [ 316.558134][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 318.017036][T17220] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 319.346464][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4884'. [ 319.419032][T17248] bond6: entered promiscuous mode [ 320.013581][T17269] netlink: 'syz.6.4892': attribute type 2 has an invalid length. [ 320.060193][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 320.060218][ T28] audit: type=1326 audit(1773196612.707:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.124851][ T28] audit: type=1326 audit(1773196612.737:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.156903][ T28] audit: type=1326 audit(1773196612.737:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.181818][ T28] audit: type=1326 audit(1773196612.737:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.314072][ T28] audit: type=1326 audit(1773196612.747:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.456971][ T28] audit: type=1326 audit(1773196612.747:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.518452][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4898'. [ 320.546935][ T28] audit: type=1326 audit(1773196612.747:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.659569][ T28] audit: type=1326 audit(1773196612.747:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.693260][ T28] audit: type=1326 audit(1773196612.747:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.757682][ T28] audit: type=1326 audit(1773196612.747:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17273 comm="syz.9.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 320.864688][T17296] netlink: 'syz.2.4903': attribute type 4 has an invalid length. [ 320.874197][T17296] netlink: 'syz.2.4903': attribute type 4 has an invalid length. [ 320.967469][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 321.217070][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4915'. [ 321.276822][T17328] netlink: 'syz.9.4916': attribute type 1 has an invalid length. [ 321.312146][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 321.366327][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 321.910930][T17349] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4925'. [ 321.960699][T17352] xt_hashlimit: size too large, truncated to 1048576 [ 322.285043][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4932'. [ 324.363914][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4965'. [ 324.489411][T17455] netlink: 'syz.9.4967': attribute type 4 has an invalid length. [ 324.499657][T17455] netlink: 'syz.9.4967': attribute type 4 has an invalid length. [ 324.538358][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4970'. [ 324.547425][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4970'. [ 325.755529][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 325.755547][ T28] audit: type=1400 audit(1773196618.397:8331): avc: denied { map } for pid=17510 comm="syz.0.4989" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 326.549709][T17523] syz.8.4993 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 326.563724][T17523] CPU: 1 UID: 0 PID: 17523 Comm: syz.8.4993 Tainted: G W syzkaller #0 PREEMPT(full) [ 326.563813][T17523] Tainted: [W]=WARN [ 326.563823][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.563839][T17523] Call Trace: [ 326.563847][T17523] [ 326.563857][T17523] __dump_stack+0x1d/0x30 [ 326.563945][T17523] dump_stack_lvl+0x95/0xd0 [ 326.563970][T17523] dump_stack+0x15/0x1b [ 326.563992][T17523] dump_header+0x80/0x240 [ 326.564108][T17523] oom_kill_process+0x295/0x350 [ 326.564149][T17523] out_of_memory+0x97d/0xb80 [ 326.564180][T17523] try_charge_memcg+0x62e/0xa10 [ 326.564234][T17523] obj_cgroup_charge_pages+0x23/0xc0 [ 326.564319][T17523] __memcg_kmem_charge_page+0x9e/0x170 [ 326.564357][T17523] __alloc_frozen_pages_noprof+0x18a/0x360 [ 326.564399][T17523] alloc_pages_bulk_noprof+0x4aa/0x530 [ 326.564478][T17523] ? policy_nodemask+0x417/0x5e0 [ 326.564588][T17523] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 326.564640][T17523] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 326.564683][T17523] ? alloc_pages_mpol+0x217/0x260 [ 326.564730][T17523] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 326.564898][T17523] __kvmalloc_node_noprof+0x3d4/0x650 [ 326.564937][T17523] ? ip_set_alloc+0x24/0x30 [ 326.564996][T17523] ? ip_set_alloc+0x24/0x30 [ 326.565029][T17523] ip_set_alloc+0x24/0x30 [ 326.565071][T17523] hash_netiface_create+0x282/0x740 [ 326.565164][T17523] ? __pfx_hash_netiface_create+0x10/0x10 [ 326.565215][T17523] ip_set_create+0x3cf/0x970 [ 326.565269][T17523] ? __nla_parse+0x40/0x60 [ 326.565306][T17523] nfnetlink_rcv_msg+0x509/0x5d0 [ 326.565373][T17523] netlink_rcv_skb+0x123/0x220 [ 326.565424][T17523] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 326.565460][T17523] nfnetlink_rcv+0x167/0x1720 [ 326.565485][T17523] ? vm_area_free+0x71/0xb0 [ 326.565525][T17523] ? kmem_cache_free+0x237/0x380 [ 326.565559][T17523] ? percpu_counter_add_batch+0xb6/0x130 [ 326.565591][T17523] ? uprobe_mmap+0x8b8/0xf80 [ 326.565635][T17523] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 326.565742][T17523] ? inode_to_bdi+0x47/0xa0 [ 326.565772][T17523] ? vma_wants_writenotify+0x148/0x1a0 [ 326.565797][T17523] ? vma_set_page_prot+0xc3/0xf0 [ 326.565909][T17523] ? __mmap_complete+0x1f2/0x220 [ 326.565930][T17523] ? mmap_region+0x1d1b/0x2050 [ 326.566027][T17523] ? _raw_spin_lock_bh+0x56/0xb0 [ 326.566057][T17523] ? _raw_spin_unlock_bh+0x18/0x20 [ 326.566088][T17523] ? selinux_nlmsg_lookup+0x99/0x890 [ 326.566140][T17523] ? __rcu_read_unlock+0x33/0x70 [ 326.566193][T17523] ? __netlink_lookup+0x276/0x2b0 [ 326.566230][T17523] netlink_unicast+0x5c0/0x690 [ 326.566266][T17523] netlink_sendmsg+0x5c8/0x6f0 [ 326.566366][T17523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.566403][T17523] ____sys_sendmsg+0x563/0x5b0 [ 326.566536][T17523] ___sys_sendmsg+0x195/0x1e0 [ 326.566578][T17523] __x64_sys_sendmsg+0xd4/0x160 [ 326.566628][T17523] x64_sys_call+0x194c/0x3020 [ 326.566704][T17523] do_syscall_64+0x12c/0x370 [ 326.566729][T17523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.566757][T17523] RIP: 0033:0x7f39510ec799 [ 326.566774][T17523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.566823][T17523] RSP: 002b:00007f394fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.566846][T17523] RAX: ffffffffffffffda RBX: 00007f3951365fa0 RCX: 00007f39510ec799 [ 326.566866][T17523] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 326.566883][T17523] RBP: 00007f3951182c99 R08: 0000000000000000 R09: 0000000000000000 [ 326.566900][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.566915][T17523] R13: 00007f3951366038 R14: 00007f3951365fa0 R15: 00007fffcf0920c8 [ 326.566973][T17523] [ 326.986453][T17523] memory: usage 255712kB, limit 307200kB, failcnt 93 [ 327.043913][T17523] memory+swap: usage 284304kB, limit 9007199254740988kB, failcnt 0 [ 327.088908][T17523] kmem: usage 171124kB, limit 9007199254740988kB, failcnt 0 [ 327.131400][T17523] Memory cgroup stats for /syz8: [ 327.131754][T17523] cache 6635520 [ 327.175630][T17523] rss 380928 [ 327.196835][T17523] shmem 6635520 [ 327.210618][T17523] mapped_file 4096 [ 327.214377][T17523] dirty 0 [ 327.228384][T17523] writeback 0 [ 327.231733][T17523] workingset_refault_anon 319 [ 327.252578][T17523] workingset_refault_file 8 [ 327.273161][T17523] swap 64688128 [ 327.285661][T17523] swapcached 67080192 [ 327.296880][T17523] pgpgin 187445 [ 327.300440][T17523] pgpgout 185149 [ 327.330216][T17523] pgfault 189151 [ 327.333846][T17523] pgmajfault 46 [ 327.345716][T17523] inactive_anon 2199552 [ 327.354595][T17523] active_anon 7204864 [ 327.363086][T17523] inactive_file 0 [ 327.371545][T17523] active_file 0 [ 327.380189][T17523] unevictable 0 [ 327.388402][T17523] hierarchical_memory_limit 314572800 [ 327.404007][T17523] hierarchical_memsw_limit 9223372036854771712 [ 327.417235][T17523] total_cache 6635520 [ 327.425834][T17523] total_rss 380928 [ 327.449612][T17523] total_shmem 6635520 [ 327.453830][T17523] total_mapped_file 4096 [ 327.464392][T17523] total_dirty 0 [ 327.471346][T17523] total_writeback 0 [ 327.479750][T17523] total_workingset_refault_anon 319 [ 327.490924][T17523] total_workingset_refault_file 8 [ 327.504272][T17523] total_swap 64688128 [ 327.514180][T17523] total_swapcached 67080192 [ 327.523250][T17523] total_pgpgin 187445 [ 327.532164][T17523] total_pgpgout 185149 [ 327.541118][T17523] total_pgfault 189151 [ 327.550418][T17523] total_pgmajfault 46 [ 327.559185][T17523] total_inactive_anon 2199552 [ 327.568498][T17523] total_active_anon 7204864 [ 327.587074][T17523] total_inactive_file 0 [ 327.595201][T17523] total_active_file 0 [ 327.604070][T17523] total_unevictable 0 [ 327.612902][T17523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4993,pid=17521,uid=0 [ 327.644929][T17523] Memory cgroup out of memory: Killed process 17523 (syz.8.4993) total-vm:96212kB, anon-rss:1420kB, file-rss:22308kB, shmem-rss:4kB, UID:0 pgtables:128kB oom_score_adj:0 [ 327.715357][T17523] syz.8.4993 (17523) used greatest stack depth: 5544 bytes left [ 327.947473][ T28] audit: type=1326 audit(1773196620.577:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 327.989145][ T28] audit: type=1326 audit(1773196620.577:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.039805][ T28] audit: type=1326 audit(1773196620.597:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.104987][ T28] audit: type=1326 audit(1773196620.597:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.146265][ T28] audit: type=1326 audit(1773196620.597:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.226257][ T28] audit: type=1326 audit(1773196620.597:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.270298][ T28] audit: type=1326 audit(1773196620.637:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.302863][ T28] audit: type=1326 audit(1773196620.637:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 328.326690][ T28] audit: type=1326 audit(1773196620.617:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.8.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7ffc0000 [ 329.012383][T17584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5015'. [ 329.022198][T17584] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5015'. [ 329.034056][T17584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5015'. [ 329.108060][T17594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5018'. [ 329.428764][T17610] netlink: 'syz.2.5035': attribute type 13 has an invalid length. [ 330.774955][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5040'. [ 331.475200][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 331.475219][ T28] audit: type=1326 audit(1773196624.117:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 331.553391][ T28] audit: type=1326 audit(1773196624.117:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 331.615287][ T28] audit: type=1326 audit(1773196624.147:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 331.669819][ T28] audit: type=1326 audit(1773196624.147:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 331.761087][ T28] audit: type=1326 audit(1773196624.157:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.009741][ T28] audit: type=1326 audit(1773196624.157:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.210280][ T28] audit: type=1326 audit(1773196624.157:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.301531][ T28] audit: type=1326 audit(1773196624.157:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.363819][ T28] audit: type=1326 audit(1773196624.157:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.418954][ T28] audit: type=1326 audit(1773196624.157:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17682 comm="syz.6.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 332.746775][T17704] syz.6.5059 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 332.767047][T17704] CPU: 1 UID: 0 PID: 17704 Comm: syz.6.5059 Tainted: G W syzkaller #0 PREEMPT(full) [ 332.767153][T17704] Tainted: [W]=WARN [ 332.767162][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.767178][T17704] Call Trace: [ 332.767208][T17704] [ 332.767218][T17704] __dump_stack+0x1d/0x30 [ 332.767314][T17704] dump_stack_lvl+0x95/0xd0 [ 332.767363][T17704] dump_stack+0x15/0x1b [ 332.767456][T17704] dump_header+0x80/0x240 [ 332.767486][T17704] oom_kill_process+0x295/0x350 [ 332.767518][T17704] out_of_memory+0x97d/0xb80 [ 332.767549][T17704] try_charge_memcg+0x62e/0xa10 [ 332.767603][T17704] obj_cgroup_charge_pages+0x23/0xc0 [ 332.767654][T17704] __memcg_kmem_charge_page+0x9e/0x170 [ 332.767693][T17704] __alloc_frozen_pages_noprof+0x18a/0x360 [ 332.767736][T17704] alloc_pages_mpol+0xb3/0x260 [ 332.767816][T17704] alloc_pages_noprof+0x8f/0x130 [ 332.767855][T17704] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 332.767946][T17704] __kvmalloc_node_noprof+0x3d4/0x650 [ 332.767981][T17704] ? ip_set_alloc+0x24/0x30 [ 332.768080][T17704] ? ip_set_alloc+0x24/0x30 [ 332.768111][T17704] ip_set_alloc+0x24/0x30 [ 332.768138][T17704] hash_netiface_create+0x282/0x740 [ 332.768169][T17704] ? __pfx_hash_netiface_create+0x10/0x10 [ 332.768272][T17704] ip_set_create+0x3cf/0x970 [ 332.768316][T17704] ? __nla_parse+0x40/0x60 [ 332.768347][T17704] nfnetlink_rcv_msg+0x509/0x5d0 [ 332.768417][T17704] netlink_rcv_skb+0x123/0x220 [ 332.768500][T17704] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 332.768536][T17704] nfnetlink_rcv+0x167/0x1720 [ 332.768565][T17704] ? vm_area_free+0x71/0xb0 [ 332.768592][T17704] ? kmem_cache_free+0x237/0x380 [ 332.768712][T17704] ? percpu_counter_add_batch+0xb6/0x130 [ 332.768743][T17704] ? uprobe_mmap+0x8b8/0xf80 [ 332.768804][T17704] ? vms_complete_munmap_vmas+0x57b/0x5e0 [ 332.768930][T17704] ? inode_to_bdi+0x47/0xa0 [ 332.768954][T17704] ? vma_wants_writenotify+0x148/0x1a0 [ 332.769003][T17704] ? vma_set_page_prot+0xc3/0xf0 [ 332.769039][T17704] ? __mmap_complete+0x1f2/0x220 [ 332.769070][T17704] ? mmap_region+0x1d1b/0x2050 [ 332.769094][T17704] ? _raw_spin_lock_bh+0x56/0xb0 [ 332.769159][T17704] ? _raw_spin_unlock_bh+0x18/0x20 [ 332.769191][T17704] ? selinux_nlmsg_lookup+0x99/0x890 [ 332.769297][T17704] ? __rcu_read_unlock+0x33/0x70 [ 332.769325][T17704] ? __netlink_lookup+0x276/0x2b0 [ 332.769369][T17704] netlink_unicast+0x5c0/0x690 [ 332.769482][T17704] netlink_sendmsg+0x5c8/0x6f0 [ 332.769524][T17704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.769562][T17704] ____sys_sendmsg+0x563/0x5b0 [ 332.769657][T17704] ___sys_sendmsg+0x195/0x1e0 [ 332.769753][T17704] __x64_sys_sendmsg+0xd4/0x160 [ 332.769814][T17704] x64_sys_call+0x194c/0x3020 [ 332.769840][T17704] do_syscall_64+0x12c/0x370 [ 332.769861][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.769960][T17704] RIP: 0033:0x7f406a76c799 [ 332.769981][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.769999][T17704] RSP: 002b:00007f40691bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.770031][T17704] RAX: ffffffffffffffda RBX: 00007f406a9e5fa0 RCX: 00007f406a76c799 [ 332.770050][T17704] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 332.770066][T17704] RBP: 00007f406a802c99 R08: 0000000000000000 R09: 0000000000000000 [ 332.770102][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.770118][T17704] R13: 00007f406a9e6038 R14: 00007f406a9e5fa0 R15: 00007ffdaad87528 [ 332.770141][T17704] [ 332.770200][T17704] memory: usage 307200kB, limit 307200kB, failcnt 98 [ 333.208372][T17704] memory+swap: usage 212820kB, limit 9007199254740988kB, failcnt 0 [ 333.233356][T17704] kmem: usage 109496kB, limit 9007199254740988kB, failcnt 0 [ 333.248533][T17704] Memory cgroup stats for /syz6: [ 333.248794][T17704] cache 85458944 [ 333.336365][T17704] rss 741376 [ 333.339637][T17704] shmem 85458944 [ 333.343318][T17704] mapped_file 4096 [ 333.347620][T17704] dirty 0 [ 333.350626][T17704] writeback 0 [ 333.354312][T17704] workingset_refault_anon 1936 [ 333.369275][T17704] workingset_refault_file 9 [ 333.373823][T17704] swap 0 [ 333.396253][T17704] swapcached 17293312 [ 333.408657][T17704] pgpgin 205473 [ 333.416390][T17704] pgpgout 184423 [ 333.419999][T17704] pgfault 231596 [ 333.432516][T17704] pgmajfault 301 [ 333.456752][T17704] inactive_anon 86216704 [ 333.466245][T17704] active_anon 4096 [ 333.470101][T17704] inactive_file 0 [ 333.504176][T17704] active_file 0 [ 333.516227][T17704] unevictable 0 [ 333.519744][T17704] hierarchical_memory_limit 314572800 [ 333.545494][T17704] hierarchical_memsw_limit 9223372036854771712 [ 333.555875][T17704] total_cache 85458944 [ 333.580668][T17704] total_rss 741376 [ 333.584547][T17704] total_shmem 85458944 [ 333.589937][T17704] total_mapped_file 4096 [ 333.594230][T17704] total_dirty 0 [ 333.598021][T17704] total_writeback 0 [ 333.601893][T17704] total_workingset_refault_anon 1936 [ 333.607738][T17704] total_workingset_refault_file 9 [ 333.612797][T17704] total_swap 0 [ 333.616189][T17704] total_swapcached 17293312 [ 333.631112][T17704] total_pgpgin 205473 [ 333.635113][T17704] total_pgpgout 184423 [ 333.648801][T17704] total_pgfault 231596 [ 333.653153][T17704] total_pgmajfault 301 [ 333.657377][T17704] total_inactive_anon 86216704 [ 333.662177][T17704] total_active_anon 4096 [ 333.667514][T17704] total_inactive_file 0 [ 333.671695][T17704] total_active_file 0 [ 333.675740][T17704] total_unevictable 0 [ 333.680076][T17704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1522,pid=8137,uid=0 [ 333.701013][T17704] Memory cgroup out of memory: Killed process 8137 (syz.6.1522) total-vm:96068kB, anon-rss:1396kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 338.000630][T17818] ref_ctr increment failed for inode: 0xd8f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104f3e540 [ 340.206703][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5122'. [ 340.263229][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5122'. [ 342.576050][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'. [ 342.598610][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'. [ 343.250801][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 343.275331][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5148'. [ 343.804565][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 343.804617][ T28] audit: type=1400 audit(1773196636.447:8431): avc: denied { mounton } for pid=17937 comm="syz.0.5159" path="/proc/2428/task/2430/net/stat" dev="proc" ino=4026532638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 344.809510][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5164'. [ 344.856685][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5164'. [ 345.229924][T17993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=17993 comm=syz.9.5171 [ 345.834853][T18017] IPv6: sit2: Disabled Multicast RS [ 346.674993][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5189'. [ 347.476585][T18058] veth1_to_bond: entered allmulticast mode [ 347.492733][T18057] veth1_to_bond: left allmulticast mode [ 349.272411][T18111] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 349.324117][T18111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.364414][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 349.428445][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 349.497730][T18117] macsec1: entered promiscuous mode [ 349.516286][T18117] bond3: entered promiscuous mode [ 349.537540][T18117] macsec1: entered allmulticast mode [ 349.566074][T18117] bond3: entered allmulticast mode [ 349.802572][T18134] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5225'. [ 349.817174][T18134] unsupported nla_type 217 [ 351.132025][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5238'. [ 351.180812][ T36] smc: removing ib device syz1 [ 352.231258][T18198] block device autoloading is deprecated and will be removed. [ 353.356963][T18247] netlink: 'syz.2.5269': attribute type 33 has an invalid length. [ 353.395380][T18247] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5269'. [ 353.456834][T18247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5269'. [ 353.621130][ T28] audit: type=1326 audit(1773196646.267:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.678289][ T28] audit: type=1326 audit(1773196646.267:8433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.742983][T18263] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.5275'. [ 353.752350][ T28] audit: type=1326 audit(1773196646.287:8434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.783182][T18263] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.5275'. [ 353.793005][ T28] audit: type=1326 audit(1773196646.287:8435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.865058][ T28] audit: type=1326 audit(1773196646.297:8436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.964271][ T28] audit: type=1326 audit(1773196646.297:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 353.993439][ T28] audit: type=1326 audit(1773196646.297:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 354.044529][T18272] macvtap2: left promiscuous mode [ 354.059810][T18272] macvtap2: left allmulticast mode [ 354.076254][ T28] audit: type=1326 audit(1773196646.297:8439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 354.102078][ T28] audit: type=1326 audit(1773196646.297:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 354.155991][ T28] audit: type=1326 audit(1773196646.297:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18255 comm="syz.2.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 354.191610][T18272] bond6: left promiscuous mode [ 354.428993][T18302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5290'. [ 354.564043][T18311] netlink: 400 bytes leftover after parsing attributes in process `syz.6.5294'. [ 354.669162][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5300'. [ 354.679733][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5300'. [ 355.792396][T18354] netlink: 11522 bytes leftover after parsing attributes in process `syz.9.5310'. [ 356.640662][T18394] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.5324'. [ 357.988232][T18429] loop0: detected capacity change from 0 to 1024 [ 358.014859][T18429] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 358.664326][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 358.664357][ T28] audit: type=1400 audit(1773196651.307:8516): avc: denied { getopt } for pid=18463 comm="syz.8.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 359.386577][T18495] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3822855560/3822855562 [ 359.395977][T18495] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3822855560/3822855562 [ 359.554920][T18504] bond4: entered promiscuous mode [ 360.332834][T18543] __nla_validate_parse: 2 callbacks suppressed [ 360.332853][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5382'. [ 360.557216][T18527] macvtap3: entered promiscuous mode [ 360.564109][T18527] team0: entered promiscuous mode [ 360.576315][T18527] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 360.597552][T18527] team0: Device macvtap3 is already an upper device of the team interface [ 360.624838][T18527] team0: left promiscuous mode [ 361.390237][T18568] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 361.438237][T18568] 8021q: adding VLAN 0 to HW filter on device bond7 [ 361.489546][T18568] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 361.518649][T18568] bond7: (slave batadv2): making interface the new active one [ 361.527541][T18568] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 362.682046][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5395'. [ 362.833494][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5397'. [ 362.932556][ T28] audit: type=1400 audit(1773196655.577:8517): avc: denied { create } for pid=18602 comm="syz.8.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 362.975050][ T28] audit: type=1400 audit(1773196655.617:8518): avc: denied { bind } for pid=18602 comm="syz.8.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 363.531815][ T28] audit: type=1400 audit(1773196656.177:8519): avc: denied { watch watch_reads } for pid=18620 comm="syz.2.5410" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 364.653664][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5425'. [ 364.663479][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5425'. [ 364.851191][T18670] netlink: 'syz.8.5430': attribute type 3 has an invalid length. [ 364.880448][T18670] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5430'. [ 366.067875][T18689] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 366.831058][T18703] macvtap2: entered promiscuous mode [ 366.846614][T18703] team0: entered promiscuous mode [ 366.852619][T18703] bridge1: entered promiscuous mode [ 366.866146][T18703] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 366.890461][T18703] team0: Device macvtap2 is already an upper device of the team interface [ 367.008605][T18703] team0: left promiscuous mode [ 367.143681][T18703] bridge1: left promiscuous mode [ 367.616084][ T28] audit: type=1400 audit(1773196916.251:8520): avc: denied { map } for pid=18728 comm="syz.0.5452" path="socket:[82853]" dev="sockfs" ino=82853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 367.851087][T18736] netlink: 'syz.0.5455': attribute type 4 has an invalid length. [ 367.866013][T18736] netlink: 'syz.0.5455': attribute type 4 has an invalid length. [ 367.940358][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5456'. [ 367.968528][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5456'. [ 368.048427][ T28] audit: type=1326 audit(1773196916.651:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.074237][ T28] audit: type=1326 audit(1773196916.651:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.098570][ T28] audit: type=1326 audit(1773196916.651:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.122058][ T28] audit: type=1326 audit(1773196916.651:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.146428][ T28] audit: type=1326 audit(1773196916.651:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8d153cfce code=0x7ffc0000 [ 368.171496][ T28] audit: type=1326 audit(1773196916.651:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.198053][ T28] audit: type=1326 audit(1773196916.651:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 368.282338][ T28] audit: type=1326 audit(1773196916.651:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8d153cfce code=0x7ffc0000 [ 368.306947][ T28] audit: type=1326 audit(1773196916.651:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18740 comm="syz.0.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8d153cfce code=0x7ffc0000 [ 368.427003][T18753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 368.455711][T18753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.476634][T18753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.626139][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'. [ 368.823707][T18769] tipc: Failed to remove unknown binding: 66,1,1/0:3485009979/3485009981 [ 368.832247][T18769] tipc: Failed to remove unknown binding: 66,1,1/0:3485009979/3485009981 [ 368.995739][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5475'. [ 369.042544][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5475'. [ 369.273483][T18809] netlink: 'syz.6.5484': attribute type 10 has an invalid length. [ 369.313695][T18809] team0: Failed to send options change via netlink (err -105) [ 369.324562][T18814] netlink: 'syz.6.5484': attribute type 10 has an invalid length. [ 369.331729][T18809] team0: Port device dummy0 added [ 369.492105][T18814] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 369.516653][T18814] team0: Failed to send options change via netlink (err -105) [ 369.526038][T18814] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 369.565472][T18814] team0: Port device dummy0 removed [ 369.643105][T18814] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 370.582239][T18858] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.626028][T18882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.646589][T18890] macvtap2: entered promiscuous mode [ 371.666260][T18890] team0: entered promiscuous mode [ 371.686585][T18890] team_slave_0: entered promiscuous mode [ 371.692467][T18890] team_slave_1: entered promiscuous mode [ 371.715870][T18890] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 371.723739][T18890] team0: Device macvtap2 is already an upper device of the team interface [ 371.740072][T18890] team0: left promiscuous mode [ 371.746062][T18890] team_slave_0: left promiscuous mode [ 371.753652][T18890] team_slave_1: left promiscuous mode [ 371.906748][ T3411] IPVS: starting estimator thread 0... [ 371.996359][T18917] IPVS: using max 1968 ests per chain, 98400 per kthread [ 372.161134][T18934] xt_TPROXY: Can be used only with -p tcp or -p udp [ 372.269304][T18936] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 373.467756][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 373.467856][ T28] audit: type=1326 audit(1773196922.111:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18980 comm="syz.8.5548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7fc00000 [ 373.742460][T18993] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5552'. [ 373.753573][T18993] lo speed is unknown, defaulting to 1000 [ 373.759824][T18993] lo speed is unknown, defaulting to 1000 [ 373.768109][T18993] lo speed is unknown, defaulting to 1000 [ 373.774487][T18993] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 373.783646][T18993] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 373.834048][T18993] lo speed is unknown, defaulting to 1000 [ 373.853739][T18993] lo speed is unknown, defaulting to 1000 [ 373.861016][T18993] lo speed is unknown, defaulting to 1000 [ 373.869199][T18993] lo speed is unknown, defaulting to 1000 [ 373.877232][T18993] lo speed is unknown, defaulting to 1000 [ 373.945676][T19005] lo speed is unknown, defaulting to 1000 [ 374.006486][ T28] audit: type=1326 audit(1773196922.641:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.006524][ T28] audit: type=1326 audit(1773196922.641:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.006565][ T28] audit: type=1326 audit(1773196922.651:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.006598][ T28] audit: type=1326 audit(1773196922.651:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.034446][ T28] audit: type=1326 audit(1773196922.651:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.061636][ T28] audit: type=1326 audit(1773196922.701:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfcd6c799 code=0x7ffc0000 [ 374.061676][ T28] audit: type=1326 audit(1773196922.701:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7cfcd6c502 code=0x7ffc0000 [ 374.061765][ T28] audit: type=1326 audit(1773196922.701:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7cfcd6c597 code=0x7ffc0000 [ 374.061805][ T28] audit: type=1326 audit(1773196922.701:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.2.5561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7cfcd29491 code=0x7ffc0000 [ 374.174428][T19018] bond5: entered promiscuous mode [ 374.174620][T19018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.273513][T19018] bridge8: entered promiscuous mode [ 374.343882][T19022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=19022 comm=syz.9.5563 [ 374.550729][T19033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.131522][T19042] all: renamed from bridge_slave_1 [ 375.776129][T19054] bond8: entered promiscuous mode [ 375.781513][T19054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.810125][T19054] bridge7: entered promiscuous mode [ 376.085423][T19077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5586'. [ 376.339464][T19089] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.5591'. [ 376.512888][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 376.521977][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5598'. [ 376.550048][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5599'. [ 376.567793][T19108] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.595056][T19108] macsec2: entered promiscuous mode [ 376.601517][T19108] bond5: entered promiscuous mode [ 376.613221][T19108] bond5: left promiscuous mode [ 376.782723][T19123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5606'. [ 376.804983][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5605'. [ 376.855281][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.597722][T19153] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5617'. [ 378.031945][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5628'. [ 378.093980][T19178] vlan2: entered allmulticast mode [ 378.100209][T19178] bridge_slave_0: entered allmulticast mode [ 379.220029][T19198] loop0: detected capacity change from 0 to 512 [ 379.226871][T19198] EXT4-fs: Ignoring removed bh option [ 379.232302][T19198] EXT4-fs: Ignoring removed oldalloc option [ 379.238421][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5635'. [ 379.273291][T19198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 379.320188][T19198] EXT4-fs (loop0): 1 truncate cleaned up [ 379.332137][T19198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.394711][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.069823][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 380.164440][T19228] vlan3: entered allmulticast mode [ 380.170834][T19228] bridge_slave_0: entered allmulticast mode [ 380.201898][T19236] netlink: 'syz.9.5649': attribute type 4 has an invalid length. [ 380.213798][T19234] netlink: 'syz.9.5649': attribute type 4 has an invalid length. [ 380.401027][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5652'. [ 380.439764][T19243] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.448524][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 380.448543][ T28] audit: type=1400 audit(1773196929.091:8911): avc: denied { shutdown } for pid=19245 comm="syz.9.5653" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 380.527740][T19252] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5656'. [ 380.769209][T19273] loop0: detected capacity change from 0 to 1024 [ 380.796408][T19273] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 380.838337][T19273] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.857174][T19273] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: comm syz.0.5666: inode #4294967295: comm syz.0.5666: iget: illegal inode # [ 380.872334][T19273] loop0: lost filesystem error report for type 5 error -117 [ 380.872516][T19273] EXT4-fs (loop0): no journal found [ 380.879953][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 380.879982][ C1] EXT4-fs (loop0): initial error at time 1773196929: ext4_get_journal_inode:5863 [ 380.880003][ C1] EXT4-fs (loop0): last error at time 1773196929: ext4_get_journal_inode:5863 [ 380.910891][T19273] EXT4-fs (loop0): can't get journal size [ 380.920866][T19273] EXT4-fs (loop0): failed to initialize system zone (-22) [ 380.936353][T19273] EXT4-fs (loop0): mount failed [ 381.134177][ T28] audit: type=1400 audit(1773196929.771:8912): avc: denied { map } for pid=19286 comm="syz.2.5671" path="socket:[86454]" dev="sockfs" ino=86454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 381.309541][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 381.352866][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 382.452462][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5681'. [ 382.631175][T19311] vlan2: entered allmulticast mode [ 383.504669][T19353] netlink: 'syz.8.5697': attribute type 2 has an invalid length. [ 383.537327][T19353] netlink: 'syz.8.5697': attribute type 2 has an invalid length. [ 383.585796][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5700'. [ 383.739628][T19357] vlan3: entered allmulticast mode [ 383.758903][T19357] bridge_slave_0: entered allmulticast mode [ 383.776425][T19369] loop0: detected capacity change from 0 to 512 [ 383.783285][T19369] EXT4-fs: Ignoring removed oldalloc option [ 383.821009][T19369] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5704: invalid indirect mapped block 4294967295 (level 1) [ 383.853162][T19369] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 383.853440][T19369] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5704: invalid indirect mapped block 4294967295 (level 1) [ 383.862751][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 383.862787][ C0] EXT4-fs (loop0): initial error at time 1773196932: ext4_free_branches:1023: inode 11 [ 383.862829][ C0] EXT4-fs (loop0): last error at time 1773196932: ext4_free_branches:1023: inode 11 [ 383.911384][T19369] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 383.911685][T19369] EXT4-fs (loop0): 2 truncates cleaned up [ 383.929809][T19369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.973857][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.491443][ T28] audit: type=1400 audit(1773196933.131:8913): avc: denied { execmod } for pid=19386 comm="syz.2.5710" path="/1176/blkio.bfq.io_merged" dev="tmpfs" ino=6120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.639677][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5717'. [ 384.649010][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5717'. [ 384.658525][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5717'. [ 384.667753][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5717'. [ 384.760438][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5719'. [ 384.773377][T19407] ip6gre1: entered promiscuous mode [ 384.779041][T19407] ip6gre1: entered allmulticast mode [ 384.788350][T19407] netlink: 'syz.6.5719': attribute type 6 has an invalid length. [ 384.797070][T19407] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5719'. [ 384.926143][T19417] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1 [ 384.936049][T19417] ref_ctr increment failed for inode: 0x103b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104f39b00 [ 384.947978][T19416] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1 [ 384.957085][T19416] ref_ctr decrement failed for inode: 0x103b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104f39b00 [ 384.985328][T19416] uprobe: syz.8.5724:19416 failed to unregister, leaking uprobe [ 385.616721][T19468] lo speed is unknown, defaulting to 1000 [ 386.330201][T19502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=19502 comm=syz.9.5758 [ 387.594856][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5769'. [ 387.739521][T19535] vlan0: entered allmulticast mode [ 387.745738][T19535] bridge_slave_0: entered allmulticast mode [ 389.605937][T19576] syz.2.5785 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 389.675623][T19576] CPU: 0 UID: 0 PID: 19576 Comm: syz.2.5785 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.675659][T19576] Tainted: [W]=WARN [ 389.675667][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.675680][T19576] Call Trace: [ 389.675688][T19576] [ 389.675751][T19576] __dump_stack+0x1d/0x30 [ 389.675784][T19576] dump_stack_lvl+0x95/0xd0 [ 389.675816][T19576] dump_stack+0x15/0x1b [ 389.675845][T19576] dump_header+0x80/0x240 [ 389.675937][T19576] oom_kill_process+0x295/0x350 [ 389.675978][T19576] out_of_memory+0x97d/0xb80 [ 389.676005][T19576] try_charge_memcg+0x62e/0xa10 [ 389.676048][T19576] obj_cgroup_charge_pages+0x23/0xc0 [ 389.676143][T19576] __memcg_kmem_charge_page+0x9e/0x170 [ 389.676177][T19576] __alloc_frozen_pages_noprof+0x18a/0x360 [ 389.676218][T19576] alloc_pages_mpol+0xb3/0x260 [ 389.676269][T19576] alloc_pages_noprof+0x8f/0x130 [ 389.676316][T19576] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 389.676370][T19576] __kvmalloc_node_noprof+0x3d4/0x650 [ 389.676405][T19576] ? ip_set_alloc+0x24/0x30 [ 389.676436][T19576] ? ip_set_alloc+0x24/0x30 [ 389.676472][T19576] ip_set_alloc+0x24/0x30 [ 389.676574][T19576] hash_netiface_create+0x282/0x740 [ 389.676630][T19576] ? __pfx_hash_netiface_create+0x10/0x10 [ 389.676664][T19576] ip_set_create+0x3cf/0x970 [ 389.676709][T19576] ? __nla_parse+0x40/0x60 [ 389.676855][T19576] nfnetlink_rcv_msg+0x509/0x5d0 [ 389.676906][T19576] netlink_rcv_skb+0x123/0x220 [ 389.676934][T19576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 389.676969][T19576] nfnetlink_rcv+0x167/0x1720 [ 389.677039][T19576] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 389.677076][T19576] ? __rcu_read_unlock+0x4e/0x70 [ 389.677099][T19576] ? __perf_event_task_sched_in+0xa65/0xad0 [ 389.677201][T19576] ? update_load_avg+0x5d/0x680 [ 389.677271][T19576] ? __list_add_valid_or_report+0x38/0xe0 [ 389.677307][T19576] ? xfd_validate_state+0x45/0xf0 [ 389.677347][T19576] ? save_fpregs_to_fpstate+0x100/0x150 [ 389.677414][T19576] ? _raw_spin_unlock+0x9/0x30 [ 389.677438][T19576] ? finish_task_switch+0x7d/0x280 [ 389.677466][T19576] ? __schedule+0x93c/0xd40 [ 389.677544][T19576] ? __list_add_valid_or_report+0x38/0xe0 [ 389.677650][T19576] ? preempt_schedule_irq+0x2d/0x50 [ 389.677677][T19576] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 389.677706][T19576] ? irqentry_exit+0x91/0x520 [ 389.677803][T19576] ? _raw_spin_lock_bh+0x56/0xb0 [ 389.677867][T19576] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 389.677900][T19576] ? __rcu_read_unlock+0x33/0x70 [ 389.677927][T19576] ? __netlink_lookup+0x276/0x2b0 [ 389.678033][T19576] netlink_unicast+0x5c0/0x690 [ 389.678070][T19576] netlink_sendmsg+0x5c8/0x6f0 [ 389.678151][T19576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.678185][T19576] ____sys_sendmsg+0x563/0x5b0 [ 389.678232][T19576] ___sys_sendmsg+0x195/0x1e0 [ 389.678277][T19576] __x64_sys_sendmsg+0xd4/0x160 [ 389.678312][T19576] x64_sys_call+0x194c/0x3020 [ 389.678341][T19576] do_syscall_64+0x12c/0x370 [ 389.678410][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.678487][T19576] RIP: 0033:0x7f7cfcd6c799 [ 389.678506][T19576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.678528][T19576] RSP: 002b:00007f7cfb7bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.678553][T19576] RAX: ffffffffffffffda RBX: 00007f7cfcfe5fa0 RCX: 00007f7cfcd6c799 [ 389.678572][T19576] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 389.678589][T19576] RBP: 00007f7cfce02c99 R08: 0000000000000000 R09: 0000000000000000 [ 389.678671][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.678688][T19576] R13: 00007f7cfcfe6038 R14: 00007f7cfcfe5fa0 R15: 00007ffd40646238 [ 389.678792][T19576] [ 390.067851][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 390.106793][T19590] vlan3: entered allmulticast mode [ 390.134136][T19576] memory: usage 249152kB, limit 307200kB, failcnt 1346 [ 390.141170][T19576] memory+swap: usage 261120kB, limit 9007199254740988kB, failcnt 0 [ 390.158259][T19576] kmem: usage 193584kB, limit 9007199254740988kB, failcnt 0 [ 390.173024][T19576] Memory cgroup stats for /syz2: [ 390.173424][T19576] cache 56344576 [ 390.182129][T19576] rss 397312 [ 390.187430][T19576] shmem 55816192 [ 390.193425][T19576] mapped_file 24576 [ 390.197419][T19576] dirty 20480 [ 390.205096][T19576] writeback 0 [ 390.211902][T19576] workingset_refault_anon 78 [ 390.221165][T19576] workingset_refault_file 6605 [ 390.227078][T19576] swap 12255232 [ 390.230629][T19576] swapcached 14725120 [ 390.234654][T19576] pgpgin 402382 [ 390.238574][T19576] pgpgout 388528 [ 390.242266][T19576] pgfault 363205 [ 390.245859][T19576] pgmajfault 153 [ 390.249900][T19576] inactive_anon 4096 [ 390.253877][T19576] active_anon 56209408 [ 390.258226][T19576] inactive_file 0 [ 390.285467][T19576] active_file 532480 [ 390.292065][T19576] unevictable 0 [ 390.295692][T19576] hierarchical_memory_limit 314572800 [ 390.301470][T19576] hierarchical_memsw_limit 9223372036854771712 [ 390.308825][T19576] total_cache 56344576 [ 390.313012][T19576] total_rss 397312 [ 390.317322][T19576] total_shmem 55816192 [ 390.321635][T19576] total_mapped_file 24576 [ 390.326028][T19576] total_dirty 20480 [ 390.330122][T19576] total_writeback 0 [ 390.334112][T19576] total_workingset_refault_anon 78 [ 390.339458][T19576] total_workingset_refault_file 6605 [ 390.344973][T19576] total_swap 12255232 [ 390.349226][T19576] total_swapcached 14725120 [ 390.353782][T19576] total_pgpgin 402382 [ 390.358187][T19576] total_pgpgout 388528 [ 390.362411][T19576] total_pgfault 363205 [ 390.366778][T19576] total_pgmajfault 153 [ 390.371051][T19576] total_inactive_anon 4096 [ 390.375530][T19576] total_active_anon 56209408 [ 390.380500][T19576] total_inactive_file 0 [ 390.384864][T19576] total_active_file 532480 [ 390.389559][T19576] total_unevictable 0 [ 390.393602][T19576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2063,pid=10097,uid=0 [ 390.408875][T19576] Memory cgroup out of memory: Killed process 10097 (syz.2.2063) total-vm:96080kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 391.077807][T19616] netlink: 'syz.2.5799': attribute type 2 has an invalid length. [ 391.142252][T19616] netlink: 199792 bytes leftover after parsing attributes in process `syz.2.5799'. [ 391.415278][T19634] lo speed is unknown, defaulting to 1000 [ 391.508965][ T3524] IPVS: starting estimator thread 0... [ 391.542477][T19644] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5808'. [ 391.596303][T19642] IPVS: using max 1920 ests per chain, 96000 per kthread [ 391.705664][ T28] audit: type=1400 audit(1773196940.341:8914): avc: denied { setopt } for pid=19647 comm="syz.9.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 391.817606][ T194] IPVS: stop unused estimator thread 0... [ 391.924252][T19677] lo speed is unknown, defaulting to 1000 [ 392.256328][T19677] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5822'. [ 392.287716][T19677] gtp0: entered promiscuous mode [ 392.752913][T19693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5829'. [ 395.306465][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5856'. [ 395.323401][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5856'. [ 395.737337][T19782] lo speed is unknown, defaulting to 1000 [ 396.027930][ T28] audit: type=1326 audit(1773196944.671:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.074828][ T28] audit: type=1326 audit(1773196944.701:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.129963][ T28] audit: type=1326 audit(1773196944.701:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.154732][ T28] audit: type=1326 audit(1773196944.701:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.195751][ T28] audit: type=1326 audit(1773196944.701:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.233630][ T28] audit: type=1326 audit(1773196944.701:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.258209][ T28] audit: type=1326 audit(1773196944.701:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19796 comm="syz.6.5869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 396.463945][T19826] bond6: entered promiscuous mode [ 396.490333][T19826] ip6gretap0: entered promiscuous mode [ 396.506844][T19826] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 396.522506][T19826] bond6 (unregistering): (slave ip6gretap0): Releasing backup interface [ 396.535453][T19826] ip6gretap0: left promiscuous mode [ 396.542586][T19826] bond6 (unregistering): Released all slaves [ 397.048639][ T28] audit: type=1326 audit(1773197201.691:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.080899][ T28] audit: type=1326 audit(1773197201.691:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.121982][ T28] audit: type=1326 audit(1773197201.721:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.174781][ T28] audit: type=1326 audit(1773197201.721:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.217356][ T28] audit: type=1326 audit(1773197201.721:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.272317][ T28] audit: type=1326 audit(1773197201.721:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.315156][ T28] audit: type=1326 audit(1773197201.721:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.356289][ T28] audit: type=1326 audit(1773197201.721:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f587e5dc799 code=0x7ffc0000 [ 397.396322][ T28] audit: type=1326 audit(1773197201.721:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f587e5dc502 code=0x7ffc0000 [ 397.570628][ T28] audit: type=1326 audit(1773197201.721:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19841 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f587e5dc502 code=0x7ffc0000 [ 399.992239][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5902'. [ 400.092102][T19883] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5902'. [ 400.414177][T19878] kexec: Could not allocate control_code_buffer [ 400.943205][T19898] lo speed is unknown, defaulting to 1000 [ 401.505259][T19898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5907'. [ 401.546682][T19898] gtp0: entered promiscuous mode [ 401.684290][T19909] loop0: detected capacity change from 0 to 512 [ 401.712943][T19909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.777251][T19909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5911: bg 0: block 393: padding at end of block bitmap is not set [ 401.836243][T19909] loop0: lost filesystem error report for type 5 error -117 [ 401.836505][T19909] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 401.852643][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 401.852666][ C0] EXT4-fs (loop0): initial error at time 1773197206: ext4_validate_block_bitmap:441 [ 401.852701][ C0] EXT4-fs (loop0): last error at time 1773197206: ext4_validate_block_bitmap:441 [ 401.968376][T19909] loop0: lost filesystem error report for type 5 error -117 [ 401.986549][T19909] EXT4-fs (loop0): 2 truncates cleaned up [ 402.020430][T19909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.142398][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.176648][T19916] syz.8.5912 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 402.194033][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5916'. [ 402.246596][T19916] CPU: 0 UID: 0 PID: 19916 Comm: syz.8.5912 Tainted: G W syzkaller #0 PREEMPT(full) [ 402.246656][T19916] Tainted: [W]=WARN [ 402.246722][T19916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.246738][T19916] Call Trace: [ 402.246746][T19916] [ 402.246755][T19916] __dump_stack+0x1d/0x30 [ 402.246840][T19916] dump_stack_lvl+0x95/0xd0 [ 402.246868][T19916] dump_stack+0x15/0x1b [ 402.246891][T19916] dump_header+0x80/0x240 [ 402.246935][T19916] oom_kill_process+0x295/0x350 [ 402.246965][T19916] out_of_memory+0x97d/0xb80 [ 402.246994][T19916] try_charge_memcg+0x62e/0xa10 [ 402.247044][T19916] __mem_cgroup_charge+0x65/0x150 [ 402.247151][T19916] shmem_get_folio_gfp+0x47b/0xd60 [ 402.247202][T19916] shmem_fallocate+0x628/0x920 [ 402.247309][T19916] vfs_fallocate+0x3b6/0x450 [ 402.247390][T19916] __x64_sys_fallocate+0x7a/0xd0 [ 402.247420][T19916] x64_sys_call+0x298e/0x3020 [ 402.247455][T19916] do_syscall_64+0x12c/0x370 [ 402.247505][T19916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.247553][T19916] RIP: 0033:0x7f39510ec799 [ 402.247574][T19916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.247594][T19916] RSP: 002b:00007f394fb26028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 402.247615][T19916] RAX: ffffffffffffffda RBX: 00007f3951366090 RCX: 00007f39510ec799 [ 402.247633][T19916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 402.247649][T19916] RBP: 00007f3951182c99 R08: 0000000000000000 R09: 0000000000000000 [ 402.247699][T19916] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 402.247779][T19916] R13: 00007f3951366128 R14: 00007f3951366090 R15: 00007fffcf0920c8 [ 402.247805][T19916] [ 402.253696][T19916] memory: usage 299588kB, limit 307200kB, failcnt 175 [ 402.515096][T19916] memory+swap: usage 287896kB, limit 9007199254740988kB, failcnt 0 [ 403.028578][T19916] kmem: usage 177436kB, limit 9007199254740988kB, failcnt 0 [ 403.035959][T19916] Memory cgroup stats for /syz8: [ 403.049584][T19928] vlan3: entered allmulticast mode [ 403.068328][T19916] cache 9408512 [ 403.096222][T19916] rss 397312 [ 403.146611][T19916] shmem 9408512 [ 403.158377][T19916] mapped_file 12288 [ 403.185140][T19916] dirty 0 [ 403.209359][T19916] writeback 0 [ 403.212776][T19916] workingset_refault_anon 344 [ 403.223491][T19916] workingset_refault_file 8 [ 403.234404][T19916] swap 64634880 [ 403.239048][T19916] swapcached 67125248 [ 403.243141][T19916] pgpgin 244984 [ 403.271547][T19916] pgpgout 241993 [ 403.278506][T19916] pgfault 249405 [ 403.303742][T19916] pgmajfault 53 [ 403.329037][T19916] inactive_anon 2023424 [ 403.384172][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 403.384191][ T28] audit: type=1400 audit(1773197208.021:8948): avc: denied { ioctl } for pid=19951 comm="syz.0.5925" path="socket:[93276]" dev="sockfs" ino=93276 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 403.388185][T19916] active_anon 10227712 [ 403.456232][T19916] inactive_file 0 [ 403.460038][T19916] active_file 0 [ 403.463583][T19916] unevictable 0 [ 403.467541][T19916] hierarchical_memory_limit 314572800 [ 403.497798][T19916] hierarchical_memsw_limit 9223372036854771712 [ 403.526309][T19916] total_cache 9408512 [ 403.538024][T19916] total_rss 397312 [ 403.560352][T19916] total_shmem 9408512 [ 403.574429][T19916] total_mapped_file 12288 [ 403.589139][T19916] total_dirty 0 [ 403.599037][T19916] total_writeback 0 [ 403.611252][T19916] total_workingset_refault_anon 344 [ 403.636983][T19916] total_workingset_refault_file 8 [ 403.645437][T19916] total_swap 64634880 [ 403.652739][T19916] total_swapcached 67125248 [ 403.667926][T19916] total_pgpgin 244984 [ 403.680949][T19916] total_pgpgout 241993 [ 403.693884][T19916] total_pgfault 249405 [ 403.706221][T19916] total_pgmajfault 53 [ 403.720557][T19916] total_inactive_anon 2023424 [ 403.735176][T19916] total_active_anon 10227712 [ 403.750850][T19916] total_inactive_file 0 [ 403.763967][T19916] total_active_file 0 [ 403.778029][T19916] total_unevictable 0 [ 403.797062][T19916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5912,pid=19910,uid=0 [ 403.827676][T19916] Memory cgroup out of memory: Killed process 19916 (syz.8.5912) total-vm:96344kB, anon-rss:1432kB, file-rss:22480kB, shmem-rss:12kB, UID:0 pgtables:128kB oom_score_adj:0 [ 404.573252][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5934'. [ 404.774903][T19974] vlan0: entered allmulticast mode [ 404.800305][T19979] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5936'. [ 404.837834][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'. [ 405.009106][T19990] lo speed is unknown, defaulting to 1000 [ 405.211643][ T28] audit: type=1326 audit(1773197209.851:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19995 comm="syz.0.5942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d157c799 code=0x0 [ 406.040199][ T28] audit: type=1400 audit(1773197210.671:8950): avc: denied { create } for pid=20011 comm="syz.6.5950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 406.043110][T20010] netlink: 'syz.8.5949': attribute type 1 has an invalid length. [ 406.216667][T20019] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5949'. [ 406.264561][T20017] bond6: (slave veth15): Enslaving as an active interface with a down link [ 406.496901][T20019] batman_adv: batadv0: Removing interface: dummy0 [ 407.044608][T20031] lo speed is unknown, defaulting to 1000 [ 407.189920][T20034] lo speed is unknown, defaulting to 1000 [ 407.211969][T20036] lo speed is unknown, defaulting to 1000 [ 407.337325][ T28] audit: type=1400 audit(1773197211.971:8951): avc: denied { dac_override } for pid=20042 comm="syz.6.5956" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 407.530506][T20046] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5958'. [ 407.552324][T20046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.652923][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5967'. [ 408.108789][T20063] vlan2: entered allmulticast mode [ 408.277961][T20088] lo speed is unknown, defaulting to 1000 [ 409.400105][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5987'. [ 409.414470][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5987'. [ 409.602350][T20125] lo speed is unknown, defaulting to 1000 [ 409.645800][ T3524] kernel read not supported for file bpf-prog (pid: 3524 comm: kworker/1:4) [ 409.990630][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5998'. [ 410.123837][T20152] netlink: 'syz.6.5999': attribute type 1 has an invalid length. [ 410.149078][T20152] netlink: 'syz.6.5999': attribute type 4 has an invalid length. [ 410.157429][T20152] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5999'. [ 410.845217][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6008'. [ 410.856463][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6008'. [ 411.175945][T20194] lo speed is unknown, defaulting to 1000 [ 411.694983][T20197] syz.6.6016 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 411.709073][T20197] CPU: 0 UID: 0 PID: 20197 Comm: syz.6.6016 Tainted: G W syzkaller #0 PREEMPT(full) [ 411.709129][T20197] Tainted: [W]=WARN [ 411.709139][T20197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.709154][T20197] Call Trace: [ 411.709161][T20197] [ 411.709170][T20197] __dump_stack+0x1d/0x30 [ 411.709199][T20197] dump_stack_lvl+0x95/0xd0 [ 411.709223][T20197] dump_stack+0x15/0x1b [ 411.709313][T20197] dump_header+0x80/0x240 [ 411.709364][T20197] oom_kill_process+0x295/0x350 [ 411.709387][T20197] out_of_memory+0x97d/0xb80 [ 411.709412][T20197] try_charge_memcg+0x62e/0xa10 [ 411.709471][T20197] obj_cgroup_charge_pages+0x23/0xc0 [ 411.709511][T20197] __memcg_kmem_charge_page+0x9e/0x170 [ 411.709576][T20197] __alloc_frozen_pages_noprof+0x18a/0x360 [ 411.709615][T20197] alloc_pages_mpol+0xb3/0x260 [ 411.709653][T20197] alloc_pages_noprof+0x8f/0x130 [ 411.709801][T20197] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 411.709840][T20197] __kvmalloc_node_noprof+0x3d4/0x650 [ 411.709866][T20197] ? futex_hash_allocate+0x190/0x9d0 [ 411.709937][T20197] ? futex_hash_allocate+0x190/0x9d0 [ 411.709969][T20197] futex_hash_allocate+0x190/0x9d0 [ 411.709999][T20197] ? cap_task_prctl+0x13f/0x6e0 [ 411.710060][T20197] futex_hash_prctl+0xd8/0xf0 [ 411.710096][T20197] __se_sys_prctl+0xa3d/0x13f0 [ 411.710205][T20197] __x64_sys_prctl+0x67/0x80 [ 411.710240][T20197] x64_sys_call+0x2533/0x3020 [ 411.710274][T20197] do_syscall_64+0x12c/0x370 [ 411.710303][T20197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.710331][T20197] RIP: 0033:0x7f406a76c799 [ 411.710352][T20197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.710373][T20197] RSP: 002b:00007f40691bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 411.710397][T20197] RAX: ffffffffffffffda RBX: 00007f406a9e5fa0 RCX: 00007f406a76c799 [ 411.710453][T20197] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 411.710467][T20197] RBP: 00007f406a802c99 R08: 0000000000000000 R09: 0000000000000000 [ 411.710483][T20197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.710499][T20197] R13: 00007f406a9e6038 R14: 00007f406a9e5fa0 R15: 00007ffdaad87528 [ 411.710525][T20197] [ 411.710598][T20197] memory: usage 307200kB, limit 307200kB, failcnt 361 [ 411.976424][T20197] memory+swap: usage 244280kB, limit 9007199254740988kB, failcnt 0 [ 411.984646][T20197] kmem: usage 160260kB, limit 9007199254740988kB, failcnt 0 [ 412.016268][T20197] Memory cgroup stats for /syz6: [ 412.016634][T20197] cache 85377024 [ 412.031363][T20197] rss 581632 [ 412.035176][T20197] shmem 85377024 [ 412.039900][T20197] mapped_file 0 [ 412.043402][T20197] dirty 0 [ 412.046456][T20197] writeback 0 [ 412.049872][T20197] workingset_refault_anon 1948 [ 412.063999][T20197] workingset_refault_file 9 [ 412.075900][T20197] swap 0 [ 412.084571][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6024'. [ 412.095508][T20197] swapcached 17293312 [ 412.105773][T20197] pgpgin 272000 [ 412.141718][T20197] pgpgout 251009 [ 412.145323][T20197] pgfault 295060 [ 412.157042][T20197] pgmajfault 308 [ 412.160755][T20197] inactive_anon 85786624 [ 412.171113][T20197] active_anon 192512 [ 412.175061][T20197] inactive_file 0 [ 412.193641][T20197] active_file 0 [ 412.197699][T20197] unevictable 0 [ 412.202020][T20197] hierarchical_memory_limit 314572800 [ 412.207780][T20197] hierarchical_memsw_limit 9223372036854771712 [ 412.214009][T20197] total_cache 85377024 [ 412.219105][T20197] total_rss 581632 [ 412.222844][T20197] total_shmem 85377024 [ 412.262650][T20197] total_mapped_file 0 [ 412.267935][T20197] total_dirty 0 [ 412.271458][T20197] total_writeback 0 [ 412.275359][T20197] total_workingset_refault_anon 1948 [ 412.281131][T20197] total_workingset_refault_file 9 [ 412.286670][T20197] total_swap 0 [ 412.295215][T20197] total_swapcached 17293312 [ 412.305341][T20197] total_pgpgin 272000 [ 412.309640][T20197] total_pgpgout 251009 [ 412.324867][T20197] total_pgfault 295060 [ 412.329664][T20197] total_pgmajfault 308 [ 412.333869][T20197] total_inactive_anon 85786624 [ 412.339100][T20197] total_active_anon 192512 [ 412.343966][T20197] total_inactive_file 0 [ 412.348416][T20197] total_active_file 0 [ 412.352547][T20197] total_unevictable 0 [ 412.359362][T20197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2538,pid=11252,uid=0 [ 412.374387][T20197] Memory cgroup out of memory: Killed process 11252 (syz.6.2538) total-vm:96080kB, anon-rss:1324kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 412.490673][T20242] syz.0.6033: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 412.529611][T20243] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.546095][T20242] CPU: 1 UID: 0 PID: 20242 Comm: syz.0.6033 Tainted: G W syzkaller #0 PREEMPT(full) [ 412.546191][T20242] Tainted: [W]=WARN [ 412.546199][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.546258][T20242] Call Trace: [ 412.546267][T20242] [ 412.546277][T20242] __dump_stack+0x1d/0x30 [ 412.546353][T20242] dump_stack_lvl+0x95/0xd0 [ 412.546461][T20242] dump_stack+0x15/0x1b [ 412.546488][T20242] warn_alloc+0x145/0x1c0 [ 412.546518][T20242] ? __schedule+0x93c/0xd40 [ 412.546570][T20242] ? __rcu_read_unlock+0x4e/0x70 [ 412.546596][T20242] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 412.546629][T20242] ? __futex_wait+0x1fd/0x260 [ 412.546656][T20242] ? __pfx_futex_wake_mark+0x10/0x10 [ 412.546680][T20242] ? __rcu_read_unlock+0x4e/0x70 [ 412.546743][T20242] ? avc_has_perm_noaudit+0xab/0x130 [ 412.546792][T20242] vmalloc_user_noprof+0x7d/0xb0 [ 412.546899][T20242] ? xskq_create+0x80/0xe0 [ 412.546937][T20242] xskq_create+0x80/0xe0 [ 412.546961][T20242] xsk_init_queue+0x70/0xb0 [ 412.547013][T20242] xsk_setsockopt+0x3f5/0x640 [ 412.547053][T20242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.547151][T20242] __sys_setsockopt+0x184/0x200 [ 412.547184][T20242] __x64_sys_setsockopt+0x64/0x80 [ 412.547216][T20242] x64_sys_call+0x2327/0x3020 [ 412.547264][T20242] do_syscall_64+0x12c/0x370 [ 412.547289][T20242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.547315][T20242] RIP: 0033:0x7fb8d157c799 [ 412.547330][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.547431][T20242] RSP: 002b:00007fb8cffd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.547455][T20242] RAX: ffffffffffffffda RBX: 00007fb8d17f5fa0 RCX: 00007fb8d157c799 [ 412.547523][T20242] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 412.547538][T20242] RBP: 00007fb8d1612c99 R08: 0000000000000004 R09: 0000000000000000 [ 412.547555][T20242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.547569][T20242] R13: 00007fb8d17f6038 R14: 00007fb8d17f5fa0 R15: 00007fffa0f795c8 [ 412.547592][T20242] [ 412.778478][T20242] Mem-Info: [ 412.781841][T20242] active_anon:47270 inactive_anon:29501 isolated_anon:0 [ 412.781841][T20242] active_file:22709 inactive_file:2951 isolated_file:0 [ 412.781841][T20242] unevictable:0 dirty:292 writeback:0 [ 412.781841][T20242] slab_reclaimable:4545 slab_unreclaimable:24722 [ 412.781841][T20242] mapped:29193 shmem:62215 pagetables:4454 [ 412.781841][T20242] sec_pagetables:0 bounce:0 [ 412.781841][T20242] kernel_misc_reclaimable:0 [ 412.781841][T20242] free:1793024 free_pcp:10905 free_cma:0 [ 412.847104][T20242] Node 0 active_anon:189080kB inactive_anon:118004kB active_file:90836kB inactive_file:11804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116772kB dirty:1168kB writeback:0kB shmem:248860kB kernel_stack:5168kB pagetables:17816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.875877][T20242] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.908559][T20242] lowmem_reserve[]: 0 2879 7857 7857 [ 412.914067][T20242] Node 0 DMA32 free:2944560kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948188kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 412.954812][T20242] lowmem_reserve[]: 0 0 4978 4978 [ 412.960177][T20242] Node 0 Normal free:4212412kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:189076kB inactive_anon:118004kB active_file:90836kB inactive_file:11804kB unevictable:0kB writepending:1168kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39392kB local_pcp:4788kB free_cma:0kB [ 412.999853][T20242] lowmem_reserve[]: 0 0 0 0 [ 413.004564][T20242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 413.037293][T20242] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944560kB [ 413.054904][T20242] Node 0 Normal: 1670*4kB (UM) 445*8kB (UME) 1754*16kB (UM) 1241*32kB (UM) 1124*64kB (UME) 714*128kB (UME) 423*256kB (UME) 308*512kB (UME) 248*1024kB (UME) 165*2048kB (UM) 760*4096kB (UM) = 4212160kB [ 413.095716][T20242] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 413.098954][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6036'. [ 413.108002][T20242] 88443 total pagecache pages [ 413.119174][T20242] 603 pages in swap cache [ 413.164711][ T28] audit: type=1400 audit(1773197217.801:8952): avc: denied { node_bind } for pid=20255 comm="syz.6.6039" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 413.190066][T20242] Free swap = 228kB [ 413.194535][T20257] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6037'. [ 413.198398][T20242] Total swap = 124996kB [ 413.214053][T20242] 2097051 pages RAM [ 413.288773][T20242] 0 pages HighMem/MovableOnly [ 413.296294][T20242] 81604 pages reserved [ 413.411892][T20227] Set syz1 is full, maxelem 65536 reached [ 413.444739][T20266] lo speed is unknown, defaulting to 1000 [ 413.826971][T20294] lo speed is unknown, defaulting to 1000 [ 414.409798][ T28] audit: type=1400 audit(1773197219.041:8953): avc: denied { lock } for pid=20318 comm="syz.6.6068" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 414.747982][T20335] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.788293][T20335] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49063 - 0 [ 414.836129][T20337] lo speed is unknown, defaulting to 1000 [ 414.867797][T20335] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.878508][T20335] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49063 - 0 [ 414.987821][T20335] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.013575][T20335] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49063 - 0 [ 415.110186][T20335] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.189871][T20335] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49063 - 0 [ 415.543682][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.584885][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49063 - 0 [ 415.656037][ T30] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.676187][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49063 - 0 [ 415.736277][ T376] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.744516][ T376] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49063 - 0 [ 415.806259][ T30] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.814485][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49063 - 0 [ 415.868428][T20355] netlink: 'syz.2.6072': attribute type 1 has an invalid length. [ 415.904743][T20355] bond6: entered promiscuous mode [ 415.909938][T20355] bond6: entered allmulticast mode [ 415.915258][T20355] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.930555][T20355] bridge16: entered promiscuous mode [ 415.935938][T20355] bridge16: entered allmulticast mode [ 415.942273][T20355] bond6: (slave bridge16): Enslaving as a backup interface with an up link [ 416.026379][ T376] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.156305][ T376] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.593101][T20382] tipc: Failed to remove unknown binding: 66,0,0/0:836100612/836100613 [ 416.635748][T20382] tipc: Failed to remove unknown binding: 66,0,0/0:836100612/836100613 [ 416.977175][ T28] audit: type=1326 audit(1773197221.621:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7fc00000 [ 417.063830][ T28] audit: type=1326 audit(1773197221.641:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f39510ec799 code=0x7fc00000 [ 417.223535][ T28] audit: type=1326 audit(1773197221.641:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.6091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39510ec799 code=0x7fc00000 [ 417.337747][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6095'. [ 417.444415][T20415] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 417.491668][T20415] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 417.597143][T20417] macvlan2: entered promiscuous mode [ 417.638549][T20417] macvlan2: entered allmulticast mode [ 417.647040][T20417] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 417.798998][ T28] audit: type=1400 audit(1773197222.441:8957): avc: denied { kexec_image_load } for pid=20427 comm="syz.6.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 418.625863][T20428] kexec: Could not allocate control_code_buffer [ 418.755659][T20412] Set syz1 is full, maxelem 65536 reached [ 418.968627][ T28] audit: type=1400 audit(1773197223.611:8958): avc: denied { firmware_load } for pid=20470 comm="syz.2.6117" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 419.241976][T20478] netlink: 'syz.0.6119': attribute type 1 has an invalid length. [ 419.369640][T20478] bond7: entered promiscuous mode [ 419.374840][T20478] bond7: entered allmulticast mode [ 419.382037][T20478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.399735][T20478] bridge0: entered promiscuous mode [ 419.406699][T20478] bridge0: entered allmulticast mode [ 419.413681][T20478] bond7: (slave bridge0): Enslaving as a backup interface with an up link [ 419.484516][T20484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6122'. [ 419.486556][ T376] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 419.541992][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6122'. [ 419.625833][ T36] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.200100][T20492] syz.2.6125 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 420.227115][T20492] CPU: 0 UID: 0 PID: 20492 Comm: syz.2.6125 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.227158][T20492] Tainted: [W]=WARN [ 420.227168][T20492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.227250][T20492] Call Trace: [ 420.227258][T20492] [ 420.227267][T20492] __dump_stack+0x1d/0x30 [ 420.227348][T20492] dump_stack_lvl+0x95/0xd0 [ 420.227372][T20492] dump_stack+0x15/0x1b [ 420.227398][T20492] dump_header+0x80/0x240 [ 420.227421][T20492] oom_kill_process+0x295/0x350 [ 420.227496][T20492] out_of_memory+0x97d/0xb80 [ 420.227519][T20492] try_charge_memcg+0x62e/0xa10 [ 420.227569][T20492] obj_cgroup_charge_pages+0x23/0xc0 [ 420.227607][T20492] __memcg_kmem_charge_page+0x9e/0x170 [ 420.227705][T20492] __alloc_frozen_pages_noprof+0x18a/0x360 [ 420.227736][T20492] alloc_pages_mpol+0xb3/0x260 [ 420.227768][T20492] alloc_pages_noprof+0x8f/0x130 [ 420.227860][T20492] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 420.227907][T20492] __kvmalloc_node_noprof+0x3d4/0x650 [ 420.227933][T20492] ? futex_hash_allocate+0x190/0x9d0 [ 420.227962][T20492] ? futex_hash_allocate+0x190/0x9d0 [ 420.228075][T20492] futex_hash_allocate+0x190/0x9d0 [ 420.228141][T20492] ? cap_task_prctl+0x13f/0x6e0 [ 420.228169][T20492] futex_hash_prctl+0xd8/0xf0 [ 420.228196][T20492] __se_sys_prctl+0xa3d/0x13f0 [ 420.228229][T20492] __x64_sys_prctl+0x67/0x80 [ 420.228298][T20492] x64_sys_call+0x2533/0x3020 [ 420.228324][T20492] do_syscall_64+0x12c/0x370 [ 420.228421][T20492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.228510][T20492] RIP: 0033:0x7f7cfcd6c799 [ 420.228531][T20492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.228549][T20492] RSP: 002b:00007f7cfb7bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 420.228569][T20492] RAX: ffffffffffffffda RBX: 00007f7cfcfe5fa0 RCX: 00007f7cfcd6c799 [ 420.228587][T20492] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 420.228605][T20492] RBP: 00007f7cfce02c99 R08: 0000000000000000 R09: 0000000000000000 [ 420.228622][T20492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.228639][T20492] R13: 00007f7cfcfe6038 R14: 00007f7cfcfe5fa0 R15: 00007ffd40646238 [ 420.228665][T20492] [ 420.228684][T20492] memory: usage 303300kB, limit 307200kB, failcnt 1520 [ 420.524436][T20492] memory+swap: usage 283100kB, limit 9007199254740988kB, failcnt 0 [ 420.583464][T20492] kmem: usage 200688kB, limit 9007199254740988kB, failcnt 0 [ 420.609146][T20492] Memory cgroup stats for /syz2: [ 420.609397][T20492] cache 55934976 [ 420.626347][T20492] rss 401408 [ 420.637864][ T28] audit: type=1400 audit(1773197225.271:8959): avc: denied { read } for pid=20501 comm="syz.0.6128" path="socket:[100480]" dev="sockfs" ino=100480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.659360][T20492] shmem 55816192 [ 420.723513][T20492] mapped_file 114688 [ 420.735173][T20492] dirty 0 [ 420.743123][T20492] writeback 0 [ 420.790185][T20492] workingset_refault_anon 137 [ 420.795343][T20492] workingset_refault_file 6733 [ 420.831587][T20492] swap 12062720 [ 420.835136][T20492] swapcached 14725120 [ 420.891910][T20492] pgpgin 418334 [ 420.915944][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6129'. [ 420.946252][T20492] pgpgout 404576 [ 420.949884][T20492] pgfault 384525 [ 420.963564][T20492] pgmajfault 167 [ 420.976633][T20492] inactive_anon 56213504 [ 420.980923][T20492] active_anon 16384 [ 421.160364][T20492] inactive_file 118784 [ 421.171904][T20492] active_file 4096 [ 421.175840][T20492] unevictable 0 [ 421.182063][T20492] hierarchical_memory_limit 314572800 [ 421.204923][T20492] hierarchical_memsw_limit 9223372036854771712 [ 421.219870][T20492] total_cache 55934976 [ 421.229508][T20492] total_rss 401408 [ 421.276131][T20492] total_shmem 55816192 [ 421.295912][T20492] total_mapped_file 114688 [ 421.316432][T20492] total_dirty 0 [ 421.332094][T20492] total_writeback 0 [ 421.344958][T20492] total_workingset_refault_anon 137 [ 421.363152][T20492] total_workingset_refault_file 6733 [ 421.379624][T20492] total_swap 12062720 [ 421.394433][T20492] total_swapcached 14725120 [ 421.405368][T20492] total_pgpgin 418334 [ 421.415811][T20492] total_pgpgout 404576 [ 421.428993][T20492] total_pgfault 384525 [ 421.437359][T20492] total_pgmajfault 167 [ 421.446017][T20492] total_inactive_anon 56213504 [ 421.456128][T20492] total_active_anon 16384 [ 421.465355][T20492] total_inactive_file 118784 [ 421.477555][T20492] total_active_file 4096 [ 421.486307][T20492] total_unevictable 0 [ 421.494659][T20492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.938,pid=6218,uid=0 [ 421.525783][T20492] Memory cgroup out of memory: Killed process 6218 (syz.2.938) total-vm:96080kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 421.699178][T20528] syzkaller0: entered allmulticast mode [ 421.707976][T20528] syzkaller0: entered promiscuous mode [ 422.097952][T20528] syzkaller0 (unregistering): left promiscuous mode [ 422.104644][T20528] syzkaller0 (unregistering): left allmulticast mode [ 423.280554][ T28] audit: type=1326 audit(1773197227.921:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.348755][ T28] audit: type=1326 audit(1773197227.921:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.425599][ T28] audit: type=1326 audit(1773197227.921:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.477034][ T28] audit: type=1326 audit(1773197227.921:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.546208][ T28] audit: type=1326 audit(1773197227.951:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.608044][T20552] kexec: Could not allocate control_code_buffer [ 423.626916][ T28] audit: type=1326 audit(1773197227.951:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.697535][T20571] netlink: 'syz.0.6159': attribute type 13 has an invalid length. [ 423.710146][ T28] audit: type=1326 audit(1773197227.951:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.780707][ T28] audit: type=1326 audit(1773197227.951:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20557 comm="syz.6.6144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406a76c799 code=0x7ffc0000 [ 423.911310][T20571] bond3: left allmulticast mode [ 423.922467][T20571] bond3: left promiscuous mode [ 423.952925][ T30] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.980652][ T30] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 49063 - 0 [ 424.008470][ T30] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.033199][ T30] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 49063 - 0 [ 424.076233][ T30] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.086088][ T30] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 49063 - 0 [ 424.104671][ T30] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.113997][ T30] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 49063 - 0 [ 424.236249][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 424.236277][ T28] audit: type=1326 audit(1773197228.861:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.296889][ T28] audit: type=1326 audit(1773197228.881:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.333361][ T28] audit: type=1326 audit(1773197228.971:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.358207][ T28] audit: type=1326 audit(1773197228.971:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.412444][ T28] audit: type=1326 audit(1773197228.971:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.471462][ T28] audit: type=1326 audit(1773197228.971:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.538816][ T28] audit: type=1326 audit(1773197228.971:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.563503][ T28] audit: type=1326 audit(1773197228.971:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.636110][T20598] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6161'. [ 424.815446][ T28] audit: type=1326 audit(1773197228.971:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 424.873279][ T28] audit: type=1326 audit(1773197228.971:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.0.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d157c799 code=0x7ffc0000 [ 425.506056][T20617] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 426.921837][T20662] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6184'. [ 427.307796][T20680] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6192'. [ 427.420274][T20684] lo speed is unknown, defaulting to 1000 [ 427.569815][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6199'. [ 428.580989][T20733] loop0: detected capacity change from 0 to 512 [ 428.592990][T20734] netlink: 'syz.2.6212': attribute type 13 has an invalid length. [ 428.647460][T20733] EXT4-fs: Ignoring removed nobh option [ 428.703241][T20733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 428.757508][T20733] EXT4-fs (loop0): 1 truncate cleaned up [ 428.774402][T20733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.820507][ T6856] lo speed is unknown, defaulting to 1000 [ 428.849747][ T6856] syz2: Port: 1 Link DOWN [ 428.975396][T20741] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 429.080896][T20744] lo speed is unknown, defaulting to 1000 [ 429.423003][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.519828][T20760] loop0: detected capacity change from 0 to 1024 [ 429.558405][T20760] EXT4-fs: Ignoring removed oldalloc option [ 429.573509][T20760] EXT4-fs: Ignoring removed bh option [ 429.598984][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6224'. [ 429.617480][T20760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.636254][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6224'. [ 429.697593][T20771] netlink: 'syz.8.6225': attribute type 13 has an invalid length. [ 430.228824][T20790] netlink: 'syz.9.6232': attribute type 4 has an invalid length. [ 430.240540][T20790] netlink: 'syz.9.6232': attribute type 4 has an invalid length. [ 430.657302][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.312017][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 431.312041][ T28] audit: type=1400 audit(1773197235.951:9014): avc: denied { ioctl } for pid=20826 comm="syz.2.6242" path="socket:[102781]" dev="sockfs" ino=102781 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 431.568932][T20832] netlink: 'syz.0.6244': attribute type 4 has an invalid length. [ 432.748986][T20873] pimreg: entered allmulticast mode [ 432.764755][T20873] pimreg: left allmulticast mode [ 433.085334][T20950] batadv_slave_0: entered promiscuous mode [ 433.167981][T20963] netlink: 'syz.6.6271': attribute type 27 has an invalid length. [ 433.216066][T20963] bond8: left promiscuous mode [ 433.234979][T20963] ip6gre1: left promiscuous mode [ 433.259820][T20963] ip6gre1: left allmulticast mode [ 433.318366][T20966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.327404][T20966] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.337567][T20966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.355280][T20968] netlink: 'syz.9.6273': attribute type 4 has an invalid length. [ 433.439101][T20976] veth0_vlan: entered allmulticast mode [ 433.453228][T20950] batadv_slave_0: left promiscuous mode [ 433.459895][T20976] veth0_vlan: left promiscuous mode [ 433.468437][T20976] veth0_vlan: entered promiscuous mode [ 433.975605][T20990] netlink: 'syz.0.6281': attribute type 1 has an invalid length. [ 434.023604][T20990] gretap2: entered allmulticast mode [ 434.045340][T20990] bond8: (slave gretap2): making interface the new active one [ 434.084316][T20995] netlink: 'syz.6.6283': attribute type 1 has an invalid length. [ 434.102975][T20990] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 434.149388][T20995] 8021q: adding VLAN 0 to HW filter on device bond9 [ 434.172874][T20995] vlan0: entered promiscuous mode [ 434.178150][T20995] bond9: entered promiscuous mode [ 434.209111][T20998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6284'. [ 434.538422][T21007] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6289'. [ 436.150882][T21037] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6300'. [ 436.234280][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6300'. [ 436.372045][T21045] netlink: 'syz.9.6302': attribute type 13 has an invalid length. [ 436.398349][T21045] netlink: 24859 bytes leftover after parsing attributes in process `syz.9.6302'. [ 438.142056][T21091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6318'. [ 438.261376][ T28] audit: type=1400 audit(1773197242.871:9015): avc: denied { module_load } for pid=21084 comm="syz.0.6315" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 438.920414][T21108] netlink: 'syz.9.6324': attribute type 1 has an invalid length. [ 438.987293][T21103] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6322'. [ 439.003285][T21108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.043904][ T28] audit: type=1400 audit(1773197243.681:9016): avc: denied { setopt } for pid=21114 comm="syz.2.6326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 439.117438][T21116] bond0: (slave bridge8): making interface the new active one [ 439.145311][T21114] delete_channel: no stack [ 439.155351][T21116] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 439.210889][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6328'. [ 439.274111][T21121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6330'. [ 439.341533][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6331'. [ 439.502825][T21133] netlink: 'syz.0.6334': attribute type 4 has an invalid length. [ 439.517783][T21133] netlink: 'syz.0.6334': attribute type 4 has an invalid length. [ 439.653220][T21139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6337'. [ 439.785290][T21144] lo speed is unknown, defaulting to 1000 [ 440.349141][ T28] audit: type=1400 audit(1773197244.961:9017): avc: denied { setattr } for pid=21151 comm="syz.0.6343" name="NETLINK" dev="sockfs" ino=104996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 440.630652][T21172] loop0: detected capacity change from 0 to 128 [ 440.645528][T21172] vfat: Unknown parameter 'utf' [ 440.904457][T21180] loop0: detected capacity change from 0 to 1024 [ 440.939850][T21180] EXT4-fs: Ignoring removed oldalloc option [ 440.962413][T21180] EXT4-fs: Ignoring removed bh option [ 441.002788][T21180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.188632][T21180] ================================================================== [ 441.196787][T21180] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 441.203953][T21180] [ 441.206314][T21180] write to 0xffff88811b0bcb4c of 4 bytes by task 21186 on cpu 1: [ 441.214062][T21180] xas_set_mark+0x12b/0x140 [ 441.218650][T21180] tag_pages_for_writeback+0xe3/0x2e0 [ 441.224086][T21180] ext4_do_writepages+0x6b9/0x2840 [ 441.229259][T21180] ext4_writepages+0x18f/0x320 [ 441.234062][T21180] do_writepages+0x1c6/0x310 [ 441.238743][T21180] file_write_and_wait_range+0x178/0x2f0 [ 441.244412][T21180] generic_buffers_fsync_noflush+0x45/0x130 [ 441.250349][T21180] ext4_sync_file+0x1aa/0x6b0 [ 441.255052][T21180] vfs_fsync_range+0xc5/0xe0 [ 441.259742][T21180] ext4_buffered_write_iter+0x34f/0x3c0 [ 441.259987][T21189] bond10: entered allmulticast mode [ 441.265329][T21180] ext4_file_write_iter+0x380/0xfa0 [ 441.265354][T21180] iter_file_splice_write+0x6c4/0xa80 [ 441.281160][T21180] direct_splice_actor+0x156/0x2a0 [ 441.286322][T21180] splice_direct_to_actor+0x311/0x670 [ 441.291727][T21180] do_splice_direct+0x119/0x1a0 [ 441.296619][T21180] do_sendfile+0x382/0x650 [ 441.301075][T21180] __x64_sys_sendfile64+0x105/0x150 [ 441.306315][T21180] x64_sys_call+0x2dc4/0x3020 [ 441.311039][T21180] do_syscall_64+0x12c/0x370 [ 441.315666][T21180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.321604][T21180] [ 441.323956][T21180] read to 0xffff88811b0bcb4c of 4 bytes by task 21180 on cpu 0: [ 441.331604][T21180] xas_find_marked+0x5d7/0x620 [ 441.336410][T21180] filemap_get_folios_tag+0xfa/0x510 [ 441.341746][T21180] filemap_fdatawait_range+0x88/0x1e0 [ 441.347184][T21180] __writeback_single_inode+0xdb/0x860 [ 441.352711][T21180] writeback_single_inode+0x16d/0x3f0 [ 441.358147][T21180] sync_inode_metadata+0x6e/0xa0 [ 441.363140][T21180] generic_buffers_fsync_noflush+0xee/0x130 [ 441.369071][T21180] ext4_sync_file+0x1aa/0x6b0 [ 441.373787][T21180] vfs_fsync_range+0xc5/0xe0 [ 441.378433][T21180] ext4_buffered_write_iter+0x34f/0x3c0 [ 441.384025][T21180] ext4_file_write_iter+0x380/0xfa0 [ 441.389260][T21180] iter_file_splice_write+0x6c4/0xa80 [ 441.394700][T21180] direct_splice_actor+0x156/0x2a0 [ 441.399956][T21180] splice_direct_to_actor+0x311/0x670 [ 441.405426][T21180] do_splice_direct+0x119/0x1a0 [ 441.410316][T21180] do_sendfile+0x382/0x650 [ 441.414763][T21180] __x64_sys_sendfile64+0x105/0x150 [ 441.419994][T21180] x64_sys_call+0x2dc4/0x3020 [ 441.424813][T21180] do_syscall_64+0x12c/0x370 [ 441.429440][T21180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.435371][T21180] [ 441.437737][T21180] value changed: 0x02000021 -> 0x04000021 [ 441.443485][T21180] [ 441.445832][T21180] Reported by Kernel Concurrency Sanitizer on: [ 441.452066][T21180] CPU: 0 UID: 0 PID: 21180 Comm: syz.0.6353 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.463143][T21180] Tainted: [W]=WARN [ 441.466981][T21180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.477071][T21180] ================================================================== [ 441.773609][T21187] syz.8.6354 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 441.789296][T21187] CPU: 0 UID: 0 PID: 21187 Comm: syz.8.6354 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.789364][T21187] Tainted: [W]=WARN [ 441.789373][T21187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.789484][T21187] Call Trace: [ 441.789492][T21187] [ 441.789501][T21187] __dump_stack+0x1d/0x30 [ 441.789534][T21187] dump_stack_lvl+0x95/0xd0 [ 441.789591][T21187] dump_stack+0x15/0x1b [ 441.789615][T21187] dump_header+0x80/0x240 [ 441.789659][T21187] oom_kill_process+0x295/0x350 [ 441.789710][T21187] out_of_memory+0x97d/0xb80 [ 441.789751][T21187] try_charge_memcg+0x62e/0xa10 [ 441.789795][T21187] __mem_cgroup_charge+0x65/0x150 [ 441.789898][T21187] shmem_get_folio_gfp+0x47b/0xd60 [ 441.789935][T21187] shmem_fallocate+0x628/0x920 [ 441.790023][T21187] vfs_fallocate+0x3b6/0x450 [ 441.790072][T21187] __x64_sys_fallocate+0x7a/0xd0 [ 441.790179][T21187] x64_sys_call+0x298e/0x3020 [ 441.790209][T21187] do_syscall_64+0x12c/0x370 [ 441.790240][T21187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.790341][T21187] RIP: 0033:0x7f39510ec799 [ 441.790364][T21187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.790391][T21187] RSP: 002b:00007f394fb26028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 441.790414][T21187] RAX: ffffffffffffffda RBX: 00007f3951366090 RCX: 00007f39510ec799 [ 441.790450][T21187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 441.790464][T21187] RBP: 00007f3951182c99 R08: 0000000000000000 R09: 0000000000000000 [ 441.790478][T21187] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 441.790492][T21187] R13: 00007f3951366128 R14: 00007f3951366090 R15: 00007fffcf0920c8 [ 441.790514][T21187] [ 441.790553][T21187] memory: usage 307200kB, limit 307200kB, failcnt 284 [ 442.053493][T21187] memory+swap: usage 344320kB, limit 9007199254740988kB, failcnt 0 [ 442.061640][T21187] kmem: usage 257244kB, limit 9007199254740988kB, failcnt 0 [ 442.070006][T21187] Memory cgroup stats for /syz8: [ 442.070352][T21187] cache 14643200 [ 442.081014][T21187] rss 401408 [ 442.084736][T21187] shmem 14643200 [ 442.103852][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.118439][T21187] mapped_file 12288 [ 442.138318][T21187] dirty 0 [ 442.149125][T21187] writeback 0 [ 442.158024][T21187] workingset_refault_anon 388 [ 442.176605][T21187] workingset_refault_file 8 [ 442.181235][T21187] swap 64634880 [ 442.184776][T21187] swapcached 67309568 [ 442.198114][T21187] pgpgin 282701 [ 442.206938][T21187] pgpgout 278431 [ 442.215782][T21187] pgfault 281952 [ 442.225234][T21187] pgmajfault 65 [ 442.233722][T21187] inactive_anon 2023424 [ 442.245915][T21187] active_anon 15466496 [ 442.255411][T21187] inactive_file 0 [ 442.263018][T21187] active_file 0 [ 442.271891][T21187] unevictable 0 [ 442.278870][T21187] hierarchical_memory_limit 314572800 [ 442.302960][T21187] hierarchical_memsw_limit 9223372036854771712 [ 442.321629][T21187] total_cache 14643200 [ 442.333705][T21187] total_rss 401408 [ 442.346978][T21187] total_shmem 14643200 [ 442.355561][T21187] total_mapped_file 12288 [ 442.369306][T21187] total_dirty 0 [ 442.376432][T21187] total_writeback 0 [ 442.384534][T21187] total_workingset_refault_anon 388 [ 442.392930][T21187] total_workingset_refault_file 8 [ 442.398440][T21187] total_swap 64634880 [ 442.402523][T21187] total_swapcached 67309568 [ 442.407928][T21187] total_pgpgin 282701 [ 442.412057][T21187] total_pgpgout 278431 [ 442.417156][T21187] total_pgfault 281952 [ 442.421302][T21187] total_pgmajfault 65 [ 442.425477][T21187] total_inactive_anon 2023424 [ 442.430628][T21187] total_active_anon 15466496 [ 442.435319][T21187] total_inactive_file 0 [ 442.458443][T21187] total_active_file 0 [ 442.478367][T21187] total_unevictable 0 [ 442.484932][T21187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6354,pid=21184,uid=0 [ 442.500015][T21187] Memory cgroup out of memory: Killed process 21187 (syz.8.6354) total-vm:98532kB, anon-rss:1436kB, file-rss:26380kB, shmem-rss:12kB, UID:0 pgtables:136kB oom_score_adj:0