last executing test programs: 3m58.280933451s ago: executing program 32 (id=382): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 3m51.598022513s ago: executing program 33 (id=552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 3m50.742521574s ago: executing program 34 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 3m37.746558586s ago: executing program 35 (id=871): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 3m32.358362262s ago: executing program 36 (id=947): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 3m26.43897437s ago: executing program 37 (id=1103): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 3m22.045494288s ago: executing program 38 (id=1159): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 2m51.292668774s ago: executing program 1 (id=1928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x3f, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) 2m51.18696232s ago: executing program 1 (id=1932): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$eJzs3ctrXNUfAPDvnSTNo/01+YGgdRURNFA6MTW2CgoVFyJYKOjaNkymoWaSKZlJaUIWLSK4EVRcCLrp2kfdufWx1f/ChbRUTYsVFxK580gmzUw7bTMzhXw+cDPn3HtnzvnOOefeM7mXmQD2rPH0TybiUER8lESM1tYnETFQSfVHnKjud3t9LZcuSWxsvPVHUtnn1vpaLhqek9pfyzwRET++H3E4s7Pc0srq/EyhkF+q5SfLC+cnSyurR84tzMzl5/KLx6amp48ef+H4sd2L9a9fVg9c//j1Z7858c97j1/98KckTsSB2rbGOHbLeIzX3pOB9C3c5rXdLqzHkl5XgAeSDs2+6iiPQzEafZVUC8PdrBkA0CkbAMAelJgDAMAeU/8/wK31tVx96e1/JLrrxqsRMVSNv359s7qlv3bNbqhyHXTkVrLtykgSEWO7UP54RHzx3TtfpUvU2sG1NKAbLl2OiDNj4zuP/8md9yw0ni7a8lyL9a9UXm2wkh6/Y9teO/9AL32fzn9eTMfdUG1NffxlNuc/0WT+M9hk7D6Ie4//zLVdKKaldP73csO9bVvzv82b1sb6arn/VeZ8A8nZc4V8emw7GBETMTCY5qcquzafuU3c/Pdmq/Ib539/fvLul2n56ePWHplr/YPbnzM7U5552LjrblyOeLK/WfzJZvsnLea/p9os442XPvh8x8p91Yc0/jTe+rIz/s7auBLxTNP232rL5K73J05WusNkvVM08e2vn420Kr+x/dMlLb/+WaAb0vYfaR7/wdouY0nj/Zql+y/j5yujP7Tadu/4m/f/fcnblXStG8XFmXJ5aSpiX/LmzvVHt55bz9f3T+OfeLr5+K8W27z/p58Jz7QZf//1379+8Pg7K41/9u79v9b+T0W1/Tc7QtuJq7fn+1qV3177T1dSE7U17Rz/2q3gw7x3AAAAAAAAAAAAAAAAAAAAAAAAANCuTEQciCST3UxnMtls9Te8H4uRTKFYKh8+W1xenI3Kb2WPxUCm/lWXow3fhzpV+z78an7r9evbn4+I/0fEp4PDlXw2VyzM9jJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiwv8Xv/6d+G+x17QCAjhnqdQUAgK5z/geAvef+zv/DHasHANA9Pv8DwN7T9vn/TGfrAQB0j8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNipkyfTZePv9bVcmp+9sLI8X7xwZDZfms8uLOeyueLS+excsThXyGdzxYWWL3Sp+lAoFs9Px+LyxclyvlSeLK2snl4oLi+WT59bmJnLn84PdC0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhfaWV1fqZQyC9JbE/0bV8z3Ov6PGKJ/ngkqiHRsUTjUWK4dwcoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfcfwEAAP//SqQqnw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_aout(r1, 0x0, 0x820) close_range(r0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 2m51.092790955s ago: executing program 1 (id=1935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 2m50.968269582s ago: executing program 1 (id=1942): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0x80) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x42000, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 2m50.864651808s ago: executing program 1 (id=1946): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 2m50.569913856s ago: executing program 1 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m50.530625188s ago: executing program 39 (id=1963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m33.680353057s ago: executing program 3 (id=2367): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2m33.610009111s ago: executing program 3 (id=2369): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 2m33.583473613s ago: executing program 3 (id=2370): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f00000004c0)={0x0, 0x0, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000340)=""/384, 0x180) 2m33.569865013s ago: executing program 3 (id=2371): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800082, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 2m33.498634818s ago: executing program 3 (id=2374): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x8, 0xfffffffe, 0x235}) setresuid(0xee00, 0xee00, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.238863953s ago: executing program 3 (id=2378): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x81, 0x2aa7, 0x2000, 0xffffffffffffffff, 0x282, '\x00', 0x0, 0xffffffffffffffff, 0x8001, 0x0, 0x0, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 2m33.238685663s ago: executing program 40 (id=2378): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x81, 0x2aa7, 0x2000, 0xffffffffffffffff, 0x282, '\x00', 0x0, 0xffffffffffffffff, 0x8001, 0x0, 0x0, 0x2}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 2m26.625877541s ago: executing program 5 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2m26.542205025s ago: executing program 5 (id=2540): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r0, 0x0, 0x5, 0x8) write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 2m25.685931076s ago: executing program 5 (id=2569): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2m25.583365872s ago: executing program 5 (id=2572): syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 2m25.359226075s ago: executing program 5 (id=2582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 2m25.10311823s ago: executing program 5 (id=2591): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @empty, @mcast2}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 2m25.033333984s ago: executing program 41 (id=2591): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @empty, @mcast2}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 2m23.983842085s ago: executing program 4 (id=2611): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000000000000000000001000008000100"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4040) 2m22.790991635s ago: executing program 4 (id=2624): r0 = syz_io_uring_setup(0xa87, &(0x7f00000002c0)={0x0, 0x3593, 0x800, 0x3, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) open(0x0, 0x64842, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x50b, 0x7817, 0xb, 0x0, 0xfe40) 2m22.752113188s ago: executing program 4 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 2m22.689274602s ago: executing program 4 (id=2631): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) open(&(0x7f0000000400)='./file0\x00', 0x143142, 0x43) 2m22.474798504s ago: executing program 4 (id=2640): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x1, r0, &(0x7f00000001c0), 0x8) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x3) 2m21.582957996s ago: executing program 4 (id=2658): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x9, &(0x7f00000003c0)=[{0x101, 0x5, 0x1, 0xc2ce}, {0xe, 0x10, 0x7, 0x7f}, {0x0, 0x77, 0x18, 0x2}, {0x729, 0x8, 0x5, 0xfffff801}, {0x4, 0x72, 0x1, 0x1}, {0x4, 0x46, 0x5, 0x140000}, {0x0, 0xb, 0x2, 0x6}, {0xdc37, 0xe, 0xe, 0x200}, {0x9, 0x5, 0x5, 0x7}]}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m21.579785176s ago: executing program 42 (id=2658): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x9, &(0x7f00000003c0)=[{0x101, 0x5, 0x1, 0xc2ce}, {0xe, 0x10, 0x7, 0x7f}, {0x0, 0x77, 0x18, 0x2}, {0x729, 0x8, 0x5, 0xfffff801}, {0x4, 0x72, 0x1, 0x1}, {0x4, 0x46, 0x5, 0x140000}, {0x0, 0xb, 0x2, 0x6}, {0xdc37, 0xe, 0xe, 0x200}, {0x9, 0x5, 0x5, 0x7}]}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 47.020994806s ago: executing program 6 (id=5413): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 46.743748552s ago: executing program 6 (id=5420): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x740, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 46.658523977s ago: executing program 6 (id=5421): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) execveat$binfmt(r0, r1, 0x0, 0x0, 0x1000) 46.593696621s ago: executing program 6 (id=5424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1041006, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 46.548067583s ago: executing program 6 (id=5425): ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 46.330964826s ago: executing program 6 (id=5429): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 46.317000007s ago: executing program 43 (id=5429): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.446568597s ago: executing program 9 (id=6383): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0x400c041) 2.436065177s ago: executing program 9 (id=6385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x2, &(0x7f0000000500)=0x0) r2 = eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x0, 0x0, 0x10000000004, 0x80000000, 0x200, 0x1ff}, 0x0, &(0x7f0000000040)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x9, 0x2003ff, 0x80000001}, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 1.491622333s ago: executing program 9 (id=6404): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r3}, 0x18) 1.457131785s ago: executing program 9 (id=6407): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 681.47041ms ago: executing program 2 (id=6431): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={[0x2]}, 0x8}) 681.21782ms ago: executing program 2 (id=6432): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4000}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000540), &(0x7f0000000240)=0x8) 680.96274ms ago: executing program 2 (id=6433): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 574.097547ms ago: executing program 2 (id=6437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r2, 0x7}, 0x80, 0x0}}], 0x1, 0x80) 573.440387ms ago: executing program 7 (id=6438): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 562.252387ms ago: executing program 9 (id=6439): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2000, 0x0) 519.06622ms ago: executing program 8 (id=6440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 518.31173ms ago: executing program 8 (id=6442): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000008c0)="$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") ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000580)='veth1_to_hsr\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r1, &(0x7f0000000d40)=""/27, 0x1b) 517.98556ms ago: executing program 9 (id=6443): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 467.224633ms ago: executing program 2 (id=6444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 466.999623ms ago: executing program 8 (id=6445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000940)=[{0x0, 0x1, {0x1, 0xff, 0x3}, {0x2, 0xf0}, 0xff, 0x2}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x0, 0x1, 0x2}, 0x2, 0xfe}, {0x1, 0x3, {0x1, 0xff, 0x1}, {0x0, 0x0, 0x2}, 0xfe}, {0x1000, 0x7, {0x2, 0xf0, 0x2}, {0x0, 0xff}, 0xfe, 0xfe}, {0x0, 0x1, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, 0xff, 0x3}, {0x1, 0x0, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}], 0xc0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 430.139675ms ago: executing program 7 (id=6447): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 362.903129ms ago: executing program 2 (id=6449): io_uring_setup(0x58eb, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd14, 0xc0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xf206, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 362.573349ms ago: executing program 0 (id=6450): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1, 0xfc039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x6, @perf_config_ext={0x80000000000006, 0xf60e}, 0x8810, 0x0, 0x43a1bd76, 0x4, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) 362.323509ms ago: executing program 7 (id=6451): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xfffffe69}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 362.155509ms ago: executing program 8 (id=6452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 303.822382ms ago: executing program 0 (id=6453): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) getdents(r2, 0x0, 0x0) 293.424133ms ago: executing program 8 (id=6454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f00000002c0)="de77", 0x2, 0x2400d010, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg(r1, &(0x7f0000002fc0)={&(0x7f0000000380)=@in6={0xa, 0x4e24, 0x0, @local, 0x8}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002dc0)='{', 0x1}], 0x1}, 0x24008040) 222.933187ms ago: executing program 0 (id=6455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x0, 0x6, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 202.639128ms ago: executing program 0 (id=6456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000001800038014efff7f0800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 196.924498ms ago: executing program 8 (id=6457): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x280a40, 0x90) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42200, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 150.714891ms ago: executing program 0 (id=6458): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b20, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) tkill(r0, 0x12) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 82.944315ms ago: executing program 0 (id=6459): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto, @datasec={0x3, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x51, 0x8f, 0x1}, 0x20) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_io_uring_setup(0x3ce8, &(0x7f00000000c0)={0x0, 0x20000, 0x800, 0x0, 0x42}, &(0x7f0000000140)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r2, 0x1) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0xff0b) 82.649175ms ago: executing program 7 (id=6460): fsopen(&(0x7f00000002c0)='gfs2\x00', 0x1) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 67.964236ms ago: executing program 7 (id=6461): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x3086c0, 0x78e22799f4a46edc) 0s ago: executing program 7 (id=6462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1c) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r1, 0x540a, 0x2) kernel console output (not intermixed with test programs): syz.0.3985: corrupted inode contents [ 192.538692][T16044] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #11: comm syz.0.3985: mark_inode_dirty error [ 192.572903][T16044] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3985: invalid indirect mapped block 1 (level 1) [ 192.602247][T16044] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.3985: corrupted inode contents [ 192.616064][T16044] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 192.651673][T16044] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.3985: corrupted inode contents [ 192.664833][T16044] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.3985: mark_inode_dirty error [ 192.676565][T16044] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 192.690150][T16044] EXT4-fs (loop0): 1 truncate cleaned up [ 192.698143][T16044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.892018][T16081] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 193.057507][T16089] loop6: detected capacity change from 0 to 32768 [ 193.094013][T16100] tipc: Started in network mode [ 193.098879][T16100] tipc: Node identity ac14140f, cluster identity 4711 [ 193.105766][T16100] tipc: New replicast peer: 100.1.1.0 [ 193.106069][ T7272] loop6: p1 p3 < p5 p6 > [ 193.111276][T16100] tipc: Enabled bearer , priority 10 [ 193.115518][ T7272] loop6: partition table partially beyond EOD, truncated [ 193.135363][T16089] loop6: p1 p3 < p5 p6 > [ 193.139693][T16089] loop6: partition table partially beyond EOD, truncated [ 193.214464][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4010'. [ 193.224272][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4010'. [ 193.245627][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 193.248009][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 193.256617][ T7272] udevd[7272]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 193.265866][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 193.299429][ T7272] udevd[7272]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 193.311016][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 193.320201][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.322044][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 193.333215][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 193.455611][T16126] loop6: detected capacity change from 0 to 512 [ 193.473403][ T9] IPVS: starting estimator thread 0... [ 193.483586][T16126] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 193.496793][T16126] EXT4-fs (loop6): orphan cleanup on readonly fs [ 193.505166][T16126] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 193.519523][T16126] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 193.529728][T16126] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.4019: Failed to acquire dquot type 1 [ 193.541406][T16126] EXT4-fs (loop6): Remounting filesystem read-only [ 193.548083][T16126] EXT4-fs (loop6): 1 truncate cleaned up [ 193.553996][ T57] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.555101][T16135] loop0: detected capacity change from 0 to 256 [ 193.564713][ T57] Quota error (device loop6): write_blk: dquota write failed [ 193.571037][T16130] IPVS: using max 2400 ests per chain, 120000 per kthread [ 193.578306][ T57] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.598708][ T57] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 193.610783][T16126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 193.690687][T12086] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 193.821101][T16160] netlink: 'syz.0.4032': attribute type 15 has an invalid length. [ 193.828972][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'. [ 193.843749][T16160] netlink: 'syz.0.4032': attribute type 15 has an invalid length. [ 193.847217][ T8028] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 193.851663][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'. [ 193.871209][ T8028] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 193.880066][ T8028] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 193.891925][ T8028] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 194.017683][T16185] netlink: 'syz.7.4042': attribute type 12 has an invalid length. [ 194.025596][T16185] netlink: 'syz.7.4042': attribute type 29 has an invalid length. [ 194.033570][T16185] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4042'. [ 194.239961][ T3394] tipc: Node number set to 2886997007 [ 194.323049][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.333253][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.846798][T16251] tipc: Started in network mode [ 194.851745][T16251] tipc: Node identity ac1414aa, cluster identity 4711 [ 194.859513][T16251] tipc: Enabled bearer , priority 10 [ 194.979804][T16262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4073'. [ 194.989152][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.996405][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.229764][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4086'. [ 195.246673][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4086'. [ 195.533956][ T5469] IPVS: starting estimator thread 0... [ 195.562819][T16336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16336 comm=syz.7.4104 [ 195.699996][T16334] IPVS: using max 2064 ests per chain, 103200 per kthread [ 195.849924][ T5479] tipc: Node number set to 2886997162 [ 196.051156][T16374] netlink: zone id is out of range [ 196.056319][T16374] netlink: zone id is out of range [ 196.083310][T16374] netlink: set zone limit has 8 unknown bytes [ 196.731766][T16496] netlink: 'syz.8.4138': attribute type 1 has an invalid length. [ 196.777979][T16496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.787492][T16507] __nla_validate_parse: 4 callbacks suppressed [ 196.787509][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4140'. [ 196.799329][T16496] bond2: (slave geneve2): making interface the new active one [ 196.812438][T16496] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 196.818350][T16507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4140'. [ 197.103375][ T5479] kernel write not supported for file bpf-prog (pid: 5479 comm: kworker/0:6) [ 197.115136][ T5469] kernel write not supported for file bpf-prog (pid: 5469 comm: kworker/1:7) [ 197.201669][T16570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16570 comm=syz.2.4157 [ 197.219430][T16570] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 197.249049][T16570] bond2: (slave bridge1): making interface the new active one [ 197.258384][T16570] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 197.387650][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 197.387719][ T29] audit: type=1400 audit(1770679974.091:3345): avc: denied { unmount } for pid=16592 comm="syz.8.4167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 197.494262][T16600] sock: sock_timestamping_bind_phc: sock not bind to device [ 197.521895][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4171'. [ 197.530875][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4171'. [ 198.013604][T16629] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4181'. [ 198.233590][T16652] batadv_slave_1: entered promiscuous mode [ 198.239872][T16652] batadv_slave_0: entered promiscuous mode [ 198.246215][T16651] batadv_slave_0: left promiscuous mode [ 198.251955][T16651] batadv_slave_1: left promiscuous mode [ 198.371627][ T29] audit: type=1400 audit(1770679975.081:3346): avc: denied { name_bind } for pid=16667 comm="syz.7.4198" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 198.487475][T16670] macvlan2: entered promiscuous mode [ 198.496400][T16675] netlink: 'syz.7.4201': attribute type 2 has an invalid length. [ 198.505519][ T29] audit: type=1400 audit(1770679975.141:3347): avc: denied { create } for pid=16674 comm="syz.7.4201" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.513306][T16670] batman_adv: batadv0: Adding interface: macvlan2 [ 198.527052][ T29] audit: type=1400 audit(1770679975.141:3348): avc: denied { map } for pid=16674 comm="syz.7.4201" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.533365][T16670] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.533397][T16670] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 198.593096][ T29] audit: type=1400 audit(1770679975.141:3349): avc: denied { read write } for pid=16674 comm="syz.7.4201" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=47301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 199.065318][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4217'. [ 199.376654][ T29] audit: type=1400 audit(1770679976.081:3350): avc: denied { unmount } for pid=16746 comm="syz.0.4228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.480665][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4235'. [ 199.490629][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4235'. [ 199.502493][T16763] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4236'. [ 199.620486][T16774] lo: entered allmulticast mode [ 199.625920][T16773] lo: left allmulticast mode [ 199.814961][T16797] netlink: 'syz.7.4249': attribute type 1 has an invalid length. [ 199.836835][T16797] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 199.845087][T16797] bond4: (slave batadv1): making interface the new active one [ 199.853557][T16797] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 199.869971][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4249'. [ 199.881552][T16797] bond4 (unregistering): (slave batadv1): Releasing active interface [ 199.892892][T16797] bond4 (unregistering): Released all slaves [ 200.574275][T16842] netlink: 'syz.6.4268': attribute type 29 has an invalid length. [ 200.603575][T16842] netlink: 'syz.6.4268': attribute type 29 has an invalid length. [ 201.165369][T16887] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 201.187959][ T29] audit: type=1326 audit(1770679977.891:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.8.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 201.211684][ T29] audit: type=1326 audit(1770679977.891:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.8.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 201.235258][ T29] audit: type=1326 audit(1770679977.891:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.8.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 201.258979][ T29] audit: type=1326 audit(1770679977.891:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.8.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 201.366626][T16908] netlink: 'syz.6.4295': attribute type 1 has an invalid length. [ 201.388579][T16908] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.397345][T16908] bond1: (slave batadv1): making interface the new active one [ 201.406276][T16908] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 201.423901][T16908] bond1 (unregistering): (slave batadv1): Releasing active interface [ 201.433751][T16908] bond1 (unregistering): Released all slaves [ 201.442674][T16911] syz.8.4296: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 201.457282][T16911] CPU: 1 UID: 0 PID: 16911 Comm: syz.8.4296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.457363][T16911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.457374][T16911] Call Trace: [ 201.457379][T16911] [ 201.457384][T16911] __dump_stack+0x1d/0x30 [ 201.457400][T16911] dump_stack_lvl+0x95/0xd0 [ 201.457413][T16911] dump_stack+0x15/0x1b [ 201.457466][T16911] warn_alloc+0x145/0x1c0 [ 201.457484][T16911] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 201.457565][T16911] ? __futex_wait+0x1fd/0x260 [ 201.457581][T16911] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.457597][T16911] ? ___slab_alloc+0xb8/0xb00 [ 201.457693][T16911] ? avc_has_perm_noaudit+0xab/0x130 [ 201.457736][T16911] ? xskq_create+0x36/0xe0 [ 201.457773][T16911] vmalloc_user_noprof+0x7d/0xb0 [ 201.457812][T16911] ? xskq_create+0x80/0xe0 [ 201.457829][T16911] xskq_create+0x80/0xe0 [ 201.457907][T16911] xsk_init_queue+0x91/0xe0 [ 201.457923][T16911] xsk_setsockopt+0x3f5/0x640 [ 201.457983][T16911] ? __pfx_xsk_setsockopt+0x10/0x10 [ 201.457999][T16911] __sys_setsockopt+0x184/0x200 [ 201.458093][T16911] __x64_sys_setsockopt+0x64/0x80 [ 201.458196][T16911] x64_sys_call+0x21d5/0x3000 [ 201.458309][T16911] do_syscall_64+0xc0/0x2a0 [ 201.458328][T16911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.458341][T16911] RIP: 0033:0x7f718945af79 [ 201.458408][T16911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.458428][T16911] RSP: 002b:00007f7187eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.458444][T16911] RAX: ffffffffffffffda RBX: 00007f71896d5fa0 RCX: 00007f718945af79 [ 201.458481][T16911] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 201.458489][T16911] RBP: 00007f71894f16e0 R08: 0000000000000004 R09: 0000000000000000 [ 201.458497][T16911] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.458505][T16911] R13: 00007f71896d6038 R14: 00007f71896d5fa0 R15: 00007ffc0eb48b38 [ 201.458516][T16911] [ 201.458520][T16911] Mem-Info: [ 201.663490][T16911] active_anon:27164 inactive_anon:373 isolated_anon:0 [ 201.663490][T16911] active_file:16938 inactive_file:13206 isolated_file:0 [ 201.663490][T16911] unevictable:22 dirty:320 writeback:0 [ 201.663490][T16911] slab_reclaimable:3906 slab_unreclaimable:58484 [ 201.663490][T16911] mapped:29255 shmem:17331 pagetables:2214 [ 201.663490][T16911] sec_pagetables:0 bounce:0 [ 201.663490][T16911] kernel_misc_reclaimable:0 [ 201.663490][T16911] free:1767326 free_pcp:14796 free_cma:0 [ 201.708983][T16911] Node 0 active_anon:108656kB inactive_anon:1492kB active_file:67752kB inactive_file:52824kB unevictable:88kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:1280kB writeback:0kB shmem:69324kB kernel_stack:5424kB pagetables:8856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.736906][T16911] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.766517][T16911] lowmem_reserve[]: 0 2879 7858 7858 [ 201.771985][T16911] Node 0 DMA32 free:2944844kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948372kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 201.803129][T16911] lowmem_reserve[]: 0 0 4978 4978 [ 201.808253][T16911] Node 0 Normal free:4109100kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108656kB inactive_anon:1492kB active_file:67752kB inactive_file:52824kB unevictable:88kB writepending:1280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:88kB bounce:0kB free_pcp:55656kB local_pcp:14704kB free_cma:0kB [ 201.841923][T16911] lowmem_reserve[]: 0 0 0 0 [ 201.846442][T16911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.859176][T16911] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944844kB [ 201.875298][T16911] Node 0 Normal: 5*4kB (E) 29*8kB (E) 1*16kB (U) 3*32kB (UME) 103*64kB (ME) 194*128kB (UME) 161*256kB (UME) 69*512kB (M) 19*1024kB (ME) 42*2048kB (UM) 951*4096kB (UM) = 4109100kB [ 201.893493][T16911] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 201.902863][T16911] 47834 total pagecache pages [ 201.907524][T16911] 376 pages in swap cache [ 201.911873][T16911] Free swap = 123492kB [ 201.916056][T16911] Total swap = 124996kB [ 201.920237][T16911] 2097051 pages RAM [ 201.924036][T16911] 0 pages HighMem/MovableOnly [ 201.928738][T16911] 81558 pages reserved [ 202.018030][T16928] __nla_validate_parse: 7 callbacks suppressed [ 202.018044][T16928] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4304'. [ 202.038959][T16930] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 202.673188][T16974] netlink: 'syz.2.4324': attribute type 4 has an invalid length. [ 202.684269][T16974] netlink: 'syz.2.4324': attribute type 4 has an invalid length. [ 203.641009][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 203.641027][ T29] audit: type=1326 audit(1770679980.341:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17029 comm="syz.6.4346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2b3b1af79 code=0x0 [ 204.923940][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4378'. [ 205.014854][ T29] audit: type=1326 audit(1770679981.721:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17110 comm="syz.6.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 205.038434][ T29] audit: type=1326 audit(1770679981.721:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17110 comm="syz.6.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 205.061925][ T29] audit: type=1326 audit(1770679981.721:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17110 comm="syz.6.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 205.085654][ T29] audit: type=1326 audit(1770679981.721:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17110 comm="syz.6.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 205.109153][ T29] audit: type=1326 audit(1770679981.721:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17110 comm="syz.6.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 205.232059][T17116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4383'. [ 205.481917][ T29] audit: type=1326 audit(1770679982.191:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17143 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 205.507001][ T29] audit: type=1326 audit(1770679982.221:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17143 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 205.530588][ T29] audit: type=1326 audit(1770679982.221:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17143 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 205.554155][ T29] audit: type=1326 audit(1770679982.221:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17143 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 206.030447][T17171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.040994][T17171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.085093][T17171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.095445][T17171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.153613][T17171] team0: Port device netdevsim1 removed [ 206.161345][T17171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.171663][T17171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.224497][T17187] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4407'. [ 206.245290][T17171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.255620][T17171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.316869][ T3334] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.325265][ T3334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.351077][ T3334] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.359295][ T3334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.372091][ T3334] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.380350][ T3334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.418575][ T3334] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.426819][ T3334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.507316][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4420'. [ 206.531322][T17210] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 206.614740][ T3334] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.623770][ T3334] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 206.632726][ T3334] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.641715][ T3334] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 206.652000][ T3334] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.660973][ T3334] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 206.670858][ T3334] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.679919][ T3334] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 206.956179][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4441'. [ 206.965122][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4441'. [ 206.975348][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4441'. [ 206.984272][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4441'. [ 207.543115][T17282] Set syz1 is full, maxelem 65536 reached [ 207.858031][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 207.867028][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 207.994593][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 208.005346][T17315] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 208.129979][T17327] netlink: 304 bytes leftover after parsing attributes in process `syz.0.4466'. [ 208.434969][T17342] netlink: 'syz.8.4476': attribute type 3 has an invalid length. [ 208.442781][T17342] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4476'. [ 208.566800][T17351] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4480'. [ 208.576997][T17351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4480'. [ 208.631232][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4483'. [ 209.114900][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 209.114913][ T29] audit: type=1326 audit(1770679985.821:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17404 comm="syz.0.4501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x0 [ 209.390139][T17416] SELinux: failed to load policy [ 209.762482][ T29] audit: type=1326 audit(1770679986.471:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.786105][ T29] audit: type=1326 audit(1770679986.471:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.809521][ T29] audit: type=1326 audit(1770679986.471:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.833019][ T29] audit: type=1326 audit(1770679986.471:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.856519][ T29] audit: type=1326 audit(1770679986.471:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.880151][ T29] audit: type=1326 audit(1770679986.471:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.903747][ T29] audit: type=1326 audit(1770679986.471:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 209.927293][ T29] audit: type=1326 audit(1770679986.471:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17448 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 210.238619][T17458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.250050][T17458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.250984][ T29] audit: type=1400 audit(1770679986.961:3472): avc: denied { create } for pid=17468 comm="syz.2.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.298634][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4526'. [ 210.307652][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4526'. [ 210.317141][ T8027] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.326190][ T8027] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.340671][ T8027] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.349663][ T8027] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.368479][ T8027] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.377392][ T8027] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.392743][ T8027] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.401719][ T8027] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.426314][T17481] netlink: 'syz.6.4532': attribute type 13 has an invalid length. [ 210.451482][T17481] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 210.866509][T17525] hub 2-0:1.0: USB hub found [ 210.872532][T17525] hub 2-0:1.0: 8 ports detected [ 210.979369][T17549] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 210.986886][ T3422] IPVS: starting estimator thread 0... [ 211.100608][T17552] IPVS: using max 1920 ests per chain, 96000 per kthread [ 211.111205][T17558] tipc: Failed to remove unknown binding: 66,1,1/0:135907014/135907016 [ 211.119476][T17558] tipc: Failed to remove unknown binding: 66,1,1/0:135907014/135907016 [ 211.306336][T17586] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 211.334983][T17590] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 211.345825][T17590] netlink: 'syz.0.4583': attribute type 17 has an invalid length. [ 211.523273][T17602] syzkaller0: entered promiscuous mode [ 211.528811][T17602] syzkaller0: entered allmulticast mode [ 211.822350][T17621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.833801][T17621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.947527][ T52] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.956098][ T52] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.974199][ T52] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.982648][ T52] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.991622][ T52] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.000041][ T52] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.008560][ T52] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.017082][ T52] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.159197][T17658] sch_fq: defrate 7 ignored. [ 212.185566][T17660] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.195982][T17660] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.234483][T17660] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.244886][T17660] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.303910][T17660] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.314338][T17660] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.380702][T17660] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.391050][T17660] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.448045][ T52] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.456407][ T52] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.488089][ T52] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.496441][ T52] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.516138][ T52] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.524435][ T52] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.534183][ T52] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.542422][ T52] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.649708][T17706] netlink: 'syz.2.4629': attribute type 27 has an invalid length. [ 212.669009][T17706] ip6gre1: left allmulticast mode [ 212.992238][T17733] __nla_validate_parse: 9 callbacks suppressed [ 212.992254][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'. [ 213.019001][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'. [ 213.028553][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 213.037607][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4643'. [ 213.062704][T17737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 213.071737][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4643'. [ 213.104843][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 213.114712][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4645'. [ 213.219865][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 213.234468][T17748] team1: entered promiscuous mode [ 213.239500][T17748] team1: entered allmulticast mode [ 213.270104][T17748] 8021q: adding VLAN 0 to HW filter on device team1 [ 213.532530][T17772] netlink: 'syz.0.4659': attribute type 1 has an invalid length. [ 213.707834][T17789] team0 (unregistering): Port device team_slave_0 removed [ 213.717361][T17789] team0 (unregistering): Port device team_slave_1 removed [ 213.860680][T17799] netlink: 'syz.0.4670': attribute type 1 has an invalid length. [ 213.891792][T17799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.921592][T17799] bond0: (slave gretap1): making interface the new active one [ 213.930104][T17799] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 215.123651][T17859] xt_hashlimit: size too large, truncated to 1048576 [ 215.418287][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 215.418303][ T29] audit: type=1326 audit(1770680248.124:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.452193][ T29] audit: type=1326 audit(1770680248.164:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.475699][ T29] audit: type=1326 audit(1770680248.164:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.517899][ T29] audit: type=1326 audit(1770680248.164:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.541523][ T29] audit: type=1326 audit(1770680248.164:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.565318][ T29] audit: type=1326 audit(1770680248.204:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.588889][ T29] audit: type=1326 audit(1770680248.204:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.612351][ T29] audit: type=1326 audit(1770680248.204:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.695937][ T29] audit: type=1326 audit(1770680248.224:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.719519][ T29] audit: type=1326 audit(1770680248.224:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.4695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b3b1af79 code=0x7ffc0000 [ 215.893155][T17877] batadv2: entered promiscuous mode [ 216.203784][T17900] geneve2: entered promiscuous mode [ 216.212071][ T3334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.222460][ T3334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.241875][ T3334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.255050][ T3334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.621245][T17931] sock: sock_set_timeout: `syz.2.4723' (pid 17931) tries to set negative timeout [ 216.742048][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4726'. [ 216.957226][T17946] netlink: 'syz.2.4729': attribute type 5 has an invalid length. [ 216.967966][T17946] geneve3: entered promiscuous mode [ 216.973208][T17946] geneve3: entered allmulticast mode [ 216.979349][ T8028] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 65535 - 0 [ 216.988478][ T8028] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 65535 - 0 [ 216.997944][ T8028] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 65535 - 0 [ 217.006602][ T8028] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 65535 - 0 [ 217.144073][T17970] ip6tnl0: Caught tx_queue_len zero misconfig [ 219.402998][T18119] netlink: 'syz.7.4802': attribute type 27 has an invalid length. [ 219.412280][T18119] ip6gre1: left promiscuous mode [ 219.417271][T18119] ip6gre1: left allmulticast mode [ 219.433008][T18119] ip6erspan0: left promiscuous mode [ 219.438691][T18119] bond2: left promiscuous mode [ 219.443582][T18119] bridge1: left promiscuous mode [ 219.632119][T18130] batadv_slave_1: entered promiscuous mode [ 219.652415][T18130] batadv_slave_1: left promiscuous mode [ 219.743701][T18135] netlink: 'syz.6.4810': attribute type 4 has an invalid length. [ 220.108454][T18165] bridge0: port 3(vlan2) entered blocking state [ 220.115511][T18165] bridge0: port 3(vlan2) entered disabled state [ 220.122635][T18165] vlan2: entered allmulticast mode [ 220.127995][T18165] bridge0: entered allmulticast mode [ 220.134294][T18165] vlan2: left allmulticast mode [ 220.139164][T18165] bridge0: left allmulticast mode [ 220.671017][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 220.671033][ T29] audit: type=1326 audit(1770680253.374:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.701359][ T29] audit: type=1326 audit(1770680253.374:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.725105][ T29] audit: type=1326 audit(1770680253.384:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.749294][ T29] audit: type=1326 audit(1770680253.384:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.772940][ T29] audit: type=1326 audit(1770680253.384:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.797194][ T29] audit: type=1326 audit(1770680253.384:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.821422][ T29] audit: type=1326 audit(1770680253.384:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.837582][ T9706] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 220.844950][ T29] audit: type=1326 audit(1770680253.384:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.855837][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.855868][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 220.855880][ T9706] Call Trace: [ 220.855968][ T9706] [ 220.855978][ T9706] __dump_stack+0x1d/0x30 [ 220.856006][ T9706] dump_stack_lvl+0x95/0xd0 [ 220.856029][ T9706] dump_stack+0x15/0x1b [ 220.856071][ T9706] dump_header+0x80/0x240 [ 220.856093][ T9706] oom_kill_process+0x295/0x350 [ 220.856119][ T9706] out_of_memory+0x97d/0xb80 [ 220.856146][ T9706] try_charge_memcg+0x62e/0xa10 [ 220.856209][ T9706] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 220.856245][ T9706] __read_swap_cache_async+0x17b/0x2d0 [ 220.856282][ T9706] swap_cluster_readahead+0x262/0x3c0 [ 220.856323][ T9706] swapin_readahead+0xde/0x840 [ 220.856362][ T9706] ? __perf_event_task_sched_in+0xa65/0xad0 [ 220.856414][ T9706] ? update_load_avg+0x1da/0x810 [ 220.856434][ T9706] ? __rcu_read_unlock+0x4e/0x70 [ 220.856462][ T9706] ? swap_cache_get_folio+0x26f/0x280 [ 220.856542][ T9706] do_swap_page+0x59b/0x2a50 [ 220.856575][ T9706] ? finish_task_switch+0x79/0x280 [ 220.856655][ T9706] ? __schedule+0x81f/0xce0 [ 220.856675][ T9706] ? mas_state_walk+0x3e9/0x650 [ 220.856741][ T9706] ? __rcu_read_lock+0x36/0x50 [ 220.856770][ T9706] ? __pfx_default_wake_function+0x10/0x10 [ 220.856818][ T9706] handle_mm_fault+0xb40/0x3030 [ 220.856852][ T9706] ? vma_start_read+0x1c7/0x2c0 [ 220.856936][ T9706] do_user_addr_fault+0x62f/0x1050 [ 220.856966][ T9706] exc_page_fault+0x62/0xa0 [ 220.856990][ T9706] asm_exc_page_fault+0x26/0x30 [ 220.857104][ T9706] RIP: 0033:0x7fcedac86197 [ 220.857122][ T9706] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 220.857141][ T9706] RSP: 002b:00007ffffe70ad40 EFLAGS: 00010202 [ 220.857160][ T9706] RAX: 0000000000000000 RBX: 000055557b497500 RCX: 00007fcedac86197 [ 220.857174][ T9706] RDX: 00007ffffe70ad80 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.857188][ T9706] RBP: 00007ffffe70adec R08: 0000000000000000 R09: 0000000000000000 [ 220.857202][ T9706] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 220.857223][ T9706] R13: 00000000000927c0 R14: 0000000000035e3d R15: 00007ffffe70ae40 [ 220.857243][ T9706] [ 220.857251][ T9706] memory: usage 307200kB, limit 307200kB, failcnt 1236 [ 220.880624][ T29] audit: type=1326 audit(1770680253.384:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.889899][ T9706] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 220.889913][ T9706] kmem: usage 306980kB, limit 9007199254740988kB, failcnt 0 [ 220.889925][ T9706] Memory cgroup stats for /syz2: [ 220.901671][ T9706] cache 0 [ 220.903255][ T29] audit: type=1326 audit(1770680253.384:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 220.906197][ T9706] rss 0 [ 221.187125][ T9706] shmem 0 [ 221.190089][ T9706] mapped_file 0 [ 221.193539][ T9706] dirty 0 [ 221.196542][ T9706] writeback 0 [ 221.199815][ T9706] workingset_refault_anon 1565 [ 221.204672][ T9706] workingset_refault_file 0 [ 221.209165][ T9706] swap 507904 [ 221.212465][ T9706] swapcached 12288 [ 221.216174][ T9706] pgpgin 168567 [ 221.219621][ T9706] pgpgout 168563 [ 221.223236][ T9706] pgfault 227507 [ 221.226849][ T9706] pgmajfault 273 [ 221.230469][ T9706] inactive_anon 0 [ 221.234093][ T9706] active_anon 12288 [ 221.237892][ T9706] inactive_file 0 [ 221.241557][ T9706] active_file 4096 [ 221.245266][ T9706] unevictable 0 [ 221.248721][ T9706] hierarchical_memory_limit 314572800 [ 221.254125][ T9706] hierarchical_memsw_limit 9223372036854771712 [ 221.260295][ T9706] total_cache 0 [ 221.263748][ T9706] total_rss 0 [ 221.267095][ T9706] total_shmem 0 [ 221.270649][ T9706] total_mapped_file 0 [ 221.274620][ T9706] total_dirty 0 [ 221.278165][ T9706] total_writeback 0 [ 221.282004][ T9706] total_workingset_refault_anon 1565 [ 221.287279][ T9706] total_workingset_refault_file 0 [ 221.292346][ T9706] total_swap 507904 [ 221.296182][ T9706] total_swapcached 12288 [ 221.300444][ T9706] total_pgpgin 168567 [ 221.304413][ T9706] total_pgpgout 168563 [ 221.308470][ T9706] total_pgfault 227507 [ 221.312559][ T9706] total_pgmajfault 273 [ 221.316684][ T9706] total_inactive_anon 0 [ 221.320868][ T9706] total_active_anon 12288 [ 221.325183][ T9706] total_inactive_file 0 [ 221.329328][ T9706] total_active_file 4096 [ 221.333599][ T9706] total_unevictable 0 [ 221.337560][ T9706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4834,pid=18190,uid=0 [ 221.352363][ T9706] Memory cgroup out of memory: Killed process 18190 (syz.2.4834) total-vm:96324kB, anon-rss:1340kB, file-rss:22304kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:0 [ 221.400897][T18191] syz.2.4834 (18191) used greatest stack depth: 7272 bytes left [ 221.707468][T18248] ªªªªªª: renamed from vlan0 (while UP) [ 221.725947][T18250] __nla_validate_parse: 6 callbacks suppressed [ 221.725999][T18250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4853'. [ 221.855355][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4861'. [ 221.874010][T18267] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 221.883551][T18267] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.047879][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4870'. [ 222.270773][T18304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4881'. [ 222.790844][T18349] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 223.075186][T18371] sctp: [Deprecated]: syz.8.4908 (pid 18371) Use of int in max_burst socket option. [ 223.075186][T18371] Use struct sctp_assoc_value instead [ 223.869376][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4936'. [ 223.925104][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4940'. [ 223.934121][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4940'. [ 224.442975][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4961'. [ 224.497535][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.507654][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.140737][T18548] netlink: 'syz.0.4986': attribute type 1 has an invalid length. [ 225.179006][T18548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.230477][T18554] bond6: option tlb_dynamic_lb: unable to set because the bond device is up [ 225.640838][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 226.067207][T18590] syz_tun: entered allmulticast mode [ 226.090369][T18589] syz_tun: left allmulticast mode [ 226.118777][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 226.118823][ T29] audit: type=1326 audit(1770680258.824:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.8.5002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f718945af79 code=0x0 [ 226.245702][T18607] geneve3: entered promiscuous mode [ 226.251941][ T3334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.270299][ T3334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.280196][ T3334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.290069][ T3334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.948565][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5019'. [ 226.959064][T18630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5019'. [ 227.484458][T18659] all: renamed from bridge_slave_0 [ 228.364318][T18720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.528608][ T29] audit: type=1326 audit(1770680261.234:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.552848][ T29] audit: type=1326 audit(1770680261.234:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.611404][ T29] audit: type=1326 audit(1770680261.234:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.635056][ T29] audit: type=1326 audit(1770680261.234:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.658707][ T29] audit: type=1326 audit(1770680261.284:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.683626][ T29] audit: type=1326 audit(1770680261.284:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.707113][ T29] audit: type=1326 audit(1770680261.284:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.731289][ T29] audit: type=1326 audit(1770680261.284:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.754973][ T29] audit: type=1326 audit(1770680261.284:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18732 comm="syz.7.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc667c5af79 code=0x7ffc0000 [ 228.952193][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5073'. [ 228.975902][T18770] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5073'. [ 229.214589][T18797] lo: Caught tx_queue_len zero misconfig [ 229.222711][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5085'. [ 229.290655][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5089'. [ 229.299900][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5089'. [ 229.817346][T18860] netlink: 51 bytes leftover after parsing attributes in process `syz.7.5113'. [ 230.551472][T18905] netlink: 'syz.6.5132': attribute type 10 has an invalid length. [ 230.561457][T18905] team0: Failed to send options change via netlink (err -105) [ 230.568973][T18905] team0: Port device dummy0 added [ 230.592633][T18905] netlink: 'syz.6.5132': attribute type 10 has an invalid length. [ 230.603883][T18905] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.614256][T18905] team0: Failed to send options change via netlink (err -105) [ 230.629099][T18905] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 230.638394][T18905] team0: Port device dummy0 removed [ 230.645689][T18905] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.804655][T18921] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.5138'. [ 231.147868][T18950] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5149'. [ 231.205287][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 231.205302][ T29] audit: type=1400 audit(1770680263.914:3665): avc: denied { lock } for pid=18952 comm="syz.8.5150" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.703999][ T29] audit: type=1326 audit(1770680264.414:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18992 comm="syz.8.5169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x0 [ 231.877256][T19004] sch_tbf: burst 19360 is lower than device lo mtu (11337746) ! [ 231.914371][ T2963] IPVS: starting estimator thread 0... [ 232.062096][ T3334] IPVS: stop unused estimator thread 0... [ 232.104717][ T29] audit: type=1326 audit(1770680264.814:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x0 [ 232.632528][T19038] __nla_validate_parse: 1 callbacks suppressed [ 232.632544][T19038] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5185'. [ 232.664990][T19040] netlink: 'syz.8.5186': attribute type 2 has an invalid length. [ 232.672799][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5186'. [ 232.682898][T19040] netlink: 'syz.8.5186': attribute type 2 has an invalid length. [ 232.690664][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5186'. [ 232.936243][T19042] syz.6.5187 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 232.950808][T19042] CPU: 0 UID: 0 PID: 19042 Comm: syz.6.5187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.950886][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.950901][T19042] Call Trace: [ 232.950908][T19042] [ 232.950918][T19042] __dump_stack+0x1d/0x30 [ 232.950947][T19042] dump_stack_lvl+0x95/0xd0 [ 232.951081][T19042] dump_stack+0x15/0x1b [ 232.951104][T19042] dump_header+0x80/0x240 [ 232.951127][T19042] oom_kill_process+0x295/0x350 [ 232.951204][T19042] out_of_memory+0x97d/0xb80 [ 232.951237][T19042] try_charge_memcg+0x62e/0xa10 [ 232.951266][T19042] obj_cgroup_charge_pages+0x23/0xc0 [ 232.951341][T19042] __memcg_kmem_charge_page+0x9e/0x170 [ 232.951375][T19042] __alloc_frozen_pages_noprof+0x18a/0x350 [ 232.951412][T19042] alloc_pages_mpol+0xb3/0x260 [ 232.951444][T19042] alloc_pages_noprof+0x8f/0x130 [ 232.951493][T19042] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 232.951540][T19042] __kvmalloc_node_noprof+0x471/0x680 [ 232.951600][T19042] ? ip_set_alloc+0x24/0x30 [ 232.951638][T19042] ? ip_set_alloc+0x24/0x30 [ 232.951664][T19042] ip_set_alloc+0x24/0x30 [ 232.951689][T19042] hash_netiface_create+0x282/0x740 [ 232.951779][T19042] ? __pfx_hash_netiface_create+0x10/0x10 [ 232.951842][T19042] ip_set_create+0x3cf/0x970 [ 232.951878][T19042] ? __nla_parse+0x40/0x60 [ 232.951895][T19042] nfnetlink_rcv_msg+0x509/0x5d0 [ 232.951944][T19042] netlink_rcv_skb+0x123/0x220 [ 232.951972][T19042] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 232.952057][T19042] nfnetlink_rcv+0x167/0x1720 [ 232.952100][T19042] ? __list_del_entry_valid_or_report+0x65/0x130 [ 232.952191][T19042] ? __rmqueue_pcplist+0x9b6/0xb80 [ 232.952218][T19042] ? _raw_spin_lock_bh+0x56/0xb0 [ 232.952246][T19042] ? should_fail_ex+0x30/0x280 [ 232.952273][T19042] ? selinux_nlmsg_lookup+0x99/0x890 [ 232.952302][T19042] ? __rcu_read_unlock+0x33/0x70 [ 232.952375][T19042] ? __netlink_lookup+0x276/0x2b0 [ 232.952400][T19042] netlink_unicast+0x5c0/0x690 [ 232.952427][T19042] netlink_sendmsg+0x5c8/0x6f0 [ 232.952446][T19042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.952474][T19042] ____sys_sendmsg+0x5af/0x600 [ 232.952543][T19042] ___sys_sendmsg+0x195/0x1e0 [ 232.952569][T19042] __x64_sys_sendmsg+0xd4/0x160 [ 232.952589][T19042] x64_sys_call+0x17ba/0x3000 [ 232.952611][T19042] do_syscall_64+0xc0/0x2a0 [ 232.952709][T19042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.952729][T19042] RIP: 0033:0x7fe2b3b1af79 [ 232.952744][T19042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.952872][T19042] RSP: 002b:00007fe2b256f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.952892][T19042] RAX: ffffffffffffffda RBX: 00007fe2b3d95fa0 RCX: 00007fe2b3b1af79 [ 232.952906][T19042] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 232.952943][T19042] RBP: 00007fe2b3bb16e0 R08: 0000000000000000 R09: 0000000000000000 [ 232.952955][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.952966][T19042] R13: 00007fe2b3d96038 R14: 00007fe2b3d95fa0 R15: 00007ffca8d1b898 [ 232.952983][T19042] [ 232.953109][T19042] memory: usage 307200kB, limit 307200kB, failcnt 92 [ 233.273024][T19042] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 233.280978][T19042] kmem: usage 306076kB, limit 9007199254740988kB, failcnt 0 [ 233.288283][T19042] Memory cgroup stats for /syz6: [ 233.290176][T19042] cache 262144 [ 233.298487][T19042] rss 884736 [ 233.301707][T19042] shmem 262144 [ 233.305066][T19042] mapped_file 0 [ 233.308508][T19042] dirty 0 [ 233.311594][T19042] writeback 0 [ 233.314872][T19042] workingset_refault_anon 4 [ 233.319360][T19042] workingset_refault_file 0 [ 233.323883][T19042] swap 0 [ 233.326714][T19042] swapcached 0 [ 233.330093][T19042] pgpgin 184959 [ 233.333537][T19042] pgpgout 184678 [ 233.337065][T19042] pgfault 182133 [ 233.340637][T19042] pgmajfault 0 [ 233.344115][T19042] inactive_anon 1142784 [ 233.348313][T19042] active_anon 4096 [ 233.352110][T19042] inactive_file 0 [ 233.355732][T19042] active_file 4096 [ 233.359442][T19042] unevictable 0 [ 233.362968][T19042] hierarchical_memory_limit 314572800 [ 233.368328][T19042] hierarchical_memsw_limit 9223372036854771712 [ 233.374555][T19042] total_cache 262144 [ 233.378437][T19042] total_rss 884736 [ 233.382191][T19042] total_shmem 262144 [ 233.386071][T19042] total_mapped_file 0 [ 233.390078][T19042] total_dirty 0 [ 233.393521][T19042] total_writeback 0 [ 233.397312][T19042] total_workingset_refault_anon 4 [ 233.402429][T19042] total_workingset_refault_file 0 [ 233.407443][T19042] total_swap 0 [ 233.410851][T19042] total_swapcached 0 [ 233.414739][T19042] total_pgpgin 184959 [ 233.418774][T19042] total_pgpgout 184678 [ 233.422888][T19042] total_pgfault 182133 [ 233.426946][T19042] total_pgmajfault 0 [ 233.430903][T19042] total_inactive_anon 1142784 [ 233.435692][T19042] total_active_anon 4096 [ 233.439977][T19042] total_inactive_file 0 [ 233.444127][T19042] total_active_file 4096 [ 233.448357][T19042] total_unevictable 0 [ 233.452371][T19042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5187,pid=19041,uid=0 [ 233.467176][T19042] Memory cgroup out of memory: Killed process 19041 (syz.6.5187) total-vm:96192kB, anon-rss:1344kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 233.556898][ T29] audit: type=1326 audit(1770680266.264:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19062 comm="syz.7.5195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc667c5af79 code=0x0 [ 233.726167][T19074] batadv_slave_0: Caught tx_queue_len zero misconfig [ 234.040781][T19084] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 234.148831][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5205'. [ 234.158474][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5205'. [ 234.175069][ T3334] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.185432][ T3334] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.194633][ T3334] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.205424][T19094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5205'. [ 234.215068][T19094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5205'. [ 234.224706][ T3334] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.409850][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5216'. [ 234.428851][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5217'. [ 234.438089][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5217'. [ 234.566295][ T29] audit: type=1400 audit(1770680267.274:3669): avc: denied { override_creds } for pid=19130 comm="syz.7.5224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 234.765664][T19155] netlink: 'syz.2.5235': attribute type 10 has an invalid length. [ 234.774960][T19155] team0: Failed to send options change via netlink (err -105) [ 234.782464][T19155] team0: Port device dummy0 added [ 234.804582][T19155] netlink: 'syz.2.5235': attribute type 10 has an invalid length. [ 234.813206][T19155] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.843961][T19155] team0: Failed to send options change via netlink (err -105) [ 234.851705][T19155] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.860929][T19155] team0: Port device dummy0 removed [ 234.867729][T19155] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.207663][ T29] audit: type=1326 audit(1770680267.914:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 235.232018][ T29] audit: type=1326 audit(1770680267.914:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 235.256445][ T29] audit: type=1326 audit(1770680267.914:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f271956b84e code=0x7ffc0000 [ 235.280711][ T29] audit: type=1326 audit(1770680267.914:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f271956b84e code=0x7ffc0000 [ 235.304218][ T29] audit: type=1326 audit(1770680267.914:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.0.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 236.402182][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 236.402200][ T29] audit: type=1400 audit(1770680269.114:3687): avc: denied { map } for pid=19250 comm="syz.7.5272" path="socket:[56022]" dev="sockfs" ino=56022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 236.551488][T19262] batadv_slave_1: entered promiscuous mode [ 236.558239][T19261] batadv_slave_1: left promiscuous mode [ 237.008092][T19288] netlink: 'syz.8.5288': attribute type 10 has an invalid length. [ 237.021695][T19288] netlink: 'syz.8.5288': attribute type 10 has an invalid length. [ 237.036660][T19288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.933561][T19359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.982861][T19359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.044047][T19359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.109565][T19359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.156372][ T29] audit: type=1400 audit(1770680270.864:3688): avc: denied { getopt } for pid=19362 comm="syz.6.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 238.183543][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.194724][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.212177][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.225889][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.639975][ T29] audit: type=1326 audit(1770680271.344:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19395 comm="syz.8.5333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x0 [ 238.927070][T19427] all: renamed from veth1_to_bond [ 239.023212][T19438] macvtap1: entered promiscuous mode [ 239.028587][T19438] macvtap1: entered allmulticast mode [ 239.034565][T19438] dummy0: entered allmulticast mode [ 239.039824][T19438] dummy0: entered promiscuous mode [ 239.045762][T19438] team0: Device macvtap1 failed to register rx_handler [ 239.052869][T19438] dummy0: left allmulticast mode [ 239.057832][T19438] dummy0: left promiscuous mode [ 239.219718][T19447] __nla_validate_parse: 7 callbacks suppressed [ 239.219736][T19447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5354'. [ 239.705294][T19478] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5368'. [ 239.774162][T19486] ipip0: entered promiscuous mode [ 239.863678][T19494] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 239.888423][T19494] bond8: entered promiscuous mode [ 239.893509][T19494] bond8: entered allmulticast mode [ 239.908760][T19494] bond8: (slave ip6gretap1): making interface the new active one [ 239.917277][T19494] ip6gretap1: entered promiscuous mode [ 239.922861][T19494] ip6gretap1: entered allmulticast mode [ 239.929172][T19494] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 240.006215][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5376'. [ 240.048543][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5376'. [ 240.152811][ T29] audit: type=1400 audit(1770680272.854:3690): avc: denied { read } for pid=19506 comm="syz.8.5379" path="socket:[57472]" dev="sockfs" ino=57472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.585577][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5394'. [ 240.651189][T19547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.688213][T19547] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 240.833829][T19556] netlink: 'syz.2.5397': attribute type 1 has an invalid length. [ 240.842424][T19556] netlink: 'syz.2.5397': attribute type 4 has an invalid length. [ 240.850303][T19556] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5397'. [ 241.043514][ T29] audit: type=1326 audit(1770680273.754:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.2.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 241.067821][ T29] audit: type=1326 audit(1770680273.754:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.2.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 241.092135][ T29] audit: type=1326 audit(1770680273.754:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.2.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 241.221894][ T29] audit: type=1326 audit(1770680273.824:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.2.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 241.246097][ T29] audit: type=1326 audit(1770680273.824:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19566 comm="syz.2.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 241.444021][T19587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5410'. [ 241.501197][T19587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.556139][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5412'. [ 241.592093][T19594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5412'. [ 241.601436][T19593] syzkaller0: entered allmulticast mode [ 241.631823][T19593] syzkaller0: entered promiscuous mode [ 241.663029][T19593] syzkaller0 (unregistering): left allmulticast mode [ 241.669728][T19593] syzkaller0 (unregistering): left promiscuous mode [ 241.714806][T19600] netlink: 'syz.0.5415': attribute type 1 has an invalid length. [ 241.722708][T19600] netlink: 'syz.0.5415': attribute type 4 has an invalid length. [ 241.730509][T19600] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5415'. [ 242.213180][ T8028] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.223555][ T8028] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.292527][ T29] audit: type=1326 audit(1770680275.004:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="syz.7.5431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc667c5af79 code=0x0 [ 242.295404][ T8028] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.325874][ T8028] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.452794][ T8028] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.463148][ T8028] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.531097][ T8028] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.541460][ T8028] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.844729][ T8028] bridge_slave_1: left allmulticast mode [ 242.850457][ T8028] bridge_slave_1: left promiscuous mode [ 242.856078][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.870093][ T8028] bridge_slave_0: left allmulticast mode [ 242.875737][ T8028] bridge_slave_0: left promiscuous mode [ 242.881522][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.002591][ T8028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.015123][ T8028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.025311][ T8028] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 243.034895][ T8028] bond0 (unregistering): Released all slaves [ 243.043195][T19632] chnl_net:caif_netlink_parms(): no params data found [ 243.095066][T19632] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.102175][T19632] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.109599][T19632] bridge_slave_0: entered allmulticast mode [ 243.116334][T19632] bridge_slave_0: entered promiscuous mode [ 243.141318][ T8028] hsr_slave_0: left promiscuous mode [ 243.150740][ T8028] hsr_slave_1: left promiscuous mode [ 243.156559][ T8028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.165809][ T8028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.186990][ T29] audit: type=1326 audit(1770680275.894:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19660 comm="syz.7.5437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc667c5af79 code=0x0 [ 243.233562][ T8028] team0 (unregistering): Port device team_slave_1 removed [ 243.243478][ T8028] team0 (unregistering): Port device team_slave_0 removed [ 243.276023][T19632] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.283145][T19632] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.290530][T19632] bridge_slave_1: entered allmulticast mode [ 243.296975][T19632] bridge_slave_1: entered promiscuous mode [ 243.314432][T19632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.340493][T19632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.392049][T19632] team0: Port device team_slave_0 added [ 243.401929][T19632] team0: Port device team_slave_1 added [ 243.428869][T19632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.436028][T19632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.461976][T19632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.473647][T19632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.480859][T19632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.506799][T19632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.536450][T19632] hsr_slave_0: entered promiscuous mode [ 243.542731][T19632] hsr_slave_1: entered promiscuous mode [ 243.564496][T19632] debugfs: 'hsr0' already exists in 'hsr' [ 243.570270][T19632] Cannot create hsr debugfs directory [ 243.638862][ T8028] IPVS: stop unused estimator thread 0... [ 243.643571][T19697] netlink: zone id is out of range [ 243.653220][T19697] netlink: zone id is out of range [ 243.668430][T19697] netlink: zone id is out of range [ 243.677117][T19697] netlink: del zone limit has 8 unknown bytes [ 244.176625][T19632] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 244.200330][T19632] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 244.227770][T19632] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 244.242310][T19632] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 244.329906][T19632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.362296][T19632] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.383101][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.390199][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.422988][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.430091][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.558370][T19632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.714022][T19632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.825839][T19817] __nla_validate_parse: 2 callbacks suppressed [ 244.825896][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5470'. [ 244.886997][T19819] netlink: 'syz.7.5471': attribute type 83 has an invalid length. [ 245.190377][T19831] netlink: 'syz.7.5473': attribute type 1 has an invalid length. [ 245.938606][T19884] bond0: (slave bond_slave_1): Releasing backup interface [ 246.193207][T19899] ipip1: entered promiscuous mode [ 246.258955][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 246.335011][T19909] netlink: 'syz.8.5493': attribute type 2 has an invalid length. [ 246.342881][T19909] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5493'. [ 246.426922][T19632] veth0_vlan: entered promiscuous mode [ 246.437953][T19632] veth1_vlan: entered promiscuous mode [ 246.474926][T19632] veth0_macvtap: entered promiscuous mode [ 246.502126][T19925] geneve4: entered promiscuous mode [ 246.507506][T19925] geneve4: entered allmulticast mode [ 246.514005][ T52] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.523439][T19632] veth1_macvtap: entered promiscuous mode [ 246.539552][T19632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.550111][ T52] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.568714][ T52] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.601762][T19632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.613584][ T52] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.637105][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.662717][ T52] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.697449][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.710821][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.860554][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5512'. [ 246.961423][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5515'. [ 246.970438][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5515'. [ 247.071793][T20005] netlink: 'syz.2.5519': attribute type 12 has an invalid length. [ 247.079650][T20005] netlink: 'syz.2.5519': attribute type 29 has an invalid length. [ 247.087699][T20005] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5519'. [ 247.217299][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5515'. [ 247.226309][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5515'. [ 247.248602][T20010] uprobe: syz.9.5522:20010 failed to unregister, leaking uprobe [ 247.272018][T20015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5523'. [ 247.320978][T20023] netlink: 'syz.2.5525': attribute type 12 has an invalid length. [ 247.364204][T20023] netlink: 'syz.2.5525': attribute type 12 has an invalid length. [ 247.548218][T20046] tipc: Started in network mode [ 247.553273][T20046] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 247.560556][T20046] tipc: Enabled bearer , priority 18 [ 247.735446][ T57] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.757761][ T57] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.775156][ T57] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.813769][ T57] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.906065][T20082] loop9: detected capacity change from 0 to 512 [ 248.075260][T20082] ------------[ cut here ]------------ [ 248.081453][T20082] EA inode 11 i_nlink=2 [ 248.081653][T20082] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.9.5543/20082 [ 248.097702][T20082] Modules linked in: [ 248.102692][T20082] CPU: 0 UID: 0 PID: 20082 Comm: syz.9.5543 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.112936][T20082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.124171][T20082] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 248.131516][T20082] Code: 64 e4 9a ff 4c 8d 2d bd 1f 3e 05 49 8d 7e 40 e8 74 ce b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 c9 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f de d0 03 66 66 66 66 66 66 2e [ 248.153360][T20082] RSP: 0018:ffffc900030b7778 EFLAGS: 00010246 [ 248.159961][T20082] RAX: ffff88810a31cc90 RBX: ffff88811a06b688 RCX: ffffffff81be1d78 [ 248.168374][T20082] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3d20 [ 248.177306][T20082] RBP: 000000000000000b R08: 000188811a06b63b R09: 0000000000000000 [ 248.186174][T20082] R10: ffffc900030b76a8 R11: 0001c900030b76a8 R12: ffff88811a06b638 [ 248.194783][T20082] R13: ffffffff86fc3d20 R14: ffff88811a06b5f0 R15: 0000000000000001 [ 248.203682][T20082] FS: 00007f68bd26f6c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 248.213492][T20082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.220452][T20082] CR2: 0000000034747865 CR3: 0000000103484000 CR4: 00000000003506f0 [ 248.228978][T20082] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 248.237452][T20082] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 248.246523][T20082] Call Trace: [ 248.250521][T20082] [ 248.253970][T20082] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 248.262189][T20082] ? errseq_check+0x2c/0x50 [ 248.267222][T20082] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 248.273552][T20082] ? ext4_truncate+0x92b/0xad0 [ 248.278932][T20082] ext4_evict_inode+0xa1f/0xd40 [ 248.285709][T20082] ? __pfx_ext4_evict_inode+0x10/0x10 [ 248.291852][T20082] evict+0x2af/0x510 [ 248.296091][T20082] ? __dquot_initialize+0x146/0x7c0 [ 248.301804][T20082] iput+0x4b9/0x650 [ 248.305973][T20082] ext4_process_orphan+0x1a9/0x1c0 [ 248.311893][T20082] ext4_orphan_cleanup+0x6a8/0xa00 [ 248.317550][T20082] ext4_fill_super+0x3476/0x3800 [ 248.323432][T20082] ? set_blocksize+0x1a3/0x310 [ 248.328522][T20082] ? setup_bdev_super+0x30e/0x370 [ 248.334420][T20082] ? __pfx_ext4_fill_super+0x10/0x10 [ 248.340203][T20082] get_tree_bdev_flags+0x291/0x300 [ 248.346056][T20082] ? __pfx_ext4_fill_super+0x10/0x10 [ 248.351821][T20082] get_tree_bdev+0x1f/0x30 [ 248.356956][T20082] ext4_get_tree+0x1c/0x30 [ 248.361903][T20082] vfs_get_tree+0x57/0x1d0 [ 248.366641][T20082] do_new_mount+0x288/0x700 [ 248.371452][T20082] path_mount+0x4d0/0xbc0 [ 248.376213][T20082] ? user_path_at+0xbf/0x130 [ 248.381623][T20082] __se_sys_mount+0x28c/0x2e0 [ 248.386722][T20082] __x64_sys_mount+0x67/0x80 [ 248.392073][T20082] x64_sys_call+0x2cca/0x3000 [ 248.397610][T20082] do_syscall_64+0xc0/0x2a0 [ 248.404240][T20082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.410613][T20082] RIP: 0033:0x7f68be81c20a [ 248.415611][T20082] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.436032][T20082] RSP: 002b:00007f68bd26ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.445230][T20082] RAX: ffffffffffffffda RBX: 00007f68bd26eee0 RCX: 00007f68be81c20a [ 248.454110][T20082] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f68bd26eea0 [ 248.462713][T20082] RBP: 00002000000009c0 R08: 00007f68bd26eee0 R09: 0000000000800718 [ 248.471261][T20082] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 248.479743][T20082] R13: 00007f68bd26eea0 R14: 000000000000048d R15: 0000200000000200 [ 248.488276][T20082] [ 248.491872][T20082] ---[ end trace 0000000000000000 ]--- [ 248.685164][ T9] tipc: Node number set to 10463914 [ 248.755777][T20082] EXT4-fs (loop9): 1 orphan inode deleted [ 248.785255][T20082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.926225][T20145] xt_hashlimit: size too large, truncated to 1048576 [ 249.390949][T20194] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 249.521668][ T29] audit: type=1326 audit(1770680282.234:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20208 comm="syz.0.5570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x0 [ 249.687516][T19632] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.898173][T20222] loop9: detected capacity change from 0 to 1024 [ 249.911431][T20222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.937276][ T29] audit: type=1400 audit(1770680282.644:3699): avc: denied { create } for pid=20221 comm="syz.9.5573" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.985069][T19632] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.321612][ T2963] kernel write not supported for file /vcs (pid: 2963 comm: kworker/1:2) [ 250.625396][T20277] netlink: 'syz.9.5589': attribute type 29 has an invalid length. [ 250.655866][T20277] netlink: 'syz.9.5589': attribute type 29 has an invalid length. [ 250.717759][T20284] __nla_validate_parse: 3 callbacks suppressed [ 250.717854][T20284] netlink: 500 bytes leftover after parsing attributes in process `syz.9.5589'. [ 250.733412][T20284] unsupported nla_type 66 [ 251.128671][T20342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5598'. [ 251.477092][T20389] loop9: detected capacity change from 0 to 128 [ 251.490542][T20389] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.602818][ T29] audit: type=1400 audit(2000000000.859:3700): avc: denied { remount } for pid=20388 comm="syz.9.5606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 252.454177][ T29] audit: type=1400 audit(2000000001.709:3701): avc: denied { shutdown } for pid=20426 comm="syz.8.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.565969][T20443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.566609][T20444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20444 comm=syz.0.5629 [ 252.575448][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5628'. [ 252.595888][T20444] netlink: 'syz.0.5629': attribute type 1 has an invalid length. [ 252.635163][T20444] bond9: (slave bridge2): making interface the new active one [ 252.643734][T20444] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 252.661748][T20451] netlink: 'syz.7.5631': attribute type 21 has an invalid length. [ 252.669606][T20451] netlink: 'syz.7.5631': attribute type 26 has an invalid length. [ 252.881029][T20470] netlink: 'syz.0.5640': attribute type 1 has an invalid length. [ 252.908693][T20470] bond10: (slave geneve4): making interface the new active one [ 252.917041][T20470] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 252.926151][ T8027] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.939608][ T8027] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.969351][ T8027] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 252.995294][ T8027] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 253.411513][T20505] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5656'. [ 253.454767][ T29] audit: type=1326 audit(2000000002.709:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.516361][ T29] audit: type=1326 audit(2000000002.709:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.540004][ T29] audit: type=1326 audit(2000000002.709:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.563596][ T29] audit: type=1326 audit(2000000002.709:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.587192][ T29] audit: type=1326 audit(2000000002.719:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.610758][ T29] audit: type=1326 audit(2000000002.719:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20506 comm="syz.8.5657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 253.710749][T20522] loop9: detected capacity change from 0 to 128 [ 254.123781][T20541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 254.371533][T20566] netlink: 'syz.2.5679': attribute type 3 has an invalid length. [ 254.379419][T20566] netlink: 'syz.2.5679': attribute type 3 has an invalid length. [ 255.593231][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 255.593247][ T29] audit: type=1400 audit(2000000004.849:3709): avc: denied { connect } for pid=20635 comm="syz.9.5705" lport=51783 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.623711][ T29] audit: type=1400 audit(2000000004.849:3710): avc: denied { name_connect } for pid=20635 comm="syz.9.5705" dest=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 255.836896][ T29] audit: type=1400 audit(2000000005.089:3711): avc: denied { write } for pid=20646 comm="syz.9.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 255.904725][ T29] audit: type=1400 audit(2000000005.159:3712): avc: denied { bind } for pid=20648 comm="syz.9.5710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 256.056077][T20658] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.5714'. [ 256.101772][ T29] audit: type=1326 audit(2000000005.359:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68be81af79 code=0x7ffc0000 [ 256.160256][ T29] audit: type=1326 audit(2000000005.379:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f68be81af79 code=0x7ffc0000 [ 256.183852][ T29] audit: type=1326 audit(2000000005.389:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68be81af79 code=0x7ffc0000 [ 256.207343][ T29] audit: type=1326 audit(2000000005.389:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68be81af79 code=0x7ffc0000 [ 256.230879][ T29] audit: type=1326 audit(2000000005.389:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68be7db84e code=0x7ffc0000 [ 256.254607][ T29] audit: type=1326 audit(2000000005.399:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.9.5715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68be81af79 code=0x7ffc0000 [ 256.693708][T20711] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 256.704802][T20711] bond4 (unregistering): Released all slaves [ 257.850559][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5751'. [ 257.870302][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5751'. [ 257.922592][T20862] xt_hashlimit: size too large, truncated to 1048576 [ 257.979925][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5754'. [ 257.990389][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5754'. [ 258.169312][T20905] kernel profiling enabled (shift: 8) [ 258.232813][T20914] loop9: detected capacity change from 0 to 2048 [ 258.284433][T20914] loop9: p3 < > p4 < > [ 258.288617][T20914] loop9: partition table partially beyond EOD, truncated [ 258.309996][T20914] loop9: p3 start 4284289 is beyond EOD, truncated [ 258.319248][ T3000] loop9: p3 < > p4 < > [ 258.323528][ T3000] loop9: partition table partially beyond EOD, truncated [ 258.332109][ T3000] loop9: p3 start 4284289 is beyond EOD, truncated [ 258.390600][T20914] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5762'. [ 258.749398][T20945] netlink: 'syz.0.5768': attribute type 10 has an invalid length. [ 258.757328][T20945] netlink: 'syz.0.5768': attribute type 11 has an invalid length. [ 258.765244][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5768'. [ 258.834649][T20947] netlink: 'syz.9.5771': attribute type 1 has an invalid length. [ 258.842625][T20947] netlink: 'syz.9.5771': attribute type 4 has an invalid length. [ 258.850464][T20947] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.5771'. [ 258.861582][T20947] netlink: 'syz.9.5771': attribute type 1 has an invalid length. [ 258.869569][T20947] netlink: 'syz.9.5771': attribute type 4 has an invalid length. [ 258.877443][T20947] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.5771'. [ 258.991268][T20958] netlink: 2020 bytes leftover after parsing attributes in process `syz.9.5772'. [ 259.141228][T20962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.149394][T20962] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.173308][T20962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.981304][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 260.981328][ T29] audit: type=1326 audit(2000000010.239:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.2.5806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x0 [ 260.991125][T21041] loop9: detected capacity change from 0 to 256 [ 261.091178][T21048] loop9: detected capacity change from 0 to 128 [ 261.118659][T21048] syz.9.5808: attempt to access beyond end of device [ 261.118659][T21048] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 261.156169][T21048] syz.9.5808: attempt to access beyond end of device [ 261.156169][T21048] loop9: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 261.169992][T21048] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 261.211041][T21048] syz.9.5808: attempt to access beyond end of device [ 261.211041][T21048] loop9: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 261.232589][T21048] syz.9.5808: attempt to access beyond end of device [ 261.232589][T21048] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 261.262602][T21048] syz.9.5808: attempt to access beyond end of device [ 261.262602][T21048] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 261.289830][T21048] syz.9.5808: attempt to access beyond end of device [ 261.289830][T21048] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 261.317100][T21048] syz.9.5808: attempt to access beyond end of device [ 261.317100][T21048] loop9: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 261.383840][T21052] syz.9.5808: attempt to access beyond end of device [ 261.383840][T21052] loop9: rw=2049, sector=162, nr_sectors = 56 limit=128 [ 261.900489][T21132] __nla_validate_parse: 4 callbacks suppressed [ 261.900506][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5831'. [ 261.999711][ T29] audit: type=1400 audit(2000000011.249:3765): avc: denied { listen } for pid=21146 comm="syz.8.5837" lport=36991 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.560192][T21182] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5846'. [ 262.680049][T21187] ref_ctr increment failed for inode: 0xda6 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812ead8d80 [ 262.700497][T21186] uprobe: syz.8.5847:21186 failed to unregister, leaking uprobe [ 262.780643][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5851'. [ 262.784669][T21197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5852'. [ 262.799411][T21191] dvmrp0: entered allmulticast mode [ 262.820455][T21195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.894491][T21200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.920757][T21203] xt_hashlimit: max too large, truncated to 1048576 [ 262.979291][T21197] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5852'. [ 263.071556][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'. [ 263.111886][ T29] audit: type=1326 audit(2000000012.369:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.132741][T21216] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.5860'. [ 263.135586][ T29] audit: type=1326 audit(2000000012.369:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.172349][ T29] audit: type=1326 audit(2000000012.389:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.195846][ T29] audit: type=1326 audit(2000000012.389:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.203273][T21216] netlink: zone id is out of range [ 263.219453][ T29] audit: type=1326 audit(2000000012.389:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.224489][T21216] netlink: zone id is out of range [ 263.247949][ T29] audit: type=1326 audit(2000000012.389:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.276695][ T29] audit: type=1326 audit(2000000012.389:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.300244][ T29] audit: type=1326 audit(2000000012.389:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21215 comm="syz.0.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27195aaf79 code=0x7ffc0000 [ 263.358454][T21216] netlink: zone id is out of range [ 263.373601][T21216] netlink: set zone limit has 8 unknown bytes [ 263.385176][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5864'. [ 264.380664][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 264.389589][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 264.852952][T21315] delete_channel: no stack [ 265.137773][T21351] netlink: 'syz.9.5912': attribute type 1 has an invalid length. [ 265.178646][T21351] bond1: entered promiscuous mode [ 265.183756][T21351] bond1: entered allmulticast mode [ 265.245907][T21351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.275458][T21355] macvlan2: entered promiscuous mode [ 265.280906][T21355] macvlan2: entered allmulticast mode [ 265.293327][T21355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.897174][T21406] netlink: 'syz.0.5932': attribute type 1 has an invalid length. [ 265.959409][T21406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 265.990549][T21410] bond11: (slave veth7): Enslaving as an active interface with a down link [ 266.108316][T21406] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 266.142709][T21406] bond11: (slave batadv1): making interface the new active one [ 266.171546][T21406] batadv1: entered promiscuous mode [ 266.199935][T21406] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 266.971580][T21459] __nla_validate_parse: 2 callbacks suppressed [ 266.971599][T21459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5954'. [ 267.728072][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5967'. [ 268.409534][T21510] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5974'. [ 268.761910][T21521] netlink: 'syz.7.5980': attribute type 39 has an invalid length. [ 268.776888][T21523] netlink: 'syz.8.5978': attribute type 3 has an invalid length. [ 268.785027][T21523] netlink: 'syz.8.5978': attribute type 1 has an invalid length. [ 268.792897][T21523] netlink: 181400 bytes leftover after parsing attributes in process `syz.8.5978'. [ 268.851975][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5982'. [ 268.887925][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5982'. [ 268.980103][T21536] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 268.998172][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 268.998234][ T29] audit: type=1326 audit(2000000018.249:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.2.5986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x0 [ 269.053875][T21549] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 269.089968][ T29] audit: type=1400 audit(2000000018.299:3812): avc: denied { create } for pid=21548 comm="syz.7.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 269.416583][T21565] netlink: 'syz.7.5995': attribute type 2 has an invalid length. [ 269.424517][T21565] netlink: 'syz.7.5995': attribute type 1 has an invalid length. [ 269.685020][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6001'. [ 269.876696][T21585] syzkaller0: entered allmulticast mode [ 269.898814][T21585] syzkaller0: entered promiscuous mode [ 269.915819][T21585] syzkaller0 (unregistering): left allmulticast mode [ 269.922637][T21585] syzkaller0 (unregistering): left promiscuous mode [ 270.199654][T21610] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.6016'. [ 270.531208][ T29] audit: type=1326 audit(2000000019.789:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.554798][ T29] audit: type=1326 audit(2000000019.789:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.596968][ T29] audit: type=1326 audit(2000000019.849:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.620683][ T29] audit: type=1326 audit(2000000019.849:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.644176][ T29] audit: type=1326 audit(2000000019.849:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.673854][ T29] audit: type=1326 audit(2000000019.849:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.697413][ T29] audit: type=1326 audit(2000000019.849:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 270.721052][ T29] audit: type=1326 audit(2000000019.849:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21624 comm="syz.8.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 271.654751][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6050'. [ 271.796497][T21707] lo speed is unknown, defaulting to 1000 [ 271.806434][T21707] lo speed is unknown, defaulting to 1000 [ 271.819249][T21707] lo speed is unknown, defaulting to 1000 [ 271.827551][T21707] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.838221][T21707] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 271.845436][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6055'. [ 271.861008][T21707] lo speed is unknown, defaulting to 1000 [ 271.873664][T21707] lo speed is unknown, defaulting to 1000 [ 271.885644][T21707] lo speed is unknown, defaulting to 1000 [ 271.901769][T21707] lo speed is unknown, defaulting to 1000 [ 271.907977][T21707] lo speed is unknown, defaulting to 1000 [ 271.915708][T21707] lo speed is unknown, defaulting to 1000 [ 271.923994][T21707] lo speed is unknown, defaulting to 1000 [ 272.112285][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'. [ 272.309902][T21756] macvtap0: entered promiscuous mode [ 272.315856][T21756] bridge0: entered promiscuous mode [ 272.322837][T21756] macvtap0: entered allmulticast mode [ 272.328714][T21756] bridge0: entered allmulticast mode [ 272.346518][T21756] bridge0: port 3(macvtap0) entered blocking state [ 272.354708][T21756] bridge0: port 3(macvtap0) entered disabled state [ 272.402199][T21756] bridge0: left allmulticast mode [ 272.407490][T21756] bridge0: left promiscuous mode [ 272.570816][T21765] netlink: 'syz.0.6078': attribute type 1 has an invalid length. [ 272.597128][T21765] bond12: entered promiscuous mode [ 272.603347][T21765] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.641004][T21765] bond12: (slave bridge4): making interface the new active one [ 272.648607][T21765] bridge4: entered promiscuous mode [ 272.687967][T21765] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 272.988567][T21787] VFS: Mount too revealing [ 273.186343][T21802] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6093'. [ 273.294675][T21805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6094'. [ 273.428657][T21812] loop9: detected capacity change from 0 to 136 [ 273.581497][T21829] netlink: 'syz.7.6104': attribute type 4 has an invalid length. [ 273.592274][T21829] netlink: 'syz.7.6104': attribute type 4 has an invalid length. [ 273.606335][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'. [ 273.632287][T21832] l2tp_ppp: sess 2/0: no socket in recv [ 273.651669][T21836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6108'. [ 274.076413][T21858] tipc: Failed to remove unknown binding: 66,1,1/10463914:106273858/106273860 [ 274.423906][T21868] 8021q: VLANs not supported on gre0 [ 274.794478][T21874] bridge0: entered promiscuous mode [ 274.829439][T21874] macvtap1: entered promiscuous mode [ 274.836878][T21874] macvtap1: entered allmulticast mode [ 274.861895][T21874] bridge0: entered allmulticast mode [ 274.994928][T21874] bridge0: port 3(macvtap1) entered blocking state [ 275.012374][T21874] bridge0: port 3(macvtap1) entered disabled state [ 275.116288][T21874] bridge0: left allmulticast mode [ 275.123426][T21874] bridge0: left promiscuous mode [ 275.593606][T21902] loop9: detected capacity change from 0 to 2048 [ 275.626790][T21902] EXT4-fs: Ignoring removed oldalloc option [ 275.718717][T21902] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 275.955776][T21902] System zones: 0-7 [ 275.974639][T21902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.013841][T19632] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.952717][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 276.952735][ T29] audit: type=1400 audit(2000000026.209:3884): avc: denied { watch watch_reads } for pid=21934 comm="syz.8.6148" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 277.119148][ T29] audit: type=1326 audit(2000000026.369:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.155043][T21960] lo speed is unknown, defaulting to 1000 [ 277.162280][T21960] lo speed is unknown, defaulting to 1000 [ 277.168316][T21960] lo speed is unknown, defaulting to 1000 [ 277.207724][T21960] infiniband syz0: set active [ 277.212466][T21960] infiniband syz0: added lo [ 277.217458][ T5479] lo speed is unknown, defaulting to 1000 [ 277.224421][ T29] audit: type=1326 audit(2000000026.369:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.247936][ T29] audit: type=1326 audit(2000000026.379:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.271541][ T29] audit: type=1326 audit(2000000026.379:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.295007][ T29] audit: type=1326 audit(2000000026.379:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.318536][ T29] audit: type=1326 audit(2000000026.379:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.342055][ T29] audit: type=1326 audit(2000000026.379:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.365538][ T29] audit: type=1326 audit(2000000026.379:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.388998][ T29] audit: type=1326 audit(2000000026.379:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21956 comm="syz.2.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedaccaf79 code=0x7ffc0000 [ 277.391861][ T8027] batadv1: left promiscuous mode [ 277.418385][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6160'. [ 277.433627][T21960] RDS/IB: syz0: added [ 277.437771][T21960] smc: adding ib device syz0 with port count 1 [ 277.444089][T21960] smc: ib device syz0 port 1 has no pnetid [ 277.450647][T21960] lo speed is unknown, defaulting to 1000 [ 277.485962][T21960] lo speed is unknown, defaulting to 1000 [ 277.531018][T21960] lo speed is unknown, defaulting to 1000 [ 277.567802][T21960] lo speed is unknown, defaulting to 1000 [ 277.585021][T21973] netlink: 'syz.2.6164': attribute type 10 has an invalid length. [ 277.605896][T21973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.616203][T21973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.625747][T21960] lo speed is unknown, defaulting to 1000 [ 277.663416][ T5479] lo speed is unknown, defaulting to 1000 [ 277.669159][T21960] lo speed is unknown, defaulting to 1000 [ 277.704637][T21960] lo speed is unknown, defaulting to 1000 [ 277.768406][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6169'. [ 277.813723][T21986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6170'. [ 277.843044][T21988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6171'. [ 277.871773][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6171'. [ 277.895349][T21994] xt_hashlimit: size too large, truncated to 1048576 [ 277.946451][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6174'. [ 278.000048][T22000] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.083875][T22000] bridge_slave_0 (unregistering): left allmulticast mode [ 278.090964][T22000] bridge_slave_0 (unregistering): left promiscuous mode [ 278.097963][T22000] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.471864][T22030] bridge0: entered promiscuous mode [ 278.477727][T22030] bridge0: port 3(macsec1) entered blocking state [ 278.484337][T22030] bridge0: port 3(macsec1) entered disabled state [ 278.491522][T22030] macsec1: entered allmulticast mode [ 278.496830][T22030] bridge0: entered allmulticast mode [ 278.502673][T22030] macsec1: left allmulticast mode [ 278.507689][T22030] bridge0: left allmulticast mode [ 278.513451][T22030] bridge0: left promiscuous mode [ 278.573153][T22040] netlink: 'syz.9.6191': attribute type 4 has an invalid length. [ 279.287329][T22062] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6201'. [ 279.300747][T22064] rdma_rxe: rxe_newlink: failed to add lo [ 279.386502][T22074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6207'. [ 279.616945][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6218'. [ 279.625997][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6218'. [ 279.668239][T22103] xt_hashlimit: size too large, truncated to 1048576 [ 279.920260][ T2963] IPVS: starting estimator thread 0... [ 279.945203][T22126] PKCS7: Unknown OID: [4] (bad) [ 279.950207][T22126] PKCS7: Only support pkcs7_signedData type [ 280.020205][T22123] IPVS: using max 2736 ests per chain, 136800 per kthread [ 280.315696][ T3422] lo speed is unknown, defaulting to 1000 [ 280.509353][T22166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.516606][T22166] IPv6: NLM_F_CREATE should be set when creating new route [ 281.023284][T22204] xt_hashlimit: size too large, truncated to 1048576 [ 281.076056][T22209] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.121106][T22209] bridge_slave_0 (unregistering): left allmulticast mode [ 281.128199][T22209] bridge_slave_0 (unregistering): left promiscuous mode [ 281.135235][T22209] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.225884][T22222] netlink: 'syz.0.6266': attribute type 7 has an invalid length. [ 281.233707][T22222] netlink: 'syz.0.6266': attribute type 8 has an invalid length. [ 281.244364][T22224] uprobe: syz.9.6267:22224 failed to unregister, leaking uprobe [ 281.428088][T22236] lo speed is unknown, defaulting to 1000 [ 281.438141][T22236] lo speed is unknown, defaulting to 1000 [ 281.482959][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 281.489372][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 282.067951][T22280] lo speed is unknown, defaulting to 1000 [ 282.074127][T22280] lo speed is unknown, defaulting to 1000 [ 282.225562][T22290] syz_tun (unregistering): left allmulticast mode [ 282.514699][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 282.514714][ T29] audit: type=1326 audit(2000000031.769:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.544989][ T29] audit: type=1326 audit(2000000031.789:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.568576][ T29] audit: type=1326 audit(2000000031.789:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.592223][ T29] audit: type=1326 audit(2000000031.789:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.615736][ T29] audit: type=1326 audit(2000000031.789:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.639202][ T29] audit: type=1326 audit(2000000031.789:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.662757][ T29] audit: type=1326 audit(2000000031.789:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.686289][ T29] audit: type=1326 audit(2000000031.789:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.709896][ T29] audit: type=1326 audit(2000000031.789:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71893fc399 code=0x7ffc0000 [ 282.733389][ T29] audit: type=1326 audit(2000000031.789:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22308 comm="syz.8.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f718945af79 code=0x7ffc0000 [ 282.752223][T22315] lo speed is unknown, defaulting to 1000 [ 282.764774][T22315] lo speed is unknown, defaulting to 1000 [ 283.076803][T22346] __nla_validate_parse: 8 callbacks suppressed [ 283.076877][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6314'. [ 284.254119][T22392] xt_hashlimit: size too large, truncated to 1048576 [ 284.390373][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6330'. [ 284.435244][T22400] bridge_slave_0 (unregistering): left allmulticast mode [ 284.442528][T22400] bridge_slave_0 (unregistering): left promiscuous mode [ 284.449538][T22400] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.865118][T22436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22436 comm=syz.7.6347 [ 284.929205][T22439] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6349'. [ 284.966357][T22443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6350'. [ 285.071458][T22450] xt_hashlimit: size too large, truncated to 1048576 [ 285.178992][T22451] lo speed is unknown, defaulting to 1000 [ 285.185076][T22451] lo speed is unknown, defaulting to 1000 [ 285.192056][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 285.266030][T22452] bridge_slave_0 (unregistering): left allmulticast mode [ 285.273133][T22452] bridge_slave_0 (unregistering): left promiscuous mode [ 285.280136][T22452] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.287837][T22454] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6353'. [ 285.337604][T22457] netlink: 'syz.2.6354': attribute type 29 has an invalid length. [ 285.358153][T22460] netlink: 'syz.2.6354': attribute type 29 has an invalid length. [ 285.375173][T22457] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6354'. [ 285.502066][T22472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6361'. [ 285.631030][T22496] xt_hashlimit: size too large, truncated to 1048576 [ 285.681786][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6368'. [ 285.731779][T22497] bridge_slave_0 (unregistering): left allmulticast mode [ 285.738851][T22497] bridge_slave_0 (unregistering): left promiscuous mode [ 285.745919][T22497] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.882438][T22511] netlink: 'syz.8.6375': attribute type 29 has an invalid length. [ 285.907435][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6377'. [ 285.954374][T22513] ip6gre4: entered promiscuous mode [ 285.963432][T22513] ip6gre4: entered allmulticast mode [ 285.975040][T22511] netlink: 'syz.8.6375': attribute type 29 has an invalid length. [ 286.031267][T22522] netlink: 'syz.9.6379': attribute type 29 has an invalid length. [ 286.050979][T22522] netlink: 'syz.9.6379': attribute type 29 has an invalid length. [ 286.084033][T22522] netlink: 'syz.9.6379': attribute type 29 has an invalid length. [ 286.356992][T22551] bridge_slave_1: left allmulticast mode [ 286.362828][T22551] bridge_slave_1: left promiscuous mode [ 286.368522][T22551] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.380746][T22551] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 286.975021][T22578] netlink: 'syz.2.6402': attribute type 8 has an invalid length. [ 287.003368][T22578] bond0: entered promiscuous mode [ 287.008434][T22578] bond_slave_0: entered promiscuous mode [ 287.014257][T22578] bond_slave_1: entered promiscuous mode [ 287.020208][T22578] dummy0: entered promiscuous mode [ 287.025446][T22578] batadv0: entered promiscuous mode [ 287.032090][T22578] gretap0: entered promiscuous mode [ 287.038116][T22578] bond0: left promiscuous mode [ 287.042957][T22578] bond_slave_0: left promiscuous mode [ 287.048391][T22578] bond_slave_1: left promiscuous mode [ 287.054091][T22578] dummy0: left promiscuous mode [ 287.059134][T22578] batadv0: left promiscuous mode [ 287.071702][T22578] gretap0: left promiscuous mode [ 287.146875][T22594] IPVS: Error connecting to the multicast addr [ 287.266256][T22606] lo speed is unknown, defaulting to 1000 [ 287.272462][T22606] lo speed is unknown, defaulting to 1000 [ 287.473777][T22610] team1: entered promiscuous mode [ 287.478836][T22610] team1: entered allmulticast mode [ 287.484270][T22610] 8021q: adding VLAN 0 to HW filter on device team1 [ 287.846717][T22646] IPv6: Can't replace route, no match found [ 287.902031][T22652] team2: entered promiscuous mode [ 287.907176][T22652] team2: entered allmulticast mode [ 287.933837][T22652] 8021q: adding VLAN 0 to HW filter on device team2 [ 288.022473][T22661] gretap1: entered promiscuous mode [ 288.162332][T22689] __nla_validate_parse: 8 callbacks suppressed [ 288.162374][T22689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6445'. [ 288.218879][T22697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6451'. [ 288.333200][T22705] netlink: 'syz.0.6455': attribute type 4 has an invalid length. [ 288.396868][T22709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6456'. [ 288.753682][T22714] ================================================================== [ 288.761775][T22714] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 288.768695][T22714] [ 288.770997][T22714] read-write to 0xffff8881204e806c of 4 bytes by task 22711 on cpu 1: [ 288.779126][T22714] fifo_open+0x86/0x5d0 [ 288.783263][T22714] do_dentry_open+0x54b/0xa60 [ 288.787929][T22714] vfs_open+0x37/0x1e0 [ 288.791986][T22714] path_openat+0x1de9/0x23c0 [ 288.796560][T22714] do_filp_open+0x15d/0x280 [ 288.801059][T22714] do_sys_openat2+0xa6/0x150 [ 288.805630][T22714] __x64_sys_openat+0xf2/0x120 [ 288.810375][T22714] x64_sys_call+0x2b07/0x3000 [ 288.815035][T22714] do_syscall_64+0xc0/0x2a0 [ 288.819524][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.825399][T22714] [ 288.827703][T22714] read to 0xffff8881204e806c of 4 bytes by task 22714 on cpu 0: [ 288.835306][T22714] wait_for_partner+0xd5/0x1e0 [ 288.840055][T22714] fifo_open+0x462/0x5d0 [ 288.844279][T22714] do_dentry_open+0x54b/0xa60 [ 288.848940][T22714] vfs_open+0x37/0x1e0 [ 288.852988][T22714] path_openat+0x1de9/0x23c0 [ 288.857564][T22714] do_filp_open+0x15d/0x280 [ 288.862051][T22714] do_sys_openat2+0xa6/0x150 [ 288.866625][T22714] __x64_sys_openat+0xf2/0x120 [ 288.871369][T22714] x64_sys_call+0x2b07/0x3000 [ 288.876043][T22714] do_syscall_64+0xc0/0x2a0 [ 288.880527][T22714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.886401][T22714] [ 288.888706][T22714] value changed: 0x00000001 -> 0x00000002 [ 288.894398][T22714] [ 288.896700][T22714] Reported by Kernel Concurrency Sanitizer on: [ 288.902827][T22714] CPU: 0 UID: 0 PID: 22714 Comm: syz.8.6457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.914175][T22714] Tainted: [W]=WARN [ 288.917960][T22714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 288.927995][T22714] ==================================================================