last executing test programs: 9m1.321708107s ago: executing program 32 (id=66): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) statx(0xffffffffffffff9c, 0x0, 0x1000, 0xffff4a9c0080ffff, 0x0) 8m37.281521605s ago: executing program 33 (id=571): socket$caif_seqpacket(0x25, 0x5, 0x1) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m32.933855808s ago: executing program 34 (id=663): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000dc0)='C\x13\xfc2\x80\x00\x00\x00\x00\x00\x00\x00\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE\xf3\xbd\x1d\x01\xcc\xb4<\x00\xddo*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\a\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW\xcb*o\xb6\xb4\xed0\x03\xc6\xcamzq3*(-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdBn8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92\xfd\x12\xe3\xab\f\x86\x01}\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS\xf4\x15q`]\x1a2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x10\xce\x8b\x8b\xf4&$\xe4tg\xaa\x1f\x82\xa7\x16\x8c\xdc\xc3Q\\\xdd\xe7\xa6\x91\xa0=B\xff\x87\x94\x96#NjH\xcb(4\xfess3@\xfb5zF6\x82!\x82\f0\x12\\\xe7\"|\x16u\xd7\t\xaa\x15<\x17d>\xe8\xaf\xea\xafhvzi4S3\xd5\xda\x19\xdb\xdfT', 0x3) pwritev(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000080)="6837fc3cdcbe3c3bab92b85a19d3797f609630b52cbec944ddd8d9fad98560a0cdbb5b89", 0x24}], 0x2, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) 8m27.834933018s ago: executing program 35 (id=770): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 8m25.842722612s ago: executing program 36 (id=808): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x45, 0x0, 0x3, 0x3}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 8m3.998403842s ago: executing program 37 (id=1251): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) io_setup(0x200, &(0x7f0000001440)=0x0) io_destroy(r2) 8m1.127632219s ago: executing program 38 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) 7m48.97777369s ago: executing program 39 (id=1522): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 7m28.461996717s ago: executing program 40 (id=1966): unshare(0x6a040000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m9.088263977s ago: executing program 41 (id=2049): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880) 6m19.362806358s ago: executing program 42 (id=3369): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 5m38.835216462s ago: executing program 43 (id=4000): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x40000000002, 0x100000000, 0x100000000000001, 0x100000009, 0xfffd, 0xc, 0x2881000004000009, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5m33.485440187s ago: executing program 44 (id=4069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 5m23.431659941s ago: executing program 7 (id=4229): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, r0, 0x2) syz_io_uring_setup(0x758a, &(0x7f00000002c0)={0x0, 0xf657, 0x1, 0x9, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[r0], 0x1) 5m23.409836887s ago: executing program 7 (id=4230): inotify_init1(0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) 5m22.253145881s ago: executing program 7 (id=4241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m22.204366602s ago: executing program 7 (id=4243): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid={'resuid', 0x3d, 0xee01}}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14907e, 0x3) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write(r0, &(0x7f0000000540)="953820a61a166fd5", 0x8) 5m21.738586219s ago: executing program 7 (id=4252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001", 0x20}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r3, @ANYBLOB="080002007f00"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 5m21.441284966s ago: executing program 7 (id=4255): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x1409, 0x408, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8d0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000), &(0x7f0000000300)) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 5m21.411796061s ago: executing program 45 (id=4255): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x1409, 0x408, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8d0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000), &(0x7f0000000300)) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 5m15.453583787s ago: executing program 6 (id=4358): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) unshare(0x20000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}, 0x58) wait4(0x0, 0x0, 0x40000000, 0x0) 5m15.211533233s ago: executing program 6 (id=4361): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'veth0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 5m15.102262934s ago: executing program 6 (id=4362): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x8, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40022041, 0x1, {0x2}}) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 5m15.100068914s ago: executing program 6 (id=4363): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x11, r0, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 5m14.695867081s ago: executing program 6 (id=4369): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 5m14.423353063s ago: executing program 6 (id=4374): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x105, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000507000000080009000200000008000c000000000008000b"], 0x34}}, 0x20) 5m14.345143919s ago: executing program 46 (id=4374): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0xfffffffc, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb10, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x105, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000507000000080009000200000008000c000000000008000b"], 0x34}}, 0x20) 5m4.377323079s ago: executing program 0 (id=4578): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m3.478264699s ago: executing program 0 (id=4594): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 5m3.133099907s ago: executing program 0 (id=4606): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m3.106758572s ago: executing program 0 (id=4608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 5m3.033703549s ago: executing program 0 (id=4610): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)='\r\n', 0x2, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f000000f600)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000003a80)=""/4096, 0x1000}], 0x1}, 0x48d9}], 0x2, 0x40010062, 0x0) 5m2.964254316s ago: executing program 0 (id=4614): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x14f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x0, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) io_uring_enter(r2, 0x1b96, 0x1069, 0x22, 0x0, 0x0) 5m2.920934009s ago: executing program 47 (id=4614): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x14f, &(0x7f0000000580)={0x0, 0xd736, 0x10, 0x0, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x6000}) io_uring_enter(r2, 0x1b96, 0x1069, 0x22, 0x0, 0x0) 4m47.625006528s ago: executing program 3 (id=4905): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 4m47.355346429s ago: executing program 3 (id=4910): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x2, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x20, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x4}, 0x1) 4m46.485697294s ago: executing program 3 (id=4924): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1172f0, 0x10000, 0x6, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x807, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) 4m46.35312839s ago: executing program 3 (id=4926): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m46.178706469s ago: executing program 3 (id=4932): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40800, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x5, 0x6, @link_local}, 0x14) 4m45.752250283s ago: executing program 3 (id=4941): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 4m45.73368312s ago: executing program 48 (id=4941): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 2m22.666888165s ago: executing program 8 (id=7340): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0xb0}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xdffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2m22.203582191s ago: executing program 8 (id=7344): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 2m21.108107356s ago: executing program 8 (id=7355): socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x78bf, 0x0, 0x40204, 0x100039}, &(0x7f0000000140)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m20.901958289s ago: executing program 8 (id=7357): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x24ffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 2m19.823585367s ago: executing program 8 (id=7365): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r3, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) 2m18.830412s ago: executing program 8 (id=7378): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000000000d07, 0xc0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000001340)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 2m18.825665889s ago: executing program 49 (id=7378): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x400000000000d07, 0xc0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000001340)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 5.855293186s ago: executing program 1 (id=9007): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r1, &(0x7f0000000300), 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x3) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0x6}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xd}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xf5, 0x4, 0x1, 0x2}, {0xf, 0xf, 0x1, 0x1}, {0x4, 0x6, 0x1, 0xfffffff7}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 5.627977085s ago: executing program 1 (id=9009): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000400)=ANY=[@ANYBLOB='sys_immutable,dots,tz=UTC,dots,errors=continue,dots,nodots,dots,dots,dots,allow_utime=00000000000000000000011,gid=', @ANYRESHEX=0x0, @ANYBLOB="000000000000f9ffffff000000"], 0x1, 0x250, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 5.491363711s ago: executing program 1 (id=9013): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10261, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x700) 5.338862263s ago: executing program 1 (id=9017): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.719567453s ago: executing program 5 (id=9018): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000240)={0x20, 0x8}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.604074412s ago: executing program 5 (id=9020): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.97441103s ago: executing program 9 (id=9030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) 3.700298091s ago: executing program 5 (id=9032): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff01", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000"], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 3.546074823s ago: executing program 9 (id=9036): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x25, 0x17}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.79625294s ago: executing program 9 (id=9039): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 2.794020839s ago: executing program 4 (id=9048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fe, &(0x7f00000000c0)="$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") close_range(r3, 0xffffffffffffffff, 0x0) 2.657098815s ago: executing program 4 (id=9040): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.656627205s ago: executing program 5 (id=9051): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.485711824s ago: executing program 9 (id=9041): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 2.305613612s ago: executing program 9 (id=9042): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1d, 0x2, 0x3841, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) 2.178534559s ago: executing program 1 (id=9044): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xc4, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}]}}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8100, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r2, 0x0, 0x0) 1.931676055s ago: executing program 4 (id=9045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.799361922s ago: executing program 5 (id=9047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1.754482913s ago: executing program 4 (id=9049): ioperm(0x40, 0x9, 0x7f) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.582306673s ago: executing program 2 (id=9054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x709d2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {0x5}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.495640047s ago: executing program 2 (id=9055): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 937.037297ms ago: executing program 5 (id=9056): getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x0, 0x10000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000040)={[{@quota}, {@noblock_validity}, {@abort}, {@nojournal_checksum}, {@abort}, {@i_version}]}, 0x1, 0x797, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 936.791807ms ago: executing program 4 (id=9057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 936.560667ms ago: executing program 9 (id=9058): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_usb_connect(0x3, 0x48, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 930.388376ms ago: executing program 2 (id=9066): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000240)=0x1, 0x4) gettid() 930.027216ms ago: executing program 1 (id=9059): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 842.404541ms ago: executing program 2 (id=9060): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 722.25637ms ago: executing program 2 (id=9061): semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 524.13µs ago: executing program 4 (id=9062): preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000004, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 2 (id=9073): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, 0x0, 0x60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): [ 447.855014][ T12] bridge_slave_1: left allmulticast mode [ 447.861476][ T12] bridge_slave_1: left promiscuous mode [ 447.867716][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.923073][ T12] bridge_slave_0: left allmulticast mode [ 447.930017][ T12] bridge_slave_0: left promiscuous mode [ 447.941516][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.039809][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 448.236633][ T12] bond2 (unregistering): (slave geneve3): Releasing active interface [ 448.584139][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.615833][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.627790][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 448.646548][ T12] bond0 (unregistering): Released all slaves [ 448.660704][ T12] bond1 (unregistering): Released all slaves [ 448.679528][ T12] bond2 (unregistering): Released all slaves [ 448.695378][ T12] bond3 (unregistering): Released all slaves [ 448.895538][T27380] chnl_net:caif_netlink_parms(): no params data found [ 448.971753][T27438] bond8: entered promiscuous mode [ 449.005397][ T12] hsr_slave_0: left promiscuous mode [ 449.027993][ T12] hsr_slave_1: left promiscuous mode [ 449.282182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 449.296708][ T12] team0 (unregistering): Port device team_slave_0 removed [ 449.400793][T27443] macvlan3: entered promiscuous mode [ 449.409740][T27443] macvlan3: entered allmulticast mode [ 449.423447][T27443] bond8: (slave macvlan3): Opening slave failed [ 449.454046][T27472] netlink: 'syz.4.7402': attribute type 1 has an invalid length. [ 449.501092][T27472] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 449.546699][T27472] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 449.582510][T27472] bond2: (slave vxcan1): making interface the new active one [ 449.590628][T27472] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 449.599527][T27380] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.608631][T27380] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.625638][T27380] bridge_slave_0: entered allmulticast mode [ 449.637879][T27380] bridge_slave_0: entered promiscuous mode [ 449.651215][T27477] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 449.664347][T27477] bond2: (slave vxcan3): Enslaving as a backup interface with an up link [ 449.683746][T27380] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.694639][T27380] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.716571][T27380] bridge_slave_1: entered allmulticast mode [ 449.723267][T27380] bridge_slave_1: entered promiscuous mode [ 449.791500][T27380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.815862][T27380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.853118][ T12] IPVS: stop unused estimator thread 0... [ 449.870500][T27380] team0: Port device team_slave_0 added [ 449.904741][T27380] team0: Port device team_slave_1 added [ 449.985892][T27380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.993625][T27380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.056269][T27380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.071191][T27380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.091618][T27380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.117937][T27380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.221270][T27380] hsr_slave_0: entered promiscuous mode [ 450.235165][T27380] hsr_slave_1: entered promiscuous mode [ 450.248343][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7414'. [ 450.299997][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 450.354665][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.363795][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.409235][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7419'. [ 450.424119][T27545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7419'. [ 450.437822][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.453721][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.506099][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.516612][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7417'. [ 450.583129][T27565] lo: entered allmulticast mode [ 450.599356][T27562] lo: left allmulticast mode [ 450.646127][T27380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.677743][T27380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.732851][T27380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 450.747992][T27380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.865783][T27601] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 450.913778][T27602] bond9: entered promiscuous mode [ 450.961907][T27380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.977872][T27380] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.989404][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.996500][ T5984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.035129][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.042272][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.093940][T27380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.132990][T27380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.163572][T27625] netlink: 'syz.1.7434': attribute type 2 has an invalid length. [ 451.427123][T27380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.705033][T27380] veth0_vlan: entered promiscuous mode [ 451.722505][T27380] veth1_vlan: entered promiscuous mode [ 451.752666][T27380] veth0_macvtap: entered promiscuous mode [ 451.766052][T27380] veth1_macvtap: entered promiscuous mode [ 451.782523][T27380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.825344][T27380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.859223][ T7250] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.884616][ T7250] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.893504][ T7250] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.043659][ T7250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.196062][ T28] audit: type=1326 audit(2000001325.275:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.227692][ T28] audit: type=1326 audit(2000001325.275:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.251520][ T28] audit: type=1326 audit(2000001325.275:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.275340][ T28] audit: type=1326 audit(2000001325.275:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.301519][ T28] audit: type=1326 audit(2000001325.275:7414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.333128][ T28] audit: type=1326 audit(2000001325.275:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.357176][ T28] audit: type=1326 audit(2000001325.305:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.381098][ T28] audit: type=1326 audit(2000001325.305:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.407112][ T28] audit: type=1326 audit(2000001325.305:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 452.463984][ T28] audit: type=1326 audit(2000001325.305:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27727 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 453.069718][T27786] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 453.785815][T27836] netlink: 'syz.1.7466': attribute type 1 has an invalid length. [ 455.402666][T27927] netlink: 'syz.1.7495': attribute type 4 has an invalid length. [ 455.433629][T27927] netlink: 'syz.1.7495': attribute type 4 has an invalid length. [ 456.519295][T27947] __nla_validate_parse: 8 callbacks suppressed [ 456.519316][T27947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7502'. [ 456.683757][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7504'. [ 457.249314][T27981] xt_hashlimit: size too large, truncated to 1048576 [ 458.836675][T28025] xt_hashlimit: size too large, truncated to 1048576 [ 459.760532][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7544'. [ 459.774244][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7544'. [ 461.782666][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 461.782683][ T28] audit: type=1326 audit(2000001334.845:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 461.838100][ T28] audit: type=1326 audit(2000001334.895:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 461.862079][ T28] audit: type=1326 audit(2000001334.895:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 461.927879][ T28] audit: type=1326 audit(2000001334.895:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.010811][ T28] audit: type=1326 audit(2000001334.895:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.055348][ T28] audit: type=1326 audit(2000001334.895:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.096893][ T28] audit: type=1326 audit(2000001334.895:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.131550][T28163] netlink: 'syz.1.7577': attribute type 13 has an invalid length. [ 462.173167][ T28] audit: type=1326 audit(2000001334.895:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.258549][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7579'. [ 462.267599][ T28] audit: type=1326 audit(2000001334.895:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.311743][T28168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7579'. [ 462.334208][ T28] audit: type=1326 audit(2000001334.905:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.2.7575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 462.374066][T16697] bond0: (slave ip6gretap0): link status up again after 0 ms [ 462.404678][T16697] bond0: (slave ip6gretap0): link status up again after 0 ms [ 462.424496][T16697] bond0: (slave ip6gretap0): link status up again after 0 ms [ 462.438997][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 462.555008][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 462.611710][T28194] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7589'. [ 462.665373][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 462.684908][T28190] loop9: detected capacity change from 0 to 256 [ 462.804635][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 462.916580][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 463.094107][T28208] loop5: detected capacity change from 0 to 512 [ 463.122499][T28208] EXT4-fs: Ignoring removed nobh option [ 463.309244][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 463.354809][T28208] EXT4-fs (loop5): orphan cleanup on readonly fs [ 463.390764][T28208] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.7593: EA inode hash validation failed [ 463.464532][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 463.483975][T28208] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 463.514810][T28208] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.7593: corrupted inode contents [ 463.534549][T28208] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.539885][T28208] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.7593: mark_inode_dirty error [ 463.549107][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 463.549136][ C0] EXT4-fs (loop5): initial error at time 2000001336: ext4_do_update_inode:5569: inode 15 [ 463.549170][ C0] EXT4-fs (loop5): last error at time 2000001336: ext4_do_update_inode:5569: inode 15 [ 463.648847][T28208] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.654728][T28208] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.7593: corrupted inode contents [ 463.691625][T28208] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.693016][T28208] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.7593: mark_inode_dirty error [ 463.747936][T28208] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.764670][T28208] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.7593: mark inode dirty (error -117) [ 463.850870][T28208] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.854485][T28208] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 463.897084][T28208] EXT4-fs (loop5): 1 orphan inode deleted [ 463.951561][T28208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 464.221574][T27380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.948250][T28290] netlink: 'syz.9.7611': attribute type 13 has an invalid length. [ 466.596047][T28298] macsec2: entered promiscuous mode [ 466.616250][T28298] syz_tun: entered promiscuous mode [ 466.825683][T28313] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7617'. [ 467.464591][ T12] net_ratelimit: 22 callbacks suppressed [ 467.464611][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 467.604905][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 467.734578][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 467.753575][T28322] loop9: detected capacity change from 0 to 2048 [ 467.828365][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 467.828385][ T28] audit: type=1400 audit(2000001340.905:7452): avc: denied { watch watch_reads } for pid=28341 comm="syz.1.7624" path="/" dev="configfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 467.870627][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 467.917304][ T3302] Alternate GPT is invalid, using primary GPT. [ 467.923735][ T3302] loop9: p2 p3 p7 [ 467.997682][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 468.088562][T28348] loop5: detected capacity change from 0 to 256 [ 468.100985][T28322] Alternate GPT is invalid, using primary GPT. [ 468.156164][T28344] macsec1: entered promiscuous mode [ 468.162283][T28344] syz_tun: entered promiscuous mode [ 468.194594][T28349] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 468.208092][T28322] loop9: p2 p3 p7 [ 468.215117][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 468.335125][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 468.442098][ T28] audit: type=1400 audit(2000001341.515:7453): avc: denied { create } for pid=28356 comm="syz.1.7630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 468.483457][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 468.604682][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 468.724919][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 469.149827][T28385] ref_ctr increment failed for inode: 0xdd3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812a1bf2c0 [ 470.055975][T28392] loop5: detected capacity change from 0 to 2048 [ 470.303673][T28392] Alternate GPT is invalid, using primary GPT. [ 470.363855][T28392] loop5: p2 p3 p7 [ 470.962034][T28406] SELinux: failed to load policy [ 471.037037][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7651'. [ 471.067936][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7651'. [ 471.184699][ T28] audit: type=1326 audit(2000001344.245:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.217514][ T28] audit: type=1326 audit(2000001344.295:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.331115][ T28] audit: type=1326 audit(2000001344.295:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.373382][ T28] audit: type=1326 audit(2000001344.295:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.417795][ T28] audit: type=1326 audit(2000001344.325:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.456809][ T28] audit: type=1326 audit(2000001344.325:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.519474][ T28] audit: type=1326 audit(2000001344.325:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.590402][ T28] audit: type=1326 audit(2000001344.325:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28410 comm="syz.4.7652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 471.618926][T28425] loop5: detected capacity change from 0 to 512 [ 471.666706][T28425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 471.684527][T28425] System zones: 1-12 [ 471.696688][T28425] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.7668: corrupted in-inode xattr: e_value size too large [ 471.724515][T28425] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 471.726254][T28425] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7668: couldn't read orphan inode 15 (err -117) [ 471.735429][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 471.735450][ C1] EXT4-fs (loop5): initial error at time 2000001344: ext4_iget_extra_inode:5025: inode 15 [ 471.735489][ C1] EXT4-fs (loop5): last error at time 2000001344: ext4_iget_extra_inode:5025: inode 15 [ 471.774041][T28425] loop5: lost filesystem error report for type 5 error -117 [ 471.821836][T28425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.961801][T28425] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.7668: Unrecognised inode hash code 4 [ 472.010084][T28425] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7668: Corrupt directory, running e2fsck is recommended [ 472.064759][T28425] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.7668: Unrecognised inode hash code 4 [ 472.083116][T28425] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7668: Corrupt directory, running e2fsck is recommended [ 472.105143][T28432] macsec1: entered promiscuous mode [ 472.115884][T28432] syz_tun: entered promiscuous mode [ 472.176664][T27380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.148286][T28461] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 473.194659][T28461] SELinux: failed to load policy [ 473.241050][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7670'. [ 473.290997][T28467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7670'. [ 473.332694][ T7250] net_ratelimit: 26 callbacks suppressed [ 473.332716][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 473.474587][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 473.584527][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 473.678518][T28446] syz.1.7663 (28446) used greatest stack depth: 5336 bytes left [ 473.711578][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 473.849140][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 473.995861][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 474.224520][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 474.247534][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7688'. [ 474.268617][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7688'. [ 474.346942][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 474.474608][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 474.607657][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 475.189249][T28498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'. [ 475.201916][T28501] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.225656][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7683'. [ 475.265863][T28501] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.360891][T28501] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.429849][T28501] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.522685][ T4215] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.547163][ T7249] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.576062][T16697] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.595704][T16697] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.726294][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7693'. [ 475.755587][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7693'. [ 475.877348][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 475.877580][ T28] audit: type=1400 audit(2000001348.935:7471): avc: denied { name_bind } for pid=28524 comm="syz.5.7698" path="socket:[118068]" dev="sockfs" ino=118068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 475.994546][T28534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=28534 comm=syz.4.7701 [ 476.367757][T28548] loop9: detected capacity change from 0 to 512 [ 476.383975][T28548] EXT4-fs: Ignoring removed nobh option [ 476.443343][T28548] EXT4-fs (loop9): orphan cleanup on readonly fs [ 476.480102][T28563] IPv6: sit3: Disabled Multicast RS [ 476.506717][T28548] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.7707: EA inode hash validation failed [ 476.539097][T28548] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.7707: corrupted inode contents [ 476.554098][T28548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.563152][T28548] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.7707: mark_inode_dirty error [ 476.572925][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 476.573094][ C1] EXT4-fs (loop9): initial error at time 2000001349: ext4_do_update_inode:5569: inode 15 [ 476.573294][ C1] EXT4-fs (loop9): last error at time 2000001349: ext4_do_update_inode:5569: inode 15 [ 476.616398][T28548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.618503][T28548] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.7707: corrupted inode contents [ 476.643465][T28548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.644398][T28548] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.7707: mark_inode_dirty error [ 476.669947][T28548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.671600][T28548] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.7707: mark inode dirty (error -117) [ 476.703346][T28548] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.707130][T28548] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 476.743316][T28548] EXT4-fs (loop9): 1 orphan inode deleted [ 476.767075][T28548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 477.035371][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.256561][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7721'. [ 478.424509][ T4215] net_ratelimit: 27 callbacks suppressed [ 478.424531][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 478.576613][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 478.589922][T28626] veth1_to_bond: entered allmulticast mode [ 478.598295][T28625] veth1_to_bond: left allmulticast mode [ 478.696873][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 478.825309][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 478.944562][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.072161][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.204982][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.326611][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.454741][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.574589][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 479.675054][T28668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7755'. [ 479.698942][T28668] syz_tun (unregistering): left promiscuous mode [ 479.939279][T28677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=28677 comm=syz.5.7760 [ 480.167644][T28681] syz_tun: entered promiscuous mode [ 480.176045][T28681] macsec1: entered promiscuous mode [ 480.815554][T28709] netlink: 'syz.1.7772': attribute type 1 has an invalid length. [ 480.841073][T28709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.875492][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7772'. [ 480.884400][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7772'. [ 480.905831][T28713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=28713 comm=syz.2.7773 [ 480.944002][T28711] macsec2: entered promiscuous mode [ 480.952387][T28711] bond1: entered promiscuous mode [ 480.958250][T28711] macsec2: entered allmulticast mode [ 480.963630][T28711] bond1: entered allmulticast mode [ 481.177521][ T28] audit: type=1400 audit(2000001354.255:7472): avc: denied { bind } for pid=28722 comm="syz.2.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 481.208517][ T28] audit: type=1400 audit(2000001354.285:7473): avc: denied { remount } for pid=28719 comm="syz.1.7778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 481.277058][ T28] audit: type=1400 audit(2000001354.355:7474): avc: denied { unmount } for pid=9059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 482.037249][T28756] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7790'. [ 482.074633][T28756] unsupported nla_type 217 [ 482.166249][T28762] ªªªªªª: renamed from vlan0 (while UP) [ 482.778699][ T2960] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 483.514625][ T4215] net_ratelimit: 31 callbacks suppressed [ 483.514653][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 483.650102][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.014912][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.081978][T28808] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.089285][T28808] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.147427][T28808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.157133][T28808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.204223][T28808] macsec1: left promiscuous mode [ 484.223138][ T7249] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.234695][ T7249] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.264025][ T7249] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.278094][ T7249] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.324559][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.475215][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.644590][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.781584][ T28] audit: type=1400 audit(2000001357.835:7475): avc: denied { mounton } for pid=28832 comm="syz.9.7822" path="/proc/1690/task/1692/net/stat" dev="proc" ino=4026533825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 484.849639][T28842] netlink: 'syz.4.7835': attribute type 1 has an invalid length. [ 484.865690][T28842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.903024][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 484.919623][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7835'. [ 484.951810][T28842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7835'. [ 485.045789][T28842] macsec2: entered promiscuous mode [ 485.061152][T28842] bond3: entered promiscuous mode [ 485.072235][T28842] macsec2: entered allmulticast mode [ 485.100462][T28842] bond3: entered allmulticast mode [ 485.116177][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 485.264975][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 485.384634][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 485.507869][T28871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7838'. [ 485.596530][T28871] syz_tun (unregistering): left promiscuous mode [ 485.635837][T28852] loop5: detected capacity change from 0 to 1024 [ 485.656387][T28852] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 485.666360][T16697] smc: removing ib device syz1 [ 486.050469][T28897] lo: Caught tx_queue_len zero misconfig [ 487.998231][T28947] loop9: detected capacity change from 0 to 1024 [ 488.067714][T28947] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 488.594611][ T36] net_ratelimit: 27 callbacks suppressed [ 488.594636][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 488.715801][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 488.896877][T28976] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.7875'. [ 488.910717][T28976] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.7875'. [ 488.932774][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.062670][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.174539][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.269783][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7885'. [ 489.284777][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.314511][T28996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7885'. [ 489.407009][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.524817][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.635215][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.764487][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 489.794508][ T28] audit: type=1326 audit(2000001362.865:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 489.826595][T29012] netlink: 400 bytes leftover after parsing attributes in process `syz.5.7892'. [ 489.828155][T29014] netlink: 11522 bytes leftover after parsing attributes in process `syz.4.7891'. [ 489.879787][ T28] audit: type=1326 audit(2000001362.865:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 489.916911][ T28] audit: type=1326 audit(2000001362.865:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 489.940779][ T28] audit: type=1326 audit(2000001362.865:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 489.981699][ T28] audit: type=1326 audit(2000001362.865:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.006608][ T28] audit: type=1326 audit(2000001362.865:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.030536][ T28] audit: type=1326 audit(2000001362.865:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.096813][ T28] audit: type=1326 audit(2000001362.865:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.125050][ T28] audit: type=1326 audit(2000001362.865:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.179873][ T28] audit: type=1326 audit(2000001362.865:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29009 comm="syz.9.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 490.299541][T29028] netlink: 'syz.9.7896': attribute type 33 has an invalid length. [ 490.317432][T29028] netlink: 152 bytes leftover after parsing attributes in process `syz.9.7896'. [ 490.327982][T29028] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7896'. [ 490.447040][T29033] loop9: detected capacity change from 0 to 164 [ 490.492042][T29033] Unable to read rock-ridge attributes [ 490.735634][T29053] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7907'. [ 491.961932][T29091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7921'. [ 491.991385][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7921'. [ 492.139587][T16697] Bluetooth: hci0: Frame reassembly failed (-84) [ 492.166437][T16697] Bluetooth: hci1: Frame reassembly failed (-84) [ 492.277206][T29113] tipc: Failed to remove unknown binding: 66,1,1/0:2860472040/2860472042 [ 492.305407][T29113] tipc: Failed to remove unknown binding: 66,1,1/0:2860472040/2860472042 [ 492.483309][T29119] loop9: detected capacity change from 0 to 1024 [ 492.508670][T29119] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 493.295276][T29142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7938'. [ 493.315732][T29142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7938'. [ 493.453711][ T3877] IPVS: starting estimator thread 0... [ 493.516125][T29153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7944'. [ 493.589690][T29148] IPVS: using max 2256 ests per chain, 112800 per kthread [ 493.600096][T29156] bond8: entered promiscuous mode [ 493.644609][ T5984] net_ratelimit: 29 callbacks suppressed [ 493.644631][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 493.671896][T29160] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.7946'. [ 493.684259][T29160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7946'. [ 493.764531][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 493.894626][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.004757][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.116717][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.204546][ T6271] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 494.210933][T29104] Bluetooth: hci1: command 0x1003 tx timeout [ 494.217204][T29104] Bluetooth: hci0: command 0x1003 tx timeout [ 494.217672][T29102] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 494.224647][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.365058][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.464193][T29186] loop9: detected capacity change from 0 to 256 [ 494.510672][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.620768][T29188] syz.5.7956 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 494.635457][T29188] CPU: 1 UID: 0 PID: 29188 Comm: syz.5.7956 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.635499][T29188] Tainted: [W]=WARN [ 494.635507][T29188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.635524][T29188] Call Trace: [ 494.635532][T29188] [ 494.635541][T29188] __dump_stack+0x1d/0x30 [ 494.635575][T29188] dump_stack_lvl+0x95/0xd0 [ 494.635617][T29188] dump_stack+0x15/0x1b [ 494.635642][T29188] dump_header+0x80/0x240 [ 494.635718][T29188] oom_kill_process+0x295/0x350 [ 494.635745][T29188] out_of_memory+0x97d/0xb80 [ 494.635874][T29188] try_charge_memcg+0x62e/0xa10 [ 494.635992][T29188] obj_cgroup_charge_pages+0x23/0xc0 [ 494.636020][T29188] __memcg_kmem_charge_page+0x9e/0x170 [ 494.636064][T29188] __alloc_frozen_pages_noprof+0x18a/0x360 [ 494.636098][T29188] alloc_pages_mpol+0xb3/0x260 [ 494.636131][T29188] alloc_pages_noprof+0x8f/0x130 [ 494.636182][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.636304][T29188] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 494.636465][T29188] __kvmalloc_node_noprof+0x3d4/0x650 [ 494.636556][T29188] ? futex_hash_allocate+0x190/0x9d0 [ 494.636672][T29188] ? futex_hash_allocate+0x190/0x9d0 [ 494.636769][T29188] futex_hash_allocate+0x190/0x9d0 [ 494.636936][T29188] ? cap_task_prctl+0x13f/0x6e0 [ 494.637046][T29188] futex_hash_prctl+0xd8/0xf0 [ 494.637220][T29188] __se_sys_prctl+0xa3d/0x13f0 [ 494.637323][T29188] __x64_sys_prctl+0x67/0x80 [ 494.637418][T29188] x64_sys_call+0x2533/0x3020 [ 494.637578][T29188] do_syscall_64+0x12c/0x370 [ 494.637653][T29188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.637763][T29188] RIP: 0033:0x7f65d6bac799 [ 494.637830][T29188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.637886][T29188] RSP: 002b:00007f65d55ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 494.637950][T29188] RAX: ffffffffffffffda RBX: 00007f65d6e25fa0 RCX: 00007f65d6bac799 [ 494.638000][T29188] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 494.638075][T29188] RBP: 00007f65d6c42c99 R08: 0000000000000000 R09: 0000000000000000 [ 494.638117][T29188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.638131][T29188] R13: 00007f65d6e26038 R14: 00007f65d6e25fa0 R15: 00007ffedb4022c8 [ 494.638281][T29188] [ 494.638404][T29188] memory: usage 307200kB, limit 307200kB, failcnt 279 [ 494.827614][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 494.894891][T29188] memory+swap: usage 303824kB, limit 9007199254740988kB, failcnt 0 [ 494.903754][T29188] kmem: usage 303476kB, limit 9007199254740988kB, failcnt 0 [ 494.911153][T29188] Memory cgroup stats for /syz5: [ 494.911538][T29188] cache 0 [ 494.921295][T29188] rss 184320 [ 494.933060][T29188] shmem 0 [ 494.936808][T29188] mapped_file 0 [ 494.940334][T29188] dirty 0 [ 494.943338][T29188] writeback 0 [ 494.953435][T29188] workingset_refault_anon 3282 [ 494.980610][T29188] workingset_refault_file 0 [ 494.990159][T29188] swap 4096 [ 494.996152][T29188] swapcached 2727936 [ 495.021010][T29188] pgpgin 252457 [ 495.032932][T29188] pgpgout 252409 [ 495.040036][T29188] pgfault 207623 [ 495.054015][T29188] pgmajfault 523 [ 495.068428][T29188] inactive_anon 184320 [ 495.092052][T29188] active_anon 0 [ 495.098952][T29188] inactive_file 0 [ 495.110405][T29188] active_file 12288 [ 495.120510][T29188] unevictable 0 [ 495.136989][T29188] hierarchical_memory_limit 314572800 [ 495.157362][T29188] hierarchical_memsw_limit 9223372036854771712 [ 495.173732][T29188] total_cache 0 [ 495.182874][T29188] total_rss 184320 [ 495.191106][T29188] total_shmem 0 [ 495.213047][T29188] total_mapped_file 0 [ 495.225530][T29188] total_dirty 0 [ 495.241078][T29211] netlink: 'syz.9.7968': attribute type 3 has an invalid length. [ 495.283037][T29188] total_writeback 0 [ 495.293328][T29188] total_workingset_refault_anon 3282 [ 495.313983][T29188] total_workingset_refault_file 0 [ 495.323687][T29188] total_swap 4096 [ 495.326177][T29215] bond10: entered promiscuous mode [ 495.333790][T29188] total_swapcached 2727936 [ 495.341297][T29188] total_pgpgin 252457 [ 495.348406][T29188] total_pgpgout 252409 [ 495.352644][T29188] total_pgfault 207623 [ 495.357087][T29188] total_pgmajfault 523 [ 495.361173][T29188] total_inactive_anon 184320 [ 495.366188][T29188] total_active_anon 0 [ 495.370289][T29188] total_inactive_file 0 [ 495.374692][T29188] total_active_file 12288 [ 495.379257][T29188] total_unevictable 0 [ 495.383311][T29188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7956,pid=29183,uid=0 [ 495.398556][T29188] Memory cgroup out of memory: Killed process 29188 (syz.5.7956) total-vm:96212kB, anon-rss:1400kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 495.742966][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 495.742986][ T28] audit: type=1400 audit(2000001368.815:7578): avc: denied { watch watch_reads } for pid=29245 comm="syz.5.7982" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 497.156251][T29294] __nla_validate_parse: 1 callbacks suppressed [ 497.156272][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8000'. [ 497.214269][T29289] macvtap1: entered promiscuous mode [ 497.221477][T29289] team0: entered promiscuous mode [ 497.228220][T29289] team_slave_0: entered promiscuous mode [ 497.236454][T29289] team_slave_1: entered promiscuous mode [ 497.269706][T29289] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 497.288619][T29289] team0: Device macvtap1 is already an upper device of the team interface [ 497.358265][T29289] team0: left promiscuous mode [ 497.363621][T29289] team_slave_0: left promiscuous mode [ 497.384816][T29289] team_slave_1: left promiscuous mode [ 497.649272][ T28] audit: type=1326 audit(2000001370.725:7579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 497.693067][ T28] audit: type=1326 audit(2000001370.725:7580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 497.741948][ T28] audit: type=1326 audit(2000001370.725:7581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 497.793020][ T28] audit: type=1326 audit(2000001370.725:7582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 497.835242][ T28] audit: type=1326 audit(2000001370.725:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 497.912319][ T28] audit: type=1326 audit(2000001370.725:7584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 498.014560][ T28] audit: type=1326 audit(2000001370.725:7585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 498.274539][ T28] audit: type=1326 audit(2000001370.795:7586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 498.392418][ T28] audit: type=1326 audit(2000001370.795:7587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29312 comm="syz.4.8007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb507c799 code=0x7ffc0000 [ 498.587063][T29345] netlink: 'syz.1.8018': attribute type 1 has an invalid length. [ 498.624676][T29345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.660068][T29345] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 498.707006][T29345] bond2: (slave batadv2): making interface the new active one [ 498.716045][T29345] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 498.741868][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8019'. [ 498.751055][ T7250] net_ratelimit: 24 callbacks suppressed [ 498.751071][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 498.788533][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8019'. [ 498.886310][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 498.901585][T29352] loop9: detected capacity change from 0 to 2048 [ 498.938549][T29352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.012884][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.043149][T29352] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 499.095772][T29352] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 328 with error 28 [ 499.116024][T29352] EXT4-fs (loop9): This should not happen!! Data will be lost [ 499.116024][T29352] [ 499.126317][T29352] EXT4-fs (loop9): Total free blocks count 0 [ 499.132314][T29352] EXT4-fs (loop9): Free/Dirty block details [ 499.163766][T29352] EXT4-fs (loop9): free_blocks=2415919104 [ 499.169688][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.179867][T29352] EXT4-fs (loop9): dirty_blocks=336 [ 499.186025][T29352] EXT4-fs (loop9): Block reservation details [ 499.192052][T29352] EXT4-fs (loop9): i_reserved_data_blocks=21 [ 499.239010][T16697] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 499.307207][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.342392][T29381] tipc: Failed to remove unknown binding: 66,1,1/0:3567601981/3567601983 [ 499.350980][T29381] tipc: Failed to remove unknown binding: 66,1,1/0:3567601981/3567601983 [ 499.458723][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.584650][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.704616][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.815180][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 499.900259][T29399] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 499.956204][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 500.172942][T29408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8042'. [ 501.575190][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 501.575258][ T28] audit: type=1326 audit(2000001630.662:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29442 comm="syz.9.8056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7fc00000 [ 502.047131][T29448] macvtap1: entered promiscuous mode [ 502.053069][T29448] team0: entered promiscuous mode [ 502.068756][T29448] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 502.083898][T29459] netlink: 'syz.1.8061': attribute type 4 has an invalid length. [ 502.093623][T29448] team0: Device macvtap1 is already an upper device of the team interface [ 502.120066][T29448] team0: left promiscuous mode [ 502.135826][T29460] netlink: 'syz.1.8061': attribute type 4 has an invalid length. [ 502.214540][ T28] audit: type=1326 audit(2000001631.282:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29442 comm="syz.9.8056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe32427c799 code=0x7fc00000 [ 502.916729][T29488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.002291][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8076'. [ 503.005159][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8074'. [ 503.021806][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8076'. [ 503.044097][T29492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8074'. [ 503.253140][ T28] audit: type=1326 audit(2000001632.322:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.284517][ T28] audit: type=1326 audit(2000001632.322:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.364523][ T28] audit: type=1326 audit(2000001632.322:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.389175][ T28] audit: type=1326 audit(2000001632.322:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.416687][ T28] audit: type=1326 audit(2000001632.322:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.440951][ T28] audit: type=1326 audit(2000001632.322:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.553415][ T28] audit: type=1326 audit(2000001632.332:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.589832][ T28] audit: type=1326 audit(2000001632.332:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29503 comm="syz.9.8079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 503.814501][ T36] net_ratelimit: 27 callbacks suppressed [ 503.814521][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 503.935412][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 503.943585][T29521] netlink: 'syz.4.8085': attribute type 4 has an invalid length. [ 503.971560][T29521] netlink: 'syz.4.8085': attribute type 4 has an invalid length. [ 504.254494][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 504.366572][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 504.494767][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 504.643314][T29557] netlink: 'syz.5.8100': attribute type 10 has an invalid length. [ 504.663600][T29557] team0: Failed to send options change via netlink (err -105) [ 504.708906][T29557] team0: Port device dummy0 added [ 504.724929][T29558] netlink: 'syz.5.8100': attribute type 10 has an invalid length. [ 504.733840][T29558] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 505.115518][T29558] team0: Failed to send options change via netlink (err -105) [ 505.123192][T29558] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 505.132327][T29558] team0: Port device dummy0 removed [ 505.139204][T29558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 505.156733][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 505.304853][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 505.315183][T29571] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8107'. [ 505.333253][T29571] lo speed is unknown, defaulting to 1000 [ 505.344593][T29571] lo speed is unknown, defaulting to 1000 [ 505.379257][T29571] lo speed is unknown, defaulting to 1000 [ 505.395531][T29571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 505.403555][T29571] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.457991][T29571] lo speed is unknown, defaulting to 1000 [ 505.464337][T29571] lo speed is unknown, defaulting to 1000 [ 505.470283][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 505.505767][T29571] lo speed is unknown, defaulting to 1000 [ 505.512069][T29571] lo speed is unknown, defaulting to 1000 [ 505.630925][T29571] lo speed is unknown, defaulting to 1000 [ 505.694369][T29571] lo speed is unknown, defaulting to 1000 [ 505.815349][T29590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.830218][T29590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.890177][T29596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.082640][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 506.266294][T29606] bond4: entered promiscuous mode [ 506.272297][T29606] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.317612][T29606] bridge9: entered promiscuous mode [ 506.359320][T29613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 506.369592][T29615] netlink: 'syz.1.8127': attribute type 10 has an invalid length. [ 506.379415][T29613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.388131][T29613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.397716][T29615] team0: Failed to send options change via netlink (err -105) [ 506.405335][T29615] team0: Port device dummy0 added [ 506.411884][T29615] netlink: 'syz.1.8127': attribute type 10 has an invalid length. [ 506.421078][T29615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 506.431192][T29615] team0: Failed to send options change via netlink (err -105) [ 506.438879][T29615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 506.448178][T29615] team0: Port device dummy0 removed [ 506.624626][T29629] netlink: 'syz.4.8131': attribute type 12 has an invalid length. [ 506.954588][T29645] loop5: detected capacity change from 0 to 256 [ 507.085236][T29646] syz.5.8138: attempt to access beyond end of device [ 507.085236][T29646] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 507.136741][T29646] syz.5.8138: attempt to access beyond end of device [ 507.136741][T29646] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 507.166037][T29646] syz.5.8138: attempt to access beyond end of device [ 507.166037][T29646] loop5: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 507.180878][T29646] syz.5.8138: attempt to access beyond end of device [ 507.180878][T29646] loop5: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 507.194647][T29646] syz.5.8138: attempt to access beyond end of device [ 507.194647][T29646] loop5: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 507.242739][T29646] syz.5.8138: attempt to access beyond end of device [ 507.242739][T29646] loop5: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 507.264667][T29646] syz.5.8138: attempt to access beyond end of device [ 507.264667][T29646] loop5: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 507.280214][T29646] syz.5.8138: attempt to access beyond end of device [ 507.280214][T29646] loop5: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 507.294190][T29646] syz.5.8138: attempt to access beyond end of device [ 507.294190][T29646] loop5: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 507.334017][T29646] syz.5.8138: attempt to access beyond end of device [ 507.334017][T29646] loop5: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 507.351102][T29649] lo speed is unknown, defaulting to 1000 [ 507.785554][T29672] syzkaller0: entered promiscuous mode [ 508.136467][T29691] lo speed is unknown, defaulting to 1000 [ 508.603196][T29725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8170'. [ 508.627239][T29727] lo speed is unknown, defaulting to 1000 [ 508.787498][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8174'. [ 508.843418][T29738] vlan0: entered allmulticast mode [ 508.959009][T29745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8176'. [ 509.012779][T29745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.024499][T16697] net_ratelimit: 21 callbacks suppressed [ 509.024622][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.038311][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8177'. [ 509.052056][T29747] macsec1: entered promiscuous mode [ 509.057816][T29747] bond3: entered promiscuous mode [ 509.064313][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8177'. [ 509.073645][T29747] bond3: left promiscuous mode [ 509.156000][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.272329][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.405191][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.448547][T29770] lo speed is unknown, defaulting to 1000 [ 509.544219][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.574905][T29775] all: renamed from bridge_slave_1 [ 509.664564][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.794544][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 509.904488][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 510.025386][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 511.388869][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 511.540582][ T28] kauditd_printk_skb: 300 callbacks suppressed [ 511.540600][ T28] audit: type=1326 audit(2000001640.622:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.609078][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8198'. [ 511.634180][T29800] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8196'. [ 511.672612][ T28] audit: type=1326 audit(2000001640.622:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.710214][ T28] audit: type=1326 audit(2000001640.662:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.762000][ T28] audit: type=1326 audit(2000001640.672:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29803 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe32423cfce code=0x7ffc0000 [ 511.838773][ T28] audit: type=1326 audit(2000001640.682:7922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.862990][ T28] audit: type=1326 audit(2000001640.682:7923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.897079][ T28] audit: type=1326 audit(2000001640.692:7924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.921063][ T28] audit: type=1326 audit(2000001640.692:7925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.954333][ T28] audit: type=1326 audit(2000001640.692:7926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 511.979552][ T28] audit: type=1326 audit(2000001640.692:7927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29799 comm="syz.9.8197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 512.505790][T29855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8218'. [ 512.546001][T29855] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.723005][T29861] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8221'. [ 512.735712][T29863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8220'. [ 512.871702][T29877] loop9: detected capacity change from 0 to 512 [ 512.899663][T29877] EXT4-fs: Ignoring removed bh option [ 512.934535][T29877] EXT4-fs: Ignoring removed oldalloc option [ 512.941337][T29877] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 512.956695][T29877] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 512.970011][T29877] EXT4-fs (loop9): 1 truncate cleaned up [ 512.976476][T29877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.026940][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.882771][ T3890] IPVS: starting estimator thread 0... [ 513.994720][T29898] IPVS: using max 2112 ests per chain, 105600 per kthread [ 514.115414][T16697] net_ratelimit: 20 callbacks suppressed [ 514.115432][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.254476][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.372931][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.494460][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.612688][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.724557][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.834511][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 514.944482][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 515.034281][T29917] cgroup: fork rejected by pids controller in /syz2 [ 515.054554][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 515.111830][T29965] __nla_validate_parse: 3 callbacks suppressed [ 515.111848][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8251'. [ 515.172533][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 515.220685][T29965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8251'. [ 515.265132][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8251'. [ 515.275273][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8251'. [ 515.700192][T30016] netlink: 'syz.4.8273': attribute type 2 has an invalid length. [ 515.708471][T30016] netlink: 'syz.4.8273': attribute type 2 has an invalid length. [ 515.794860][T30021] lo speed is unknown, defaulting to 1000 [ 516.025104][T30034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8279'. [ 516.038417][T30034] ip6gre2: entered promiscuous mode [ 516.043726][T30034] ip6gre2: entered allmulticast mode [ 516.059795][T30034] netlink: 'syz.4.8279': attribute type 6 has an invalid length. [ 516.072671][T30034] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8279'. [ 516.456254][T30045] loop9: detected capacity change from 0 to 4096 [ 516.493490][T30045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.667322][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.896667][T30099] netlink: 'syz.2.8302': attribute type 3 has an invalid length. [ 517.904605][T30099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8302'. [ 517.913645][T30099] ------------[ cut here ]------------ [ 517.919215][T30099] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 517.931382][T30099] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.2.8302/30099 [ 517.941193][T30099] Modules linked in: [ 517.945158][T30099] CPU: 0 UID: 0 PID: 30099 Comm: syz.2.8302 Tainted: G W syzkaller #0 PREEMPT(full) [ 517.956351][T30099] Tainted: [W]=WARN [ 517.960208][T30099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.970365][T30099] RIP: 0010:u32_change+0x1463/0x14d0 [ 517.975713][T30099] Code: 31 ed e9 96 fe ff ff e8 db 38 c2 fc 48 8d 3d 54 7d 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 f1 86 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 517.995480][T30099] RSP: 0018:ffffc9000365b5e0 EFLAGS: 00010287 [ 518.001606][T30099] RAX: ffffffff84971445 RBX: ffffc9000365b7f0 RCX: 0000000000000010 [ 518.009724][T30099] RDX: ffffffff867e86f1 RSI: 0000000000000020 RDI: ffffffff872091a0 [ 518.017791][T30099] RBP: ffffc9000365b6e8 R08: 000188811b46f287 R09: 0000000000000000 [ 518.025819][T30099] R10: ffff88811b46f200 R11: 0000000000000002 R12: ffff888161629a00 [ 518.033815][T30099] R13: 0000000000000001 R14: 0000000000000020 R15: ffff888161629ac0 [ 518.041903][T30099] FS: 00007f40492076c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 518.051019][T30099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.057662][T30099] CR2: 0000001b34021ff8 CR3: 00000001349ec000 CR4: 00000000003506f0 [ 518.066044][T30099] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.074077][T30099] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 518.082225][T30099] Call Trace: [ 518.085581][T30099] [ 518.088622][T30099] tc_new_tfilter+0xfc0/0x1200 [ 518.093582][T30099] ? ns_capable+0x7c/0xb0 [ 518.098007][T30099] ? __pfx_tc_new_tfilter+0x10/0x10 [ 518.103334][T30099] rtnetlink_rcv_msg+0x64b/0x720 [ 518.108438][T30099] ? avc_has_perm_noaudit+0xab/0x130 [ 518.113779][T30099] netlink_rcv_skb+0x123/0x220 [ 518.118616][T30099] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.124136][T30099] rtnetlink_rcv+0x1c/0x30 [ 518.128768][T30099] netlink_unicast+0x5c0/0x690 [ 518.133718][T30099] netlink_sendmsg+0x5c8/0x6f0 [ 518.138665][T30099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.144139][T30099] ____sys_sendmsg+0x563/0x5b0 [ 518.148993][T30099] ___sys_sendmsg+0x195/0x1e0 [ 518.153799][T30099] ? place_entity+0x1ab/0x210 [ 518.158689][T30099] __sys_sendmmsg+0x185/0x320 [ 518.163501][T30099] __x64_sys_sendmmsg+0x57/0x70 [ 518.168559][T30099] x64_sys_call+0x27aa/0x3020 [ 518.173290][T30099] do_syscall_64+0x12c/0x370 [ 518.178037][T30099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.183971][T30099] RIP: 0033:0x7f404a7ac799 [ 518.188439][T30099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.208194][T30099] RSP: 002b:00007f4049207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.216688][T30099] RAX: ffffffffffffffda RBX: 00007f404aa25fa0 RCX: 00007f404a7ac799 [ 518.224739][T30099] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 518.232744][T30099] RBP: 00007f404a842c99 R08: 0000000000000000 R09: 0000000000000000 [ 518.241196][T30099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.249232][T30099] R13: 00007f404aa26038 R14: 00007f404aa25fa0 R15: 00007fffee1bb798 [ 518.257287][T30099] [ 518.260332][T30099] ---[ end trace 0000000000000000 ]--- [ 518.334630][T30099] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8302'. [ 519.034208][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 519.034230][ T28] audit: type=1400 audit(2000001648.112:7938): avc: denied { execmod } for pid=30128 comm="syz.5.8310" path="/163/blkio.bfq.io_merged" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 519.174633][T16697] net_ratelimit: 30 callbacks suppressed [ 519.174652][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.304479][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.452223][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.574733][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.705631][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.824463][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 519.934612][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 520.085759][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 520.224487][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 520.344714][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 521.125325][T30192] netlink: 'syz.4.8332': attribute type 2 has an invalid length. [ 521.135690][T30192] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.8332'. [ 521.597424][T30204] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1 [ 521.608896][T30204] ref_ctr increment failed for inode: 0x1082 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810a2e4380 [ 521.621058][T30203] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1 [ 521.630099][T30203] ref_ctr decrement failed for inode: 0x1082 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810a2e4380 [ 521.643872][T30203] uprobe: syz.9.8336:30203 failed to unregister, leaking uprobe [ 521.905149][T30216] uprobe: syz.9.8342:30216 failed to unregister, leaking uprobe [ 522.414164][T30246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8357'. [ 523.020988][T30256] IPVS: Unknown mcast interface: dummy0 [ 523.321149][T30288] lo speed is unknown, defaulting to 1000 [ 523.368206][ T3881] IPVS: starting estimator thread 0... [ 523.417677][ T28] audit: type=1400 audit(2000001652.492:7939): avc: denied { setopt } for pid=30292 comm="syz.4.8372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 523.464671][T30290] IPVS: using max 2352 ests per chain, 117600 per kthread [ 523.527732][ T7250] IPVS: stop unused estimator thread 0... [ 524.293214][ T12] net_ratelimit: 29 callbacks suppressed [ 524.293235][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 524.454484][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 524.564590][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 524.674729][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 524.814507][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 524.935622][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 525.045006][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 525.154846][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 525.264569][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 525.398217][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 526.613066][T30380] bond5: entered promiscuous mode [ 526.637050][T30387] loop5: detected capacity change from 0 to 128 [ 526.667511][T30381] ip6gretap0: entered promiscuous mode [ 526.673322][T30381] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 526.772772][T30395] lo speed is unknown, defaulting to 1000 [ 526.868709][T30382] bond5 (unregistering): (slave ip6gretap0): Releasing backup interface [ 526.922050][T30382] ip6gretap0: left promiscuous mode [ 526.977844][T30382] bond5 (unregistering): Released all slaves [ 527.278649][T30395] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8413'. [ 527.306644][T30395] gtp0: entered promiscuous mode [ 528.265021][T30449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8438'. [ 528.421599][T30454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8440'. [ 528.581300][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8443'. [ 528.642916][T30461] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8443'. [ 528.809807][T30469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.831286][T30469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.294953][ T7250] net_ratelimit: 22 callbacks suppressed [ 529.294976][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 529.454471][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 529.577328][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 529.705094][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 529.825280][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 529.944889][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 530.104540][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 530.234670][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 530.344687][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 530.513967][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'. [ 530.549836][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8465'. [ 530.605800][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 534.303408][T30541] lo speed is unknown, defaulting to 1000 [ 534.316029][ T4223] net_ratelimit: 5 callbacks suppressed [ 534.316056][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 534.639133][T30554] lo speed is unknown, defaulting to 1000 [ 534.727708][T30562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8482'. [ 534.745397][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 534.782819][ T28] audit: type=1326 audit(2000001919.861:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 534.861319][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 535.044620][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 535.099651][ T28] audit: type=1326 audit(2000001919.861:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.146550][ T28] audit: type=1326 audit(2000001919.891:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.178593][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 535.224638][ T28] audit: type=1326 audit(2000001919.891:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.285710][ T28] audit: type=1326 audit(2000001919.891:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.318558][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 535.451360][T30581] tunl0: Caught tx_queue_len zero misconfig [ 535.588402][ T28] audit: type=1326 audit(2000001919.981:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.675656][ T28] audit: type=1326 audit(2000001919.981:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 535.994472][ T28] audit: type=1326 audit(2000001919.981:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 536.148001][T30601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8496'. [ 536.344878][ T28] audit: type=1326 audit(2000001919.981:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 536.397334][T30598] lo speed is unknown, defaulting to 1000 [ 536.412810][ T28] audit: type=1326 audit(2000001919.981:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30564 comm="syz.2.8484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f404a7ac502 code=0x7ffc0000 [ 536.549357][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 536.703499][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 536.824900][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 536.935475][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 538.338000][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8508'. [ 538.752661][T30672] lo speed is unknown, defaulting to 1000 [ 538.914583][T30676] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8523'. [ 539.230007][T30694] syz.5.8528 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 539.256696][T30694] CPU: 0 UID: 0 PID: 30694 Comm: syz.5.8528 Tainted: G W syzkaller #0 PREEMPT(full) [ 539.256819][T30694] Tainted: [W]=WARN [ 539.256830][T30694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.256846][T30694] Call Trace: [ 539.256854][T30694] [ 539.256862][T30694] __dump_stack+0x1d/0x30 [ 539.256900][T30694] dump_stack_lvl+0x95/0xd0 [ 539.256944][T30694] dump_stack+0x15/0x1b [ 539.256999][T30694] dump_header+0x80/0x240 [ 539.257029][T30694] oom_kill_process+0x295/0x350 [ 539.257062][T30694] out_of_memory+0x97d/0xb80 [ 539.257094][T30694] try_charge_memcg+0x62e/0xa10 [ 539.257343][T30694] obj_cgroup_charge_pages+0x23/0xc0 [ 539.257375][T30694] __memcg_kmem_charge_page+0x9e/0x170 [ 539.257414][T30694] __alloc_frozen_pages_noprof+0x18a/0x360 [ 539.257497][T30694] alloc_pages_bulk_noprof+0x4aa/0x530 [ 539.257620][T30694] ? policy_nodemask+0x417/0x5e0 [ 539.257690][T30694] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 539.257730][T30694] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 539.257941][T30694] ? alloc_pages_mpol+0x217/0x260 [ 539.258060][T30694] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 539.258113][T30694] __kvmalloc_node_noprof+0x3d4/0x650 [ 539.258147][T30694] ? futex_hash_allocate+0x190/0x9d0 [ 539.258213][T30694] ? futex_hash_allocate+0x190/0x9d0 [ 539.258248][T30694] futex_hash_allocate+0x190/0x9d0 [ 539.258532][T30694] ? cap_task_prctl+0x13f/0x6e0 [ 539.258615][T30694] futex_hash_prctl+0xd8/0xf0 [ 539.258679][T30694] __se_sys_prctl+0xa3d/0x13f0 [ 539.258720][T30694] __x64_sys_prctl+0x67/0x80 [ 539.258755][T30694] x64_sys_call+0x2533/0x3020 [ 539.258801][T30694] do_syscall_64+0x12c/0x370 [ 539.258831][T30694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.258856][T30694] RIP: 0033:0x7f65d6bac799 [ 539.258874][T30694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.258979][T30694] RSP: 002b:00007f65d55ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 539.259051][T30694] RAX: ffffffffffffffda RBX: 00007f65d6e25fa0 RCX: 00007f65d6bac799 [ 539.259066][T30694] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 539.259083][T30694] RBP: 00007f65d6c42c99 R08: 0000000000000000 R09: 0000000000000000 [ 539.259100][T30694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.259151][T30694] R13: 00007f65d6e26038 R14: 00007f65d6e25fa0 R15: 00007ffedb4022c8 [ 539.259245][T30694] [ 539.509871][T16697] net_ratelimit: 19 callbacks suppressed [ 539.509890][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 539.542271][T30694] memory: usage 277152kB, limit 307200kB, failcnt 335 [ 539.549161][T30694] memory+swap: usage 277152kB, limit 9007199254740988kB, failcnt 0 [ 539.557170][T30694] kmem: usage 276772kB, limit 9007199254740988kB, failcnt 0 [ 539.564647][T30694] Memory cgroup stats for /syz5: [ 539.564856][T30694] cache 0 [ 539.572817][T30694] rss 200704 [ 539.584559][T30694] shmem 0 [ 539.588266][T30694] mapped_file 0 [ 539.591785][T30694] dirty 0 [ 539.594810][T30694] writeback 0 [ 539.604480][T30694] workingset_refault_anon 3283 [ 539.609426][T30694] workingset_refault_file 0 [ 539.624481][T30694] swap 0 [ 539.627501][T30694] swapcached 2723840 [ 539.633618][T30694] pgpgin 272762 [ 539.637814][ T7250] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 539.645272][T30694] pgpgout 272710 [ 539.645282][T30694] pgfault 238627 [ 539.645290][T30694] pgmajfault 524 [ 539.695306][T30694] inactive_anon 180224 [ 539.708270][T30694] active_anon 0 [ 539.722763][T30694] inactive_file 0 [ 539.738424][T30694] active_file 12288 [ 539.751096][T30694] unevictable 0 [ 539.765662][T30694] hierarchical_memory_limit 314572800 [ 539.774666][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 539.782918][T30694] hierarchical_memsw_limit 9223372036854771712 [ 539.798770][T30694] total_cache 0 [ 539.807824][T30694] total_rss 200704 [ 539.816048][T30694] total_shmem 0 [ 539.826306][T30694] total_mapped_file 0 [ 539.840388][T30694] total_dirty 0 [ 539.874505][T30694] total_writeback 0 [ 539.878387][T30694] total_workingset_refault_anon 3283 [ 539.883690][T30694] total_workingset_refault_file 0 [ 539.894759][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 539.921379][T30694] total_swap 0 [ 539.946817][T30694] total_swapcached 2723840 [ 539.951394][T30694] total_pgpgin 272762 [ 539.963299][T30694] total_pgpgout 272710 [ 539.986446][T30694] total_pgfault 238627 [ 539.995232][T30694] total_pgmajfault 524 [ 540.005998][T30694] total_inactive_anon 180224 [ 540.015603][T30694] total_active_anon 0 [ 540.023754][T30694] total_inactive_file 0 [ 540.032351][T30694] total_active_file 12288 [ 540.044527][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 540.081126][T30694] total_unevictable 0 [ 540.105580][T30694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.8528,pid=30693,uid=0 [ 540.148925][T30694] Memory cgroup out of memory: Killed process 30694 (syz.5.8528) total-vm:94164kB, anon-rss:1412kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 540.211802][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 540.354542][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 540.474702][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 540.725302][T30705] smc: net device sit0 applied user defined pnetid SYZ1 [ 540.844584][T16697] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 540.947042][T30728] netlink: 'syz.1.8541': attribute type 1 has an invalid length. [ 540.964508][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 541.304662][T30741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8541'. [ 541.372819][T30728] bond4: (slave veth11): Enslaving as an active interface with a down link [ 541.391699][T30732] lo speed is unknown, defaulting to 1000 [ 541.398863][T30739] bond4: (slave dummy0): making interface the new active one [ 541.445156][T30739] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 541.482942][T30741] bond4: (slave dummy0): Releasing active interface [ 541.526358][T30746] netlink: 'syz.9.8546': attribute type 1 has an invalid length. [ 541.534252][T30746] netlink: 'syz.9.8546': attribute type 4 has an invalid length. [ 541.544333][T30746] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.8546'. [ 541.594163][T30744] lo speed is unknown, defaulting to 1000 [ 542.341969][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8556'. [ 542.842055][T30789] lo speed is unknown, defaulting to 1000 [ 543.638958][T30790] kexec: Could not allocate control_code_buffer [ 543.865539][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 543.865593][ T28] audit: type=1400 audit(2000001928.951:7964): avc: denied { lock } for pid=30805 comm="syz.4.8568" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=136298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 544.030164][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8570'. [ 544.084485][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8570'. [ 544.154358][ T3877] kernel read not supported for file bpf-prog (pid: 3877 comm: kworker/0:13) [ 544.604477][ T7249] net_ratelimit: 22 callbacks suppressed [ 544.604500][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 544.693911][T30834] team_slave_1: Caught tx_queue_len zero misconfig [ 544.744474][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 544.854461][ T7249] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 544.875848][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8581'. [ 544.903239][T30838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8581'. [ 545.078873][ T4219] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.214484][ T4219] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.259783][T23197] kernel read not supported for file bpf-prog (pid: 23197 comm: kworker/1:18) [ 545.300480][T30827] kexec: Could not allocate control_code_buffer [ 545.324911][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.454653][ T4219] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.564659][ T4215] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.684569][ T4219] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.728047][T30874] loop9: detected capacity change from 0 to 2048 [ 545.739932][ T28] audit: type=1326 audit(2000001930.811:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7fc00000 [ 545.764247][ T28] audit: type=1326 audit(2000001930.811:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f404a7ac799 code=0x7fc00000 [ 545.798961][T30880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8597'. [ 545.808178][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 545.815976][ T28] audit: type=1326 audit(2000001930.881:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30869 comm="syz.2.8594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7fc00000 [ 545.844147][T30613] loop9: p1 < > p4 [ 545.849125][T30613] loop9: p4 size 8388608 extends beyond EOD, truncated [ 545.873789][T30874] loop9: p1 < > p4 [ 545.891429][T30874] loop9: p4 size 8388608 extends beyond EOD, truncated [ 545.938657][ T3000] loop9: p1 < > p4 [ 545.942998][ T3000] loop9: p4 size 8388608 extends beyond EOD, truncated [ 545.971521][T30553] udevd[30553]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 545.997698][T30553] udevd[30553]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 546.020867][T30553] udevd[30553]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 546.051613][T23197] kernel read not supported for file bpf-prog (pid: 23197 comm: kworker/1:18) [ 546.077282][T30888] loop9: detected capacity change from 0 to 256 [ 546.091003][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.100732][T30888] FAT-fs (loop9): Filesystem has been set read-only [ 546.113497][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.122604][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.137791][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.151020][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.160252][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.169632][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.204340][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.213972][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.249145][T30888] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 546.291638][T30899] netlink: 'syz.4.8606': attribute type 1 has an invalid length. [ 546.317005][T30899] bond5: entered promiscuous mode [ 546.322181][T30899] bond5: entered allmulticast mode [ 546.327661][T30899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 546.341782][T30899] bridge11: entered promiscuous mode [ 546.347708][T30899] bridge11: entered allmulticast mode [ 546.353787][T30899] bond5: (slave bridge11): Enslaving as a backup interface with an up link [ 546.825737][T30884] kexec: Could not allocate control_code_buffer [ 547.678125][ T3877] kernel read not supported for file bpf-prog (pid: 3877 comm: kworker/0:13) [ 547.801677][T30938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8615'. [ 547.980608][T30947] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8620'. [ 547.994903][T30947] bridge_slave_1: left allmulticast mode [ 548.005768][T30947] bridge_slave_1: left promiscuous mode [ 548.011739][T30947] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.019826][T30947] bridge_slave_0: left allmulticast mode [ 548.025756][T30947] bridge_slave_0: left promiscuous mode [ 548.031513][T30947] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.855361][T30998] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8639'. [ 550.094458][ T5984] net_ratelimit: 34 callbacks suppressed [ 550.094474][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.224470][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.236840][T31024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8648'. [ 550.252211][T31025] tipc: Failed to remove unknown binding: 66,0,0/0:4174542296/4174542297 [ 550.267473][T31025] tipc: Failed to remove unknown binding: 66,0,0/0:4174542296/4174542297 [ 550.334490][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.459303][ T5984] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.595671][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.714541][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.775078][T31055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8661'. [ 550.834602][ T36] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 550.954523][ T12] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 551.084835][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 551.544504][ T4223] bond0: (slave ip6gretap0): failed to get link speed/duplex [ 552.549334][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8674'. [ 552.582619][T31103] netlink: 'syz.1.8678': attribute type 13 has an invalid length. [ 552.626387][T31103] bond1: left allmulticast mode [ 552.631307][T31103] bond1: left promiscuous mode [ 552.692072][T31108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8679'. [ 552.713164][T31105] macvlan3: entered promiscuous mode [ 552.729466][T31105] macvlan3: entered allmulticast mode [ 552.737211][T31105] bond11: (slave macvlan3): Opening slave failed [ 552.769223][T31108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8679'. [ 552.987958][T31127] netlink: 'syz.5.8686': attribute type 1 has an invalid length. [ 553.064501][T31133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8689'. [ 553.076004][T31127] bond1: entered promiscuous mode [ 553.093625][T31127] bond1: entered allmulticast mode [ 553.099730][T31127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.148995][T31137] bridge5: entered promiscuous mode [ 553.154604][T31137] bridge5: entered allmulticast mode [ 553.160674][T31137] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 553.201352][T31140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8689'. [ 553.294952][T31146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8693'. [ 553.368452][T31146] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.410811][T31146] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 553.437495][T31152] macvlan2: entered promiscuous mode [ 553.444541][T31152] macvlan2: entered allmulticast mode [ 553.487269][T31152] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 555.118854][T31193] lo speed is unknown, defaulting to 1000 [ 555.179986][T31193] loop9: detected capacity change from 0 to 1024 [ 555.207322][T31193] EXT4-fs: Ignoring removed nobh option [ 555.212969][T31193] EXT4-fs: inline encryption not supported [ 555.267528][T31193] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.468907][ T28] audit: type=1400 audit(2000001940.521:7968): avc: denied { nlmsg_write } for pid=31191 comm="syz.9.8712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 555.523817][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.612410][T31212] loop9: detected capacity change from 0 to 1024 [ 555.651347][T31212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.768899][T31218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8718'. [ 556.001278][ T28] audit: type=1400 audit(2000001941.071:7969): avc: denied { module_load } for pid=31224 comm="syz.5.8732" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=138017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 556.265152][T31225] Invalid ELF header magic: != ELF [ 556.607245][T31212] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.8714: inode #779706732: comm syz.9.8714: iget: illegal inode # [ 556.646672][T31212] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.8714: error while reading EA inode 779706732 err=-117 [ 556.696753][T31239] syzkaller0: entered allmulticast mode [ 556.725126][T31239] syzkaller0: entered promiscuous mode [ 556.734249][T31239] syzkaller0 (unregistering): left promiscuous mode [ 556.755003][T31239] syzkaller0 (unregistering): left allmulticast mode [ 556.769172][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.001554][T31263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8735'. [ 558.724709][T31282] loop9: detected capacity change from 0 to 1764 [ 558.776002][ T28] audit: type=1400 audit(2000001943.861:7970): avc: denied { create } for pid=31283 comm="syz.4.8743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 558.803848][ T28] audit: type=1400 audit(2000001943.861:7971): avc: denied { write } for pid=31283 comm="syz.4.8743" path="socket:[138081]" dev="sockfs" ino=138081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 559.192468][T31270] kexec: Could not allocate control_code_buffer [ 559.313925][ T28] audit: type=1326 audit(2000001944.391:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.422266][ T28] audit: type=1326 audit(2000001944.391:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.501467][ T28] audit: type=1326 audit(2000001944.391:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.557911][T31312] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8754'. [ 559.565551][ T28] audit: type=1326 audit(2000001944.391:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.634617][ T28] audit: type=1326 audit(2000001944.391:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.705418][ T28] audit: type=1326 audit(2000001944.391:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31302 comm="syz.9.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32427c799 code=0x7ffc0000 [ 559.970627][T31323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8759'. [ 560.125302][T31332] loop9: detected capacity change from 0 to 1024 [ 560.132169][T31332] EXT4-fs: Ignoring removed oldalloc option [ 560.177801][T31332] EXT4-fs: Ignoring removed bh option [ 560.210744][T31332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.511708][T31344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8765'. [ 560.606309][T31344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8765'. [ 561.213557][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.436347][T31402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8788'. [ 563.554063][T31404] lo speed is unknown, defaulting to 1000 [ 565.052890][T31458] batadv_slave_0: entered promiscuous mode [ 565.180927][T31462] netlink: 'syz.2.8813': attribute type 13 has an invalid length. [ 565.432270][T31462] syz_tun: left promiscuous mode [ 565.463380][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.472056][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.495330][T31458] batadv_slave_0: left promiscuous mode [ 565.507738][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.535309][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.564762][T31468] netlink: 'syz.1.8815': attribute type 27 has an invalid length. [ 565.579360][T31468] macvtap1: left promiscuous mode [ 565.597609][T31468] macvtap1: left allmulticast mode [ 565.606237][T31468] macsec2: left promiscuous mode [ 565.615376][T31468] macsec2: left allmulticast mode [ 565.642284][T31475] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.665090][T31475] net_ratelimit: 11 callbacks suppressed [ 565.665100][T31475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.703332][T31479] netlink: 'syz.5.8817': attribute type 4 has an invalid length. [ 565.768263][T31473] netlink: 'syz.5.8817': attribute type 4 has an invalid length. [ 565.822951][T31486] netlink: 'syz.2.8820': attribute type 4 has an invalid length. [ 565.871006][T31491] netlink: 'syz.2.8823': attribute type 1 has an invalid length. [ 565.939767][T31491] gretap1: entered allmulticast mode [ 566.011654][T31491] bond12: (slave gretap1): making interface the new active one [ 566.063139][T31491] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 566.455615][T31519] netlink: 'syz.9.8831': attribute type 1 has an invalid length. [ 566.489216][T31519] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.571535][T31519] bond9: (slave bridge0): making interface the new active one [ 566.645713][T31519] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 566.656918][T31510] syz.4.8827 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 566.696055][T31510] CPU: 0 UID: 0 PID: 31510 Comm: syz.4.8827 Tainted: G W syzkaller #0 PREEMPT(full) [ 566.696172][T31510] Tainted: [W]=WARN [ 566.696181][T31510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.696198][T31510] Call Trace: [ 566.696206][T31510] [ 566.696218][T31510] __dump_stack+0x1d/0x30 [ 566.696249][T31510] dump_stack_lvl+0x95/0xd0 [ 566.696352][T31510] dump_stack+0x15/0x1b [ 566.696373][T31510] dump_header+0x80/0x240 [ 566.696439][T31510] oom_kill_process+0x295/0x350 [ 566.696530][T31510] out_of_memory+0x97d/0xb80 [ 566.696554][T31510] try_charge_memcg+0x62e/0xa10 [ 566.696687][T31510] obj_cgroup_charge_pages+0x23/0xc0 [ 566.696722][T31510] __memcg_kmem_charge_page+0x9e/0x170 [ 566.696750][T31510] __alloc_frozen_pages_noprof+0x18a/0x360 [ 566.696789][T31510] alloc_pages_mpol+0xb3/0x260 [ 566.696903][T31510] alloc_pages_noprof+0x8f/0x130 [ 566.696939][T31510] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 566.696989][T31510] __kvmalloc_node_noprof+0x3d4/0x650 [ 566.697092][T31510] ? futex_hash_allocate+0x190/0x9d0 [ 566.697130][T31510] ? futex_hash_allocate+0x190/0x9d0 [ 566.697170][T31510] futex_hash_allocate+0x190/0x9d0 [ 566.697211][T31510] ? cap_task_prctl+0x13f/0x6e0 [ 566.697242][T31510] futex_hash_prctl+0xd8/0xf0 [ 566.697272][T31510] __se_sys_prctl+0xa3d/0x13f0 [ 566.697351][T31510] __x64_sys_prctl+0x67/0x80 [ 566.697381][T31510] x64_sys_call+0x2533/0x3020 [ 566.697430][T31510] do_syscall_64+0x12c/0x370 [ 566.697454][T31510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.697481][T31510] RIP: 0033:0x7f6cb507c799 [ 566.697500][T31510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.697523][T31510] RSP: 002b:00007f6cb3acf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 566.697552][T31510] RAX: ffffffffffffffda RBX: 00007f6cb52f5fa0 RCX: 00007f6cb507c799 [ 566.697566][T31510] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 566.697614][T31510] RBP: 00007f6cb5112c99 R08: 0000000000000000 R09: 0000000000000000 [ 566.697631][T31510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.697648][T31510] R13: 00007f6cb52f6038 R14: 00007f6cb52f5fa0 R15: 00007fff9224cda8 [ 566.697670][T31510] [ 566.697900][T31510] memory: usage 302000kB, limit 307200kB, failcnt 278 [ 566.902773][T31527] batadv_slave_1: entered promiscuous mode [ 566.965133][T31530] pimreg: entered allmulticast mode [ 566.984371][T31510] memory+swap: usage 327380kB, limit 9007199254740988kB, failcnt 0 [ 566.986855][T31530] pimreg: left allmulticast mode [ 566.992456][T31510] kmem: usage 258876kB, limit 9007199254740988kB, failcnt 0 [ 567.068010][T31526] batadv_slave_1: left promiscuous mode [ 567.074580][T31510] Memory cgroup stats for /syz4: [ 567.074905][T31510] cache 753664 [ 567.092591][T31510] rss 217088 [ 567.134115][T31510] shmem 626688 [ 567.147700][T31510] mapped_file 126976 [ 567.173589][T31510] dirty 69632 [ 567.180246][T31510] writeback 0 [ 567.189416][T31510] workingset_refault_anon 2107 [ 567.215713][T31510] workingset_refault_file 0 [ 567.239306][T31510] swap 68587520 [ 567.261153][T31510] swapcached 78651392 [ 567.271260][T31510] pgpgin 384620 [ 567.275194][T31510] pgpgout 384248 [ 567.282796][T31510] pgfault 349759 [ 567.306466][T31510] pgmajfault 411 [ 567.315151][T31510] inactive_anon 278528 [ 567.323790][T31510] active_anon 1114112 [ 567.334037][T31510] inactive_file 131072 [ 567.344157][T31510] active_file 0 [ 567.352387][T31510] unevictable 0 [ 567.360105][T31510] hierarchical_memory_limit 314572800 [ 567.375086][T31510] hierarchical_memsw_limit 9223372036854771712 [ 567.393700][T31510] total_cache 753664 [ 567.403125][T31510] total_rss 217088 [ 567.413679][T31510] total_shmem 626688 [ 567.422371][T31510] total_mapped_file 126976 [ 567.433538][T31510] total_dirty 69632 [ 567.442140][T31510] total_writeback 0 [ 567.460548][T31510] total_workingset_refault_anon 2107 [ 567.477041][T31510] total_workingset_refault_file 0 [ 567.493304][T31510] total_swap 68587520 [ 567.500811][T31510] total_swapcached 78651392 [ 567.564926][T31510] total_pgpgin 384620 [ 567.569717][T31510] total_pgpgout 384248 [ 567.575758][T31510] total_pgfault 349759 [ 567.583309][T31510] total_pgmajfault 411 [ 567.591939][T31510] total_inactive_anon 278528 [ 567.602368][T31510] total_active_anon 1114112 [ 567.612563][T31510] total_inactive_file 131072 [ 567.622648][T31510] total_active_file 0 [ 567.631229][T31510] total_unevictable 0 [ 567.639825][T31510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8827,pid=31509,uid=0 [ 567.670453][T31510] Memory cgroup out of memory: Killed process 31510 (syz.4.8827) total-vm:96212kB, anon-rss:1428kB, file-rss:22420kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 569.024302][T31660] xt_hashlimit: size too large, truncated to 1048576 [ 569.609987][T31675] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8863'. [ 569.622002][T31671] loop5: detected capacity change from 0 to 1024 [ 569.647932][T31671] EXT4-fs: Ignoring removed oldalloc option [ 569.774542][T31671] EXT4-fs: Ignoring removed bh option [ 569.914912][T31671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.107311][T31699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8871'. [ 570.122222][T31695] vlan0: entered allmulticast mode [ 570.127774][T31695] bond0: entered allmulticast mode [ 570.172392][T31703] veth0_vlan: entered allmulticast mode [ 570.184937][T31702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8873'. [ 570.212622][T31703] veth0_vlan: left promiscuous mode [ 570.241687][T31703] veth0_vlan: entered promiscuous mode [ 570.381945][T31705] netlink: 'syz.1.8874': attribute type 4 has an invalid length. [ 570.441010][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 570.441046][ T28] audit: type=1326 audit(2000001955.521:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 570.476463][ T28] audit: type=1326 audit(2000001955.521:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 570.543331][ T28] audit: type=1326 audit(2000001955.521:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 570.568029][ T28] audit: type=1326 audit(2000001955.521:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 570.719470][T31731] lo speed is unknown, defaulting to 1000 [ 570.827140][T27380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.025440][ T28] audit: type=1326 audit(2000001955.521:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.121511][ T28] audit: type=1326 audit(2000001955.521:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.210347][ T28] audit: type=1326 audit(2000001955.521:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.324065][T31752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8891'. [ 571.434695][ T28] audit: type=1326 audit(2000001955.521:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.605250][T31757] netlink: 'syz.9.8892': attribute type 4 has an invalid length. [ 571.624336][ T28] audit: type=1326 audit(2000001955.521:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.669503][ T28] audit: type=1326 audit(2000001955.521:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31716 comm="syz.2.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 571.748559][T31760] netlink: 'syz.9.8894': attribute type 4 has an invalid length. [ 571.769039][T31760] netlink: 'syz.9.8894': attribute type 4 has an invalid length. [ 572.520102][T31776] SELinux: failed to load policy [ 572.837196][T31799] loop5: detected capacity change from 0 to 512 [ 572.843899][T31799] EXT4-fs: Ignoring removed bh option [ 572.889747][T31799] EXT4-fs: Ignoring removed oldalloc option [ 572.926589][T31799] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 572.951101][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8911'. [ 572.970234][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8910'. [ 572.987939][T31799] EXT4-fs (loop5): 1 truncate cleaned up [ 572.994133][T31799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.128169][T31814] bond10: entered allmulticast mode [ 573.179297][T31814] bridge8: entered promiscuous mode [ 573.281547][T31814] bridge8: entered allmulticast mode [ 573.306035][T31814] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 573.377643][T27380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.411051][T31820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8915'. [ 573.463664][T31822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8916'. [ 573.792886][T31832] netlink: 'syz.2.8920': attribute type 27 has an invalid length. [ 573.851289][T31832] bond8: left promiscuous mode [ 573.864622][T31832] bond9: left promiscuous mode [ 573.869548][T31832] macsec1: left promiscuous mode [ 573.894763][T31832] bond10: left promiscuous mode [ 573.900810][T31832] gretap1: left allmulticast mode [ 573.915042][T31832] vlan0: left allmulticast mode [ 573.924462][T31832] bond0: left allmulticast mode [ 573.974856][T31835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.340153][T31850] delete_channel: no stack [ 574.490154][T31860] loop5: detected capacity change from 0 to 512 [ 574.528198][T31860] EXT4-fs: inline encryption not supported [ 574.547806][T31860] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 576.166565][T31921] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8949'. [ 576.456914][T31928] loop9: detected capacity change from 0 to 512 [ 576.546840][T31928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.625100][T31928] ext4 filesystem being mounted at /917/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.746540][T16830] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.740219][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 577.740236][ T28] audit: type=1400 audit(2000001962.821:8012): avc: denied { setattr } for pid=31963 comm="syz.4.8968" name="NETLINK" dev="sockfs" ino=142015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 577.750085][T31966] lo speed is unknown, defaulting to 1000 [ 577.909510][T31974] loop9: detected capacity change from 0 to 2048 [ 577.935329][T31974] EXT4-fs: Ignoring removed i_version option [ 577.981666][T31974] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.572527][ T4228] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 578.617907][ T4228] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 678 with error 28 [ 578.656268][ T4228] EXT4-fs (loop9): This should not happen!! Data will be lost [ 578.656268][ T4228] [ 578.675207][ T4228] EXT4-fs (loop9): Total free blocks count 0 [ 578.681324][ T4228] EXT4-fs (loop9): Free/Dirty block details [ 578.692845][ T4228] EXT4-fs (loop9): free_blocks=2415919504 [ 578.702337][ T4228] EXT4-fs (loop9): dirty_blocks=1376 [ 578.707740][ T4228] EXT4-fs (loop9): Block reservation details [ 578.713858][ T4228] EXT4-fs (loop9): i_reserved_data_blocks=43 [ 578.767753][T31998] lo speed is unknown, defaulting to 1000 [ 579.220099][ T4228] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 678 with error 28 [ 580.626384][T32066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9009'. [ 580.662213][T32064] loop5: detected capacity change from 0 to 512 [ 580.679140][T32064] EXT4-fs: Ignoring removed nobh option [ 580.709183][T32064] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 580.745774][T32064] EXT4-fs (loop5): 1 truncate cleaned up [ 580.783754][T32064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.859471][T32079] loop9: detected capacity change from 0 to 128 [ 581.019730][T32079] bio_check_eod: 10 callbacks suppressed [ 581.019831][T32079] syz.9.9015: attempt to access beyond end of device [ 581.019831][T32079] loop9: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 581.114604][T32079] syz.9.9015: attempt to access beyond end of device [ 581.114604][T32079] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 581.139254][T32079] syz.9.9015: attempt to access beyond end of device [ 581.139254][T32079] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 581.205639][T32079] syz.9.9015: attempt to access beyond end of device [ 581.205639][T32079] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 581.254796][T32079] syz.9.9015: attempt to access beyond end of device [ 581.254796][T32079] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 581.284557][T32079] syz.9.9015: attempt to access beyond end of device [ 581.284557][T32079] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 581.344597][T32079] syz.9.9015: attempt to access beyond end of device [ 581.344597][T32079] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 581.374566][T32079] syz.9.9015: attempt to access beyond end of device [ 581.374566][T32079] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 581.414988][T32079] syz.9.9015: attempt to access beyond end of device [ 581.414988][T32079] loop9: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 581.475150][T32079] syz.9.9015: attempt to access beyond end of device [ 581.475150][T32079] loop9: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 581.505540][T27380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.642597][T32131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9034'. [ 582.774187][T32140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32140 comm=syz.2.9034 [ 583.273248][T32136] xfrm0: entered promiscuous mode [ 583.274718][T32129] lo speed is unknown, defaulting to 1000 [ 583.339958][T32143] openvswitch: netlink: Missing key (keys=40, expected=100) [ 583.456538][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9048'. [ 583.495005][T32150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9048'. [ 583.627440][T32156] syz_tun: left promiscuous mode [ 583.667350][T32156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.689072][T32156] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.706060][T32156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.828288][T32160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9041'. [ 584.742198][T32196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9055'. [ 585.324151][T32206] loop5: detected capacity change from 0 to 2048 [ 585.351896][T32206] EXT4-fs: Ignoring removed i_version option [ 585.386635][T32206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.584569][T16697] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 585.665695][T16697] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1980 with error 28 [ 585.974841][T16697] EXT4-fs (loop5): This should not happen!! Data will be lost [ 585.974841][T16697] [ 586.005150][T16697] EXT4-fs (loop5): Total free blocks count 0 [ 586.011353][T16697] EXT4-fs (loop5): Free/Dirty block details [ 586.024531][T16697] EXT4-fs (loop5): free_blocks=2415919504 [ 586.030293][T16697] EXT4-fs (loop5): dirty_blocks=1984 [ 586.059948][T16697] EXT4-fs (loop5): Block reservation details [ 586.083234][T16697] EXT4-fs (loop5): i_reserved_data_blocks=124 [ 586.241755][ T28] audit: type=1326 audit(2000001971.321:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.306142][T32222] netlink: 'syz.4.9062': attribute type 27 has an invalid length. [ 586.347492][ T28] audit: type=1326 audit(2000001971.321:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.347908][ T2989] ================================================================== [ 586.379176][ T2989] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 586.386266][ T2989] [ 586.388648][ T2989] write to 0xffffffff86c697f0 of 8 bytes by task 28 on cpu 0: [ 586.396118][ T2989] data_alloc+0x310/0x390 [ 586.400476][ T2989] prb_reserve+0x8d7/0xae0 [ 586.404930][ T2989] vprintk_store+0x54a/0x910 [ 586.409536][ T2989] vprintk_emit+0x1a4/0x600 [ 586.414060][ T2989] vprintk_default+0x26/0x30 [ 586.418671][ T2989] vprintk+0x1d/0x30 [ 586.422590][ T2989] _printk+0x79/0xa0 [ 586.426602][ T2989] kauditd_hold_skb+0x1b1/0x1c0 [ 586.431997][ T2989] kauditd_send_queue+0x273/0x2c0 [ 586.437043][ T2989] kauditd_thread+0x444/0x670 [ 586.441825][ T2989] kthread+0x22a/0x280 [ 586.445917][ T2989] ret_from_fork+0x150/0x360 [ 586.450537][ T2989] ret_from_fork_asm+0x1a/0x30 [ 586.455334][ T2989] [ 586.457666][ T2989] read to 0xffffffff86c697f0 of 16 bytes by task 2989 on cpu 1: [ 586.465308][ T2989] _prb_read_valid+0x1bc/0x950 [ 586.470102][ T2989] prb_read_valid+0x3c/0x60 [ 586.474672][ T2989] syslog_print+0x258/0x560 [ 586.479202][ T2989] do_syslog+0x52b/0x7f0 [ 586.483458][ T2989] __x64_sys_syslog+0x41/0x50 [ 586.488166][ T2989] x64_sys_call+0x2b9e/0x3020 [ 586.492872][ T2989] do_syscall_64+0x12c/0x370 [ 586.497684][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.503624][ T2989] [ 586.505972][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 586.512138][ T2989] CPU: 1 UID: 0 PID: 2989 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 586.522577][ T2989] Tainted: [W]=WARN [ 586.526391][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.536461][ T2989] ================================================================== [ 586.574489][ T28] audit: type=1326 audit(2000001971.321:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.608921][ T28] audit: type=1326 audit(2000001971.321:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.644454][T32222] veth0_vlan: left allmulticast mode [ 586.653934][ T28] audit: type=1326 audit(2000001971.321:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.678492][ T28] audit: type=1326 audit(2000001971.321:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.700100][T32222] geneve2: left promiscuous mode [ 586.714741][T32222] geneve3: left promiscuous mode [ 586.727463][ T28] audit: type=1326 audit(2000001971.321:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.753427][ T28] audit: type=1326 audit(2000001971.321:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.759531][T11882] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1980 with error 28 [ 586.778061][T32222] bond3: left allmulticast mode [ 586.795259][T32222] bond3: left promiscuous mode [ 586.800218][T32222] macsec2: left promiscuous mode [ 586.805583][T32222] macsec2: left allmulticast mode [ 586.812070][T32222] bond4: left promiscuous mode [ 586.818186][ T28] audit: type=1326 audit(2000001971.321:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.843242][T32222] ip6gre2: left promiscuous mode [ 586.849481][T32222] ip6gre2: left allmulticast mode [ 586.869348][ T28] audit: type=1326 audit(2000001971.321:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32220 comm="syz.2.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f404a7ac799 code=0x7ffc0000 [ 586.896636][T32222] bond5: left promiscuous mode [ 586.901690][T32222] bridge11: left promiscuous mode [ 586.907568][T32222] bond5: left allmulticast mode [ 586.912605][T32222] bridge11: left allmulticast mode