last executing test programs: 9m37.529350218s ago: executing program 32 (id=59): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000008010900000000000000000000000a0900010073797a3000000000050003000600000006000240000900002400048008000940000000070800"], 0x54}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000000) 9m11.82649347s ago: executing program 33 (id=327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 8m54.279920719s ago: executing program 34 (id=1191): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x145001) 8m38.292682928s ago: executing program 35 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 8m27.990639025s ago: executing program 5 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 8m27.886342684s ago: executing program 5 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140004"], 0xe8}}, 0x0) 8m27.884543524s ago: executing program 5 (id=2036): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x40010003, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006100)}, 0x4}], 0x2, 0x42, 0x0) 8m27.001340744s ago: executing program 5 (id=2054): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 8m26.941776009s ago: executing program 5 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 8m23.934350569s ago: executing program 5 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 8m23.915764551s ago: executing program 36 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 8m22.279042748s ago: executing program 8 (id=2185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 8m22.113278493s ago: executing program 8 (id=2187): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c9487"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 8m21.988722025s ago: executing program 8 (id=2192): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 8m21.888875863s ago: executing program 8 (id=2193): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4e042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 8m21.496154099s ago: executing program 8 (id=2197): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 8m21.232742543s ago: executing program 8 (id=2207): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 8m21.232523743s ago: executing program 37 (id=2207): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 8m16.939172359s ago: executing program 9 (id=2347): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x201}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 8m16.899812242s ago: executing program 9 (id=2349): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 8m16.582927411s ago: executing program 9 (id=2353): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000380)=ANY=[@ANYRESOCT]) 8m16.504438048s ago: executing program 9 (id=2357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 8m16.465690841s ago: executing program 9 (id=2359): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 8m16.266339009s ago: executing program 9 (id=2362): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 8m16.266186269s ago: executing program 38 (id=2362): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3m51.478487833s ago: executing program 7 (id=9663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 3m51.40075575s ago: executing program 7 (id=9665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x5, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3m51.365015443s ago: executing program 7 (id=9667): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m51.269646652s ago: executing program 7 (id=9670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) getresgid(&(0x7f0000005d00), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x272, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 3m51.227226706s ago: executing program 7 (id=9673): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) 3m51.170014851s ago: executing program 7 (id=9677): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$key(0xf, 0x3, 0x2) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3m36.149715012s ago: executing program 39 (id=9677): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) socket(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$key(0xf, 0x3, 0x2) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1m3.320622562s ago: executing program 4 (id=13708): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000200)={0xffffffffffffffff, 0x200, "00fa00"}) 1m3.194297254s ago: executing program 4 (id=13711): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 1m3.12187231s ago: executing program 4 (id=13714): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 1m3.027168369s ago: executing program 4 (id=13715): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x7002b180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.919706719s ago: executing program 4 (id=13724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004a80)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x6, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x40, 0x3, 0xbc, 0x1, 0x6, 0x1, 0x4, 0x200, 0x8d, 0x5dc98975, 0x3, 0x2, 0x2, 0xfffffffc, 0x4, 0x3, 0x9, 0x100, 0x4, 0x5, 0x7ff, 0x4, 0x4, 0x7fffffff, 0xf, 0xf, 0x0, 0x7, 0x9, 0x4, 0x140000, 0x3, 0xff, 0x8, 0x6, 0x3, 0x800, 0xfffffc00, 0x0, 0x0, 0x7, 0x60, 0x0, 0x2, 0xdd0, 0x400, 0xa34, 0x3ff, 0x1, 0x6, 0x1000, 0x60, 0x1, 0x2, 0x7fffffff, 0x1, 0x5, 0xe, 0x9, 0x0, 0x400, 0xf, 0x2, 0x7fff, 0x3, 0x3, 0x0, 0x4, 0x6, 0x2, 0x5, 0x3, 0x0, 0x14, 0xfcc, 0x10000, 0x87, 0x1, 0x7, 0x100, 0x0, 0xbf, 0x3, 0x7, 0x7, 0x4ff, 0x3, 0x4, 0x4, 0x2a4f, 0x3938b72a, 0xffff, 0x96e, 0xe1c, 0x2, 0x8001, 0x7f48, 0x7fffffff, 0x4e1c, 0xeb8, 0xe, 0xed3, 0x6, 0x9, 0x200, 0x1, 0x55, 0x1, 0xffffff01, 0x6, 0x6, 0x3, 0x23f6, 0x3ff, 0x7, 0x3, 0x6b25, 0x3ee0, 0x101, 0x0, 0x9, 0x7, 0xd, 0xced3, 0x8, 0xfffffffa, 0x8, 0xd, 0xa, 0x9, 0x7, 0x80000001, 0x2, 0x7f, 0x5, 0x1, 0x8, 0x8, 0xf, 0x5, 0x4, 0x7fffffff, 0xe, 0x9, 0x80000000, 0xe, 0x4, 0x8, 0x4, 0x9, 0x108, 0x9, 0x5, 0x5, 0xf0b, 0x5, 0x4, 0x845, 0xfffffff9, 0x9, 0x2, 0xa, 0x6, 0x3, 0x5, 0x1715a630, 0x0, 0x1, 0x7, 0xfffffffb, 0x7fff, 0x8fb6, 0x0, 0x1, 0x1, 0x3, 0xfffffaea, 0x3f8, 0x3, 0x6, 0x100, 0x7f, 0x9d2, 0x1, 0xb, 0x2, 0x9, 0x8, 0x5, 0xea, 0x7, 0x9, 0x8, 0x21, 0xffffffff, 0x3, 0x6, 0x8, 0x8ec, 0x2, 0x92, 0x80, 0x5, 0x80, 0xd9, 0x1000, 0xfffffff2, 0x2, 0x8, 0x0, 0x2, 0x4, 0x7, 0xfffff000, 0x101, 0xb6, 0xfffffffa, 0x7, 0x6, 0x6, 0x8, 0x2, 0x0, 0x100000, 0x2, 0xd57f0eea, 0x10, 0x6, 0x3, 0xfffffffe, 0x3, 0x7, 0x5, 0x7fff, 0x0, 0x3, 0x7, 0x9, 0x8001, 0xfffffff7, 0x34ae971c, 0x8, 0xfffffffa, 0x2, 0x0, 0x3, 0x1, 0x3, 0x3, 0x80, 0x1, 0x7, 0x8001, 0xe, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x20000000, 0x47a32c71, 0x7f, 0xfffffffe, {0x2, 0x0, 0x0, 0x6, 0x0, 0x3}, {0x5, 0x1, 0xfffa, 0x80, 0x3ff, 0x4}, 0x9, 0x49e}}]}]}}]}, 0x478}}, 0x0) 1m1.749108534s ago: executing program 4 (id=13730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, 0x0}, 0x80c1) 1m1.748839544s ago: executing program 40 (id=13730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, 0x0}, 0x80c1) 2.403800363s ago: executing program 0 (id=15014): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x8}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x3580) 2.204471061s ago: executing program 0 (id=15017): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 1.912182928s ago: executing program 6 (id=15023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.829382765s ago: executing program 6 (id=15024): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 1.762339121s ago: executing program 6 (id=15027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 1.761776551s ago: executing program 1 (id=15028): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a1ffffff850000000600000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.728074264s ago: executing program 1 (id=15030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.686156288s ago: executing program 1 (id=15033): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x8c4618b458db9105, @hyper}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, 0x0, 0x0) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES8], 0xffffff6a) write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8}, 0x10) 734.994943ms ago: executing program 0 (id=15049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 693.817317ms ago: executing program 1 (id=15043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1000000000000048) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) tkill(r3, 0x7) 684.097438ms ago: executing program 2 (id=15044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) 683.602558ms ago: executing program 0 (id=15045): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 572.604688ms ago: executing program 0 (id=15046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) pread64(r4, 0x0, 0xfffffea5, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40) 514.446313ms ago: executing program 2 (id=15047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000c80), 0x0, 0x12000000, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 514.206973ms ago: executing program 2 (id=15048): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmmsg(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010100, 0x0) 513.970943ms ago: executing program 0 (id=15050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 503.977594ms ago: executing program 2 (id=15051): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r2, 0x0, 0x11, 0x9) 433.560141ms ago: executing program 3 (id=15052): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) 111.661579ms ago: executing program 2 (id=15053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r3, 0x0, 0x200000000000003}, 0x18) accept4(r0, 0x0, 0x0, 0x0) 95.950261ms ago: executing program 3 (id=15054): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 45.475036ms ago: executing program 3 (id=15055): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./file0/file0\x00') 23.462907ms ago: executing program 2 (id=15056): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1a4}, 0x0, 0x0) 0s ago: executing program 3 (id=15057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xe66, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x9) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): _kmalloc_cache_noprof+0x3e5/0x4c0 [ 526.573590][ T6503] ip_set_alloc+0x24/0x30 [ 526.573654][ T6503] hash_netiface_create+0x282/0x740 [ 526.573785][ T6503] ? __pfx_hash_netiface_create+0x10/0x10 [ 526.573847][ T6503] ip_set_create+0x3cc/0x970 [ 526.573874][ T6503] ? __nla_parse+0x40/0x60 [ 526.573901][ T6503] nfnetlink_rcv_msg+0x4c6/0x590 [ 526.573927][ T6503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.574012][ T6503] netlink_rcv_skb+0x123/0x220 [ 526.574042][ T6503] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 526.574133][ T6503] nfnetlink_rcv+0x167/0x16c0 [ 526.574157][ T6503] ? is_bpf_text_address+0x141/0x160 [ 526.574179][ T6503] ? kernel_text_address+0x94/0xb0 [ 526.574206][ T6503] ? __kernel_text_address+0xd/0x40 [ 526.574225][ T6503] ? unwind_get_return_address+0x16/0x40 [ 526.574272][ T6503] ? perf_callchain_kernel+0x2e9/0x350 [ 526.574368][ T6503] ? get_perf_callchain+0x55f/0x640 [ 526.574397][ T6503] ? __bpf_get_stack+0x238/0x650 [ 526.574433][ T6503] ? should_fail_ex+0x30/0x280 [ 526.574475][ T6503] ? selinux_nlmsg_lookup+0x99/0x890 [ 526.574501][ T6503] ? __rcu_read_unlock+0x34/0x70 [ 526.574521][ T6503] ? __netlink_lookup+0x266/0x2a0 [ 526.574595][ T6503] netlink_unicast+0x5c0/0x690 [ 526.574639][ T6503] netlink_sendmsg+0x58b/0x6b0 [ 526.574715][ T6503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.574746][ T6503] __sock_sendmsg+0x145/0x180 [ 526.574767][ T6503] ____sys_sendmsg+0x31e/0x4a0 [ 526.574864][ T6503] ___sys_sendmsg+0x17b/0x1d0 [ 526.574942][ T6503] __x64_sys_sendmsg+0xd4/0x160 [ 526.574974][ T6503] x64_sys_call+0x17ba/0x3000 [ 526.574999][ T6503] do_syscall_64+0xca/0x2b0 [ 526.575085][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.575221][ T6503] RIP: 0033:0x7f317d73f749 [ 526.575239][ T6503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.575258][ T6503] RSP: 002b:00007f317c19f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.575278][ T6503] RAX: ffffffffffffffda RBX: 00007f317d995fa0 RCX: 00007f317d73f749 [ 526.575292][ T6503] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 526.575351][ T6503] RBP: 00007f317d7c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 526.575363][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.575375][ T6503] R13: 00007f317d996038 R14: 00007f317d995fa0 R15: 00007ffe0ab51d88 [ 526.575393][ T6503] [ 526.575403][ T6503] memory: usage 307200kB, limit 307200kB, failcnt 2379 [ 526.935234][ T6503] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 526.943284][ T6503] kmem: usage 239552kB, limit 9007199254740988kB, failcnt 0 [ 526.950685][ T6503] Memory cgroup stats for /syz3: [ 526.974237][ T6503] cache 69251072 [ 526.982857][ T6503] rss 4096 [ 526.986038][ T6503] shmem 0 [ 526.989667][ T6503] mapped_file 0 [ 526.993230][ T6503] dirty 0 [ 526.996180][ T6503] writeback 0 [ 526.999603][ T6503] workingset_refault_anon 1745 [ 527.004552][ T6503] workingset_refault_file 8348 [ 527.009449][ T6503] swap 364544 [ 527.012755][ T6503] swapcached 20480 [ 527.016497][ T6503] pgpgin 676530 [ 527.020633][ T6503] pgpgout 659618 [ 527.024247][ T6503] pgfault 635746 [ 527.027919][ T6503] pgmajfault 443 [ 527.032264][ T6503] inactive_anon 20480 [ 527.036475][ T6503] active_anon 0 [ 527.039982][ T6503] inactive_file 0 [ 527.043780][ T6503] active_file 0 [ 527.047883][ T6503] unevictable 69251072 [ 527.052246][ T6503] hierarchical_memory_limit 314572800 [ 527.057748][ T6503] hierarchical_memsw_limit 9223372036854771712 [ 527.064100][ T6503] total_cache 69251072 [ 527.068422][ T6503] total_rss 4096 [ 527.072254][ T6503] total_shmem 0 [ 527.075732][ T6503] total_mapped_file 0 [ 527.080430][ T6503] total_dirty 0 [ 527.083918][ T6503] total_writeback 0 [ 527.087873][ T6503] total_workingset_refault_anon 1745 [ 527.093261][ T6503] total_workingset_refault_file 8348 [ 527.098978][ T6503] total_swap 364544 [ 527.103417][ T6503] total_swapcached 20480 [ 527.108834][ T6503] total_pgpgin 676530 [ 527.113013][ T6503] total_pgpgout 659618 [ 527.117318][ T6503] total_pgfault 635746 [ 527.121471][ T6503] total_pgmajfault 443 [ 527.125651][ T6503] total_inactive_anon 20480 [ 527.130266][ T6503] total_active_anon 0 [ 527.134255][ T6503] total_inactive_file 0 [ 527.139182][ T6503] total_active_file 0 [ 527.143251][ T6503] total_unevictable 69251072 [ 527.147970][ T6503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.13155,pid=6500,uid=0 [ 527.163256][ T6503] Memory cgroup out of memory: Killed process 6500 (syz.3.13155) total-vm:96016kB, anon-rss:1264kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 527.419684][ T6573] syzkaller0: entered allmulticast mode [ 527.440106][ T6573] syzkaller0: entered promiscuous mode [ 527.461479][ T6573] syzkaller0 (unregistering): left promiscuous mode [ 527.468175][ T6573] syzkaller0 (unregistering): left allmulticast mode [ 527.680375][ T29] kauditd_printk_skb: 1029 callbacks suppressed [ 527.680392][ T29] audit: type=1326 audit(541.673:29605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.710479][ T29] audit: type=1326 audit(541.673:29606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.750154][ T29] audit: type=1326 audit(541.673:29607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.774295][ T29] audit: type=1326 audit(541.673:29608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.798320][ T29] audit: type=1326 audit(541.673:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.821574][ T29] audit: type=1326 audit(541.673:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.845306][ T29] audit: type=1326 audit(541.673:29611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.869293][ T29] audit: type=1326 audit(541.673:29612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.892543][ T29] audit: type=1326 audit(541.703:29613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 527.916577][ T29] audit: type=1326 audit(541.703:29614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.3.13199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 528.015300][ T6592] netlink: 'syz.1.13189': attribute type 3 has an invalid length. [ 528.932417][ T6612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6612 comm=syz.0.13200 [ 529.028404][ T6622] netlink: 'syz.0.13207': attribute type 1 has an invalid length. [ 529.078718][ T6622] 8021q: adding VLAN 0 to HW filter on device bond7 [ 529.097528][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13207'. [ 529.146202][ T6628] bond7 (unregistering): Released all slaves [ 529.425005][ T6646] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13215'. [ 529.458049][ T6646] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13215'. [ 529.524596][ T6602] syz.1.13191 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 529.539083][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.1.13191 Not tainted syzkaller #0 PREEMPT(voluntary) [ 529.539121][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.539135][ T6602] Call Trace: [ 529.539142][ T6602] [ 529.539153][ T6602] __dump_stack+0x1d/0x30 [ 529.539186][ T6602] dump_stack_lvl+0x95/0xd0 [ 529.539213][ T6602] dump_stack+0x15/0x1b [ 529.539234][ T6602] dump_header+0x81/0x240 [ 529.539286][ T6602] oom_kill_process+0x295/0x350 [ 529.539318][ T6602] out_of_memory+0x97b/0xb80 [ 529.539351][ T6602] try_charge_memcg+0x610/0xa10 [ 529.539382][ T6602] obj_cgroup_charge_pages+0xa6/0x150 [ 529.539419][ T6602] __memcg_kmem_charge_page+0x9f/0x170 [ 529.539456][ T6602] __alloc_frozen_pages_noprof+0x18f/0x360 [ 529.539498][ T6602] alloc_pages_mpol+0xb3/0x260 [ 529.539547][ T6602] alloc_pages_noprof+0x90/0x130 [ 529.539576][ T6602] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 529.539617][ T6602] __kvmalloc_node_noprof+0x492/0x6b0 [ 529.539676][ T6602] ? ip_set_alloc+0x24/0x30 [ 529.539767][ T6602] ? ip_set_alloc+0x24/0x30 [ 529.539802][ T6602] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 529.539828][ T6602] ip_set_alloc+0x24/0x30 [ 529.539860][ T6602] hash_netiface_create+0x282/0x740 [ 529.539977][ T6602] ? __pfx_hash_netiface_create+0x10/0x10 [ 529.540012][ T6602] ip_set_create+0x3cc/0x970 [ 529.540062][ T6602] ? __nla_parse+0x40/0x60 [ 529.540098][ T6602] nfnetlink_rcv_msg+0x4c6/0x590 [ 529.540146][ T6602] netlink_rcv_skb+0x123/0x220 [ 529.540248][ T6602] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 529.540282][ T6602] nfnetlink_rcv+0x167/0x16c0 [ 529.540314][ T6602] ? is_bpf_text_address+0x141/0x160 [ 529.540384][ T6602] ? kernel_text_address+0x94/0xb0 [ 529.540405][ T6602] ? __kernel_text_address+0xd/0x40 [ 529.540429][ T6602] ? unwind_get_return_address+0x16/0x40 [ 529.540526][ T6602] ? perf_callchain_kernel+0x2e9/0x350 [ 529.540601][ T6602] ? get_perf_callchain+0x55f/0x640 [ 529.540631][ T6602] ? __bpf_get_stack+0x238/0x650 [ 529.540661][ T6602] ? should_fail_ex+0x30/0x280 [ 529.540691][ T6602] ? selinux_nlmsg_lookup+0x99/0x890 [ 529.540741][ T6602] ? __rcu_read_unlock+0x34/0x70 [ 529.540763][ T6602] ? __netlink_lookup+0x266/0x2a0 [ 529.540802][ T6602] netlink_unicast+0x5c0/0x690 [ 529.540863][ T6602] netlink_sendmsg+0x58b/0x6b0 [ 529.540983][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.541023][ T6602] __sock_sendmsg+0x145/0x180 [ 529.541047][ T6602] ____sys_sendmsg+0x31e/0x4a0 [ 529.541090][ T6602] ___sys_sendmsg+0x17b/0x1d0 [ 529.541141][ T6602] __x64_sys_sendmsg+0xd4/0x160 [ 529.541237][ T6602] x64_sys_call+0x17ba/0x3000 [ 529.541293][ T6602] do_syscall_64+0xca/0x2b0 [ 529.541332][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.541360][ T6602] RIP: 0033:0x7faf4116f749 [ 529.541418][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.541450][ T6602] RSP: 002b:00007faf3fbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.541476][ T6602] RAX: ffffffffffffffda RBX: 00007faf413c5fa0 RCX: 00007faf4116f749 [ 529.541493][ T6602] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 529.541510][ T6602] RBP: 00007faf411f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.541527][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.541622][ T6602] R13: 00007faf413c6038 R14: 00007faf413c5fa0 R15: 00007ffe1113eb18 [ 529.541715][ T6602] [ 529.541724][ T6602] memory: usage 307200kB, limit 307200kB, failcnt 1600 [ 529.896856][ T6602] memory+swap: usage 348508kB, limit 9007199254740988kB, failcnt 0 [ 529.905596][ T6602] kmem: usage 279240kB, limit 9007199254740988kB, failcnt 0 [ 529.912951][ T6602] Memory cgroup stats for /syz1: [ 529.913644][ T6602] cache 27222016 [ 529.922425][ T6602] rss 1257472 [ 529.925860][ T6602] shmem 27222016 [ 529.930126][ T6602] mapped_file 0 [ 529.933616][ T6602] dirty 0 [ 529.936565][ T6602] writeback 0 [ 529.939963][ T6602] workingset_refault_anon 793 [ 529.944647][ T6602] workingset_refault_file 2094 [ 529.949447][ T6602] swap 42299392 [ 529.952915][ T6602] swapcached 151552 [ 529.956739][ T6602] pgpgin 741110 [ 529.961139][ T6602] pgpgout 734120 [ 529.965136][ T6602] pgfault 661529 [ 529.968709][ T6602] pgmajfault 131 [ 529.972260][ T6602] inactive_anon 2412544 [ 529.976412][ T6602] active_anon 26218496 [ 529.980783][ T6602] inactive_file 0 [ 529.984434][ T6602] active_file 0 [ 529.988606][ T6602] unevictable 0 [ 529.992120][ T6602] hierarchical_memory_limit 314572800 [ 529.997688][ T6602] hierarchical_memsw_limit 9223372036854771712 [ 530.003968][ T6602] total_cache 27222016 [ 530.008084][ T6602] total_rss 1257472 [ 530.012111][ T6602] total_shmem 27222016 [ 530.016254][ T6602] total_mapped_file 0 [ 530.021055][ T6602] total_dirty 0 [ 530.024549][ T6602] total_writeback 0 [ 530.028388][ T6602] total_workingset_refault_anon 793 [ 530.033681][ T6602] total_workingset_refault_file 2094 [ 530.039189][ T6602] total_swap 42299392 [ 530.043265][ T6602] total_swapcached 151552 [ 530.048161][ T6602] total_pgpgin 741110 [ 530.052239][ T6602] total_pgpgout 734120 [ 530.056369][ T6602] total_pgfault 661529 [ 530.060486][ T6602] total_pgmajfault 131 [ 530.064597][ T6602] total_inactive_anon 2412544 [ 530.069465][ T6602] total_active_anon 26218496 [ 530.074109][ T6602] total_inactive_file 0 [ 530.078924][ T6602] total_active_file 0 [ 530.082937][ T6602] total_unevictable 0 [ 530.086992][ T6602] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.13191,pid=6599,uid=0 [ 530.102120][ T6602] Memory cgroup out of memory: Killed process 6599 (syz.1.13191) total-vm:96016kB, anon-rss:1140kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 530.160237][ T6655] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.267290][ T6655] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.365386][ T6673] loop4: detected capacity change from 0 to 128 [ 530.372099][ T6655] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.544807][ T6673] bio_check_eod: 64 callbacks suppressed [ 530.544826][ T6673] syz.4.13225: attempt to access beyond end of device [ 530.544826][ T6673] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 530.571099][ T6655] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.636233][ T6682] bond0: (slave ip6gretap1): Releasing active interface [ 530.663226][ T6682] bond7: (slave veth17): Releasing active interface [ 530.688507][ T6682] team0: Mode changed to "broadcast" [ 530.730945][ T4093] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.756765][ T4093] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.773818][ T4093] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.797093][ T4093] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.872168][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13235'. [ 531.250662][ T6710] loop4: detected capacity change from 0 to 1764 [ 531.772331][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13251'. [ 531.845013][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13251'. [ 532.117897][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13259'. [ 532.167772][ T6739] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 532.368089][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13265'. [ 532.586471][ T6783] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13269'. [ 532.607578][ T6783] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13269'. [ 532.687585][ T29] kauditd_printk_skb: 918 callbacks suppressed [ 532.687603][ T29] audit: type=1326 audit(546.683:30533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf4110b829 code=0x7ffc0000 [ 532.718387][ T29] audit: type=1326 audit(546.713:30534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf411665e7 code=0x7ffc0000 [ 532.741357][ T29] audit: type=1326 audit(546.713:30535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf4110b829 code=0x7ffc0000 [ 532.764473][ T29] audit: type=1326 audit(546.713:30536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 532.832786][ T29] audit: type=1326 audit(546.763:30537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf411665e7 code=0x7ffc0000 [ 532.856403][ T29] audit: type=1326 audit(546.763:30538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf4110b829 code=0x7ffc0000 [ 532.880350][ T29] audit: type=1326 audit(546.763:30539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 532.903617][ T29] audit: type=1326 audit(546.783:30540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.13255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7fc00000 [ 532.909639][ T6791] netlink: 'syz.4.13274': attribute type 39 has an invalid length. [ 532.928319][ T29] audit: type=1326 audit(546.783:30541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf411665e7 code=0x7ffc0000 [ 532.959719][ T29] audit: type=1326 audit(546.783:30542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6674 comm="syz.1.13226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf4110b829 code=0x7ffc0000 [ 533.179084][ T6797] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.13277'. [ 533.198851][ T6797] netlink: zone id is out of range [ 533.204024][ T6797] netlink: zone id is out of range [ 533.229360][ T6797] netlink: set zone limit has 8 unknown bytes [ 533.322131][ T6803] lo speed is unknown, defaulting to 1000 [ 533.330908][ T6799] program syz.4.13279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.343482][ T6803] lo speed is unknown, defaulting to 1000 [ 533.349971][ T6799] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 533.606720][ T6821] netlink: 'syz.1.13286': attribute type 1 has an invalid length. [ 533.636573][ T6821] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 534.578314][ T6844] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.629604][ T6844] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.694827][ T6844] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.779843][ T6844] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.010252][ T4103] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.032203][ T4103] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.067277][ T4103] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.087288][ T4103] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.728739][ T6873] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 535.963596][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13314'. [ 536.267871][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13318'. [ 536.629931][ T6932] lo speed is unknown, defaulting to 1000 [ 536.638128][ T6932] lo speed is unknown, defaulting to 1000 [ 536.925817][ T6944] netlink: 'syz.4.13334': attribute type 29 has an invalid length. [ 536.985492][ T6947] netlink: 'syz.4.13334': attribute type 29 has an invalid length. [ 537.016525][ T6944] netlink: 500 bytes leftover after parsing attributes in process `syz.4.13334'. [ 537.126067][ T8252] syzkaller0: tun_net_xmit 76 [ 537.131257][ T8252] syzkaller0: tun_net_xmit 48 [ 537.147413][ T36] syzkaller0: tun_net_xmit 76 [ 537.161386][ T6954] syzkaller0: create flow: hash 4222501184 index 1 [ 537.190531][ T6953] syzkaller0: delete flow: hash 4222501184 index 1 [ 537.259031][ T6959] rdma_op ffff8881a02f6980 conn xmit_rdma 0000000000000000 [ 537.407079][ T6971] netlink: 'syz.2.13343': attribute type 39 has an invalid length. [ 538.221506][ T7010] ref_ctr_offset mismatch. inode: 0x2dbb offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x72 [ 538.268944][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 538.268961][ T29] audit: type=1326 audit(552.263:31026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.305057][ T29] audit: type=1326 audit(552.293:31027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.329046][ T29] audit: type=1326 audit(552.293:31028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.352107][ T29] audit: type=1326 audit(552.293:31029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.375862][ T29] audit: type=1326 audit(552.293:31030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.399758][ T29] audit: type=1326 audit(552.293:31031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.423013][ T29] audit: type=1326 audit(552.293:31032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.446937][ T29] audit: type=1326 audit(552.293:31033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.470824][ T29] audit: type=1326 audit(552.293:31034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 538.494270][ T29] audit: type=1326 audit(552.293:31035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7011 comm="syz.1.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 539.062154][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13369'. [ 539.179894][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13373'. [ 539.192449][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13373'. [ 539.258670][ T7045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13376'. [ 539.306039][ T7049] ipip0: entered promiscuous mode [ 539.450514][ T7053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13379'. [ 539.986257][ T7082] lo speed is unknown, defaulting to 1000 [ 540.016492][ T7082] lo speed is unknown, defaulting to 1000 [ 540.429812][ T7099] ipip0: entered promiscuous mode [ 540.529823][ T7104] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13399'. [ 540.659995][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13400'. [ 540.727348][ T7107] gretap0: left allmulticast mode [ 540.732478][ T7107] gretap0: left promiscuous mode [ 540.738241][ T7107] bridge0: port 3(gretap0) entered disabled state [ 540.758276][ T7107] bridge_slave_1: left allmulticast mode [ 540.764112][ T7107] bridge_slave_1: left promiscuous mode [ 540.769914][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.794773][ T7107] bridge_slave_0: left allmulticast mode [ 540.800671][ T7107] bridge_slave_0: left promiscuous mode [ 540.806557][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.985131][ T7129] macsec0: entered promiscuous mode [ 540.990656][ T7129] bridge0: entered promiscuous mode [ 541.024734][ T7129] bridge0: port 1(macsec0) entered blocking state [ 541.031382][ T7129] bridge0: port 1(macsec0) entered disabled state [ 541.046135][ T7129] macsec0: entered allmulticast mode [ 541.051697][ T7129] bridge0: entered allmulticast mode [ 541.306296][ T7129] macsec0: left allmulticast mode [ 541.311449][ T7129] bridge0: left allmulticast mode [ 541.328483][ T7129] bridge0: left promiscuous mode [ 541.341183][ T7140] netlink: 'syz.1.13412': attribute type 1 has an invalid length. [ 541.385916][ T7140] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.413195][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13412'. [ 541.425124][ T7140] bond8 (unregistering): Released all slaves [ 542.237945][ T7181] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.279136][ T7181] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.328793][ T7181] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.398392][ T7181] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.469146][ T1716] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.477825][ T1716] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.527897][ T1716] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.536457][ T1716] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.337507][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 543.337531][ T29] audit: type=1326 audit(557.333:31076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.377888][ T29] audit: type=1326 audit(557.363:31077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.401694][ T29] audit: type=1326 audit(557.363:31078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.424905][ T29] audit: type=1326 audit(557.363:31079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.448683][ T29] audit: type=1326 audit(557.363:31080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.472034][ T29] audit: type=1326 audit(557.363:31081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.495937][ T29] audit: type=1326 audit(557.363:31082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.519930][ T29] audit: type=1326 audit(557.363:31083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.543471][ T29] audit: type=1326 audit(557.363:31084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.567311][ T29] audit: type=1326 audit(557.363:31085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 543.612988][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7262 comm=syz.2.13462 [ 543.796308][ T7268] netlink: 'syz.2.13465': attribute type 1 has an invalid length. [ 543.812491][ T7268] 8021q: adding VLAN 0 to HW filter on device bond6 [ 543.839280][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13465'. [ 543.862016][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13467'. [ 543.873156][ T7268] bond6 (unregistering): Released all slaves [ 543.952989][ T7287] bridge0: entered promiscuous mode [ 543.959119][ T7287] bridge0: left promiscuous mode [ 544.293346][ T7324] netlink: 240 bytes leftover after parsing attributes in process `syz.1.13486'. [ 544.892910][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13512'. [ 544.912896][ T7385] netlink: 'syz.0.13513': attribute type 1 has an invalid length. [ 544.921487][ T7385] netlink: 'syz.0.13513': attribute type 4 has an invalid length. [ 544.929856][ T7385] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13513'. [ 544.955940][ T7385] netlink: 'syz.0.13513': attribute type 1 has an invalid length. [ 544.962585][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13514'. [ 544.963855][ T7385] netlink: 'syz.0.13513': attribute type 4 has an invalid length. [ 544.981411][ T7385] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13513'. [ 545.274692][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13520'. [ 545.291954][ T7406] team1: entered promiscuous mode [ 545.297067][ T7406] team1: entered allmulticast mode [ 545.305726][ T7406] 8021q: adding VLAN 0 to HW filter on device team1 [ 545.783267][ T7423] loop4: detected capacity change from 0 to 1024 [ 545.790626][ T7423] EXT4-fs: Ignoring removed bh option [ 545.796277][ T7423] EXT4-fs: inline encryption not supported [ 545.802686][ T7423] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 545.813819][ T7423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 545.824640][ T7423] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.13527: lblock 2 mapped to illegal pblock 2 (length 1) [ 545.838905][ T7423] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.13527: lblock 0 mapped to illegal pblock 48 (length 1) [ 545.853959][ T7423] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.13527: Failed to acquire dquot type 0 [ 545.865702][ T7423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 545.875741][ T7423] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.13527: mark_inode_dirty error [ 545.888199][ T7423] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 545.899332][ T7423] EXT4-fs (loop4): 1 orphan inode deleted [ 545.905656][ T7423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.918890][ T8236] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 545.934609][ T8236] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 545.935528][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13528'. [ 545.956513][ T7423] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.968260][ T7423] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.13527: Invalid inode table block 1 in block_group 0 [ 545.982710][ T7423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 545.993824][ T7423] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.13527: mark_inode_dirty error [ 546.441468][ T7455] pim6reg: entered allmulticast mode [ 546.462683][ T7455] pim6reg: left allmulticast mode [ 546.757915][ T7466] macsec0: entered promiscuous mode [ 546.763285][ T7466] bridge0: entered promiscuous mode [ 546.788192][ T7466] bridge0: port 1(macsec0) entered blocking state [ 546.794727][ T7466] bridge0: port 1(macsec0) entered disabled state [ 546.818611][ T7466] macsec0: entered allmulticast mode [ 546.824577][ T7466] bridge0: entered allmulticast mode [ 546.844824][ T7466] macsec0: left allmulticast mode [ 546.850336][ T7466] bridge0: left allmulticast mode [ 546.856256][ T7466] bridge0: left promiscuous mode [ 547.920142][ T7517] __nla_validate_parse: 3 callbacks suppressed [ 547.920162][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13566'. [ 547.935713][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13566'. [ 549.036705][ T7536] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.13575'. [ 549.046484][ T7536] netlink: zone id is out of range [ 549.052233][ T7536] netlink: zone id is out of range [ 549.066726][ T7536] netlink: zone id is out of range [ 549.078099][ T7536] netlink: zone id is out of range [ 549.083510][ T7536] netlink: zone id is out of range [ 549.096416][ T7536] netlink: del zone limit has 8 unknown bytes [ 549.430713][ T7562] lo speed is unknown, defaulting to 1000 [ 549.467044][ T7562] lo speed is unknown, defaulting to 1000 [ 550.487558][ T7615] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13605'. [ 550.576008][ T7622] netlink: 124 bytes leftover after parsing attributes in process `syz.0.13609'. [ 550.585366][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13609'. [ 550.749295][ T7643] Invalid argument reading file caps for ./file0 [ 551.011721][ T7671] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.044621][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13631'. [ 551.124347][ T7674] team0: entered promiscuous mode [ 551.129546][ T7674] team0: entered allmulticast mode [ 551.144923][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.242715][ T7671] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.346069][ T7686] lo speed is unknown, defaulting to 1000 [ 551.361051][ T7686] lo speed is unknown, defaulting to 1000 [ 551.554360][ T7671] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.790828][ T7671] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.890454][ T8267] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.915764][ T8267] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.932544][ T7702] loop4: detected capacity change from 0 to 512 [ 551.947174][ T8267] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.967025][ T8267] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.020097][ T7702] __quota_error: 642 callbacks suppressed [ 552.020118][ T7702] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 552.036121][ T7702] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 552.051505][ T7702] EXT4-fs (loop4): mount failed [ 553.057447][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13666'. [ 553.066566][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13666'. [ 553.311877][ T7780] lo speed is unknown, defaulting to 1000 [ 553.329630][ T7780] lo speed is unknown, defaulting to 1000 [ 553.732937][ T29] audit: type=1326 audit(567.723:31725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.756210][ T29] audit: type=1326 audit(567.723:31726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.791115][ T29] audit: type=1326 audit(567.773:31727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.814418][ T29] audit: type=1326 audit(567.773:31728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.838202][ T29] audit: type=1326 audit(567.773:31729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.862066][ T29] audit: type=1326 audit(567.773:31730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.885332][ T29] audit: type=1326 audit(567.773:31731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.908976][ T29] audit: type=1326 audit(567.773:31732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 553.932383][ T29] audit: type=1326 audit(567.773:31733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.2.13675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 554.428834][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13689'. [ 554.450556][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13689'. [ 554.711479][ T7840] lo speed is unknown, defaulting to 1000 [ 554.734310][ T7840] lo speed is unknown, defaulting to 1000 [ 554.969107][ T7848] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 555.157324][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13702'. [ 555.187168][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13702'. [ 555.289604][ T7865] x_tables: duplicate underflow at hook 3 [ 555.303161][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13704'. [ 555.403755][ T7874] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 555.671124][ T7887] lo speed is unknown, defaulting to 1000 [ 555.677546][ T7887] lo speed is unknown, defaulting to 1000 [ 556.433159][ T7900] wireguard0: entered promiscuous mode [ 556.438780][ T7900] wireguard0: entered allmulticast mode [ 556.536625][ T7897] rdma_rxe: rxe_newlink: failed to add vcan0 [ 556.807474][ T1252] syz_tun (unregistering): left allmulticast mode [ 557.053148][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 557.053168][ T29] audit: type=1326 audit(571.043:31796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd90d73f7d7 code=0x7ffc0000 [ 557.131160][ T29] audit: type=1326 audit(571.093:31797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd90d73df90 code=0x7ffc0000 [ 557.154321][ T29] audit: type=1326 audit(571.093:31798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd90d73e3aa code=0x7ffc0000 [ 557.177930][ T29] audit: type=1326 audit(571.103:31799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 557.201373][ T29] audit: type=1326 audit(571.113:31800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 557.224635][ T29] audit: type=1326 audit(571.113:31801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 557.252084][ T7938] lo speed is unknown, defaulting to 1000 [ 557.267124][ T7938] lo speed is unknown, defaulting to 1000 [ 557.273279][ T7946] lo speed is unknown, defaulting to 1000 [ 557.280261][ T29] audit: type=1326 audit(571.203:31802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd90d73df90 code=0x7ffc0000 [ 557.303442][ T29] audit: type=1326 audit(571.203:31803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd90d73df90 code=0x7ffc0000 [ 557.326609][ T29] audit: type=1326 audit(571.203:31804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 557.345547][ T7946] lo speed is unknown, defaulting to 1000 [ 557.349875][ T29] audit: type=1326 audit(571.203:31805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7917 comm="syz.0.13729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 557.379031][ T7923] lo speed is unknown, defaulting to 1000 [ 557.541134][ T7923] lo speed is unknown, defaulting to 1000 [ 557.876377][ T7923] chnl_net:caif_netlink_parms(): no params data found [ 557.967446][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.974629][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.985439][ T7923] bridge_slave_0: entered allmulticast mode [ 557.992197][ T7923] bridge_slave_0: entered promiscuous mode [ 558.000252][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.007468][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.014698][ T7923] bridge_slave_1: entered allmulticast mode [ 558.021777][ T7923] bridge_slave_1: entered promiscuous mode [ 558.045510][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.056535][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.138697][ T7923] team0: Port device team_slave_0 added [ 558.158753][ T7923] team0: Port device team_slave_1 added [ 558.236190][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.243984][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.270783][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.316636][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.324474][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.350503][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.384756][ T7923] hsr_slave_0: entered promiscuous mode [ 558.396820][ T7923] hsr_slave_1: entered promiscuous mode [ 558.404725][ T7923] debugfs: 'hsr0' already exists in 'hsr' [ 558.410905][ T7923] Cannot create hsr debugfs directory [ 558.465058][ T8005] netlink: 'syz.0.13757': attribute type 1 has an invalid length. [ 558.501500][ T8005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.521323][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13757'. [ 558.555032][ T8010] bond7: entered allmulticast mode [ 558.793497][ T7923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 558.814607][ T7923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 558.829374][ T7923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 558.855024][ T7923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 559.140317][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.151465][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13766'. [ 559.174671][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.180118][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13766'. [ 559.198591][ T8236] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.205846][ T8236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.233717][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.240947][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.308979][ T8055] sch_fq: defrate 4294967291 ignored. [ 559.365846][ T8059] lo speed is unknown, defaulting to 1000 [ 559.388154][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.396291][ T8059] lo speed is unknown, defaulting to 1000 [ 559.644934][ T7923] veth0_vlan: entered promiscuous mode [ 559.655160][ T7923] veth1_vlan: entered promiscuous mode [ 559.675414][ T7923] veth0_macvtap: entered promiscuous mode [ 559.689428][ T7923] veth1_macvtap: entered promiscuous mode [ 559.696240][ T8086] netlink: 'syz.3.13776': attribute type 13 has an invalid length. [ 559.710990][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.753085][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.773554][ T8267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.789456][ T8267] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.801742][ T8267] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.819019][ T8252] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.094732][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13787'. [ 560.106083][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13787'. [ 560.271384][ T8127] lo speed is unknown, defaulting to 1000 [ 560.281893][ T8127] lo speed is unknown, defaulting to 1000 [ 560.532132][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13795'. [ 560.975999][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13802'. [ 561.043418][ T8157] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 561.695410][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13822'. [ 561.735754][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13822'. [ 562.180413][ T8228] netlink: 'syz.3.13832': attribute type 1 has an invalid length. [ 562.195733][ T8228] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.209780][ T8231] netlink: 'syz.0.13830': attribute type 1 has an invalid length. [ 562.213049][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13832'. [ 562.253559][ T8231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.283802][ T8228] bond11: entered allmulticast mode [ 562.325337][ T8231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.368023][ T8231] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 562.404864][ T8265] netlink: 'syz.3.13835': attribute type 7 has an invalid length. [ 562.418391][ T8231] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 562.691438][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 562.691457][ T29] audit: type=1326 audit(576.683:32111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.708096][ T8303] bridge: RTM_NEWNEIGH with invalid ether address [ 562.782153][ T29] audit: type=1326 audit(576.713:32112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.804850][ T29] audit: type=1326 audit(576.713:32113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.827689][ T29] audit: type=1326 audit(576.713:32114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.850673][ T29] audit: type=1326 audit(576.713:32115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.873455][ T29] audit: type=1326 audit(576.713:32116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.896637][ T29] audit: type=1326 audit(576.713:32117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.919632][ T29] audit: type=1326 audit(576.713:32118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.942217][ T29] audit: type=1326 audit(576.713:32119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 562.964696][ T29] audit: type=1326 audit(576.713:32120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 563.476499][ T8342] loop6: detected capacity change from 0 to 2048 [ 563.693839][ T8342] Alternate GPT is invalid, using primary GPT. [ 563.700762][ T8342] loop6: p2 p3 p7 [ 563.783448][ T8350] __nla_validate_parse: 6 callbacks suppressed [ 563.783466][ T8350] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13860'. [ 563.891443][ T8361] tipc: Enabling of bearer rejected, already enabled [ 563.929140][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13863'. [ 563.938358][ T8361] tipc: Disabling bearer [ 564.207883][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.243785][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.293689][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.332509][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.344459][ T8393] lo speed is unknown, defaulting to 1000 [ 564.354890][ T8393] lo speed is unknown, defaulting to 1000 [ 564.375203][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.387118][ T8384] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13874'. [ 564.980408][ T8422] netlink: 664 bytes leftover after parsing attributes in process `syz.1.13886'. [ 565.021910][ T8427] netlink: 'syz.2.13889': attribute type 4 has an invalid length. [ 565.047775][ T8427] netlink: 'syz.2.13889': attribute type 4 has an invalid length. [ 565.951156][ T8292] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.011295][ T8292] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.087054][ T8292] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.147034][ T8292] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.170262][ T8457] lo speed is unknown, defaulting to 1000 [ 566.176755][ T8457] lo speed is unknown, defaulting to 1000 [ 566.183515][ T8478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13906'. [ 566.305561][ T8292] bridge_slave_1: left allmulticast mode [ 566.311861][ T8292] bridge_slave_1: left promiscuous mode [ 566.317772][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.349569][ T8292] bridge_slave_0: left allmulticast mode [ 566.355409][ T8292] bridge_slave_0: left promiscuous mode [ 566.361554][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.520628][ T8292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.538940][ T8292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.579282][ T8292] bond0 (unregistering): Released all slaves [ 566.772288][ T8497] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.803715][ T8292] hsr_slave_0: left promiscuous mode [ 566.814656][ T8292] hsr_slave_1: left promiscuous mode [ 566.821028][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.828671][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.836519][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.844035][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.857000][ T8292] veth1_macvtap: left promiscuous mode [ 566.887581][ T8292] veth0_macvtap: left promiscuous mode [ 566.893215][ T8292] veth1_vlan: left promiscuous mode [ 566.898862][ T8292] veth0_vlan: left promiscuous mode [ 566.999458][ T8292] team0 (unregistering): Port device team_slave_1 removed [ 567.013675][ T8292] team0 (unregistering): Port device team_slave_0 removed [ 567.058201][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 567.072555][ T8497] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.157348][ T8497] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.185812][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.193087][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.200905][ T8457] bridge_slave_0: entered allmulticast mode [ 567.208506][ T8457] bridge_slave_0: entered promiscuous mode [ 567.215866][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.223186][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.230981][ T8457] bridge_slave_1: entered allmulticast mode [ 567.235297][ T8522] ip6t_srh: unknown srh match flags 4000 [ 567.238228][ T8457] bridge_slave_1: entered promiscuous mode [ 567.264315][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.276007][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.298184][ T8497] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.311087][ T8457] team0: Port device team_slave_0 added [ 567.323401][ T8457] team0: Port device team_slave_1 added [ 567.359719][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.366838][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.393810][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.407328][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.414339][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.442091][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.508605][ T8236] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.524082][ T8236] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.577058][ T8236] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.596099][ T8457] hsr_slave_0: entered promiscuous mode [ 567.603966][ T8457] hsr_slave_1: entered promiscuous mode [ 567.622916][ T8457] debugfs: 'hsr0' already exists in 'hsr' [ 567.628780][ T8457] Cannot create hsr debugfs directory [ 567.634810][ T8236] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.786805][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 567.786847][ T29] audit: type=1400 audit(581.773:32381): avc: denied { create } for pid=8542 comm="syz.2.13930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 567.814934][ T29] audit: type=1400 audit(581.803:32382): avc: denied { write } for pid=8542 comm="syz.2.13930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 567.969873][ T8550] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.016205][ T29] audit: type=1400 audit(581.993:32383): avc: denied { write } for pid=8553 comm="syz.3.13935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 568.036341][ T29] audit: type=1400 audit(581.993:32384): avc: denied { nlmsg_write } for pid=8553 comm="syz.3.13935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 568.087269][ T29] audit: type=1326 audit(582.073:32385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.089344][ T8457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.110568][ T29] audit: type=1326 audit(582.073:32386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.110602][ T29] audit: type=1326 audit(582.073:32387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.110692][ T29] audit: type=1326 audit(582.073:32388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.110782][ T29] audit: type=1326 audit(582.073:32389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.110808][ T29] audit: type=1326 audit(582.073:32390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8557 comm="syz.3.13937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 568.244147][ T8550] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.255485][ T8457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.266283][ T8457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.276467][ T8457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.321800][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.332344][ T8550] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.349738][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.360172][ T1716] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.367366][ T1716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.381103][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.388205][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.430110][ T8550] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.466075][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.613615][ T8457] veth0_vlan: entered promiscuous mode [ 568.624441][ T8457] veth1_vlan: entered promiscuous mode [ 568.644205][ T8457] veth0_macvtap: entered promiscuous mode [ 568.656473][ T8457] veth1_macvtap: entered promiscuous mode [ 568.670533][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.682949][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.695412][ T1716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.704743][ T1716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.715307][ T1716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.726637][ T1716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.769758][ T4103] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.792870][ T4103] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.817564][ T4103] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.837514][ T4103] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.883867][ T8625] IPVS: Error connecting to the multicast addr [ 569.214051][ T8653] lo speed is unknown, defaulting to 1000 [ 569.220607][ T8653] lo speed is unknown, defaulting to 1000 [ 569.257916][ T8655] __nla_validate_parse: 8 callbacks suppressed [ 569.258006][ T8655] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13970'. [ 570.612012][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13979'. [ 570.732670][ T8701] netlink: 'gtp': attribute type 13 has an invalid length. [ 570.736763][ T8702] lo speed is unknown, defaulting to 1000 [ 570.749931][ T8702] lo speed is unknown, defaulting to 1000 [ 570.878061][ T8714] lo speed is unknown, defaulting to 1000 [ 570.884398][ T8714] lo speed is unknown, defaulting to 1000 [ 571.026836][ T8727] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13999'. [ 571.073123][ T8730] 9p: Bad value for 'rfdno' [ 571.818647][ T8761] netlink: 'syz.6.14012': attribute type 1 has an invalid length. [ 571.898282][ T8765] sctp: [Deprecated]: syz.1.14015 (pid 8765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.898282][ T8765] Use struct sctp_sack_info instead [ 572.240121][ T8790] netlink: 'syz.3.14025': attribute type 4 has an invalid length. [ 572.250019][ T8790] netlink: 'syz.3.14025': attribute type 4 has an invalid length. [ 572.263687][ T3411] lo speed is unknown, defaulting to 1000 [ 572.269599][ T3411] syz1: Port: 1 Link ACTIVE [ 572.275213][ T3411] lo speed is unknown, defaulting to 1000 [ 572.402260][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14032'. [ 572.543653][ T8816] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14035'. [ 572.628693][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14036'. [ 572.729268][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14044'. [ 572.740304][ T8835] netlink: 48 bytes leftover after parsing attributes in process `syz.6.14044'. [ 572.856838][ T29] kauditd_printk_skb: 1133 callbacks suppressed [ 572.856858][ T29] audit: type=1400 audit(586.843:33524): avc: denied { associate } for pid=8838 comm="syz.2.14045" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 572.961215][ T29] audit: type=1326 audit(586.953:33525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 572.984922][ T29] audit: type=1326 audit(586.953:33526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.011016][ T29] audit: type=1326 audit(587.003:33527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.034503][ T29] audit: type=1326 audit(587.003:33528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.058286][ T29] audit: type=1326 audit(587.003:33529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.081431][ T29] audit: type=1326 audit(587.003:33530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.105241][ T29] audit: type=1326 audit(587.003:33531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.129243][ T29] audit: type=1326 audit(587.003:33532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.152419][ T29] audit: type=1326 audit(587.003:33533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8845 comm="syz.6.14049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 573.851549][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14063'. [ 573.936013][ T8890] IPVS: Error connecting to the multicast addr [ 574.156960][ T8911] netlink: 'syz.1.14076': attribute type 4 has an invalid length. [ 574.205128][ T8911] netlink: 'syz.1.14076': attribute type 4 has an invalid length. [ 574.333100][ T8922] lo: entered promiscuous mode [ 574.346453][ T8922] lo: entered allmulticast mode [ 574.362028][ T8922] lo: left allmulticast mode [ 574.366938][ T8922] lo: left promiscuous mode [ 574.667623][ T8933] lo speed is unknown, defaulting to 1000 [ 574.693302][ T8933] lo speed is unknown, defaulting to 1000 [ 575.098910][ T8952] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.14091'. [ 575.134037][ T8952] netlink: zone id is out of range [ 575.139262][ T8952] netlink: zone id is out of range [ 575.171420][ T8952] netlink: zone id is out of range [ 575.222274][ T8952] netlink: set zone limit has 8 unknown bytes [ 576.370907][ T9017] loop6: detected capacity change from 0 to 512 [ 576.378451][ T9017] EXT4-fs: dax option not supported [ 576.476104][ T9025] x_tables: duplicate underflow at hook 3 [ 576.818662][ T9035] loop6: detected capacity change from 0 to 2048 [ 576.850228][ T9035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.865509][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.872973][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.881730][ T9035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.889347][ T9035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.027542][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.040834][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14132'. [ 577.053031][ T9055] netem: change failed [ 577.235724][ T9088] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 577.324234][ T9095] loop6: detected capacity change from 0 to 512 [ 577.331578][ T9095] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 577.342497][ T9095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 577.357627][ T9095] EXT4-fs (loop6): orphan cleanup on readonly fs [ 577.364129][ T9095] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.14149: bad orphan inode 267 [ 577.384992][ T9095] EXT4-fs (loop6): Remounting filesystem read-only [ 577.395317][ T9095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 577.444196][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 577.726232][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14156'. [ 577.745040][ T9119] netlink: 'gtp': attribute type 13 has an invalid length. [ 577.880083][ T8289] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.921361][ T8289] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.939769][ T8289] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.958508][ T8289] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.054122][ T29] kauditd_printk_skb: 2036 callbacks suppressed [ 578.054175][ T29] audit: type=1400 audit(592.043:35570): avc: denied { write } for pid=9136 comm="syz.1.14167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 578.217795][ T29] audit: type=1400 audit(592.213:35571): avc: denied { mount } for pid=9143 comm="syz.2.14169" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 578.759125][ T29] audit: type=1326 audit(592.743:35572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.14171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 578.837392][ T29] audit: type=1326 audit(592.793:35573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.14171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 578.872314][ T29] audit: type=1326 audit(592.793:35574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.14171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 578.896157][ T29] audit: type=1326 audit(592.793:35575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.2.14171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 579.024068][ T29] audit: type=1326 audit(592.953:35576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.3.14173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 579.048116][ T29] audit: type=1326 audit(592.963:35577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.3.14173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 579.071470][ T29] audit: type=1326 audit(592.963:35578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.3.14173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 579.095787][ T29] audit: type=1326 audit(592.963:35579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9152 comm="syz.3.14173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 579.135894][ T9158] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.14172'. [ 579.180533][ T9158] netlink: zone id is out of range [ 579.186716][ T9158] netlink: zone id is out of range [ 579.204149][ T9158] netlink: zone id is out of range [ 579.250909][ T9170] lo speed is unknown, defaulting to 1000 [ 579.253770][ T9158] netlink: zone id is out of range [ 579.264732][ T9170] lo speed is unknown, defaulting to 1000 [ 579.317686][ T9158] netlink: zone id is out of range [ 580.039995][ T9205] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.078699][ T9207] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 580.124941][ T9205] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.179788][ T9205] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.199876][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14198'. [ 580.260979][ T9205] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.317787][ T8250] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.344961][ T8250] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.354006][ T8250] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.367838][ T8250] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.534340][ T9245] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 580.707154][ T9262] lo speed is unknown, defaulting to 1000 [ 580.727442][ T9262] lo speed is unknown, defaulting to 1000 [ 581.520494][ T9290] netlink: 'syz.6.14228': attribute type 3 has an invalid length. [ 581.528563][ T9290] netlink: 'syz.6.14228': attribute type 3 has an invalid length. [ 581.542006][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14228'. [ 581.628636][ T9294] loop6: detected capacity change from 0 to 1024 [ 581.636148][ T9294] EXT4-fs: Ignoring removed orlov option [ 581.650593][ T9294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.895627][ T9306] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1 [ 581.904516][ T9306] ref_ctr increment failed for inode: 0x31f3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810b2bb600 [ 582.081978][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.089425][ T9324] netlink: 'syz.3.14241': attribute type 1 has an invalid length. [ 582.148862][ T9324] bond12: (slave veth27): Enslaving as an active interface with a down link [ 582.158811][ T9331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14244'. [ 582.166337][ T9324] bond12: entered promiscuous mode [ 582.173102][ T9324] bond12: entered allmulticast mode [ 582.179487][ T9324] 8021q: adding VLAN 0 to HW filter on device bond12 [ 582.203365][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14244'. [ 582.361822][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14247'. [ 582.495151][ T9333] bridge0: port 1(macsec0) entered blocking state [ 582.502392][ T9333] bridge0: port 1(macsec0) entered disabled state [ 582.511781][ T9333] macsec0: entered allmulticast mode [ 582.520408][ T9333] bridge0: entered allmulticast mode [ 582.540038][ T9333] macsec0: left allmulticast mode [ 582.545985][ T9333] bridge0: left allmulticast mode [ 582.574963][ T9348] netlink: 'syz.6.14250': attribute type 1 has an invalid length. [ 582.631558][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14250'. [ 582.631574][ T9348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.654559][ T9353] bond1 (unregistering): Released all slaves [ 582.820297][ T9373] lo speed is unknown, defaulting to 1000 [ 582.826896][ T9373] lo speed is unknown, defaulting to 1000 [ 583.058441][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 583.058498][ T29] audit: type=1326 audit(597.053:36220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.089810][ T29] audit: type=1326 audit(597.083:36221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.118272][ T29] audit: type=1326 audit(597.113:36222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.162404][ T29] audit: type=1326 audit(597.143:36223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.192181][ T29] audit: type=1326 audit(597.153:36224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.216392][ T29] audit: type=1326 audit(597.163:36225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.240243][ T29] audit: type=1326 audit(597.183:36226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.6.14257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fed3acff749 code=0x7ffc0000 [ 583.263318][ T29] audit: type=1326 audit(597.183:36227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.14264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 583.286893][ T29] audit: type=1326 audit(597.183:36228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.14264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 583.378155][ T29] audit: type=1326 audit(597.183:36229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9388 comm="syz.0.14264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 583.459160][ T9391] bridge0: port 1(macsec0) entered blocking state [ 583.466040][ T9391] bridge0: port 1(macsec0) entered disabled state [ 583.474887][ T9391] macsec0: entered allmulticast mode [ 583.480856][ T9391] bridge0: entered allmulticast mode [ 583.490529][ T9391] macsec0: left allmulticast mode [ 583.495871][ T9391] bridge0: left allmulticast mode [ 583.654307][ T9399] lo speed is unknown, defaulting to 1000 [ 583.664456][ T9399] lo speed is unknown, defaulting to 1000 [ 583.717166][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14271'. [ 583.740695][ T8289] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.766523][ T9413] loop6: detected capacity change from 0 to 512 [ 583.774161][ T8289] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.783339][ T8289] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.793292][ T8289] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.802502][ T9413] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.14272: bg 0: block 248: padding at end of block bitmap is not set [ 583.818520][ T9413] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.14272: Failed to acquire dquot type 1 [ 583.830918][ T9413] EXT4-fs (loop6): 1 truncate cleaned up [ 583.841781][ T9413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.876230][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.197630][ T9434] loop6: detected capacity change from 0 to 8192 [ 584.290014][ T9445] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14286'. [ 584.368884][ T8457] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 584.376787][ T8457] FAT-fs (loop6): Filesystem has been set read-only [ 584.457619][ T9459] netlink: 'syz.3.14293': attribute type 10 has an invalid length. [ 584.466905][ T9459] netlink: 'syz.3.14293': attribute type 10 has an invalid length. [ 584.540856][ T9468] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.551046][ T9468] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.619953][ T9468] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.630054][ T9468] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.686157][ T9468] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.696359][ T9468] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.769494][ T9488] syzkaller0: entered allmulticast mode [ 584.775479][ T9488] syzkaller0: entered promiscuous mode [ 584.784724][ T9488] syzkaller0 (unregistering): left allmulticast mode [ 584.791641][ T9488] syzkaller0 (unregistering): left promiscuous mode [ 584.822226][ T9490] netlink: 'syz.0.14305': attribute type 10 has an invalid length. [ 584.881608][ T9491] netlink: 'syz.0.14305': attribute type 10 has an invalid length. [ 584.911023][ T9468] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.921031][ T9468] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.056008][ T8289] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.065033][ T8289] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.086137][ T8289] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.095108][ T8289] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.137477][ T8289] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.146167][ T8289] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.155911][ T8289] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.164414][ T8289] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.270970][ T9563] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14332'. [ 586.330655][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14334'. [ 586.391665][ T9576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14339'. [ 586.548347][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14339'. [ 586.557627][ T9585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14339'. [ 586.566711][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14339'. [ 586.644492][ T9585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14339'. [ 586.758575][ T9602] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 587.181732][ T9631] netlink: 'syz.0.14359': attribute type 3 has an invalid length. [ 587.189763][ T9631] netlink: 'syz.0.14359': attribute type 3 has an invalid length. [ 587.206395][ T9631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14359'. [ 587.286395][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14361'. [ 587.336348][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14361'. [ 587.661581][ T9689] netlink: 'syz.3.14384': attribute type 7 has an invalid length. [ 587.694934][ T9691] net_ratelimit: 1 callbacks suppressed [ 587.694954][ T9691] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 588.075546][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 588.075565][ T29] audit: type=1326 audit(602.063:36813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.140627][ T29] audit: type=1326 audit(602.073:36814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.164349][ T29] audit: type=1326 audit(602.103:36815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.187472][ T29] audit: type=1326 audit(602.113:36816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.279436][ T29] audit: type=1326 audit(602.163:36817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.302663][ T29] audit: type=1326 audit(602.183:36818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.326000][ T29] audit: type=1326 audit(602.183:36819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.348994][ T29] audit: type=1326 audit(602.183:36820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.372160][ T29] audit: type=1326 audit(602.213:36821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 588.395254][ T29] audit: type=1326 audit(602.223:36822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9675 comm="syz.0.14380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd90d73f749 code=0x7ffc0000 [ 589.631157][ T9762] pim6reg: entered allmulticast mode [ 589.650664][ T9762] pim6reg: left allmulticast mode [ 590.056344][ T9801] lo speed is unknown, defaulting to 1000 [ 590.091665][ T9801] lo speed is unknown, defaulting to 1000 [ 590.568119][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.575457][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.660416][ T1716] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.669094][ T1716] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.685391][ T1716] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.694043][ T1716] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.706490][ T1716] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.715061][ T1716] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.740045][ T1716] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.748804][ T1716] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.806254][ T9844] tipc: Enabling of bearer rejected, failed to enable media [ 591.275968][ T9977] netlink: 'syz.1.14466': attribute type 7 has an invalid length. [ 591.300205][ T9979] __nla_validate_parse: 14 callbacks suppressed [ 591.300228][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14467'. [ 591.375880][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14467'. [ 591.492214][T10188] netlink: 'syz.2.14472': attribute type 13 has an invalid length. [ 591.696201][T10199] veth22: entered promiscuous mode [ 591.702008][T10199] veth22: entered allmulticast mode [ 591.773686][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14481'. [ 591.998882][T10213] netlink: 'syz.2.14482': attribute type 13 has an invalid length. [ 592.075496][T10213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.810970][T10241] lo speed is unknown, defaulting to 1000 [ 592.817495][T10241] lo speed is unknown, defaulting to 1000 [ 593.156786][T10249] loop6: detected capacity change from 0 to 128 [ 593.221400][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 593.221419][ T29] audit: type=1326 audit(607.073:37332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 593.281473][ T29] audit: type=1326 audit(607.102:37333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.3.14491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 593.305125][ T29] audit: type=1326 audit(607.102:37334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10240 comm="syz.3.14491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 593.311395][T10249] EXT4-fs: Ignoring removed nobh option [ 593.328658][ T29] audit: type=1326 audit(607.102:37335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10240 comm="syz.3.14491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 593.328700][ T29] audit: type=1326 audit(607.120:37336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.328733][ T29] audit: type=1326 audit(607.120:37337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.328763][ T29] audit: type=1326 audit(607.120:37338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.328828][ T29] audit: type=1326 audit(607.120:37339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.328863][ T29] audit: type=1326 audit(607.120:37340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.328940][ T29] audit: type=1326 audit(607.120:37341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.14496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff03b8e2005 code=0x7ffc0000 [ 593.542240][T10256] netlink: 'syz.3.14497': attribute type 13 has an invalid length. [ 593.595396][T10258] netlink: 'syz.1.14498': attribute type 1 has an invalid length. [ 593.618234][T10249] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.661946][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14498'. [ 593.687812][ T36] lo speed is unknown, defaulting to 1000 [ 593.693751][ T36] syz1: Port: 1 Link DOWN [ 593.775924][T10258] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.785686][T10260] bond8 (unregistering): Released all slaves [ 593.934678][ T8457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.002385][ T36] lo speed is unknown, defaulting to 1000 [ 594.313069][T10272] tipc: Failed to remove unknown binding: 66,1,1/0:1333230372/1333230374 [ 594.345029][T10272] tipc: Failed to remove unknown binding: 66,1,1/0:1333230372/1333230374 [ 594.353743][T10272] tipc: Failed to remove unknown binding: 66,1,1/0:1333230372/1333230374 [ 594.451737][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14509'. [ 594.897198][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14512'. [ 595.335100][T10316] netlink: 'syz.2.14515': attribute type 7 has an invalid length. [ 595.342996][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14515'. [ 595.514589][T10336] pimreg: entered allmulticast mode [ 595.549849][T10276] Set syz1 is full, maxelem 65536 reached [ 595.552690][T10336] pimreg: left allmulticast mode [ 597.216561][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14561'. [ 597.330427][T10451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14569'. [ 597.342692][T10451] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14569'. [ 597.393954][T10457] tipc: Enabling of bearer rejected, failed to enable media [ 597.859787][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 597.878942][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 597.892531][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 597.906751][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 597.919971][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14585'. [ 598.580351][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 598.580430][ T29] audit: type=1326 audit(612.088:37868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 598.637158][ T29] audit: type=1326 audit(612.088:37869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 598.660975][ T29] audit: type=1326 audit(612.097:37870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f317d7365e7 code=0x7ffc0000 [ 598.684897][ T29] audit: type=1326 audit(612.097:37871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317d6db829 code=0x7ffc0000 [ 598.708886][ T29] audit: type=1326 audit(612.097:37872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 598.732263][ T29] audit: type=1326 audit(612.107:37873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f317d7365e7 code=0x7ffc0000 [ 598.756023][ T29] audit: type=1326 audit(612.107:37874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317d6db829 code=0x7ffc0000 [ 598.779278][ T29] audit: type=1326 audit(612.107:37875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317d73f749 code=0x7ffc0000 [ 598.802880][ T29] audit: type=1326 audit(612.116:37876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f317d7365e7 code=0x7ffc0000 [ 598.826449][ T29] audit: type=1326 audit(612.116:37877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.14600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317d6db829 code=0x7ffc0000 [ 598.948132][T10537] netlink: 87 bytes leftover after parsing attributes in process `syz.1.14605'. [ 599.650122][T10594] netlink: 'syz.1.14630': attribute type 1 has an invalid length. [ 599.665915][T10594] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.679566][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14630'. [ 599.690931][T10594] bond8 (unregistering): Released all slaves [ 600.580094][T10646] loop6: detected capacity change from 0 to 2048 [ 600.636072][T10646] loop6: p2 < > p4 [ 600.644309][T10646] loop6: p4 size 262144 extends beyond EOD, truncated [ 601.385081][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 601.396215][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 601.396301][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.396311][ T3323] Call Trace: [ 601.396316][ T3323] [ 601.396323][ T3323] __dump_stack+0x1d/0x30 [ 601.396343][ T3323] dump_stack_lvl+0x95/0xd0 [ 601.396359][ T3323] dump_stack+0x15/0x1b [ 601.396450][ T3323] dump_header+0x81/0x240 [ 601.396465][ T3323] oom_kill_process+0x295/0x350 [ 601.396482][ T3323] out_of_memory+0x97b/0xb80 [ 601.396568][ T3323] try_charge_memcg+0x610/0xa10 [ 601.396588][ T3323] charge_memcg+0x51/0xc0 [ 601.396610][ T3323] __mem_cgroup_charge+0x28/0xb0 [ 601.396633][ T3323] filemap_add_folio+0x111/0x360 [ 601.396715][ T3323] __filemap_get_folio_mpol+0x326/0x650 [ 601.396769][ T3323] filemap_fault+0x44d/0xb70 [ 601.396790][ T3323] __do_fault+0xbc/0x200 [ 601.396808][ T3323] handle_mm_fault+0xfab/0x2c60 [ 601.396838][ T3323] do_user_addr_fault+0x630/0x1080 [ 601.396862][ T3323] exc_page_fault+0x62/0xa0 [ 601.396882][ T3323] asm_exc_page_fault+0x26/0x30 [ 601.396908][ T3323] RIP: 0033:0x7fd90d615fd4 [ 601.396921][ T3323] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 601.396937][ T3323] RSP: 002b:00007ffc90ed21e0 EFLAGS: 00010206 [ 601.396951][ T3323] RAX: 0000001b33b24000 RBX: 0000000000001c50 RCX: 00000000000927c0 [ 601.397010][ T3323] RDX: 0000000008d855b0 RSI: 00007ffc90ed2270 RDI: 0000000000000001 [ 601.397019][ T3323] RBP: 00007ffc90ed221c R08: 0000000021bdc063 R09: 7fffffffffffffff [ 601.397028][ T3323] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 601.397037][ T3323] R13: 00000000000927c0 R14: 0000000000092949 R15: 00007ffc90ed2270 [ 601.397051][ T3323] [ 601.397056][ T3323] memory: usage 307200kB, limit 307200kB, failcnt 2918 [ 601.587108][ T3323] memory+swap: usage 389132kB, limit 9007199254740988kB, failcnt 0 [ 601.595087][ T3323] kmem: usage 303132kB, limit 9007199254740988kB, failcnt 0 [ 601.602571][ T3323] Memory cgroup stats for /syz0: [ 601.602862][ T3323] cache 65536 [ 601.611366][ T3323] rss 4083712 [ 601.614836][ T3323] shmem 65536 [ 601.618154][ T3323] mapped_file 0 [ 601.621651][ T3323] dirty 0 [ 601.624595][ T3323] writeback 0 [ 601.627889][ T3323] workingset_refault_anon 2725 [ 601.632758][ T3323] workingset_refault_file 16077 [ 601.637625][ T3323] swap 83898368 [ 601.641139][ T3323] swapcached 16384 [ 601.644866][ T3323] pgpgin 1022932 [ 601.648529][ T3323] pgpgout 1021915 [ 601.652438][ T3323] pgfault 870657 [ 601.656030][ T3323] pgmajfault 470 [ 601.659586][ T3323] inactive_anon 315392 [ 601.663722][ T3323] active_anon 139264 [ 601.667649][ T3323] inactive_file 3710976 [ 601.671844][ T3323] active_file 0 [ 601.675425][ T3323] unevictable 0 [ 601.678963][ T3323] hierarchical_memory_limit 314572800 [ 601.684372][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 601.690755][ T3323] total_cache 65536 [ 601.694605][ T3323] total_rss 4083712 [ 601.698518][ T3323] total_shmem 65536 [ 601.702462][ T3323] total_mapped_file 0 [ 601.706667][ T3323] total_dirty 0 [ 601.710131][ T3323] total_writeback 0 [ 601.714056][ T3323] total_workingset_refault_anon 2725 [ 601.719633][ T3323] total_workingset_refault_file 16077 [ 601.725236][ T3323] total_swap 83898368 [ 601.729330][ T3323] total_swapcached 16384 [ 601.734009][ T3323] total_pgpgin 1022932 [ 601.738232][ T3323] total_pgpgout 1021915 [ 601.742397][ T3323] total_pgfault 870658 [ 601.746536][ T3323] total_pgmajfault 470 [ 601.750752][ T3323] total_inactive_anon 315392 [ 601.755354][ T3323] total_active_anon 139264 [ 601.759816][ T3323] total_inactive_file 3710976 [ 601.764707][ T3323] total_active_file 0 [ 601.768740][ T3323] total_unevictable 0 [ 601.772746][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.14658,pid=10653,uid=0 [ 601.787695][ T3323] Memory cgroup out of memory: Killed process 10653 (syz.0.14658) total-vm:96016kB, anon-rss:4976kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 601.877113][T10683] bridge: RTM_NEWNEIGH with invalid ether address [ 602.279921][T10721] netlink: 'syz.2.14683': attribute type 7 has an invalid length. [ 602.323974][T10726] loop6: detected capacity change from 0 to 512 [ 602.359309][T10726] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.14686: Failed to acquire dquot type 1 [ 602.379298][T10726] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.14686: Failed to acquire dquot type 1 [ 602.391898][T10726] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.14686: bg 0: block 248: padding at end of block bitmap is not set [ 602.406853][T10726] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 602.416208][T10726] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.14686: Failed to acquire dquot type 1 [ 602.428569][T10726] EXT4-fs (loop6): 1 orphan inode deleted [ 602.435296][T10726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.458985][T10742] syzkaller0: entered allmulticast mode [ 602.486004][T10742] syzkaller0 (unregistering): left allmulticast mode [ 602.526890][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.751570][T10772] netlink: 'syz.3.14704': attribute type 1 has an invalid length. [ 602.814052][T10772] bond13: entered promiscuous mode [ 602.819267][T10772] bond13: entered allmulticast mode [ 602.843329][T10772] 8021q: adding VLAN 0 to HW filter on device bond13 [ 602.906940][T10772] bridge17: entered promiscuous mode [ 602.912479][T10772] bridge17: entered allmulticast mode [ 602.942981][ T8290] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 602.965711][T10772] bond13: (slave bridge17): Enslaving as an active interface with an up link [ 603.061721][ T8287] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 603.689483][T10827] __nla_validate_parse: 3 callbacks suppressed [ 603.689501][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14726'. [ 603.733502][T10829] netlink: 'syz.6.14727': attribute type 83 has an invalid length. [ 603.742017][T10827] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 603.940369][ T3411] Process accounting resumed [ 603.964523][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 603.964544][ T29] audit: type=1326 audit(617.121:38044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 603.994295][ T29] audit: type=1326 audit(617.121:38045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.017539][ T29] audit: type=1326 audit(617.121:38046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.040713][ T29] audit: type=1326 audit(617.121:38047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.064369][ T29] audit: type=1326 audit(617.121:38048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.293224][ T29] audit: type=1326 audit(617.121:38049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.317174][ T29] audit: type=1326 audit(617.121:38050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.340645][ T29] audit: type=1326 audit(617.121:38051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.363909][ T29] audit: type=1326 audit(617.121:38052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.387522][ T29] audit: type=1326 audit(617.121:38053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10851 comm="syz.2.14736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff03b8af749 code=0x7ffc0000 [ 604.664134][T10897] netlink: 'syz.6.14748': attribute type 1 has an invalid length. [ 604.685200][T10897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.718739][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14748'. [ 604.765799][T10897] bond1 (unregistering): Released all slaves [ 604.855212][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14760'. [ 605.459853][T10951] netlink: 'syz.3.14775': attribute type 3 has an invalid length. [ 605.467823][T10951] netlink: 'syz.3.14775': attribute type 1 has an invalid length. [ 605.475805][T10951] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.14775'. [ 605.485476][T10331] page_pool_release_retry() stalled pool shutdown: id 384, 1 inflight 60 sec [ 605.628823][T10971] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.14780'. [ 605.638288][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14780'. [ 605.729573][T10976] veth24: entered promiscuous mode [ 605.734806][T10976] veth24: entered allmulticast mode [ 606.333788][T11005] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.14796'. [ 606.356579][T11005] netlink: zone id is out of range [ 606.361755][T11005] netlink: zone id is out of range [ 606.368559][T11005] netlink: zone id is out of range [ 606.375265][T11005] netlink: zone id is out of range [ 606.381287][T11005] netlink: del zone limit has 8 unknown bytes [ 606.389766][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14797'. [ 606.402782][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14797'. [ 606.499236][T11022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.527804][T11022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.595022][T11034] lo speed is unknown, defaulting to 1000 [ 606.601685][T11034] lo speed is unknown, defaulting to 1000 [ 607.532715][T11074] lo speed is unknown, defaulting to 1000 [ 607.539080][T11074] lo speed is unknown, defaulting to 1000 [ 607.688509][T11084] lo speed is unknown, defaulting to 1000 [ 607.701027][T11084] lo speed is unknown, defaulting to 1000 [ 607.788313][T11094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 607.931972][T11105] loop6: detected capacity change from 0 to 256 [ 608.250864][T11124] pim6reg: entered allmulticast mode [ 608.283287][T11124] pim6reg: left allmulticast mode [ 608.321551][T11126] team0: entered promiscuous mode [ 608.326662][T11126] team0: entered allmulticast mode [ 608.387824][T11135] bridge0: port 1(gretap0) entered blocking state [ 608.394395][T11135] bridge0: port 1(gretap0) entered disabled state [ 608.401656][T11135] gretap0: entered allmulticast mode [ 608.408063][T11135] gretap0: entered promiscuous mode [ 608.437746][T11135] gretap0: left allmulticast mode [ 608.443173][T11135] gretap0: left promiscuous mode [ 608.448602][T11135] bridge0: port 1(gretap0) entered disabled state [ 608.505727][T11141] all: renamed from team_slave_0 [ 608.749352][T11154] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=11154 comm=syz.0.14858 [ 609.156759][T11184] __nla_validate_parse: 7 callbacks suppressed [ 609.156777][T11184] netlink: 56 bytes leftover after parsing attributes in process `'. [ 609.215531][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14874'. [ 610.217483][T11227] lo speed is unknown, defaulting to 1000 [ 610.223888][T11227] lo speed is unknown, defaulting to 1000 [ 610.415077][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 610.415096][ T29] audit: type=1400 audit(623.155:38628): avc: denied { write } for pid=11243 comm="syz.6.14896" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 610.631776][T11271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14904'. [ 610.692490][T11281] netlink: 'syz.0.14907': attribute type 12 has an invalid length. [ 610.707247][ T29] audit: type=1400 audit(623.436:38629): avc: denied { read } for pid=11282 comm="syz.6.14908" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.730348][ T29] audit: type=1400 audit(623.436:38630): avc: denied { open } for pid=11282 comm="syz.6.14908" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.756546][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14908'. [ 610.787626][ T29] audit: type=1400 audit(623.473:38631): avc: denied { ioctl } for pid=11282 comm="syz.6.14908" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 611.121528][ T29] audit: type=1400 audit(623.810:38632): avc: denied { create } for pid=11300 comm="syz.1.14916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 611.428439][ T29] audit: type=1326 audit(624.100:38633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11254 comm="syz.2.14900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03b8af749 code=0x7fc00000 [ 611.483693][ T29] audit: type=1326 audit(624.156:38634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.1.14920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 611.512363][ T29] audit: type=1326 audit(624.184:38635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.1.14920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 611.535662][ T29] audit: type=1326 audit(624.184:38636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.1.14920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 611.559102][ T29] audit: type=1326 audit(624.184:38637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.1.14920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 611.797792][T11333] loop6: detected capacity change from 0 to 512 [ 611.812608][T11333] EXT4-fs: Ignoring removed nobh option [ 611.837714][T11333] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 611.877979][T11333] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.14929: invalid indirect mapped block 256 (level 1) [ 611.909357][T11333] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.14929: invalid indirect mapped block 2683928664 (level 1) [ 611.924429][T11333] EXT4-fs (loop6): 1 truncate cleaned up [ 611.930745][T11333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.978450][T11332] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.14929: Invalid block bitmap block 3 in block_group 0 [ 612.005164][T11332] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 612.026835][T11332] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.14929: invalid indirect mapped block 2683928664 (level 1) [ 612.061955][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.118832][T11346] loop6: detected capacity change from 0 to 512 [ 612.150496][T11346] ------------[ cut here ]------------ [ 612.156016][T11346] EA inode 11 i_nlink=2 [ 612.156034][T11346] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.6.14933/11346 [ 612.171457][T11346] Modules linked in: [ 612.175393][T11346] CPU: 0 UID: 0 PID: 11346 Comm: syz.6.14933 Not tainted syzkaller #0 PREEMPT(voluntary) [ 612.185470][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.195603][T11346] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 612.202405][T11346] Code: 71 e2 9c ff 4c 8d 2d 0a f1 20 05 49 8d 7e 40 e8 71 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 85 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 4c ad ba 03 66 66 66 2e 0f 1f 84 [ 612.222589][T11346] RSP: 0018:ffffc900021ab5a0 EFLAGS: 00010246 [ 612.228780][T11346] RAX: ffff888103abab90 RBX: ffff88811a2ff220 RCX: ffffffff81bb1cab [ 612.236805][T11346] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0da0 [ 612.245156][T11346] RBP: 000000000000000b R08: 000188811a2ff1d3 R09: 0000000000000000 [ 612.253338][T11346] R10: ffffc900021ab4d0 R11: 0001c900021ab4d0 R12: ffff88811a2ff1d0 [ 612.261516][T11346] R13: ffffffff86dc0da0 R14: ffff88811a2ff188 R15: 0000000000000001 [ 612.269723][T11346] FS: 00007fed397676c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 612.278749][T11346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.285404][T11346] CR2: 000000110c2c5298 CR3: 0000000145d06000 CR4: 00000000003506f0 [ 612.293471][T11346] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 612.301660][T11346] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 612.310091][T11346] Call Trace: [ 612.313402][T11346] [ 612.316514][T11346] ext4_xattr_set_entry+0x77f/0x1020 [ 612.322070][T11346] ext4_xattr_ibody_set+0x184/0x3c0 [ 612.327429][T11346] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 612.333576][T11346] __ext4_expand_extra_isize+0x246/0x280 [ 612.339276][T11346] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 612.344911][T11346] ext4_evict_inode+0x7c4/0xd40 [ 612.349877][T11346] ? __pfx_ext4_evict_inode+0x10/0x10 [ 612.355452][T11346] evict+0x2af/0x510 [ 612.359476][T11346] ? __dquot_initialize+0x146/0x7c0 [ 612.364920][T11346] iput+0x4bd/0x650 [ 612.368857][T11346] ext4_process_orphan+0x1a9/0x1c0 [ 612.374174][T11346] ext4_orphan_cleanup+0x6a8/0xa00 [ 612.379319][T11346] ext4_fill_super+0x3411/0x37a0 [ 612.384424][T11346] ? set_blocksize+0x1a8/0x310 [ 612.389384][T11346] ? sb_set_blocksize+0xfc/0x170 [ 612.394460][T11346] ? setup_bdev_super+0x30e/0x370 [ 612.399527][T11346] ? __pfx_ext4_fill_super+0x10/0x10 [ 612.404879][T11346] get_tree_bdev_flags+0x291/0x300 [ 612.410219][T11346] ? __pfx_ext4_fill_super+0x10/0x10 [ 612.415674][T11346] get_tree_bdev+0x1f/0x30 [ 612.420175][T11346] ext4_get_tree+0x1c/0x30 [ 612.424706][T11346] vfs_get_tree+0x57/0x1d0 [ 612.429316][T11346] do_new_mount+0x24d/0x6a0 [ 612.434060][T11346] path_mount+0x4ab/0xb80 [ 612.438631][T11346] ? user_path_at+0xbf/0x130 [ 612.443280][T11346] __se_sys_mount+0x28c/0x2e0 [ 612.448017][T11346] __x64_sys_mount+0x67/0x80 [ 612.452650][T11346] x64_sys_call+0x2cca/0x3000 [ 612.457391][T11346] do_syscall_64+0xca/0x2b0 [ 612.461979][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.468111][T11346] RIP: 0033:0x7fed3ad00eea [ 612.472637][T11346] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.492524][T11346] RSP: 002b:00007fed39766e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.501085][T11346] RAX: ffffffffffffffda RBX: 00007fed39766ef0 RCX: 00007fed3ad00eea [ 612.509187][T11346] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fed39766eb0 [ 612.517271][T11346] RBP: 0000200000000180 R08: 00007fed39766ef0 R09: 0000000000800700 [ 612.525459][T11346] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 612.533492][T11346] R13: 00007fed39766eb0 R14: 000000000000046f R15: 000000000000002c [ 612.541496][T11346] [ 612.544646][T11346] ---[ end trace 0000000000000000 ]--- [ 612.550526][T11346] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.14933: iget: bad extra_isize 90 (inode size 256) [ 612.565071][T11346] EXT4-fs (loop6): Remounting filesystem read-only [ 612.571865][T11346] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 612.581117][T11346] EXT4-fs (loop6): 1 orphan inode deleted [ 612.587686][T11346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.629654][ T8457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.737914][T11376] lo speed is unknown, defaulting to 1000 [ 612.746516][T11376] lo speed is unknown, defaulting to 1000 [ 613.468724][T11425] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14961'. [ 614.284428][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14979'. [ 614.323384][T11479] sch_fq: defrate 4294967295 ignored. [ 614.367814][T11483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11483 comm=syz.1.14982 [ 614.509418][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14986'. [ 615.196341][T11564] netlink: 'syz.2.14993': attribute type 3 has an invalid length. [ 615.205160][T11564] netlink: 'syz.2.14993': attribute type 1 has an invalid length. [ 615.213584][T11564] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.14993'. [ 615.350058][T11585] netlink: 'syz.2.14995': attribute type 1 has an invalid length. [ 615.374574][T11585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 615.511126][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15000'. [ 616.181918][T11671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15011'. [ 616.205032][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 616.205051][ T29] audit: type=1326 audit(628.572:39015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.250743][ T29] audit: type=1326 audit(628.572:39016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.274219][ T29] audit: type=1326 audit(628.572:39017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.297816][ T29] audit: type=1326 audit(628.572:39018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.321103][ T29] audit: type=1326 audit(628.572:39019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.344574][ T29] audit: type=1326 audit(628.572:39020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.367929][ T29] audit: type=1326 audit(628.572:39021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.391498][ T29] audit: type=1326 audit(628.572:39022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.415204][ T29] audit: type=1326 audit(628.572:39023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.439125][ T29] audit: type=1326 audit(628.581:39024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.1.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf4116f749 code=0x7ffc0000 [ 616.719708][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.736032][T11702] netlink: 348 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.748591][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.770941][T11702] netlink: 348 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.782323][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.802125][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.811706][T11702] netlink: 348 bytes leftover after parsing attributes in process `syz.3.15022'. [ 616.908288][T11715] hsr_slave_0: left promiscuous mode [ 616.914433][T11715] hsr_slave_1: left promiscuous mode [ 616.959823][T11721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11721 comm=syz.3.15031 [ 618.732149][ C0] ================================================================== [ 618.740280][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 618.747533][ C0] [ 618.749879][ C0] read-write to 0xffff888100a42cb8 of 8 bytes by interrupt on cpu 1: [ 618.757959][ C0] wq_worker_tick+0x60/0x230 [ 618.762671][ C0] sched_tick+0xd7/0x220 [ 618.766947][ C0] update_process_times+0x15f/0x190 [ 618.772362][ C0] tick_nohz_handler+0x276/0x3d0 [ 618.777363][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 618.782601][ C0] hrtimer_interrupt+0x21a/0x460 [ 618.787561][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 618.793658][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 618.799321][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.805352][ C0] __tsan_memset+0x4/0x1f0 [ 618.809811][ C0] xa_find+0x64/0x140 [ 618.813809][ C0] io_unregister_zcrx_ifqs+0x66/0x170 [ 618.819212][ C0] io_ring_ctx_free+0x3e/0x3d0 [ 618.824098][ C0] io_ring_exit_work+0x4ef/0x520 [ 618.829070][ C0] process_scheduled_works+0x4ce/0x9d0 [ 618.834561][ C0] worker_thread+0x582/0x770 [ 618.839255][ C0] kthread+0x489/0x510 [ 618.843474][ C0] ret_from_fork+0x149/0x290 [ 618.848099][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.852902][ C0] [ 618.855241][ C0] read-write to 0xffff888100a42cb8 of 8 bytes by interrupt on cpu 0: [ 618.863329][ C0] wq_worker_tick+0x60/0x230 [ 618.867973][ C0] sched_tick+0xd7/0x220 [ 618.872259][ C0] update_process_times+0x15f/0x190 [ 618.877519][ C0] tick_nohz_handler+0x276/0x3d0 [ 618.882602][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 618.887836][ C0] hrtimer_interrupt+0x21a/0x460 [ 618.892992][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 618.898930][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 618.904611][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.910626][ C0] __tsan_read8+0xe9/0x190 [ 618.915266][ C0] rcu_cblist_dequeue+0x39/0x70 [ 618.920177][ C0] rcu_core+0x480/0xc40 [ 618.924384][ C0] rcu_core_si+0xd/0x20 [ 618.928592][ C0] handle_softirqs+0xba/0x290 [ 618.933329][ C0] __irq_exit_rcu+0x3a/0xc0 [ 618.937920][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 618.943767][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.949801][ C0] kcsan_setup_watchpoint+0x406/0x420 [ 618.955308][ C0] _raw_spin_lock+0x52/0xa0 [ 618.959859][ C0] io_napi_free+0x27/0x170 [ 618.964315][ C0] io_ring_ctx_free+0x327/0x3d0 [ 618.969217][ C0] io_ring_exit_work+0x4ef/0x520 [ 618.974180][ C0] process_scheduled_works+0x4ce/0x9d0 [ 618.979650][ C0] worker_thread+0x582/0x770 [ 618.984258][ C0] kthread+0x489/0x510 [ 618.988343][ C0] ret_from_fork+0x149/0x290 [ 618.992956][ C0] ret_from_fork_asm+0x1a/0x30 [ 618.997738][ C0] [ 619.000092][ C0] value changed: 0x0000000000426030 -> 0x0000000000428740 [ 619.007200][ C0] [ 619.009609][ C0] Reported by Kernel Concurrency Sanitizer on: [ 619.015763][ C0] CPU: 0 UID: 0 PID: 8236 Comm: kworker/u8:24 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 619.027492][ C0] Tainted: [W]=WARN [ 619.031302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.041388][ C0] Workqueue: iou_exit io_ring_exit_work [ 619.047007][ C0] ==================================================================