last executing test programs: 4m25.503507534s ago: executing program 1 (id=336): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001400000000000000000090003007379"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4m25.380698171s ago: executing program 32 (id=337): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffff1, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x2145, 0x0, 0x21, 0x0, 0x0) 4m24.651483695s ago: executing program 1 (id=340): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @local, 0xfffffffd}]}, &(0x7f0000000100)=0x10) 4m24.582181958s ago: executing program 1 (id=341): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) dup3(r0, r2, 0x80000) 4m24.497514834s ago: executing program 1 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x48000, 0x0) 4m24.465756775s ago: executing program 1 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c597058c35040000000009000000000000000000bd47a3ad00", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4m24.21049429s ago: executing program 1 (id=348): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x100010, 0x32, 0x7fff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x0) 4m24.179247792s ago: executing program 33 (id=348): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x100010, 0x32, 0x7fff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x0) 4m9.549384418s ago: executing program 3 (id=636): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1ea, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xc, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x2, 0x14, 0x0, 0xc7, 0x7, 0xe}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4m9.021445749s ago: executing program 3 (id=642): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 4m8.995972991s ago: executing program 3 (id=643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a40)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b594", 0xc2}], 0x1}}], 0x2, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m8.759440685s ago: executing program 3 (id=648): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m8.553800167s ago: executing program 3 (id=652): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de00000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m7.881078486s ago: executing program 3 (id=664): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 4m7.880963336s ago: executing program 34 (id=664): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 3m55.024899799s ago: executing program 2 (id=986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m54.945097753s ago: executing program 2 (id=990): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 3m54.891404666s ago: executing program 2 (id=992): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 3m54.865406428s ago: executing program 2 (id=993): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x141) 3m54.849919708s ago: executing program 2 (id=994): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000000b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) 3m54.6491615s ago: executing program 2 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m54.636587051s ago: executing program 35 (id=997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m53.834648938s ago: executing program 6 (id=1013): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) 3m53.437526811s ago: executing program 6 (id=1017): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000002280)=[{&(0x7f0000000100)="2ec0b70007e03d3e000000000000000508060000", 0x14}, {&(0x7f0000000200)="f66e736ea839a9504f36ab39e83fc1310000400000000000", 0x18}, {&(0x7f0000002200)="5cf590", 0x3}], 0x3) 3m53.237833003s ago: executing program 6 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x3886be6393b52063}, 0x0) 3m53.208675155s ago: executing program 6 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m53.11608474s ago: executing program 6 (id=1025): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m52.908221623s ago: executing program 6 (id=1031): r0 = syz_io_uring_setup(0x696, &(0x7f0000000400)={0x0, 0x7daf, 0x10000, 0xc007ffe, 0x8080e0}, &(0x7f0000000380)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r3, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 3m52.872272764s ago: executing program 36 (id=1031): r0 = syz_io_uring_setup(0x696, &(0x7f0000000400)={0x0, 0x7daf, 0x10000, 0xc007ffe, 0x8080e0}, &(0x7f0000000380)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r3, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 3m37.262662676s ago: executing program 9 (id=1404): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000040)=""/25, 0x19) getdents64(r2, &(0x7f0000001f80)=""/4097, 0x1001) 3m37.19296049s ago: executing program 9 (id=1405): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000000)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x1, 0xaa, "ce", "285b94", 0xf5}}}}}, 0x0) 3m37.137547743s ago: executing program 9 (id=1406): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m37.115499775s ago: executing program 9 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 3m37.094070136s ago: executing program 9 (id=1408): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000680)={r3, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, [0x4, 0x7, 0x4bf3, 0x1, 0x2, 0x7ff, 0x100000001, 0xe, 0x6, 0x1883, 0x8, 0x7, 0x1ff, 0x4]}, &(0x7f00000001c0)=0x100) 3m36.701175689s ago: executing program 9 (id=1409): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x6d1, 0x2, 0x4, 0x1c3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m36.695404169s ago: executing program 37 (id=1409): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x6d1, 0x2, 0x4, 0x1c3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.050994154s ago: executing program 0 (id=4943): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}}, 0x0, 0x0, 0x1b, 0x0, "13abcd9d2debb68a5bfc1c64b50a30e0cb34dde0c1121e78614906563b981f8c4600b8b8f4ccd35ddda70f54941e7c6343089a41b19dd068a877fa13dd60be9ce9b50c0a568bce047c3ee863b194c264"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.003673037s ago: executing program 0 (id=4944): syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14ae4701}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004080) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.77662561s ago: executing program 8 (id=4949): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 3.715239674s ago: executing program 8 (id=4951): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x4020940d, &(0x7f00000002c0)={0x4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x2040}], 0x1, 0x0, 0x0, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.964814057s ago: executing program 0 (id=4958): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r0, 0x0, 0x40000040) fchdir(0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.538797942s ago: executing program 8 (id=4961): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x5, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) socket$inet6(0xa, 0x805, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 2.212874401s ago: executing program 5 (id=4963): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 1.982369954s ago: executing program 8 (id=4965): mmap$IORING_OFF_SQ_RING(&(0x7f0000a11000/0x3000)=nil, 0x3000, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x1, 0x2, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)=0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r1}) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 1.830834373s ago: executing program 4 (id=4967): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.828003483s ago: executing program 5 (id=4968): sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MohKiEhuQqpC4ocSJo9gpTdRFCrsuWCAQSIgFe/4CNnRFhYRYwx6xQEVQggRISEb32i6JEweLpnHJ/f2kW5/7sL97an0n5x7fRwCZdTb5JxcxHBEfRcTRxuzWDc42Xjbu35xJplzU65e/zKXbJfOtTVvvOxIR6xExEBFP/jfi2dz2uNXVtfnpcrm03Jwv1haWitXVtQvXFqbnSnOlxbHJi1NTk6MT41N7VtfbLz9/+9K7/+9/59uX7t195f33kt0abq7r37MoWzWq3hfHNy07FBH/fkTx9luhWZ/BXu8Iv0jy/f0uIs6l+X80Cum3CWRBvV6v/1A/3Gn1eh04sPJpHziXH4mIRjmfHxlp9OF/H0P5cqVa+/vVysribKOvfCz68levlUujzWOFY9GXS+bH0vJP8+Nt8xMRaR/41cJgOj8yUynP7m9TB7Q50pb/3xQa+Q9khEN+yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IZOeuHQpmeqt6/hnr6+uzFeuX5gtVedHFlZmRmYqy0sjc5XKXHrNzsLPfV65Ulka+0es3CjWStVasbq6dmWhsrJYu5Je13+l1LcvtQK6cfzMnU9yEbH+z8F0ik33wpCrcLDV67no9TXIQG8Uet0AAT1j6A+yyzE+0H6L3vZ+wUCnNy7tfu9cxxfw+Mr3egeAnjl/yu9/kFX655Bdxv8hu/TxgR0e0bfFbuP/wK+T8X/IruEOz//6zaZnd41GxG8j4uNC3+HWs76AgyD/ea7Z/z9/9M/D7Wv7c9+lPxH0R8QLb15+/cZ0rbY8liz/6sHy2hvN5eOb3tjxgAHolVaetvIYAMiujfs3Z1rTfsb94j+NkxC2xz/UHJscSH+jHNrIbTlXIbdH5y6s34qIkzvFzzWfd944kBnaKGyLf6L5mmt8RLq/h9Lnpndv6SHin9oU/0+b4p9+6P8VyIY7SfszulP+5dOcjgf5t7X9Gd6jcyc6t3/5B+1foUP7d6bLGM+99eJnHePfiji9Y/xWvIE0Vnv8ZN/Odxn/3jNP/aHTuvrbjc/ZKX5LUirWFpaK1dW1C+l95OZKi2OTF6emJkcnxqeK6Rh1sTVSvd2/Tn54d7f6D3WIv1v9k2V/7bL+3//xg6fP7hL/L+d2/v5P7BJ/MCL+1mX8r8c/7finMok/26H++V3iJ8smuoxffe1/h7vcFADYB9XVtfnpcrm0rKCg0JPCrcdjN9oKvW6ZgEetupocmidJ3+s9AQAAAAAAAAAAALq1H6cT97qOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwY8BAAD//0K90ao=") creat(&(0x7f00000000c0)='./file1\x00', 0x124) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.648642654s ago: executing program 4 (id=4970): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x6) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.604445327s ago: executing program 8 (id=4971): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x6}, 0x3000, 0x10000, 0x0, 0x6, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x320, 0x0, 0x0, 0x160, 0x320, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'ip6gre0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz0\x00', {0x6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x1000000}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2000002, 0x32, 0xffffffffffffffff, 0xa94a7000) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000001c0)="240000001a007f0214f9e607008c34af1dcedcdf5f1836eb9d993f0904080a0000000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.569669698s ago: executing program 4 (id=4972): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x4000050) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed721167228", 0xd) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 944.836005ms ago: executing program 0 (id=4973): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x2400, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000800000001100000028000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f0000000480)={[{@resgid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@debug}, {@bsdgroups}], [{@uid_lt}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}, {@uid_gt}, {@uid_eq}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") 910.849817ms ago: executing program 5 (id=4974): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x81}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000c, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 814.742243ms ago: executing program 7 (id=4975): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000180)=""/208, 0xd0}], 0x1) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffffff", 0x58}], 0x1) 740.252197ms ago: executing program 0 (id=4976): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2b03, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") getuid() openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x4001, 0x0) syz_create_resource$binfmt(0x0) syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) utime(0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x200000010) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1}) getdents(0xffffffffffffffff, 0x0, 0x0) getcwd(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) 667.590061ms ago: executing program 8 (id=4977): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0xffff}, {0x0, 0x8, 0x800}], 0x2) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000100)=""/166) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000020000900"], 0x14}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000040)={[0x49b]}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 667.321571ms ago: executing program 4 (id=4978): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 647.038103ms ago: executing program 7 (id=4979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2c}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 615.950734ms ago: executing program 4 (id=4980): r0 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a0088a80180c20000032833b165653286dd6676b0c9000c88"], 0x46) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x1, 0x36f}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0xefd, 0x3, 0x0, 0x10000}) io_uring_enter(r5, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 469.183323ms ago: executing program 7 (id=4981): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 440.644765ms ago: executing program 5 (id=4982): mmap$IORING_OFF_SQ_RING(&(0x7f0000a11000/0x3000)=nil, 0x3000, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x1, 0x2, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)=0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, r1}) ioctl(r2, 0x8916, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0}) 402.544077ms ago: executing program 5 (id=4983): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedreceive(r2, &(0x7f0000000180)=""/122, 0x7a, 0x6, &(0x7f0000000100)={0x77359400}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x4000, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, 0x0, 0x0, 0x300, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) 366.233679ms ago: executing program 5 (id=4984): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0xffffffff, 0x0, &(0x7f0000048000)=0x1, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$kcm(0x23, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/114, 0x72, 0x101) fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x1, 0x4, 0x17, 0x6}) 319.586012ms ago: executing program 7 (id=4985): socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xb14d, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x3fffffffc}, 0x10b202, 0x0, 0x0, 0x3, 0xfff, 0xf8, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x8001, 0x18}, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20828}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0xfc}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 304.959983ms ago: executing program 0 (id=4986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000540), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7d16e354b6f02b95}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x20000000) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r3 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0xd4) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x449) r4 = syz_create_resource$binfmt(&(0x7f0000000480)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 304.379042ms ago: executing program 4 (id=4987): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x101, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100010000f334, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0xf2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) 19.229429ms ago: executing program 7 (id=4988): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x21, 0x5, 0x0, 0x76e, 0x807, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x1, 0xffff, 0x0, 0xa}, {0x5}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100f12020712500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=4989): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): x [ 245.399760][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 245.608038][T15704] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 245.625614][T15704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.642650][T15704] bond5: (slave dummy0): making interface the new active one [ 245.651897][T15704] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 245.666745][T15704] bond5: entered allmulticast mode [ 245.671950][T15704] dummy0: entered allmulticast mode [ 246.087214][T15731] netlink: 'syz.0.4169': attribute type 6 has an invalid length. [ 246.106031][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4171'. [ 246.124249][T15736] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 246.133054][ T4540] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.143410][ T4534] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.153113][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 246.188923][ T4534] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.198879][T15736] bond6 (unregistering): (slave geneve3): Releasing backup interface [ 246.209111][T15736] bond6 (unregistering): Released all slaves [ 246.304436][ T4534] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.313407][ T4534] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.331768][ T4534] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.555285][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 246.555314][ T29] audit: type=1326 audit(1768979118.402:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.592187][T15753] netlink: 'syz.4.4177': attribute type 10 has an invalid length. [ 246.681552][ T29] audit: type=1326 audit(1768979118.432:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.705149][ T29] audit: type=1326 audit(1768979118.432:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.728491][ T29] audit: type=1326 audit(1768979118.452:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.752207][ T29] audit: type=1326 audit(1768979118.452:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.775924][ T29] audit: type=1326 audit(1768979118.452:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.799574][ T29] audit: type=1326 audit(1768979118.452:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.823067][ T29] audit: type=1326 audit(1768979118.452:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.846591][ T29] audit: type=1326 audit(1768979118.452:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.870066][ T29] audit: type=1326 audit(1768979118.452:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15750 comm="syz.7.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 246.986095][T15761] netlink: 'syz.5.4180': attribute type 4 has an invalid length. [ 247.007595][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4181'. [ 247.070512][T15763] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 247.086478][T15763] macvlan0: entered promiscuous mode [ 247.091919][T15763] macvlan0: entered allmulticast mode [ 247.097888][T15763] bond3: entered promiscuous mode [ 247.102957][T15763] bridge7: entered promiscuous mode [ 247.108909][T15763] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 247.117113][T15763] bond3: left promiscuous mode [ 247.121914][T15763] bridge7: left promiscuous mode [ 247.135995][T15771] netlink: 240 bytes leftover after parsing attributes in process `syz.7.4183'. [ 247.373771][T15779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4187'. [ 247.439655][T15786] xt_hashlimit: size too large, truncated to 1048576 [ 247.534562][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4189'. [ 247.641836][T15800] loop8: detected capacity change from 0 to 1024 [ 247.662623][T15800] ext4: Unknown parameter 'noacl' [ 247.932500][T15835] futex_wake_op: syz.0.4207 tries to shift op by -1; fix this program [ 248.012565][T15843] netlink: 'syz.0.4211': attribute type 1 has an invalid length. [ 248.083765][T15843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.096791][T15843] bond6: (slave bond7): making interface the new active one [ 248.104209][T15848] netlink: 'syz.5.4213': attribute type 10 has an invalid length. [ 248.104780][T15843] bond6: (slave bond7): Enslaving as an active interface with an up link [ 248.139808][T15843] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 248.149375][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4211'. [ 248.159257][T15843] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.200231][T15859] syzkaller0: entered promiscuous mode [ 248.205812][T15859] syzkaller0: entered allmulticast mode [ 248.213601][T15859] tipc: Enabled bearer , priority 0 [ 248.220861][T15858] tipc: Resetting bearer [ 248.228662][T15858] tipc: Disabling bearer [ 248.240189][T15862] syz_tun: entered allmulticast mode [ 248.287681][T15866] netlink: 'syz.8.4220': attribute type 1 has an invalid length. [ 248.316627][T15866] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.339927][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4220'. [ 248.379229][T15866] bond7: entered promiscuous mode [ 248.439135][T15866] bond6: (slave dummy0): Releasing active interface [ 248.446130][T15866] dummy0: left allmulticast mode [ 248.459080][T15866] bond7: (slave dummy0): making interface the new active one [ 248.467020][T15866] dummy0: entered promiscuous mode [ 248.472866][T15866] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 248.895944][T15877] lo speed is unknown, defaulting to 1000 [ 248.931775][T15890] tipc: Cannot configure node identity twice [ 249.249848][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 249.721518][T15914] tipc: Enabling of bearer rejected, failed to enable media [ 249.860525][ T4546] net_ratelimit: 35 callbacks suppressed [ 249.860550][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 249.980493][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 250.089750][ T4520] bond2: (slave bridge6): failed to get link speed/duplex [ 250.209752][ T4520] bond2: (slave bridge6): failed to get link speed/duplex [ 250.289916][ T8453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.319729][ T4520] bond2: (slave bridge6): failed to get link speed/duplex [ 250.439727][ T4520] bond2: (slave bridge6): failed to get link speed/duplex [ 250.449884][T14660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.550475][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 250.559127][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 250.568328][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 250.659850][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 250.723391][T15957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4249'. [ 250.735101][T15959] netlink: 'syz.4.4250': attribute type 1 has an invalid length. [ 250.751328][T15959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.760960][T15957] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15957 comm=syz.0.4249 [ 250.774437][T15959] macvlan0: entered promiscuous mode [ 250.782814][T15959] bond4: entered promiscuous mode [ 250.788347][T15959] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.796927][T15959] bond4: left promiscuous mode [ 250.848282][T15970] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.865879][T15970] bond8: (slave lo): Enslaving as a backup interface with an up link [ 250.893657][T15973] netlink: 'syz.4.4257': attribute type 1 has an invalid length. [ 250.914335][T15973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.926064][T15976] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.929205][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4257'. [ 250.946310][T15973] bond5: entered promiscuous mode [ 250.962617][T15973] bond1: (slave dummy0): Releasing active interface [ 250.975163][T15973] bond5: (slave dummy0): making interface the new active one [ 250.982791][T15973] dummy0: entered promiscuous mode [ 250.990312][T15973] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 251.002339][T15976] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.050629][T15981] syzkaller0: entered promiscuous mode [ 251.051748][T15979] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4260'. [ 251.056154][T15981] syzkaller0: entered allmulticast mode [ 251.081878][T15976] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.101030][T15979] bond5: (slave dummy0): Releasing active interface [ 251.118265][T15979] dummy0 (unregistering): left promiscuous mode [ 251.141657][T15976] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.227743][ T4553] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.239015][T15991] loop5: detected capacity change from 0 to 512 [ 251.247870][T15991] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 251.259434][T15991] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 251.269601][T15991] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.4262: Corrupt directory, running e2fsck is recommended [ 251.283631][T15991] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 251.297130][T15991] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.4262: corrupted in-inode xattr: e_name out of bounds [ 251.311586][T15991] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4262: couldn't read orphan inode 15 (err -117) [ 251.329119][T15991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.355290][ T4553] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.369743][ T4553] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.378025][ T4553] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.769064][T15991] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.962521][T16019] netlink: 'syz.4.4273': attribute type 7 has an invalid length. [ 251.970367][T16019] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4273'. [ 252.006580][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4273'. [ 252.018152][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4271'. [ 252.021776][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4273'. [ 252.046933][T16019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.248622][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 252.248636][ T29] audit: type=1400 audit(1768979124.092:4330): avc: denied { ioctl } for pid=16044 comm="syz.8.4281" path="socket:[64551]" dev="sockfs" ino=64551 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 252.280446][ T29] audit: type=1326 audit(1768979124.112:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.0.4279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x0 [ 252.313174][ T29] audit: type=1400 audit(1768979124.162:4332): avc: denied { create } for pid=16047 comm="syz.5.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.353046][ T29] audit: type=1400 audit(1768979124.162:4333): avc: denied { ioctl } for pid=16047 comm="syz.5.4282" path="socket:[64556]" dev="sockfs" ino=64556 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 252.392321][T16050] loop8: detected capacity change from 0 to 512 [ 252.408309][T16050] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.4283: ea_inode file size=4 entry size=6 [ 252.421886][T16050] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4283: corrupted inode contents [ 252.434951][T16050] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.4283: mark_inode_dirty error [ 252.446707][T16050] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.4283: corrupted inode contents [ 252.458983][T16050] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.4283: mark_inode_dirty error [ 252.471736][T16050] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.4283: mark inode dirty (error -117) [ 252.484499][T16050] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 252.493689][T16050] EXT4-fs (loop8): 1 orphan inode deleted [ 252.500001][T16050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.513284][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4283'. [ 252.522390][T16050] chnl_net:caif_netlink_parms(): no params data found [ 252.601595][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.622889][T16056] loop8: detected capacity change from 0 to 512 [ 252.644599][T16056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.663438][T16056] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.671744][T16060] loop5: detected capacity change from 0 to 1024 [ 252.702070][T16060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.715331][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.747400][T10286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.779161][ T29] audit: type=1400 audit(1768979124.622:4334): avc: denied { shutdown } for pid=16066 comm="syz.5.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.817004][ T29] audit: type=1400 audit(1768979124.652:4335): avc: denied { read } for pid=16066 comm="syz.5.4287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.994671][T16073] lo speed is unknown, defaulting to 1000 [ 253.101676][ T29] audit: type=1400 audit(1768979124.952:4336): avc: denied { lock } for pid=16074 comm="syz.4.4291" path="/903/file0" dev="tmpfs" ino=4720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.198773][T16073] netlink: 'syz.8.4290': attribute type 2 has an invalid length. [ 253.269320][T16073] loop8: detected capacity change from 0 to 8192 [ 253.484126][T16100] lo speed is unknown, defaulting to 1000 [ 253.553679][T16105] lo speed is unknown, defaulting to 1000 [ 253.689662][T16109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.707820][T16113] tipc: Failed to remove unknown binding: 66,0,0/0:587404528/587404529 [ 253.729193][T16113] tipc: Failed to remove unknown binding: 66,0,0/0:587404528/587404529 [ 253.730478][ T29] audit: type=1326 audit(1768979125.572:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.7.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 253.761710][ T29] audit: type=1326 audit(1768979125.572:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.7.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 253.785292][ T29] audit: type=1326 audit(1768979125.572:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.7.4301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 254.243424][T16138] netlink: 'syz.7.4313': attribute type 13 has an invalid length. [ 254.266149][T16138] gretap0: refused to change device tx_queue_len [ 254.283271][T16138] netlink: 'syz.7.4313': attribute type 4 has an invalid length. [ 254.380196][T16130] syz.8.4309 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 254.390216][T16130] CPU: 1 UID: 0 PID: 16130 Comm: syz.8.4309 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.390265][T16130] Tainted: [W]=WARN [ 254.390270][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.390285][T16130] Call Trace: [ 254.390298][T16130] [ 254.390307][T16130] __dump_stack+0x1d/0x30 [ 254.390397][T16130] dump_stack_lvl+0x95/0xd0 [ 254.390417][T16130] dump_stack+0x15/0x1b [ 254.390483][T16130] dump_header+0x80/0x240 [ 254.390503][T16130] oom_kill_process+0x295/0x350 [ 254.390522][T16130] out_of_memory+0x97d/0xb80 [ 254.390543][T16130] try_charge_memcg+0x62e/0xa10 [ 254.390667][T16130] charge_memcg+0x51/0xc0 [ 254.390695][T16130] __mem_cgroup_charge+0x28/0xb0 [ 254.390740][T16130] shmem_get_folio_gfp+0x47b/0xd60 [ 254.390847][T16130] shmem_write_begin+0xfc/0x1f0 [ 254.390877][T16130] generic_perform_write+0x183/0x490 [ 254.390910][T16130] shmem_file_write_iter+0xc5/0xf0 [ 254.390972][T16130] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 254.391047][T16130] vfs_write+0x5a6/0x9f0 [ 254.391089][T16130] ksys_write+0xdc/0x1a0 [ 254.391111][T16130] __x64_sys_write+0x40/0x50 [ 254.391132][T16130] x64_sys_call+0x2847/0x3000 [ 254.391160][T16130] do_syscall_64+0xc0/0x2a0 [ 254.391257][T16130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.391281][T16130] RIP: 0033:0x7fdfee32acb9 [ 254.391345][T16130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.391367][T16130] RSP: 002b:00007fdfecd66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.391389][T16130] RAX: ffffffffffffffda RBX: 00007fdfee5a6090 RCX: 00007fdfee32acb9 [ 254.391402][T16130] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 254.391417][T16130] RBP: 00007fdfee398bf7 R08: 0000000000000000 R09: 0000000000000000 [ 254.391461][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.391476][T16130] R13: 00007fdfee5a6128 R14: 00007fdfee5a6090 R15: 00007fff78f5e5f8 [ 254.391496][T16130] [ 254.391523][T16130] memory: usage 304860kB, limit 307200kB, failcnt 6601 [ 254.605643][T16130] memory+swap: usage 213500kB, limit 9007199254740988kB, failcnt 0 [ 254.614346][T16130] kmem: usage 130448kB, limit 9007199254740988kB, failcnt 0 [ 254.621656][T16130] Memory cgroup stats for /syz8: [ 254.622500][T16130] cache 63356928 [ 254.630998][T16130] rss 565248 [ 254.634182][T16130] shmem 63356928 [ 254.637719][T16130] mapped_file 0 [ 254.641901][T16130] dirty 0 [ 254.644838][T16130] writeback 0 [ 254.648114][T16130] workingset_refault_anon 134 [ 254.652810][T16130] workingset_refault_file 0 [ 254.657313][T16130] swap 20979712 [ 254.660816][T16130] swapcached 0 [ 254.664182][T16130] pgpgin 334304 [ 254.667636][T16130] pgpgout 318696 [ 254.671885][T16130] pgfault 258446 [ 254.675420][T16130] pgmajfault 24 [ 254.678870][T16130] inactive_anon 47677440 [ 254.683134][T16130] active_anon 16248832 [ 254.687192][T16130] inactive_file 0 [ 254.690908][T16130] active_file 4096 [ 254.694651][T16130] unevictable 0 [ 254.698104][T16130] hierarchical_memory_limit 314572800 [ 254.704285][T16130] hierarchical_memsw_limit 9223372036854771712 [ 254.710476][T16130] total_cache 63356928 [ 254.714627][T16130] total_rss 565248 [ 254.718419][T16130] total_shmem 63356928 [ 254.722598][T16130] total_mapped_file 0 [ 254.726567][T16130] total_dirty 0 [ 254.730832][T16130] total_writeback 0 [ 254.734660][T16130] total_workingset_refault_anon 134 [ 254.740013][T16130] total_workingset_refault_file 0 [ 254.745191][T16130] total_swap 20979712 [ 254.749181][T16130] total_swapcached 0 [ 254.753175][T16130] total_pgpgin 334304 [ 254.757148][T16130] total_pgpgout 318696 [ 254.761892][T16130] total_pgfault 258446 [ 254.765952][T16130] total_pgmajfault 24 [ 254.769976][T16130] total_inactive_anon 47677440 [ 254.774739][T16130] total_active_anon 16248832 [ 254.779367][T16130] total_inactive_file 0 [ 254.783553][T16130] total_active_file 4096 [ 254.787801][T16130] total_unevictable 0 [ 254.792441][T16130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4309,pid=16128,uid=0 [ 254.807210][T16130] Memory cgroup out of memory: Killed process 16128 (syz.8.4309) total-vm:94132kB, anon-rss:1284kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 254.890938][ T4556] net_ratelimit: 40 callbacks suppressed [ 254.890955][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 255.009851][ T4534] bond2: (slave bridge6): failed to get link speed/duplex [ 255.119957][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 255.230348][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 255.340980][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 255.484035][ T4520] bond2: (slave bridge6): failed to get link speed/duplex [ 255.601227][ T4550] bond2: (slave bridge6): failed to get link speed/duplex [ 255.742789][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 255.901285][T16167] syzkaller0: entered promiscuous mode [ 255.906786][T16167] syzkaller0: entered allmulticast mode [ 256.020327][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 256.102867][ T8453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.169922][T16177] __nla_validate_parse: 6 callbacks suppressed [ 256.169939][T16177] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4325'. [ 256.300776][T16184] netlink: 'syz.5.4328': attribute type 1 has an invalid length. [ 256.355889][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4328'. [ 256.385707][T16184] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.462270][T16208] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.492583][T16208] bond7: (slave geneve2): making interface the new active one [ 256.522569][T16208] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 256.531396][ T4530] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.560434][ T4530] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.592944][ T4530] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.616724][ T4530] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 256.706219][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4331'. [ 256.801830][T16214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16214 comm=syz.8.4331 [ 256.839265][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4334'. [ 256.977019][T16233] loop8: detected capacity change from 0 to 764 [ 257.349972][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 257.349988][ T29] audit: type=1326 audit(1768979129.202:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.5.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 257.435103][ T29] audit: type=1326 audit(1768979129.232:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16242 comm="syz.5.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 257.533210][T16259] loop8: detected capacity change from 0 to 164 [ 257.571799][T16259] Unable to read rock-ridge attributes [ 257.614742][T16259] Unable to read rock-ridge attributes [ 257.645079][ T29] audit: type=1400 audit(1768979129.492:4391): avc: denied { mounton } for pid=16258 comm="syz.8.4348" path="/617/file0/file0" dev="loop8" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 257.720448][T16266] macvlan1: entered promiscuous mode [ 257.752296][T16266] macvlan1: left promiscuous mode [ 257.871436][T16272] loop8: detected capacity change from 0 to 512 [ 257.921131][T16272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.988633][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.134355][T16293] netlink: 'syz.5.4359': attribute type 21 has an invalid length. [ 258.136540][T16296] netlink: 'syz.8.4360': attribute type 1 has an invalid length. [ 258.142243][T16293] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.273086][T16301] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4361'. [ 258.422638][T16310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4363'. [ 258.461272][ T29] audit: type=1326 audit(1768979130.302:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.4.4362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x0 [ 258.495364][T16296] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.523822][T16307] veth21: entered promiscuous mode [ 258.547580][T16307] bond8: (slave veth21): Enslaving as an active interface with a down link [ 258.569403][T16304] veth23: entered promiscuous mode [ 258.599655][T16304] bond8: (slave veth23): Enslaving as an active interface with a down link [ 258.792583][T16322] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4368'. [ 259.162086][ T29] audit: type=1326 audit(1768979130.992:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 259.185613][ T29] audit: type=1326 audit(1768979130.992:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 259.209091][ T29] audit: type=1326 audit(1768979130.992:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 259.232989][ T29] audit: type=1326 audit(1768979130.992:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 259.256610][ T29] audit: type=1326 audit(1768979130.992:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f770fe7aa22 code=0x7ffc0000 [ 259.279922][ T29] audit: type=1326 audit(1768979130.992:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16341 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 259.327586][T16345] tipc: Enabling of bearer rejected, failed to enable media [ 259.575140][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4378'. [ 259.599938][T16351] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 259.764131][T16361] IPv6: NLM_F_REPLACE set, but no existing node found! [ 259.982894][ T4534] net_ratelimit: 37 callbacks suppressed [ 259.982911][ T4534] bond2: (slave bridge6): failed to get link speed/duplex [ 260.100170][ T4534] bond2: (slave bridge6): failed to get link speed/duplex [ 260.185033][T16385] lo: Caught tx_queue_len zero misconfig [ 260.220253][ T4530] bond2: (slave bridge6): failed to get link speed/duplex [ 260.329738][ T4530] bond2: (slave bridge6): failed to get link speed/duplex [ 260.439758][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 260.545705][ T3405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.554686][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 260.679830][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 260.790390][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 260.825006][T16388] syz.8.4390 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 260.839179][T16388] CPU: 0 UID: 0 PID: 16388 Comm: syz.8.4390 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.839233][T16388] Tainted: [W]=WARN [ 260.839241][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.839255][T16388] Call Trace: [ 260.839263][T16388] [ 260.839271][T16388] __dump_stack+0x1d/0x30 [ 260.839299][T16388] dump_stack_lvl+0x95/0xd0 [ 260.839331][T16388] dump_stack+0x15/0x1b [ 260.839354][T16388] dump_header+0x80/0x240 [ 260.839391][T16388] oom_kill_process+0x295/0x350 [ 260.839442][T16388] out_of_memory+0x97d/0xb80 [ 260.839524][T16388] try_charge_memcg+0x62e/0xa10 [ 260.839570][T16388] obj_cgroup_charge_pages+0xa6/0x150 [ 260.839601][T16388] __memcg_kmem_charge_page+0x9e/0x170 [ 260.839632][T16388] __alloc_frozen_pages_noprof+0x18a/0x350 [ 260.839684][T16388] alloc_pages_mpol+0xb3/0x260 [ 260.839713][T16388] alloc_pages_noprof+0x8f/0x130 [ 260.839745][T16388] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 260.839856][T16388] __kvmalloc_node_noprof+0x471/0x680 [ 260.839882][T16388] ? ip_set_alloc+0x24/0x30 [ 260.839908][T16388] ? ip_set_alloc+0x24/0x30 [ 260.839931][T16388] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 260.839987][T16388] ip_set_alloc+0x24/0x30 [ 260.840064][T16388] hash_netiface_create+0x282/0x740 [ 260.840089][T16388] ? __pfx_hash_netiface_create+0x10/0x10 [ 260.840114][T16388] ip_set_create+0x3cf/0x970 [ 260.840173][T16388] ? __nla_parse+0x40/0x60 [ 260.840197][T16388] nfnetlink_rcv_msg+0x509/0x5d0 [ 260.840311][T16388] netlink_rcv_skb+0x123/0x220 [ 260.840341][T16388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 260.840373][T16388] nfnetlink_rcv+0x167/0x1720 [ 260.840482][T16388] ? __list_del_entry_valid_or_report+0x65/0x130 [ 260.840556][T16388] ? __rmqueue_pcplist+0x9b6/0xb80 [ 260.840591][T16388] ? _raw_spin_lock_bh+0x56/0xb0 [ 260.840667][T16388] ? should_fail_ex+0x30/0x280 [ 260.840691][T16388] ? selinux_nlmsg_lookup+0x99/0x890 [ 260.840721][T16388] ? __rcu_read_unlock+0x33/0x70 [ 260.840793][T16388] ? __netlink_lookup+0x276/0x2b0 [ 260.840828][T16388] netlink_unicast+0x5c0/0x690 [ 260.840929][T16388] netlink_sendmsg+0x5c8/0x6f0 [ 260.840963][T16388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.841076][T16388] __sock_sendmsg+0x145/0x170 [ 260.841112][T16388] ____sys_sendmsg+0x31e/0x4a0 [ 260.841143][T16388] ___sys_sendmsg+0x195/0x1e0 [ 260.841226][T16388] __x64_sys_sendmsg+0xd4/0x160 [ 260.841259][T16388] x64_sys_call+0x17ba/0x3000 [ 260.841288][T16388] do_syscall_64+0xc0/0x2a0 [ 260.841369][T16388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.841394][T16388] RIP: 0033:0x7fdfee32acb9 [ 260.841420][T16388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.841479][T16388] RSP: 002b:00007fdfecd87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.841547][T16388] RAX: ffffffffffffffda RBX: 00007fdfee5a5fa0 RCX: 00007fdfee32acb9 [ 260.841564][T16388] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 260.841580][T16388] RBP: 00007fdfee398bf7 R08: 0000000000000000 R09: 0000000000000000 [ 260.841596][T16388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.841612][T16388] R13: 00007fdfee5a6038 R14: 00007fdfee5a5fa0 R15: 00007fff78f5e5f8 [ 260.841636][T16388] [ 261.160635][T16388] memory: usage 307200kB, limit 307200kB, failcnt 6724 [ 261.167995][T16388] memory+swap: usage 327688kB, limit 9007199254740988kB, failcnt 0 [ 261.176073][T16388] kmem: usage 259064kB, limit 9007199254740988kB, failcnt 0 [ 261.183451][T16388] Memory cgroup stats for /syz8: [ 261.187679][ T4530] bond2: (slave bridge6): failed to get link speed/duplex [ 261.200069][T16388] cache 48726016 [ 261.203652][T16388] rss 557056 [ 261.206846][T16388] shmem 48726016 [ 261.210506][T16388] mapped_file 4096 [ 261.214292][T16388] dirty 0 [ 261.217228][T16388] writeback 0 [ 261.220580][T16388] workingset_refault_anon 134 [ 261.225296][T16388] workingset_refault_file 0 [ 261.229835][T16388] swap 20979712 [ 261.233283][T16388] swapcached 0 [ 261.236663][T16388] pgpgin 335335 [ 261.240202][T16388] pgpgout 323301 [ 261.243742][T16388] pgfault 260814 [ 261.247290][T16388] pgmajfault 24 [ 261.250804][T16388] inactive_anon 47517696 [ 261.255032][T16388] active_anon 1769472 [ 261.258999][T16388] inactive_file 0 [ 261.262657][T16388] active_file 4096 [ 261.266427][T16388] unevictable 0 [ 261.269905][T16388] hierarchical_memory_limit 314572800 [ 261.275326][T16388] hierarchical_memsw_limit 9223372036854771712 [ 261.277843][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 261.281504][T16388] total_cache 48726016 [ 261.281515][T16388] total_rss 557056 [ 261.281522][T16388] total_shmem 48726016 [ 261.281529][T16388] total_mapped_file 4096 [ 261.306603][T16388] total_dirty 0 [ 261.310094][T16388] total_writeback 0 [ 261.313897][T16388] total_workingset_refault_anon 134 [ 261.319100][T16388] total_workingset_refault_file 0 [ 261.324165][T16388] total_swap 20979712 [ 261.328136][T16388] total_swapcached 0 [ 261.332061][T16388] total_pgpgin 335335 [ 261.336095][T16388] total_pgpgout 323301 [ 261.340182][T16388] total_pgfault 260814 [ 261.344237][T16388] total_pgmajfault 24 [ 261.348212][T16388] total_inactive_anon 47517696 [ 261.353050][T16388] total_active_anon 1769472 [ 261.357570][T16388] total_inactive_file 0 [ 261.361812][T16388] total_active_file 4096 [ 261.366046][T16388] total_unevictable 0 [ 261.370047][T16388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4390,pid=16387,uid=0 [ 261.384766][T16388] Memory cgroup out of memory: Killed process 16388 (syz.8.4390) total-vm:96180kB, anon-rss:1332kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 261.597656][T16415] lo speed is unknown, defaulting to 1000 [ 262.360714][T16449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 262.370468][T16449] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4409'. [ 262.379438][T16449] netlink: 'syz.0.4409': attribute type 3 has an invalid length. [ 262.387214][T16449] netlink: 'syz.0.4409': attribute type 2 has an invalid length. [ 262.394976][T16449] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4409'. [ 262.511461][T16457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16457 comm=syz.0.4411 [ 262.704264][T16453] loop8: detected capacity change from 0 to 512 [ 262.743545][T16453] EXT4-fs (loop8): orphan cleanup on readonly fs [ 262.750422][T16453] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 262.781553][T16453] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 262.805175][T16453] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4410: attempt to clear invalid blocks 2 len 1 [ 262.819291][T16453] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4410: invalid indirect mapped block 1819239214 (level 0) [ 262.849739][T16467] netlink: 'syz.5.4414': attribute type 2 has an invalid length. [ 262.862055][T16453] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4410: invalid indirect mapped block 1819239214 (level 1) [ 262.881181][T16453] EXT4-fs (loop8): 1 truncate cleaned up [ 262.908629][T16479] syz.7.4417: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 262.911496][T16453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.923313][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.7.4417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.923426][T16479] Tainted: [W]=WARN [ 262.923434][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.923449][T16479] Call Trace: [ 262.923457][T16479] [ 262.923466][T16479] __dump_stack+0x1d/0x30 [ 262.923500][T16479] dump_stack_lvl+0x95/0xd0 [ 262.923557][T16479] dump_stack+0x15/0x1b [ 262.923577][T16479] warn_alloc+0x145/0x1c0 [ 262.923600][T16479] ? rb_next+0x4b/0x80 [ 262.923629][T16479] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 262.923714][T16479] ? ctx_sched_in+0x34d/0x370 [ 262.923736][T16479] ? __rcu_read_unlock+0x4e/0x70 [ 262.923757][T16479] ? avc_has_perm_noaudit+0xab/0x130 [ 262.923821][T16479] vmalloc_user_noprof+0x7d/0xb0 [ 262.923846][T16479] ? xskq_create+0x80/0xe0 [ 262.923961][T16479] xskq_create+0x80/0xe0 [ 262.923987][T16479] xsk_init_queue+0x91/0xe0 [ 262.924010][T16479] xsk_setsockopt+0x3f5/0x640 [ 262.924036][T16479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.924062][T16479] __sys_setsockopt+0x184/0x200 [ 262.924120][T16479] __x64_sys_setsockopt+0x64/0x80 [ 262.924144][T16479] x64_sys_call+0x21d5/0x3000 [ 262.924170][T16479] do_syscall_64+0xc0/0x2a0 [ 262.924226][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.924248][T16479] RIP: 0033:0x7fa495bdacb9 [ 262.924266][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.924285][T16479] RSP: 002b:00007fa494637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.924318][T16479] RAX: ffffffffffffffda RBX: 00007fa495e55fa0 RCX: 00007fa495bdacb9 [ 262.924333][T16479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 262.924347][T16479] RBP: 00007fa495c48bf7 R08: 0000000000000004 R09: 0000000000000000 [ 262.924361][T16479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.924383][T16479] R13: 00007fa495e56038 R14: 00007fa495e55fa0 R15: 00007ffdb3a10f68 [ 262.924404][T16479] [ 262.924412][T16479] Mem-Info: [ 263.081914][T16487] lo speed is unknown, defaulting to 1000 [ 263.086650][T16479] active_anon:47190 inactive_anon:19435 isolated_anon:0 [ 263.086650][T16479] active_file:27620 inactive_file:2581 isolated_file:0 [ 263.086650][T16479] unevictable:16949 dirty:184 writeback:0 [ 263.086650][T16479] slab_reclaimable:4228 slab_unreclaimable:85766 [ 263.086650][T16479] mapped:32195 shmem:56863 pagetables:2311 [ 263.086650][T16479] sec_pagetables:0 bounce:0 [ 263.086650][T16479] kernel_misc_reclaimable:0 [ 263.086650][T16479] free:1618975 free_pcp:25631 free_cma:0 [ 263.192835][T16479] Node 0 active_anon:188760kB inactive_anon:77740kB active_file:110480kB inactive_file:10324kB unevictable:67796kB isolated(anon):0kB isolated(file):0kB mapped:130288kB dirty:736kB writeback:0kB shmem:227452kB kernel_stack:6496kB pagetables:9360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.192895][T16479] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.192968][T16479] lowmem_reserve[]: 0 2879 7858 7858 [ 263.192999][T16479] Node 0 DMA32 free:2945392kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 263.193084][T16479] lowmem_reserve[]: 0 0 4978 4978 [ 263.193117][T16479] Node 0 Normal free:3512832kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:188760kB inactive_anon:77740kB active_file:110480kB inactive_file:10324kB unevictable:67796kB writepending:736kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:98760kB local_pcp:97012kB free_cma:0kB [ 263.193312][T16479] lowmem_reserve[]: 0 0 0 0 [ 263.193344][T16479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.193527][T16479] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB [ 263.360084][T16479] Node 0 Normal: 7*4kB (UME) 365*8kB (UME) 671*16kB (UME) 253*32kB (UME) 245*64kB (UME) 177*128kB (UM) 88*256kB (UME) 81*512kB (UME) 134*1024kB (UME) 137*2048kB (UME) 725*4096kB (UM) = 3511508kB [ 263.379570][T16479] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 263.388976][T16479] 104066 total pagecache pages [ 263.393785][T16479] 37 pages in swap cache [ 263.398020][T16479] Free swap = 0kB [ 263.401843][T16479] Total swap = 124996kB [ 263.406013][T16479] 2097051 pages RAM [ 263.409899][T16479] 0 pages HighMem/MovableOnly [ 263.414595][T16479] 81396 pages reserved [ 263.419217][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.507454][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 263.507469][ T29] audit: type=1400 audit(1768979135.352:4463): avc: denied { name_bind } for pid=16522 comm="syz.7.4423" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 263.687776][T16516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.718949][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4424'. [ 263.738060][T16516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.757880][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4424'. [ 263.875604][T16571] netlink: 1335 bytes leftover after parsing attributes in process `syz.7.4428'. [ 263.930227][T16575] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4426'. [ 264.331123][ T29] audit: type=1400 audit(1768979136.182:4464): avc: denied { map } for pid=16580 comm="syz.8.4432" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 264.334640][T16581] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4432'. [ 264.492457][T16592] loop8: detected capacity change from 0 to 512 [ 264.509401][T16592] EXT4-fs: inline encryption not supported [ 264.529656][T16592] ext4: Bad value for 'debug_want_extra_isize' [ 264.549492][T16592] loop8: detected capacity change from 0 to 2048 [ 264.602747][T16592] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 264.799051][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4440'. [ 264.989742][ T4553] net_ratelimit: 36 callbacks suppressed [ 264.989760][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 265.008186][T16613] RDS: rds_bind could not find a transport for b7d6:6aeb:db8b:b5c5:e6e6:9dda:4ab3:b9d2, load rds_tcp or rds_rdma? [ 265.177074][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 265.215596][T16618] vlan2: entered promiscuous mode [ 265.220928][T16618] bridge3: entered promiscuous mode [ 265.226249][T16618] vlan2: entered allmulticast mode [ 265.232004][T16618] bridge3: entered allmulticast mode [ 265.329812][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 265.440486][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 265.457591][T16628] syz_tun (unregistering): left allmulticast mode [ 265.549720][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 265.650910][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.669465][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 265.744531][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.754957][T16639] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 265.766713][ T29] audit: type=1400 audit(1768979137.612:4465): avc: denied { relabelto } for pid=16638 comm="syz.4.4452" name="931" dev="tmpfs" ino=4862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 265.793170][ T29] audit: type=1400 audit(1768979137.612:4466): avc: denied { associate } for pid=16638 comm="syz.4.4452" name="931" dev="tmpfs" ino=4862 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 265.820653][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 265.906157][ T29] audit: type=1400 audit(1768979137.692:4467): avc: denied { add_name } for pid=16638 comm="syz.4.4452" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 265.930835][ T29] audit: type=1400 audit(1768979137.692:4468): avc: denied { associate } for pid=16638 comm="syz.4.4452" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 265.952245][ T29] audit: type=1400 audit(1768979137.702:4469): avc: denied { remove_name } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 265.979075][ T29] audit: type=1400 audit(1768979137.702:4470): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=4867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 265.990105][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 266.001671][ T29] audit: type=1400 audit(1768979137.702:4471): avc: denied { rmdir } for pid=3320 comm="syz-executor" name="931" dev="tmpfs" ino=4862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 266.107266][T16649] hsr_slave_1 (unregistering): left promiscuous mode [ 266.371115][T16661] tipc: New replicast peer: 255.255.255.255 [ 266.377332][T16661] tipc: Enabled bearer , priority 10 [ 266.388184][T16663] __nla_validate_parse: 5 callbacks suppressed [ 266.388202][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4463'. [ 266.442730][T16663] team0: Port device team_slave_1 removed [ 266.482155][T16641] loop8: detected capacity change from 0 to 512 [ 266.557051][T16641] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 266.781048][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4465'. [ 266.796868][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4466'. [ 266.808120][T16675] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4466'. [ 267.186530][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4473'. [ 267.503694][ T4321] tipc: Node number set to 1592267517 [ 267.509249][ T29] audit: type=1326 audit(1768979139.072:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 268.410860][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4490'. [ 268.578833][T16758] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 268.735373][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4498'. [ 268.876900][T16777] vlan0: entered promiscuous mode [ 268.893410][T16777] team0: entered promiscuous mode [ 268.899169][T16777] team_slave_0: entered promiscuous mode [ 268.906800][T16777] team_slave_1: entered promiscuous mode [ 269.021221][T16784] netlink: 'syz.0.4501': attribute type 27 has an invalid length. [ 269.044676][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4503'. [ 269.054251][T16784] team1: left promiscuous mode [ 269.059121][T16784] team1: left allmulticast mode [ 269.064592][T16784] gtp0: left promiscuous mode [ 269.070566][T16784] macsec1: left promiscuous mode [ 269.075538][T16784] macsec1: left allmulticast mode [ 269.080893][T16784] veth10: left promiscuous mode [ 269.085742][T16784] veth10: left allmulticast mode [ 269.134585][T16789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16789 comm=syz.7.4503 [ 269.170572][T16788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.179414][T16788] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.188887][ T4507] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.200741][ T4507] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.219091][ T4507] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.228430][ T4507] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.259211][T16804] netlink: 'syz.5.4509': attribute type 1 has an invalid length. [ 269.273713][T16804] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.299308][T16804] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.306834][T16804] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 269.318571][T16804] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 269.347586][T16813] veth17: entered promiscuous mode [ 269.354359][T16813] bond8: (slave veth17): Enslaving as an active interface with a down link [ 269.371461][T16813] macvlan2: entered promiscuous mode [ 269.376788][T16813] macvlan2: entered allmulticast mode [ 269.383354][T16813] bond8: entered promiscuous mode [ 269.388940][T16813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.390808][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 269.390821][ T29] audit: type=1400 audit(1768979141.242:4519): avc: denied { setopt } for pid=16817 comm="syz.7.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 269.425443][T16813] bond8: left promiscuous mode [ 269.588847][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4516'. [ 269.676463][T16834] bridge0: entered allmulticast mode [ 269.692628][T16834] syz_tun: left allmulticast mode [ 269.697690][T16834] syz_tun: left promiscuous mode [ 269.702839][T16834] bridge0: port 3(syz_tun) entered disabled state [ 269.710440][T16834] bridge_slave_1: left allmulticast mode [ 269.716095][T16834] bridge_slave_1: left promiscuous mode [ 269.721906][T16834] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.825313][T16836] netlink: 'syz.7.4522': attribute type 1 has an invalid length. [ 269.839450][T16836] bond10: entered promiscuous mode [ 269.844678][T16836] bond10: entered allmulticast mode [ 269.851106][T16836] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.867224][T16836] erspan1: entered allmulticast mode [ 269.875099][T16836] bond10: (slave erspan1): making interface the new active one [ 269.883488][T16836] erspan1: entered promiscuous mode [ 269.889951][T16836] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 269.912563][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4522'. [ 269.928722][T16845] tipc: Enabling of bearer rejected, already enabled [ 269.948903][T16836] bond10 (unregistering): (slave erspan1): Releasing active interface [ 269.957268][T16836] erspan1: left promiscuous mode [ 269.964210][T16836] bond10 (unregistering): Released all slaves [ 270.019795][ T4549] net_ratelimit: 38 callbacks suppressed [ 270.019813][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 270.139754][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 270.249730][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 270.284481][T16880] netlink: 'syz.0.4537': attribute type 13 has an invalid length. [ 270.357262][ T29] audit: type=1326 audit(1768979142.202:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.363565][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 270.382195][ T29] audit: type=1326 audit(1768979142.202:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.411536][ T29] audit: type=1326 audit(1768979142.212:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.435215][ T29] audit: type=1326 audit(1768979142.212:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.458892][ T29] audit: type=1326 audit(1768979142.212:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.482463][ T29] audit: type=1326 audit(1768979142.212:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.489788][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 270.506333][ T29] audit: type=1326 audit(1768979142.212:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.537014][ T29] audit: type=1326 audit(1768979142.212:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.560624][ T29] audit: type=1326 audit(1768979142.212:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.0.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 270.619918][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 270.869764][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 270.989711][ T4529] bond2: (slave bridge6): failed to get link speed/duplex [ 271.046394][ T8453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.086872][T16910] netlink: 'syz.5.4544': attribute type 1 has an invalid length. [ 271.113023][T16910] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 271.123903][T16910] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 271.140453][ T4529] bond2: (slave bridge6): failed to get link speed/duplex [ 271.173943][T16915] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 271.199337][T16910] macvlan0: entered promiscuous mode [ 271.205464][T16910] macvlan0: entered allmulticast mode [ 271.211618][T16910] bond9: entered promiscuous mode [ 271.217007][T16910] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 271.225906][T16910] bond9: left promiscuous mode [ 273.118395][T16982] 9pnet_fd: p9_fd_create_tcp (16982): problem connecting socket to 127.0.0.1 [ 273.499521][T17005] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 273.531420][T17007] netlink: 'syz.7.4579': attribute type 15 has an invalid length. [ 273.539315][T17007] __nla_validate_parse: 2 callbacks suppressed [ 273.539330][T17007] netlink: 25 bytes leftover after parsing attributes in process `syz.7.4579'. [ 273.583866][T17005] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 273.632828][T17005] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 273.671002][T17005] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 273.736657][ T4554] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 273.760161][ T4554] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 273.776481][ T4554] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 274.846565][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 274.846581][ T29] audit: type=1400 audit(1768979146.692:4633): avc: denied { mounton } for pid=17043 comm="syz.0.4602" path="/bus" dev="rootfs" ino=69211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 275.119799][ T4565] net_ratelimit: 37 callbacks suppressed [ 275.119814][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 275.169982][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.232111][ T29] audit: type=1326 audit(1768979147.082:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.255675][ T29] audit: type=1326 audit(1768979147.082:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.279319][ T29] audit: type=1326 audit(1768979147.082:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.279382][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 275.303613][ T29] audit: type=1326 audit(1768979147.082:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.341014][T17010] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.452278][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 275.460159][ T29] audit: type=1326 audit(1768979147.082:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.483831][ T29] audit: type=1326 audit(1768979147.082:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.507355][ T29] audit: type=1326 audit(1768979147.082:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.530899][ T29] audit: type=1326 audit(1768979147.162:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.554567][ T29] audit: type=1326 audit(1768979147.162:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17058 comm="syz.7.4597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa495bdacb9 code=0x7ffc0000 [ 275.580468][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 275.591942][T17010] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.651431][T17010] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 275.690248][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 275.723966][ T4565] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 275.759813][ T4565] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 275.799938][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 275.813177][ T4565] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 275.909493][ T4565] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 275.918090][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 276.030670][ T1770] bond2: (slave bridge6): failed to get link speed/duplex [ 276.139931][ T4529] bond2: (slave bridge6): failed to get link speed/duplex [ 276.999209][T17095] tipc: Failed to remove unknown binding: 66,0,0/2886997162:730499792/730499793 [ 277.050173][T17097] tipc: Failed to remove unknown binding: 66,0,0/2886997162:730499792/730499793 [ 277.051835][T17092] lo speed is unknown, defaulting to 1000 [ 277.166500][T17100] netlink: 'syz.7.4608': attribute type 1 has an invalid length. [ 277.193847][T17100] bond10: entered promiscuous mode [ 277.200067][T17100] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.217356][T17100] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4608'. [ 277.226772][T17100] bond10: entered allmulticast mode [ 277.242128][T17100] bond10: (slave bridge11): making interface the new active one [ 277.249988][T17100] bridge11: entered promiscuous mode [ 277.255468][T17100] bridge11: entered allmulticast mode [ 277.262894][T17100] bond10: (slave bridge11): Enslaving as an active interface with an up link [ 277.531852][T17122] veth24: entered promiscuous mode [ 277.537015][T17122] veth24: entered allmulticast mode [ 277.548526][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4614'. [ 278.322082][T17137] netlink: 'syz.4.4619': attribute type 1 has an invalid length. [ 278.550653][T17137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.863988][T17142] veth17: entered promiscuous mode [ 278.935488][T17142] bond6: (slave veth17): Enslaving as an active interface with a down link [ 278.965666][T17144] erspan0: entered allmulticast mode [ 279.008114][T17144] bond6: (slave erspan0): making interface the new active one [ 279.042039][T17144] erspan0: entered promiscuous mode [ 279.062735][T17144] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 279.295136][T17158] lo speed is unknown, defaulting to 1000 [ 279.669354][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4627'. [ 279.854699][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 279.854715][ T29] audit: type=1326 audit(1768979151.702:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.109769][ T29] audit: type=1326 audit(1768979151.742:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.134198][ T29] audit: type=1326 audit(1768979151.742:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.157743][ T29] audit: type=1326 audit(1768979151.742:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.181906][ T29] audit: type=1326 audit(1768979151.742:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.205416][ T29] audit: type=1326 audit(1768979151.742:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.229689][ T29] audit: type=1326 audit(1768979151.742:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.253848][ T29] audit: type=1326 audit(1768979151.742:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.260319][ T4507] net_ratelimit: 31 callbacks suppressed [ 280.260336][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 280.277356][ T29] audit: type=1326 audit(1768979151.742:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.315202][ T29] audit: type=1326 audit(1768979151.742:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17175 comm="syz.0.4629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5813b7acb9 code=0x7ffc0000 [ 280.389745][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 280.494272][T17174] syz.5.4630 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 280.508219][T17174] CPU: 1 UID: 0 PID: 17174 Comm: syz.5.4630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.508254][T17174] Tainted: [W]=WARN [ 280.508330][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.508343][T17174] Call Trace: [ 280.508352][T17174] [ 280.508361][T17174] __dump_stack+0x1d/0x30 [ 280.508420][T17174] dump_stack_lvl+0x95/0xd0 [ 280.508442][T17174] dump_stack+0x15/0x1b [ 280.508511][T17174] dump_header+0x80/0x240 [ 280.508535][T17174] oom_kill_process+0x295/0x350 [ 280.508561][T17174] out_of_memory+0x97d/0xb80 [ 280.508663][T17174] try_charge_memcg+0x62e/0xa10 [ 280.508707][T17174] obj_cgroup_charge_pages+0xa6/0x150 [ 280.508734][T17174] __memcg_kmem_charge_page+0x9e/0x170 [ 280.508765][T17174] __alloc_frozen_pages_noprof+0x18a/0x350 [ 280.508840][T17174] alloc_pages_mpol+0xb3/0x260 [ 280.508874][T17174] alloc_pages_noprof+0x8f/0x130 [ 280.508986][T17174] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 280.509140][T17174] __kvmalloc_node_noprof+0x471/0x680 [ 280.509174][T17174] ? ip_set_alloc+0x24/0x30 [ 280.509197][T17174] ? ip_set_alloc+0x24/0x30 [ 280.509233][T17174] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 280.509257][T17174] ip_set_alloc+0x24/0x30 [ 280.509284][T17174] hash_netiface_create+0x282/0x740 [ 280.509316][T17174] ? __pfx_hash_netiface_create+0x10/0x10 [ 280.509359][T17174] ip_set_create+0x3cf/0x970 [ 280.509400][T17174] ? __nla_parse+0x40/0x60 [ 280.509470][T17174] nfnetlink_rcv_msg+0x509/0x5d0 [ 280.509516][T17174] netlink_rcv_skb+0x123/0x220 [ 280.509617][T17174] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.509649][T17174] nfnetlink_rcv+0x167/0x1720 [ 280.509676][T17174] ? prep_new_page+0x4f/0x1f0 [ 280.509699][T17174] ? get_page_from_freelist+0x13a5/0x1400 [ 280.509727][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 280.509764][T17174] ? uprobe_mmap+0x60c/0xd20 [ 280.509795][T17174] ? vma_set_page_prot+0xc3/0xf0 [ 280.509823][T17174] ? flush_tlb_func+0x160/0x270 [ 280.509900][T17174] ? smp_call_function_many_cond+0x80b/0xc30 [ 280.509925][T17174] ? _raw_spin_lock_bh+0x56/0xb0 [ 280.509957][T17174] ? should_fail_ex+0x30/0x280 [ 280.509979][T17174] ? selinux_nlmsg_lookup+0x99/0x890 [ 280.510072][T17174] ? __rcu_read_unlock+0x33/0x70 [ 280.510093][T17174] ? __netlink_lookup+0x276/0x2b0 [ 280.510124][T17174] netlink_unicast+0x5c0/0x690 [ 280.510157][T17174] netlink_sendmsg+0x5c8/0x6f0 [ 280.510282][T17174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.510312][T17174] __sock_sendmsg+0x145/0x170 [ 280.510446][T17174] ____sys_sendmsg+0x31e/0x4a0 [ 280.510475][T17174] ___sys_sendmsg+0x195/0x1e0 [ 280.510585][T17174] __x64_sys_sendmsg+0xd4/0x160 [ 280.510653][T17174] x64_sys_call+0x17ba/0x3000 [ 280.510679][T17174] do_syscall_64+0xc0/0x2a0 [ 280.510709][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.510752][T17174] RIP: 0033:0x7f39910eacb9 [ 280.510770][T17174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.510839][T17174] RSP: 002b:00007f398fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.510861][T17174] RAX: ffffffffffffffda RBX: 00007f3991365fa0 RCX: 00007f39910eacb9 [ 280.510876][T17174] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 280.510891][T17174] RBP: 00007f3991158bf7 R08: 0000000000000000 R09: 0000000000000000 [ 280.510904][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.510918][T17174] R13: 00007f3991366038 R14: 00007f3991365fa0 R15: 00007fffed87b6a8 [ 280.510939][T17174] [ 280.511031][T17174] memory: usage 293660kB, limit 307200kB, failcnt 1174 [ 280.639712][ T4529] bond2: (slave bridge6): failed to get link speed/duplex [ 280.644038][T17174] memory+swap: usage 269424kB, limit 9007199254740988kB, failcnt 0 [ 280.882337][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.888158][T17174] kmem: usage 174356kB, limit 9007199254740988kB, failcnt 0 [ 280.902884][T17174] Memory cgroup stats for /syz5: [ 280.917415][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 280.940434][ T8493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.972192][T17174] cache 80871424 [ 280.975831][T17174] rss 8790016 [ 280.979579][T17174] shmem 80302080 [ 280.983201][T17174] mapped_file 45056 [ 280.987010][T17174] dirty 28672 [ 280.990331][T17174] writeback 0 [ 280.993653][T17174] workingset_refault_anon 4320 [ 280.998455][T17174] workingset_refault_file 2442 [ 281.003934][T17174] swap 0 [ 281.006785][T17174] swapcached 0 [ 281.010262][T17174] pgpgin 341238 [ 281.013711][T17174] pgpgout 319338 [ 281.017302][T17174] pgfault 284165 [ 281.020923][T17174] pgmajfault 576 [ 281.024463][T17174] inactive_anon 78381056 [ 281.028706][T17174] active_anon 10629120 [ 281.033475][T17174] inactive_file 0 [ 281.033480][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 281.037106][T17174] active_file 577536 [ 281.037115][T17174] unevictable 0 [ 281.037123][T17174] hierarchical_memory_limit 314572800 [ 281.037133][T17174] hierarchical_memsw_limit 9223372036854771712 [ 281.063736][T17174] total_cache 80871424 [ 281.067841][T17174] total_rss 8790016 [ 281.071803][T17174] total_shmem 80302080 [ 281.076034][T17174] total_mapped_file 45056 [ 281.080431][T17174] total_dirty 28672 [ 281.084299][T17174] total_writeback 0 [ 281.088171][T17174] total_workingset_refault_anon 4320 [ 281.094180][T17174] total_workingset_refault_file 2442 [ 281.099534][T17174] total_swap 0 [ 281.102920][T17174] total_swapcached 0 [ 281.106803][T17174] total_pgpgin 341238 [ 281.110809][T17174] total_pgpgout 319338 [ 281.114878][T17174] total_pgfault 284165 [ 281.118944][T17174] total_pgmajfault 576 [ 281.123639][T17174] total_inactive_anon 78381056 [ 281.128416][T17174] total_active_anon 10629120 [ 281.133018][T17174] total_inactive_file 0 [ 281.137257][T17174] total_active_file 577536 [ 281.142679][T17174] total_unevictable 0 [ 281.146687][T17174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4630,pid=17173,uid=0 [ 281.162015][T17174] Memory cgroup out of memory: Killed process 17173 (syz.5.4630) total-vm:100616kB, anon-rss:9528kB, file-rss:26128kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 281.479955][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 281.510540][T17195] syz.7.4636: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 281.525821][T17195] CPU: 1 UID: 0 PID: 17195 Comm: syz.7.4636 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.525855][T17195] Tainted: [W]=WARN [ 281.525862][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.525874][T17195] Call Trace: [ 281.525881][T17195] [ 281.525890][T17195] __dump_stack+0x1d/0x30 [ 281.525954][T17195] dump_stack_lvl+0x95/0xd0 [ 281.526050][T17195] dump_stack+0x15/0x1b [ 281.526073][T17195] warn_alloc+0x145/0x1c0 [ 281.526101][T17195] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 281.526161][T17195] ? __futex_wait+0x1fd/0x260 [ 281.526197][T17195] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.526310][T17195] ? __rcu_read_unlock+0x4e/0x70 [ 281.526327][T17195] ? avc_has_perm_noaudit+0xab/0x130 [ 281.526368][T17195] vmalloc_user_noprof+0x7d/0xb0 [ 281.526408][T17195] ? xskq_create+0x80/0xe0 [ 281.526450][T17195] xskq_create+0x80/0xe0 [ 281.526479][T17195] xsk_init_queue+0x91/0xe0 [ 281.526564][T17195] xsk_setsockopt+0x3f5/0x640 [ 281.526588][T17195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.526610][T17195] __sys_setsockopt+0x184/0x200 [ 281.526677][T17195] __x64_sys_setsockopt+0x64/0x80 [ 281.526702][T17195] x64_sys_call+0x21d5/0x3000 [ 281.526801][T17195] do_syscall_64+0xc0/0x2a0 [ 281.526834][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.526894][T17195] RIP: 0033:0x7fa495bdacb9 [ 281.526910][T17195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.526930][T17195] RSP: 002b:00007fa494637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.526952][T17195] RAX: ffffffffffffffda RBX: 00007fa495e55fa0 RCX: 00007fa495bdacb9 [ 281.526968][T17195] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 281.527001][T17195] RBP: 00007fa495c48bf7 R08: 0000000000000004 R09: 0000000000000000 [ 281.527016][T17195] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.527030][T17195] R13: 00007fa495e56038 R14: 00007fa495e55fa0 R15: 00007ffdb3a10f68 [ 281.527053][T17195] [ 281.527060][T17195] Mem-Info: [ 281.673053][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 281.683367][T17195] active_anon:10838 inactive_anon:55694 isolated_anon:0 [ 281.683367][T17195] active_file:25209 inactive_file:2586 isolated_file:0 [ 281.683367][T17195] unevictable:16965 dirty:70 writeback:0 [ 281.683367][T17195] slab_reclaimable:4252 slab_unreclaimable:82568 [ 281.683367][T17195] mapped:30003 shmem:57195 pagetables:2150 [ 281.683367][T17195] sec_pagetables:0 bounce:0 [ 281.683367][T17195] kernel_misc_reclaimable:0 [ 281.683367][T17195] free:1608731 free_pcp:41897 free_cma:0 [ 281.792212][T17195] Node 0 active_anon:43700kB inactive_anon:222776kB active_file:100836kB inactive_file:10344kB unevictable:67860kB isolated(anon):0kB isolated(file):0kB mapped:120012kB dirty:280kB writeback:0kB shmem:229128kB kernel_stack:6544kB pagetables:8600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.821429][T17195] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.851845][T17195] lowmem_reserve[]: 0 2879 7858 7858 [ 281.857219][T17195] Node 0 DMA32 free:2945392kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 281.889326][T17195] lowmem_reserve[]: 0 0 4978 4978 [ 281.894653][T17195] Node 0 Normal free:3474172kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43468kB inactive_anon:222776kB active_file:100836kB inactive_file:10344kB unevictable:67860kB writepending:280kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:163920kB local_pcp:102032kB free_cma:0kB [ 281.929395][T17195] lowmem_reserve[]: 0 0 0 0 [ 281.934057][T17195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.946864][T17195] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB [ 281.963671][T17195] Node 0 Normal: 1601*4kB (UME) 978*8kB (UME) 466*16kB (UM) 255*32kB (UME) 392*64kB (UME) 64*128kB (UME) 65*256kB (UME) 120*512kB (UME) 201*1024kB (UME) 165*2048kB (UME) 681*4096kB (UM) = 3474324kB [ 281.983466][T17195] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 281.993608][T17195] 101982 total pagecache pages [ 281.998376][T17195] 37 pages in swap cache [ 282.002634][T17195] Free swap = 0kB [ 282.006355][T17195] Total swap = 124996kB [ 282.010527][T17195] 2097051 pages RAM [ 282.014330][T17195] 0 pages HighMem/MovableOnly [ 282.018997][T17195] 81396 pages reserved [ 282.069736][T17204] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 282.166708][T17204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.271062][T17210] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.278323][T17210] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.301687][T17210] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 282.327739][T17204] gretap2: entered promiscuous mode [ 282.335713][T17204] bond7: (slave gretap2): making interface the new active one [ 282.352427][T17204] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 282.444342][T17232] veth20: entered promiscuous mode [ 282.449511][T17232] veth20: entered allmulticast mode [ 282.640663][T17252] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 283.198509][T17281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4664'. [ 283.285564][T17285] lo speed is unknown, defaulting to 1000 [ 283.461931][T17304] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17304 comm=syz.0.4673 [ 283.797192][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'. [ 284.133613][T17337] lo: Caught tx_queue_len zero misconfig [ 284.158229][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4684'. [ 284.168063][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4684'. [ 284.257632][T17343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17343 comm=syz.5.4686 [ 284.338299][T17350] loop8: detected capacity change from 0 to 2048 [ 284.384941][T17350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.401648][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4692'. [ 284.416390][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4690'. [ 284.449457][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4690'. [ 284.503900][T17367] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4695'. [ 284.549561][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.667378][T17379] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4700'. [ 284.676700][T17379] 0ªî{X¹¦: renamed from gretap0 [ 284.689855][T17379] 0ªî{X¹¦: entered allmulticast mode [ 284.726020][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4698'. [ 284.918421][T17386] syz.7.4703 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 284.928033][T17386] CPU: 1 UID: 0 PID: 17386 Comm: syz.7.4703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.928066][T17386] Tainted: [W]=WARN [ 284.928072][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.928084][T17386] Call Trace: [ 284.928091][T17386] [ 284.928097][T17386] __dump_stack+0x1d/0x30 [ 284.928117][T17386] dump_stack_lvl+0x95/0xd0 [ 284.928134][T17386] dump_stack+0x15/0x1b [ 284.928151][T17386] dump_header+0x80/0x240 [ 284.928168][T17386] oom_kill_process+0x295/0x350 [ 284.928191][T17386] out_of_memory+0x97d/0xb80 [ 284.928209][T17386] try_charge_memcg+0x62e/0xa10 [ 284.928240][T17386] obj_cgroup_charge_pages+0xa6/0x150 [ 284.928266][T17386] obj_cgroup_charge_account+0x73/0x1a0 [ 284.928293][T17386] __memcg_slab_post_alloc_hook+0x396/0x530 [ 284.928323][T17386] kmem_cache_alloc_noprof+0x2b4/0x490 [ 284.928347][T17386] ? vm_area_dup+0x33/0x2c0 [ 284.928369][T17386] vm_area_dup+0x33/0x2c0 [ 284.928389][T17386] __split_vma+0xe9/0x660 [ 284.928423][T17386] vma_modify+0xb30/0xd30 [ 284.928449][T17386] ? mas_ascend+0x1d7/0x540 [ 284.928472][T17386] vma_modify_flags+0x182/0x210 [ 284.928500][T17386] mprotect_fixup+0x30e/0x5e0 [ 284.928531][T17386] do_mprotect_pkey+0x67b/0x920 [ 284.928573][T17386] __x64_sys_mprotect+0x48/0x60 [ 284.928597][T17386] x64_sys_call+0x2c3b/0x3000 [ 284.928616][T17386] do_syscall_64+0xc0/0x2a0 [ 284.928638][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.928655][T17386] RIP: 0033:0x7fa495bdaab7 [ 284.928669][T17386] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.928683][T17386] RSP: 002b:00007ffdb3a10f08 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 284.928700][T17386] RAX: ffffffffffffffda RBX: 00007fa4945e46c0 RCX: 00007fa495bdaab7 [ 284.928711][T17386] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fa4945c5000 [ 284.928721][T17386] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 284.928733][T17386] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdb3a11060 [ 284.928746][T17386] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 284.928764][T17386] [ 284.928769][T17386] memory: usage 307200kB, limit 307200kB, failcnt 223 [ 284.932633][T17396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4706'. [ 284.940240][T17386] memory+swap: usage 343564kB, limit 9007199254740988kB, failcnt 0 [ 285.031997][T17401] netlink: 'syz.4.4707': attribute type 10 has an invalid length. [ 285.036433][T17386] kmem: usage 265560kB, limit 9007199254740988kB, failcnt 0 [ 285.036450][T17386] Memory cgroup stats for /syz7: [ 285.143264][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4708'. [ 285.166069][T17386] cache 41713664 [ 285.203549][T17386] rss 901120 [ 285.206735][T17386] shmem 32452608 [ 285.210311][T17386] mapped_file 0 [ 285.213761][T17386] dirty 0 [ 285.216687][T17386] writeback 0 [ 285.219991][T17386] workingset_refault_anon 19 [ 285.224564][T17386] workingset_refault_file 33 [ 285.229150][T17386] swap 37236736 [ 285.232641][T17386] swapcached 16384 [ 285.236348][T17386] pgpgin 384961 [ 285.239814][T17386] pgpgout 374551 [ 285.243340][T17386] pgfault 333662 [ 285.246867][T17386] pgmajfault 88 [ 285.250342][T17386] inactive_anon 32100352 [ 285.254572][T17386] active_anon 1273856 [ 285.258539][T17386] inactive_file 0 [ 285.262196][T17386] active_file 73728 [ 285.262729][ T3425] net_ratelimit: 34 callbacks suppressed [ 285.262742][ T3425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.265989][T17386] unevictable 9191424 [ 285.265998][T17386] hierarchical_memory_limit 314572800 [ 285.266005][T17386] hierarchical_memsw_limit 9223372036854771712 [ 285.266013][T17386] total_cache 41713664 [ 285.292939][ T1770] bond2: (slave bridge6): failed to get link speed/duplex [ 285.295543][T17386] total_rss 901120 [ 285.310593][T17386] total_shmem 32452608 [ 285.314649][T17386] total_mapped_file 0 [ 285.318620][T17386] total_dirty 0 [ 285.322104][T17386] total_writeback 0 [ 285.325911][T17386] total_workingset_refault_anon 19 [ 285.331085][T17386] total_workingset_refault_file 33 [ 285.336185][T17386] total_swap 37236736 [ 285.340185][T17386] total_swapcached 16384 [ 285.344417][T17386] total_pgpgin 384961 [ 285.348385][T17386] total_pgpgout 374551 [ 285.352474][T17386] total_pgfault 333662 [ 285.356616][T17386] total_pgmajfault 88 [ 285.360627][T17386] total_inactive_anon 32100352 [ 285.365390][T17386] total_active_anon 1273856 [ 285.369912][T17386] total_inactive_file 0 [ 285.374145][T17386] total_active_file 73728 [ 285.378458][T17386] total_unevictable 9191424 [ 285.382978][T17386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4694,pid=17365,uid=0 [ 285.397667][T17386] Memory cgroup out of memory: Killed process 17365 (syz.7.4694) total-vm:96048kB, anon-rss:1372kB, file-rss:29568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 285.414870][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4708'. [ 285.434371][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 285.496690][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 285.508441][T17411] macvlan2: entered promiscuous mode [ 285.513935][T17411] bond0: entered promiscuous mode [ 285.519000][T17411] bond_slave_0: entered promiscuous mode [ 285.524929][T17411] bond_slave_1: entered promiscuous mode [ 285.570958][T17411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.599280][T17409] lo speed is unknown, defaulting to 1000 [ 285.668956][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 285.669794][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 285.762591][T17388] syz.7.4703 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 285.776586][T17388] CPU: 1 UID: 0 PID: 17388 Comm: syz.7.4703 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 285.776632][T17388] Tainted: [W]=WARN [ 285.776640][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.776655][T17388] Call Trace: [ 285.776672][T17388] [ 285.776682][T17388] __dump_stack+0x1d/0x30 [ 285.776731][T17388] dump_stack_lvl+0x95/0xd0 [ 285.776807][T17388] dump_stack+0x15/0x1b [ 285.776830][T17388] dump_header+0x80/0x240 [ 285.776875][T17388] oom_kill_process+0x295/0x350 [ 285.776899][T17388] out_of_memory+0x97d/0xb80 [ 285.776925][T17388] try_charge_memcg+0x62e/0xa10 [ 285.776970][T17388] obj_cgroup_charge_pages+0xa6/0x150 [ 285.777020][T17388] __memcg_kmem_charge_page+0x9e/0x170 [ 285.777050][T17388] __alloc_frozen_pages_noprof+0x18a/0x350 [ 285.777084][T17388] alloc_pages_mpol+0xb3/0x260 [ 285.777196][T17388] alloc_pages_noprof+0x8f/0x130 [ 285.777228][T17388] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 285.777267][T17388] __kvmalloc_node_noprof+0x471/0x680 [ 285.777325][T17388] ? ip_set_alloc+0x24/0x30 [ 285.777414][T17388] ? ip_set_alloc+0x24/0x30 [ 285.777441][T17388] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 285.777468][T17388] ip_set_alloc+0x24/0x30 [ 285.777570][T17388] hash_netiface_create+0x282/0x740 [ 285.777641][T17388] ? __pfx_hash_netiface_create+0x10/0x10 [ 285.777710][T17388] ip_set_create+0x3cf/0x970 [ 285.777753][T17388] ? __nla_parse+0x40/0x60 [ 285.777817][T17388] nfnetlink_rcv_msg+0x509/0x5d0 [ 285.777862][T17388] netlink_rcv_skb+0x123/0x220 [ 285.777890][T17388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 285.777921][T17388] nfnetlink_rcv+0x167/0x1720 [ 285.777964][T17388] ? prep_new_page+0x4f/0x1f0 [ 285.777990][T17388] ? get_page_from_freelist+0x13a5/0x1400 [ 285.778022][T17388] ? uprobe_mmap+0x60c/0xd20 [ 285.778124][T17388] ? vma_set_page_prot+0xc3/0xf0 [ 285.778152][T17388] ? mas_prev_slot+0x661/0x6c0 [ 285.778180][T17388] ? should_fail_ex+0x30/0x280 [ 285.778201][T17388] ? try_charge_memcg+0x215/0xa10 [ 285.778314][T17388] ? _raw_spin_lock_bh+0x56/0xb0 [ 285.778388][T17388] ? should_fail_ex+0x30/0x280 [ 285.778411][T17388] ? selinux_nlmsg_lookup+0x99/0x890 [ 285.778439][T17388] ? __rcu_read_unlock+0x33/0x70 [ 285.778535][T17388] ? __netlink_lookup+0x276/0x2b0 [ 285.778694][T17388] netlink_unicast+0x5c0/0x690 [ 285.778720][T17388] netlink_sendmsg+0x5c8/0x6f0 [ 285.778770][T17388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.778849][T17388] __sock_sendmsg+0x145/0x170 [ 285.778913][T17388] ____sys_sendmsg+0x31e/0x4a0 [ 285.778942][T17388] ___sys_sendmsg+0x195/0x1e0 [ 285.778983][T17388] __x64_sys_sendmsg+0xd4/0x160 [ 285.779011][T17388] x64_sys_call+0x17ba/0x3000 [ 285.779124][T17388] do_syscall_64+0xc0/0x2a0 [ 285.779156][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.779180][T17388] RIP: 0033:0x7fa495bdacb9 [ 285.779195][T17388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.779259][T17388] RSP: 002b:00007fa494637028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.779340][T17388] RAX: ffffffffffffffda RBX: 00007fa495e55fa0 RCX: 00007fa495bdacb9 [ 285.779356][T17388] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 285.779498][T17388] RBP: 00007fa495c48bf7 R08: 0000000000000000 R09: 0000000000000000 [ 285.779513][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.779547][T17388] R13: 00007fa495e56038 R14: 00007fa495e55fa0 R15: 00007ffdb3a10f68 [ 285.779571][T17388] [ 285.779579][T17388] memory: usage 307200kB, limit 307200kB, failcnt 400 [ 285.789736][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 285.791228][T17388] memory+swap: usage 343564kB, limit 9007199254740988kB, failcnt 0 [ 285.814242][T17421] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4715'. [ 285.815800][T17388] kmem: usage 248180kB, limit 9007199254740988kB, failcnt 0 [ 285.899720][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 285.900291][T17388] Memory cgroup stats for [ 286.009724][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 286.010361][T17388] /syz7 [ 286.119720][ T4554] bond2: (slave bridge6): failed to get link speed/duplex [ 286.121792][T17388] : [ 286.192103][T17388] cache 51392512 [ 286.198091][T17388] rss 9019392 [ 286.201382][T17388] shmem 42127360 [ 286.204956][T17388] mapped_file 0 [ 286.208388][T17388] dirty 0 [ 286.211347][T17388] writeback 0 [ 286.214652][T17388] workingset_refault_anon 19 [ 286.219229][T17388] workingset_refault_file 33 [ 286.223894][T17388] swap 37236736 [ 286.227340][T17388] swapcached 16384 [ 286.229723][ T1770] bond2: (slave bridge6): failed to get link speed/duplex [ 286.231142][T17388] pgpgin 389374 [ 286.242038][T17388] pgpgout 374619 [ 286.245562][T17388] pgfault 336038 [ 286.249132][T17388] pgmajfault 88 [ 286.252665][T17388] inactive_anon 32100352 [ 286.256892][T17388] active_anon 19066880 [ 286.260963][T17388] inactive_file 73728 [ 286.264937][T17388] active_file 0 [ 286.268447][T17388] unevictable 9195520 [ 286.272492][T17388] hierarchical_memory_limit 314572800 [ 286.277849][T17388] hierarchical_memsw_limit 9223372036854771712 [ 286.284138][T17388] total_cache 51392512 [ 286.288296][T17388] total_rss 9019392 [ 286.292186][T17388] total_shmem 42127360 [ 286.296244][T17388] total_mapped_file 0 [ 286.300256][T17388] total_dirty 0 [ 286.303703][T17388] total_writeback 0 [ 286.307484][T17388] total_workingset_refault_anon 19 [ 286.312619][T17388] total_workingset_refault_file 33 [ 286.317720][T17388] total_swap 37236736 [ 286.321706][T17388] total_swapcached 16384 [ 286.326004][T17388] total_pgpgin 389374 [ 286.330018][T17388] total_pgpgout 374619 [ 286.334145][T17388] total_pgfault 336038 [ 286.338186][T17388] total_pgmajfault 88 [ 286.339717][ T1770] bond2: (slave bridge6): failed to get link speed/duplex [ 286.342163][T17388] total_inactive_anon 32100352 [ 286.354018][T17388] total_active_anon 19066880 [ 286.358607][T17388] total_inactive_file 73728 [ 286.363117][T17388] total_active_file 0 [ 286.367094][T17388] total_unevictable 9195520 [ 286.371631][T17388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4703,pid=17386,uid=0 [ 286.386325][T17388] Memory cgroup out of memory: Killed process 17386 (syz.7.4703) total-vm:96380kB, anon-rss:9432kB, file-rss:22028kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 286.459293][T17430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17430 comm=syz.4.4717 [ 286.593433][T17438] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4720'. [ 286.610548][T17439] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4719'. [ 286.991484][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 286.991500][ T29] audit: type=1400 audit(1768979158.842:5054): avc: denied { name_bind } for pid=17459 comm="syz.4.4728" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 288.470285][T17500] lo speed is unknown, defaulting to 1000 [ 288.507904][T17504] ªªªªªª: renamed from hsr0 [ 288.532903][T17505] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4742'. [ 288.556559][T17502] lo speed is unknown, defaulting to 1000 [ 288.572905][T17508] macvlan0: entered promiscuous mode [ 288.578243][T17508] bond0: entered promiscuous mode [ 288.583724][T17508] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 288.645199][T17512] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17512 comm=syz.0.4744 [ 288.657895][ T29] audit: type=1400 audit(1768979160.492:5055): avc: denied { nlmsg_write } for pid=17511 comm="syz.0.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 288.788604][ T29] audit: type=1400 audit(1768979160.632:5056): avc: denied { getopt } for pid=17522 comm="syz.7.4751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.850178][T17523] bond4: (slave dummy0): Releasing active interface [ 289.191839][ T29] audit: type=1326 audit(1768979161.032:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17555 comm="syz.0.4761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5813b74ad7 code=0x0 [ 290.171032][T17567] loop8: detected capacity change from 0 to 2048 [ 290.206129][T17567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.221513][T17572] bond0: Caught tx_queue_len zero misconfig [ 290.233543][T17567] __nla_validate_parse: 4 callbacks suppressed [ 290.233558][T17567] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4764'. [ 290.248983][T17567] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4764'. [ 290.294467][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.341897][ T4553] net_ratelimit: 40 callbacks suppressed [ 290.341914][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 290.486648][ T4556] bond2: (slave bridge6): failed to get link speed/duplex [ 290.600583][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 290.668657][T17594] netlink: 'syz.8.4771': attribute type 1 has an invalid length. [ 290.710543][T17594] ip6tnl0: Caught tx_queue_len zero misconfig [ 290.729782][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 290.770266][ T8453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.839733][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 290.930073][ T947] erspan0: left promiscuous mode [ 290.949876][ T4549] bond2: (slave bridge6): failed to get link speed/duplex [ 291.059872][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 291.105202][T17603] lo speed is unknown, defaulting to 1000 [ 291.170638][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 291.184832][T17612] netlink: 'syz.5.4773': attribute type 13 has an invalid length. [ 291.299110][T17620] loop8: detected capacity change from 0 to 8192 [ 291.403432][T17612] bond0: left promiscuous mode [ 291.416594][T17614] tipc: Enabling of bearer rejected, failed to enable media [ 291.425746][ T4556] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 291.434368][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 291.450773][ T4556] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 291.484325][ T4556] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 291.519822][ T4556] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 291.553308][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4779'. [ 291.564760][T17629] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4779'. [ 291.600616][T17632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17632 comm=syz.5.4789 [ 291.681362][T17647] veth0_macvtap: Caught tx_queue_len zero misconfig [ 292.204553][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4786'. [ 292.301109][ T29] audit: type=1400 audit(1768979164.152:5058): avc: denied { ioctl } for pid=17661 comm="syz.0.4791" path="socket:[71656]" dev="sockfs" ino=71656 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 292.341278][T17666] netlink: 'syz.5.4792': attribute type 10 has an invalid length. [ 292.352212][T17666] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.479806][T17673] 9p: Bad value for 'wfdno' [ 292.485404][T17673] netlink: 'syz.4.4795': attribute type 4 has an invalid length. [ 292.614453][T17684] tipc: Enabling of bearer rejected, failed to enable media [ 292.703910][T17692] tipc: Enabling of bearer rejected, failed to enable media [ 292.885913][T17679] loop8: detected capacity change from 0 to 512 [ 292.928022][T17679] EXT4-fs: Ignoring removed i_version option [ 292.934165][T17679] EXT4-fs: Ignoring removed nobh option [ 292.940441][T17710] netlink: 'syz.5.4806': attribute type 1 has an invalid length. [ 292.943081][T17679] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.995068][T17679] EXT4-fs (loop8): 1 truncate cleaned up [ 293.012029][T17679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.202278][T17724] veth0_macvtap: Caught tx_queue_len zero misconfig [ 293.337401][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4811'. [ 293.348450][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4811'. [ 293.358199][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4811'. [ 293.367444][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4811'. [ 293.377098][T17726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4811'. [ 293.477161][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.781253][ T29] audit: type=1326 audit(1768979165.632:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17739 comm="syz.8.4816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fdfee324ad7 code=0x0 [ 294.097302][ T29] audit: type=1326 audit(1768979165.942:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.4.4818" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x0 [ 294.656821][T17764] lo speed is unknown, defaulting to 1000 [ 294.965288][ T29] audit: type=1400 audit(1768979166.812:5061): avc: denied { ioctl } for pid=17769 comm="syz.8.4823" path="socket:[72303]" dev="sockfs" ino=72303 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 295.076333][T17773] lo speed is unknown, defaulting to 1000 [ 295.100584][T17775] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 295.140177][T17772] loop8: detected capacity change from 0 to 8192 [ 295.161476][T17777] ip6tnl0: Caught tx_queue_len zero misconfig [ 295.200424][T17776] lo speed is unknown, defaulting to 1000 [ 295.251022][T17780] bridge10: entered allmulticast mode [ 295.265522][T17782] tipc: Enabling of bearer rejected, failed to enable media [ 295.335891][ T29] audit: type=1400 audit(1768979167.182:5062): avc: denied { remount } for pid=17785 comm="syz.7.4828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 295.399755][ T4551] net_ratelimit: 41 callbacks suppressed [ 295.399794][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 295.419941][ T29] audit: type=1400 audit(1768979167.242:5063): avc: denied { rename } for pid=17792 comm="syz.5.4831" name="file0" dev="tmpfs" ino=2644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 295.621596][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 296.044258][ T3425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.065399][T17816] netlink: 'syz.0.4837': attribute type 1 has an invalid length. [ 296.073298][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 296.113468][T17816] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.190597][T17816] bond9: (slave gretap2): making interface the new active one [ 296.228103][T17825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17825 comm=syz.0.4837 [ 296.272138][T17816] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 296.304684][T17827] __nla_validate_parse: 3 callbacks suppressed [ 296.304702][T17827] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4841'. [ 296.317509][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 296.319995][T17827] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4841'. [ 296.327997][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.336055][T17827] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4841'. [ 296.349138][T17806] lo speed is unknown, defaulting to 1000 [ 296.429762][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 296.454475][ T29] audit: type=1326 audit(1768979168.302:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 296.490585][T17827] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4841'. [ 296.509758][ T29] audit: type=1326 audit(1768979168.322:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 296.533445][ T29] audit: type=1326 audit(1768979168.322:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 296.557009][ T29] audit: type=1326 audit(1768979168.322:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.4.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f770fe7acb9 code=0x7ffc0000 [ 296.580642][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 296.689848][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 296.819765][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 296.855794][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4847'. [ 297.242593][T17853] bond6: left allmulticast mode [ 297.354024][T17849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.389161][T17855] netlink: 'syz.8.4852': attribute type 4 has an invalid length. [ 297.397017][T17855] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4852'. [ 297.433609][T17849] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4849'. [ 297.460563][T17855] .`: renamed from bond0 [ 297.519642][T17862] tipc: Enabling of bearer rejected, failed to enable media [ 297.687942][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4859'. [ 297.714847][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.740130][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4859'. [ 297.749038][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4859'. [ 297.778992][T17872] netlink: 'syz.8.4859': attribute type 10 has an invalid length. [ 298.048232][T17894] netlink: 'syz.0.4865': attribute type 1 has an invalid length. [ 298.072265][T17894] bond10: entered promiscuous mode [ 298.087869][T17894] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.153126][T17894] bond10: left promiscuous mode [ 298.176658][T17899] syzkaller0: entered promiscuous mode [ 298.182241][T17899] syzkaller0: entered allmulticast mode [ 298.194853][T17894] bond10: (slave bridge13): making interface the new active one [ 298.212378][T17894] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 298.341097][T17907] netlink: 'syz.0.4869': attribute type 10 has an invalid length. [ 298.361926][T17907] bridge0: entered promiscuous mode [ 298.367926][T17907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.459195][T17917] dummy0: entered promiscuous mode [ 298.470015][T17917] vlan0: entered promiscuous mode [ 298.500709][T17918] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.634535][T17918] bond10: (slave lo): Enslaving as a backup interface with an up link [ 299.503937][T17960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.511238][T17960] IPv6: NLM_F_CREATE should be set when creating new route [ 299.518451][T17960] IPv6: NLM_F_CREATE should be set when creating new route [ 299.526330][T17960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.534721][T17959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17959 comm=syz.5.4884 [ 299.562730][T17962] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4883' sets config #-1 [ 299.619877][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 299.619890][ T29] audit: type=1326 audit(1768979171.472:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.749117][ T29] audit: type=1326 audit(1768979171.502:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.772680][ T29] audit: type=1326 audit(1768979171.502:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.796210][ T29] audit: type=1326 audit(1768979171.502:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.819998][ T29] audit: type=1326 audit(1768979171.502:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.843528][ T29] audit: type=1326 audit(1768979171.502:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.867099][ T29] audit: type=1326 audit(1768979171.502:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 299.890638][ T29] audit: type=1326 audit(1768979171.502:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f39910eacb9 code=0x7ffc0000 [ 300.001290][ T29] audit: type=1326 audit(1768979171.772:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17974 comm="syz.8.4889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfee32acb9 code=0x0 [ 300.024382][ T29] audit: type=1400 audit(1768979171.822:5103): avc: denied { ioctl } for pid=17978 comm="syz.0.4890" path="socket:[72653]" dev="sockfs" ino=72653 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 300.165524][T17946] syz.4.4882 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 300.179449][T17946] CPU: 1 UID: 0 PID: 17946 Comm: syz.4.4882 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.179558][T17946] Tainted: [W]=WARN [ 300.179565][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.179632][T17946] Call Trace: [ 300.179640][T17946] [ 300.179650][T17946] __dump_stack+0x1d/0x30 [ 300.179681][T17946] dump_stack_lvl+0x95/0xd0 [ 300.179702][T17946] dump_stack+0x15/0x1b [ 300.179725][T17946] dump_header+0x80/0x240 [ 300.179748][T17946] oom_kill_process+0x295/0x350 [ 300.179790][T17946] out_of_memory+0x97d/0xb80 [ 300.179810][T17946] try_charge_memcg+0x62e/0xa10 [ 300.179854][T17946] obj_cgroup_charge_pages+0xa6/0x150 [ 300.179905][T17946] __memcg_kmem_charge_page+0x9e/0x170 [ 300.179934][T17946] __alloc_frozen_pages_noprof+0x18a/0x350 [ 300.180073][T17946] alloc_pages_mpol+0xb3/0x260 [ 300.180104][T17946] alloc_pages_noprof+0x8f/0x130 [ 300.180129][T17946] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 300.180253][T17946] __kvmalloc_node_noprof+0x471/0x680 [ 300.180281][T17946] ? ip_set_alloc+0x24/0x30 [ 300.180308][T17946] ? ip_set_alloc+0x24/0x30 [ 300.180334][T17946] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 300.180363][T17946] ip_set_alloc+0x24/0x30 [ 300.180415][T17946] hash_netiface_create+0x282/0x740 [ 300.180443][T17946] ? __pfx_hash_netiface_create+0x10/0x10 [ 300.180472][T17946] ip_set_create+0x3cf/0x970 [ 300.180581][T17946] ? __nla_parse+0x40/0x60 [ 300.180607][T17946] nfnetlink_rcv_msg+0x509/0x5d0 [ 300.180683][T17946] netlink_rcv_skb+0x123/0x220 [ 300.180710][T17946] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 300.180735][T17946] nfnetlink_rcv+0x167/0x1720 [ 300.180764][T17946] ? __list_del_entry_valid_or_report+0x65/0x130 [ 300.180827][T17946] ? __rmqueue_pcplist+0x9b6/0xb80 [ 300.180850][T17946] ? _raw_spin_lock_bh+0x56/0xb0 [ 300.180878][T17946] ? should_fail_ex+0x30/0x280 [ 300.180901][T17946] ? selinux_nlmsg_lookup+0x99/0x890 [ 300.180943][T17946] ? __rcu_read_unlock+0x33/0x70 [ 300.180960][T17946] ? __netlink_lookup+0x276/0x2b0 [ 300.181057][T17946] netlink_unicast+0x5c0/0x690 [ 300.181085][T17946] netlink_sendmsg+0x5c8/0x6f0 [ 300.181157][T17946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.181237][T17946] __sock_sendmsg+0x145/0x170 [ 300.181265][T17946] ____sys_sendmsg+0x31e/0x4a0 [ 300.181371][T17946] ___sys_sendmsg+0x195/0x1e0 [ 300.181406][T17946] __x64_sys_sendmsg+0xd4/0x160 [ 300.181502][T17946] x64_sys_call+0x17ba/0x3000 [ 300.181528][T17946] do_syscall_64+0xc0/0x2a0 [ 300.181626][T17946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.181652][T17946] RIP: 0033:0x7f770fe7acb9 [ 300.181670][T17946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.181692][T17946] RSP: 002b:00007f770e8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.181777][T17946] RAX: ffffffffffffffda RBX: 00007f77100f5fa0 RCX: 00007f770fe7acb9 [ 300.181794][T17946] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 300.181810][T17946] RBP: 00007f770fee8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 300.181824][T17946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.181836][T17946] R13: 00007f77100f6038 R14: 00007f77100f5fa0 R15: 00007fffe93ac578 [ 300.181854][T17946] [ 300.501916][T17946] memory: usage 307200kB, limit 307200kB, failcnt 1914 [ 300.509040][T17946] memory+swap: usage 375196kB, limit 9007199254740988kB, failcnt 0 [ 300.516965][T17946] kmem: usage 306272kB, limit 9007199254740988kB, failcnt 0 [ 300.524303][T17946] Memory cgroup stats for /syz4: [ 300.527428][ T7676] net_ratelimit: 31 callbacks suppressed [ 300.527442][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.550260][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 300.574326][T17946] cache 200704 [ 300.577712][T17946] rss 610304 [ 300.580960][T17946] shmem 200704 [ 300.584317][T17946] mapped_file 0 [ 300.587759][T17946] dirty 0 [ 300.590759][T17946] writeback 0 [ 300.594034][T17946] workingset_refault_anon 3536 [ 300.598790][T17946] workingset_refault_file 4036 [ 300.603642][T17946] swap 69627904 [ 300.607085][T17946] swapcached 135168 [ 300.610901][T17946] pgpgin 541056 [ 300.614357][T17946] pgpgout 540824 [ 300.617888][T17946] pgfault 418030 [ 300.621442][T17946] pgmajfault 591 [ 300.625009][T17946] inactive_anon 0 [ 300.628691][T17946] active_anon 946176 [ 300.632608][T17946] inactive_file 0 [ 300.636227][T17946] active_file 4096 [ 300.639945][T17946] unevictable 0 [ 300.643393][T17946] hierarchical_memory_limit 314572800 [ 300.648755][T17946] hierarchical_memsw_limit 9223372036854771712 [ 300.654953][T17946] total_cache 200704 [ 300.658835][T17946] total_rss 610304 [ 300.662621][T17946] total_shmem 200704 [ 300.666499][T17946] total_mapped_file 0 [ 300.670519][T17946] total_dirty 0 [ 300.674006][T17946] total_writeback 0 [ 300.677799][T17946] total_workingset_refault_anon 3536 [ 300.683115][T17946] total_workingset_refault_file 4036 [ 300.688659][T17946] total_swap 69627904 [ 300.692665][T17946] total_swapcached 135168 [ 300.697150][T17946] total_pgpgin 541056 [ 300.700821][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 300.701132][T17946] total_pgpgout 540824 [ 300.701141][T17946] total_pgfault 418030 [ 300.701148][T17946] total_pgmajfault 591 [ 300.701155][T17946] total_inactive_anon 0 [ 300.724725][T17946] total_active_anon 946176 [ 300.729310][T17946] total_inactive_file 0 [ 300.733488][T17946] total_active_file 4096 [ 300.737733][T17946] total_unevictable 0 [ 300.741732][T17946] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4882,pid=17943,uid=0 [ 300.756620][T17946] Memory cgroup out of memory: Killed process 17943 (syz.4.4882) total-vm:94264kB, anon-rss:1208kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 300.810334][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 300.878925][T18007] loop8: detected capacity change from 0 to 512 [ 300.916935][T18007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.925707][T18007] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.935266][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 301.000316][T18007] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.4898: Allocating blocks 41-42 which overlap fs metadata [ 301.046327][T18007] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.4898: Allocating blocks 41-42 which overlap fs metadata [ 301.050099][ T568] bond2: (slave bridge6): failed to get link speed/duplex [ 301.098302][T18007] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4898: Failed to acquire dquot type 1 [ 301.113300][T18007] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 301.127916][T18007] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4898: corrupted inode contents [ 301.142124][T18007] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.4898: mark_inode_dirty error [ 301.154003][T18007] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4898: corrupted inode contents [ 301.166592][T18007] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.4898: mark_inode_dirty error [ 301.178038][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 301.194081][T18024] netlink: 'syz.5.4903': attribute type 12 has an invalid length. [ 301.202202][T18007] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4898: corrupted inode contents [ 301.217619][T18007] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 301.218682][T18026] tipc: Enabling of bearer rejected, already enabled [ 301.226934][T18007] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.4898: corrupted inode contents [ 301.249127][T18007] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.4898: mark_inode_dirty error [ 301.260515][T18007] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 301.269787][T18007] EXT4-fs (loop8): 1 truncate cleaned up [ 301.275754][T18007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.289782][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 301.311810][T18007] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4898: Failed to acquire dquot type 1 [ 301.324647][T18007] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4898: Failed to acquire dquot type 1 [ 301.348625][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.399786][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 301.419773][T18035] __nla_validate_parse: 16 callbacks suppressed [ 301.419789][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4907'. [ 301.509846][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 301.660657][T18051] loop8: detected capacity change from 0 to 1024 [ 301.667348][T18051] EXT4-fs: Ignoring removed orlov option [ 301.684859][T18051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.704891][T18051] netlink: 388 bytes leftover after parsing attributes in process `syz.8.4911'. [ 301.876708][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4915'. [ 301.919461][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.127406][T18086] loop8: detected capacity change from 0 to 2048 [ 302.184119][T18086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.236527][T18086] ext4 filesystem being mounted at /711/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.249444][T18086] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4933'. [ 302.260076][T18086] netlink: 'syz.8.4933': attribute type 10 has an invalid length. [ 302.303257][T18094] macvlan1: Caught tx_queue_len zero misconfig [ 302.315574][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.406002][T18099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18099 comm=syz.0.4928 [ 302.493687][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.553680][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.612793][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.678233][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.709869][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.745642][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4929'. [ 302.763723][T18111] loop8: detected capacity change from 0 to 512 [ 302.792102][T18111] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.012479][T18128] netlink: 'syz.8.4927': attribute type 4 has an invalid length. [ 303.052434][T18128] netlink: 'syz.8.4927': attribute type 4 has an invalid length. [ 303.090969][ T8914] lo speed is unknown, defaulting to 1000 [ 303.096766][ T8914] syz2: Port: 1 Link ACTIVE [ 303.345807][T18124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18124 comm=syz.4.4935 [ 303.596202][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.712894][T18169] loop8: detected capacity change from 0 to 512 [ 303.728252][T18169] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.4951: error while reading EA inode 32 err=-116 [ 303.766808][T18169] EXT4-fs (loop8): Remounting filesystem read-only [ 303.787054][T18169] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 303.813200][T18169] EXT4-fs (loop8): 1 orphan inode deleted [ 303.825775][T18169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.483734][T18191] lo speed is unknown, defaulting to 1000 [ 304.903135][ T6494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.314838][T18206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18206 comm=syz.5.4963 [ 305.420632][T18208] netlink: 'syz.7.4964': attribute type 4 has an invalid length. [ 305.508167][T18208] .`: renamed from bond0 [ 305.571299][ T4529] net_ratelimit: 39 callbacks suppressed [ 305.571321][ T4529] bond2: (slave bridge6): failed to get link speed/duplex [ 305.731660][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 305.839856][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 306.158218][ T4538] bond2: (slave bridge6): failed to get link speed/duplex [ 306.425830][ T4507] bond2: (slave bridge6): failed to get link speed/duplex [ 306.435056][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.455512][T18220] netlink: 'syz.7.4969': attribute type 3 has an invalid length. [ 306.463388][T18220] __nla_validate_parse: 10 callbacks suppressed [ 306.463402][T18220] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4969'. [ 306.506061][T18231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4973'. [ 306.539765][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 306.650344][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 306.744208][T18243] tipc: Enabling of bearer rejected, already enabled [ 306.759994][ T947] bond2: (slave bridge6): failed to get link speed/duplex [ 306.771341][T18243] tipc: Enabled bearer , priority 10 [ 306.870093][ T4525] bond2: (slave bridge6): failed to get link speed/duplex [ 307.519023][T18284] ================================================================== [ 307.527139][T18284] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 307.535747][T18284] [ 307.538064][T18284] write to 0xffff88814a73e0a8 of 8 bytes by task 18283 on cpu 0: [ 307.545777][T18284] shmem_file_splice_read+0x470/0x600 [ 307.551155][T18284] splice_direct_to_actor+0x26e/0x670 [ 307.556530][T18284] do_splice_direct+0x119/0x1a0 [ 307.561392][T18284] do_sendfile+0x380/0x650 [ 307.565903][T18284] __x64_sys_sendfile64+0x105/0x150 [ 307.571105][T18284] x64_sys_call+0x2db1/0x3000 [ 307.575795][T18284] do_syscall_64+0xc0/0x2a0 [ 307.580293][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.586177][T18284] [ 307.588493][T18284] write to 0xffff88814a73e0a8 of 8 bytes by task 18284 on cpu 1: [ 307.596199][T18284] shmem_file_splice_read+0x470/0x600 [ 307.601574][T18284] splice_direct_to_actor+0x26e/0x670 [ 307.606966][T18284] do_splice_direct+0x119/0x1a0 [ 307.611824][T18284] do_sendfile+0x380/0x650 [ 307.616245][T18284] __x64_sys_sendfile64+0x105/0x150 [ 307.621443][T18284] x64_sys_call+0x2db1/0x3000 [ 307.626118][T18284] do_syscall_64+0xc0/0x2a0 [ 307.630624][T18284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.636516][T18284] [ 307.638833][T18284] value changed: 0x0000000000014740 -> 0x0000000000014762 [ 307.645934][T18284] [ 307.648250][T18284] Reported by Kernel Concurrency Sanitizer on: [ 307.654401][T18284] CPU: 1 UID: 0 PID: 18284 Comm: syz.7.4989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.665791][T18284] Tainted: [W]=WARN [ 307.669586][T18284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.679627][T18284] ================================================================== [ 310.612053][ T8453] net_ratelimit: 37 callbacks suppressed [ 310.612146][ T8453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.659774][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 310.689767][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 310.697589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.769906][ T4565] bond2: (slave bridge6): failed to get link speed/duplex [ 310.879760][ T2100] bond2: (slave bridge6): failed to get link speed/duplex [ 310.999748][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 311.109748][ T4553] bond2: (slave bridge6): failed to get link speed/duplex [ 311.219984][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 311.330176][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 311.439717][ T4537] bond2: (slave bridge6): failed to get link speed/duplex [ 315.680036][ T5437] net_ratelimit: 43 callbacks suppressed [ 315.680087][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 315.799720][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 315.813477][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.909727][ T4546] bond2: (slave bridge6): failed to get link speed/duplex [ 316.019733][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 316.129744][ T5437] bond2: (slave bridge6): failed to get link speed/duplex [ 316.239771][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 316.349752][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 316.459762][ T4551] bond2: (slave bridge6): failed to get link speed/duplex [ 316.579758][ T4537] bond2: (slave bridge6): failed to get link speed/duplex