last executing test programs: 4m50.488380854s ago: executing program 2 (id=1958): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 4m50.445611418s ago: executing program 2 (id=1961): r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 4m50.411084551s ago: executing program 2 (id=1963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x8010, &(0x7f0000000040), 0x1, 0x540, &(0x7f0000000b40)="$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") r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) 4m50.172829902s ago: executing program 2 (id=1973): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 4m49.85880521s ago: executing program 2 (id=1978): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, 0x0, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m49.493883393s ago: executing program 2 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x2000000004}, 0x18) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4m49.493471183s ago: executing program 32 (id=1988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x2000000004}, 0x18) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4m42.777504753s ago: executing program 4 (id=2184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x200, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x800, 0x4, 0x1a}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 4m42.631956786s ago: executing program 4 (id=2193): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r0, r1, 0x0) 4m42.611816978s ago: executing program 4 (id=2195): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x4040000) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x60000090) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) 4m42.436987454s ago: executing program 4 (id=2203): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) gettid() 4m41.80706704s ago: executing program 4 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m41.502088057s ago: executing program 4 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 4m41.501905097s ago: executing program 33 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 4m32.30065055s ago: executing program 6 (id=2363): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setresuid(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 4m32.229683416s ago: executing program 6 (id=2366): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 4m32.088276069s ago: executing program 6 (id=2371): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) 4m31.781143506s ago: executing program 6 (id=2383): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 4m31.744754969s ago: executing program 6 (id=2385): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x7}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r2, 0x4}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r3, 0x4}, &(0x7f00000002c0)=0x8) 4m31.50647508s ago: executing program 3 (id=2394): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 4m31.455602225s ago: executing program 6 (id=2396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r3, 0x4) 4m31.454704785s ago: executing program 3 (id=2408): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 4m31.414348948s ago: executing program 34 (id=2396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r3, 0x4) 4m31.401650649s ago: executing program 3 (id=2398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x4) 4m31.358635334s ago: executing program 3 (id=2400): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 4m31.323397117s ago: executing program 3 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)="e8", 0x1}], 0x1}}], 0x1, 0x20008050) 4m29.649268126s ago: executing program 3 (id=2439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0x512b, 0x800, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m29.595188411s ago: executing program 35 (id=2439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0x512b, 0x800, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m58.540555461s ago: executing program 7 (id=6499): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000005"], 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m58.419698432s ago: executing program 7 (id=6502): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x41ee, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r2, 0x0, 0x2a00, 0x2101, 0x0, 0x0) 1m58.419415782s ago: executing program 7 (id=6503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x2) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r3, 0x0, 0x0) 1m58.413615922s ago: executing program 7 (id=6505): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) add_key$keyring(&(0x7f0000000300), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m57.466793017s ago: executing program 7 (id=6521): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0xffffffc3, 0x4) 1m57.269996525s ago: executing program 7 (id=6524): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 1m57.269836825s ago: executing program 36 (id=6524): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 1.824379776s ago: executing program 8 (id=9607): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.775231651s ago: executing program 8 (id=9609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xa7, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='gtp\x00\xf3\x90F\x0e\xb9cc\xc8\xb1)\xbcI\xf9\x11\xc7>\f\x91\xdc*w\f\xceU\xda\rP\a}\x1a@\xf1M\x92\xa11q6}%\xd4\x8c1\xaf\xfc\x1c\x16y\xc7Vk\xfd\xf8\xd65g?\xc5\xc6\xf0\xa0\x95i\xe6\xfe\xdf\x9aUa\'\xf7\x13C\xe9\xce8\x8fm\x9e\xaf\xce?\xd3\xc9\xd7\x03\xa8\x04W\x04.\xce-\xa0\x85\xcd\x90\xf9\x00\x00\x00\x00\x00\x00\x0e?g\xeeO\"I_\xf1b%V\x9f\x80\x1b\t\xca\xb4O') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e7ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/20], 0x48) 1.677997039s ago: executing program 8 (id=9611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0, 0x0, 0x7fffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.498641795s ago: executing program 8 (id=9615): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.456738529s ago: executing program 8 (id=9616): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f00000016c0)="$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") perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@auto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x4, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) 920.773937ms ago: executing program 5 (id=9630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@remote, 0x4e22, 0x8, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x2}, {0x1, 0x3, 0x8, 0x6, 0x2, 0x600d382c, 0x80, 0x4}, {0x17e, 0x9, 0x8, 0xfffffffffffffff8}, 0x100, 0x6e6bbb, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x4, 0x3, 0x7, 0x8, 0x6, 0x400}}, 0xe8) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 566.034379ms ago: executing program 8 (id=9637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r3 = socket(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x2, 0xb7, 0x9, 0x36b, 0x9, 0xe, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x44ac0092}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x800) 565.229399ms ago: executing program 1 (id=9649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfff5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) shutdown(r2, 0x1) sendto$inet6(r2, &(0x7f0000000540)="1a", 0x1, 0x24000001, 0x0, 0x0) 504.892485ms ago: executing program 9 (id=9641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='syzkaller\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 501.612895ms ago: executing program 0 (id=9653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 482.660237ms ago: executing program 9 (id=9642): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) 469.056278ms ago: executing program 0 (id=9643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 451.600619ms ago: executing program 9 (id=9644): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x4c, r2, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 448.809789ms ago: executing program 1 (id=9646): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x17) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000100)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 424.178342ms ago: executing program 0 (id=9647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) 372.286247ms ago: executing program 1 (id=9648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 370.150027ms ago: executing program 0 (id=9660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 336.50871ms ago: executing program 9 (id=9650): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000010000000a0000033c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001800c000280040001003a0000002c00018014000300fc01000000000000000000000000000014000400"], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) 334.46954ms ago: executing program 0 (id=9662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x19400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c010) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x6004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000cc0)='signal_generate\x00', r0}, 0x18) 274.435765ms ago: executing program 0 (id=9651): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xaa042, 0x100) write(r2, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 274.293776ms ago: executing program 5 (id=9652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 272.746046ms ago: executing program 1 (id=9664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1, 0x3, 0x3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 246.670158ms ago: executing program 9 (id=9666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 233.214419ms ago: executing program 5 (id=9654): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0xffffff02, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) 232.902149ms ago: executing program 9 (id=9655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 221.75737ms ago: executing program 1 (id=9656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 102.91243ms ago: executing program 1 (id=9657): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000a64080c0f88ba933f7a0e7f8", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/16, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42, 0x0, 0x0, 0xfffffff8}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 102.4339ms ago: executing program 5 (id=9658): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 169µs ago: executing program 5 (id=9659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "c409003a366eb7f8", "0b3ea924c47b25d7624cd362581725c7", "000400", "1600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 0s ago: executing program 5 (id=9661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) open_tree(0xffffffffffffff9c, 0x0, 0x80800) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x3f00, 0x3f00, 0x0, 0x0}) kernel console output (not intermixed with test programs): .017434][T22330] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 297.043921][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7120'. [ 297.054163][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7120'. [ 297.064056][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7120'. [ 297.303680][T22366] loop1: detected capacity change from 0 to 512 [ 297.354109][T22366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.423666][T22377] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 297.490464][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.513656][T22382] loop8: detected capacity change from 0 to 512 [ 297.549530][T22382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.692983][T22407] netlink: 'syz.1.7148': attribute type 30 has an invalid length. [ 297.747415][T22413] netlink: 'syz.5.7152': attribute type 1 has an invalid length. [ 297.748002][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.775372][T22413] bond6: entered promiscuous mode [ 297.781008][T22413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.802729][T22413] bond6: (slave bridge10): making interface the new active one [ 297.810364][T22413] bridge10: entered promiscuous mode [ 297.816765][T22413] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 297.864398][T22424] netlink: 'syz.5.7156': attribute type 1 has an invalid length. [ 297.865514][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7157'. [ 297.872178][T22424] netlink: 'syz.5.7156': attribute type 2 has an invalid length. [ 297.872256][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7156'. [ 297.895454][T22426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.003959][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 298.004033][ T29] audit: type=1326 audit(553.985:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22417 comm="syz.1.7154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x0 [ 298.336860][ T29] audit: type=1400 audit(554.315:13754): avc: denied { read } for pid=22460 comm="syz.5.7171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.433475][T22475] loop8: detected capacity change from 0 to 1024 [ 298.440332][T22475] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.450933][T22475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.479624][ T29] audit: type=1400 audit(554.465:13755): avc: denied { accept } for pid=22482 comm="syz.5.7181" lport=38279 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.502878][ T29] audit: type=1326 audit(554.465:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.526256][ T29] audit: type=1326 audit(554.465:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.550431][ T29] audit: type=1326 audit(554.465:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.574386][ T29] audit: type=1326 audit(554.465:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.598456][ T29] audit: type=1326 audit(554.465:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.621908][ T29] audit: type=1326 audit(554.465:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.645598][ T29] audit: type=1326 audit(554.465:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22484 comm="syz.0.7182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 298.679163][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.864496][T22504] ip6gre3: entered allmulticast mode [ 299.244852][T22535] program syz.8.7204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.940867][T22544] netlink: 'syz.9.7207': attribute type 30 has an invalid length. [ 299.952034][T22547] netlink: 'syz.5.7208': attribute type 39 has an invalid length. [ 300.002014][T22553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.091055][T22560] loop1: detected capacity change from 0 to 512 [ 300.103693][T22560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.155548][T22560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.227260][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.268767][T22585] netlink: 'syz.0.7226': attribute type 39 has an invalid length. [ 300.321305][T22591] loop1: detected capacity change from 0 to 512 [ 300.411240][T22601] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 300.568486][ T8101] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.176014][T22634] netlink: 'syz.9.7244': attribute type 39 has an invalid length. [ 301.292294][T22642] netlink: 'syz.9.7247': attribute type 1 has an invalid length. [ 301.307718][T22642] bond1: entered promiscuous mode [ 301.313632][T22642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.336222][T22642] bond1: (slave bridge2): making interface the new active one [ 301.344492][T22642] bridge2: entered promiscuous mode [ 301.352244][T22642] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 301.402350][T22645] syzkaller0: entered promiscuous mode [ 301.422477][T22645] syzkaller0 (unregistering): left promiscuous mode [ 301.485893][T22655] __nla_validate_parse: 6 callbacks suppressed [ 301.485908][T22655] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7253'. [ 301.544043][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7257'. [ 301.557421][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7259'. [ 301.560875][T22662] team2: entered promiscuous mode [ 301.572251][T22662] team2: entered allmulticast mode [ 301.577506][T22662] 8021q: adding VLAN 0 to HW filter on device team2 [ 301.694913][T22676] netlink: 'syz.8.7262': attribute type 1 has an invalid length. [ 301.712520][T22676] bond8: entered promiscuous mode [ 301.717865][T22676] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.745116][T22676] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.753677][T22676] bond8: (slave bond9): making interface the new active one [ 301.761234][T22676] bond9: entered promiscuous mode [ 301.767075][T22676] bond8: (slave bond9): Enslaving as an active interface with an up link [ 301.901087][T22684] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7264'. [ 302.274798][T22691] loop8: detected capacity change from 0 to 128 [ 302.309078][T22690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.588262][ T4980] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.588352][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 303.161144][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 303.161182][ T29] audit: type=1326 audit(559.145:13810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.281978][ T29] audit: type=1326 audit(559.175:13811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.305598][ T29] audit: type=1326 audit(559.175:13812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.329188][ T29] audit: type=1326 audit(559.185:13813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.353100][ T29] audit: type=1326 audit(559.185:13814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.376880][ T29] audit: type=1326 audit(559.185:13815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.400735][ T29] audit: type=1326 audit(559.185:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.424902][ T29] audit: type=1326 audit(559.185:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.448138][ T29] audit: type=1326 audit(559.185:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.471328][ T29] audit: type=1326 audit(559.185:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22716 comm="syz.0.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 303.565952][T22733] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 303.588497][T22731] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.791073][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7294'. [ 303.804321][T22759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7294'. [ 303.948962][T22783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7305'. [ 303.973857][T22785] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 304.023874][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 304.032833][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 304.201165][T22805] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 304.364134][T22818] loop1: detected capacity change from 0 to 2048 [ 304.383101][T22818] EXT4-fs (loop1): failed to initialize system zone (-117) [ 304.392517][T22818] EXT4-fs (loop1): mount failed [ 304.507098][T22841] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7330'. [ 305.209136][T22899] team1: entered promiscuous mode [ 305.214391][T22899] team1: entered allmulticast mode [ 305.219991][T22899] 8021q: adding VLAN 0 to HW filter on device team1 [ 305.510772][T22923] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 305.522218][T22923] bond2 (unregistering): Released all slaves [ 305.597979][T22937] tipc: Enabling of bearer rejected, already enabled [ 306.146601][T22976] loop1: detected capacity change from 0 to 128 [ 306.156806][T22976] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 306.165645][T22976] FAT-fs (loop1): Filesystem has been set read-only [ 306.285664][T22984] netlink: 'syz.1.7389': attribute type 7 has an invalid length. [ 306.384004][ T8109] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.801189][T23012] loop8: detected capacity change from 0 to 1024 [ 306.808556][T23012] EXT4-fs: inline encryption not supported [ 306.814486][T23012] EXT4-fs: Ignoring removed orlov option [ 306.830908][T23012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c019, mo2=0002] [ 306.839160][T23012] System zones: 0-1, 3-12 [ 306.844798][T23012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.869503][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.907211][T23020] loop8: detected capacity change from 0 to 512 [ 306.921153][T23020] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.945032][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.985451][T23026] __nla_validate_parse: 5 callbacks suppressed [ 306.985465][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7407'. [ 307.226359][T23043] pimreg: entered allmulticast mode [ 307.253240][T23043] pimreg: left allmulticast mode [ 307.399182][ T8078] Bluetooth: hci1: Frame reassembly failed (-84) [ 307.559153][T23068] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 307.570789][T23068] bond7 (unregistering): Released all slaves [ 308.212891][T23082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7440'. [ 308.230434][ T29] kauditd_printk_skb: 2014 callbacks suppressed [ 308.230448][ T29] audit: type=1326 audit(564.215:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.278548][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7432'. [ 308.287524][T23089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7432'. [ 308.292992][ T29] audit: type=1326 audit(564.215:15835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.319964][ T29] audit: type=1326 audit(564.215:15836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.343134][ T29] audit: type=1326 audit(564.215:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.366219][ T29] audit: type=1326 audit(564.215:15838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.389334][ T29] audit: type=1326 audit(564.215:15839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.412642][ T29] audit: type=1326 audit(564.215:15840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.435705][ T29] audit: type=1326 audit(564.215:15841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.438481][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 308.458918][ T29] audit: type=1326 audit(564.215:15842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.458942][ T29] audit: type=1326 audit(564.215:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.5.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 308.459188][ T4980] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 308.596719][T23099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7447'. [ 308.682960][T23107] loop8: detected capacity change from 0 to 512 [ 308.699800][T23107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.721697][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.738800][T23114] sch_fq: defrate 4294967295 ignored. [ 308.806410][T23121] netlink: 'syz.8.7444': attribute type 30 has an invalid length. [ 308.980982][T23136] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7453'. [ 308.989444][T23137] loop8: detected capacity change from 0 to 2048 [ 309.039922][T23137] EXT4-fs (loop8): failed to initialize system zone (-117) [ 309.047735][T23137] EXT4-fs (loop8): mount failed [ 309.104472][T23137] SELinux: failed to load policy [ 309.234667][T23154] sch_fq: defrate 4294967295 ignored. [ 309.410855][ T8101] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.419835][T23160] Bluetooth: hci0: Frame reassembly failed (-90) [ 309.468273][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 309.959846][T23182] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7470'. [ 310.382354][T23232] delete_channel: no stack [ 310.405085][T23236] loop9: detected capacity change from 0 to 512 [ 310.432461][T23236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.456843][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.474819][T23241] netlink: 'syz.1.7504': attribute type 1 has an invalid length. [ 310.501100][T23241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.521237][T23241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.528623][T23241] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 310.540066][T23241] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 310.769506][ T3427] IPVS: starting estimator thread 0... [ 310.858334][T23265] IPVS: using max 2448 ests per chain, 122400 per kthread [ 311.468268][ T3500] Bluetooth: hci0: command 0x1003 tx timeout [ 311.468251][ T4980] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 311.951985][T23339] loop8: detected capacity change from 0 to 1024 [ 312.031579][T23339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.075238][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.637281][T23384] bridge: RTM_NEWNEIGH with invalid ether address [ 312.858710][T23404] netlink: 'syz.8.7562': attribute type 1 has an invalid length. [ 312.874269][T23404] 8021q: adding VLAN 0 to HW filter on device bond10 [ 312.908921][T23404] 8021q: adding VLAN 0 to HW filter on device bond10 [ 312.918082][T23404] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.929220][T23404] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 312.940640][T23412] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7565'. [ 313.056452][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7572'. [ 313.246377][T23448] loop1: detected capacity change from 0 to 4096 [ 313.253896][T23448] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.260459][T23448] EXT4-fs: test_dummy_encryption option not supported [ 313.277602][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 313.277618][ T29] audit: type=1400 audit(569.255:16047): avc: denied { write } for pid=23447 comm="syz.1.7582" name="event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.307452][ T29] audit: type=1400 audit(569.255:16048): avc: denied { open } for pid=23447 comm="syz.1.7582" path="/dev/input/event2" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.332064][ T29] audit: type=1400 audit(569.255:16049): avc: denied { ioctl } for pid=23447 comm="syz.1.7582" path="/dev/input/event2" dev="devtmpfs" ino=248 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.472775][T23474] loop1: detected capacity change from 0 to 1024 [ 313.501614][T23474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.524155][ T29] audit: type=1400 audit(569.505:16050): avc: denied { watch watch_reads } for pid=23472 comm="syz.1.7594" path="/1000/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.547402][ T29] audit: type=1400 audit(569.505:16051): avc: denied { watch } for pid=23472 comm="syz.1.7594" path="/1000/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.570487][ T29] audit: type=1400 audit(569.505:16052): avc: denied { unlink } for pid=23472 comm="syz.1.7594" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.613212][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.659854][T23483] pim6reg: entered allmulticast mode [ 313.671696][T23483] pim6reg: left allmulticast mode [ 313.789973][T23498] ref_ctr_offset mismatch. inode: 0x147d offset: 0x4 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 314.006573][T23520] syzkaller0: entered allmulticast mode [ 314.029143][T23524] loop9: detected capacity change from 0 to 128 [ 314.060420][ T29] audit: type=1326 audit(570.045:16053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23523 comm="syz.9.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 314.083455][ T29] audit: type=1326 audit(570.045:16054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23523 comm="syz.9.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 314.107696][ T29] audit: type=1326 audit(570.085:16055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23523 comm="syz.9.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 314.131547][ T29] audit: type=1326 audit(570.085:16056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23523 comm="syz.9.7616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 314.253419][T23544] syzkaller0: entered promiscuous mode [ 314.267476][T23520] syzkaller0 (unregistering): left promiscuous mode [ 314.274144][T23520] syzkaller0 (unregistering): left allmulticast mode [ 314.604823][T23580] netlink: 'syz.1.7638': attribute type 3 has an invalid length. [ 314.612851][T23580] netlink: 'syz.1.7638': attribute type 1 has an invalid length. [ 314.620726][T23580] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7638'. [ 314.674567][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7643'. [ 314.698045][T23590] netlink: 'syz.1.7644': attribute type 30 has an invalid length. [ 314.743671][ T8109] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.605502][T23681] lo speed is unknown, defaulting to 1000 [ 316.612220][T23681] lo speed is unknown, defaulting to 1000 [ 316.618161][T23681] lo speed is unknown, defaulting to 1000 [ 316.632445][T23681] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 316.642294][T23681] lo speed is unknown, defaulting to 1000 [ 316.644961][T23685] loop9: detected capacity change from 0 to 512 [ 316.648570][T23681] lo speed is unknown, defaulting to 1000 [ 316.663101][T23681] lo speed is unknown, defaulting to 1000 [ 316.670548][T23681] lo speed is unknown, defaulting to 1000 [ 316.677099][T23681] lo speed is unknown, defaulting to 1000 [ 316.694170][T23685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.748239][ T4980] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.797268][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.869431][T23725] blktrace: Concurrent blktraces are not allowed on loop17 [ 317.363783][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7726'. [ 317.427761][T23784] loop1: detected capacity change from 0 to 512 [ 317.437045][T23784] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.455780][T23784] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7724: invalid indirect mapped block 4294967295 (level 0) [ 317.470195][T23784] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7724: invalid indirect mapped block 4294967295 (level 1) [ 317.484925][T23784] EXT4-fs (loop1): 1 orphan inode deleted [ 317.490702][T23784] EXT4-fs (loop1): 1 truncate cleaned up [ 317.496738][T23784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.512643][T23784] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 317.556953][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.026385][T23823] lo speed is unknown, defaulting to 1000 [ 318.281302][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7744'. [ 318.298298][T23834] bridge_slave_1: left allmulticast mode [ 318.304251][T23834] bridge_slave_1: left promiscuous mode [ 318.310084][T23834] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.362650][T23834] bridge_slave_0: left allmulticast mode [ 318.368630][T23834] bridge_slave_0: left promiscuous mode [ 318.374830][T23834] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.540257][T23845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7749'. [ 318.737992][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 318.738021][ T29] audit: type=1326 audit(574.715:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23859 comm="syz.5.7754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f587b2af749 code=0x0 [ 318.976373][T23866] vlan0: entered allmulticast mode [ 319.364264][ T29] audit: type=1326 audit(575.345:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.399298][ T29] audit: type=1326 audit(575.375:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.422496][ T29] audit: type=1326 audit(575.375:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.445946][ T29] audit: type=1326 audit(575.375:16171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.468925][ T29] audit: type=1326 audit(575.375:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.491988][ T29] audit: type=1326 audit(575.375:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.515195][ T29] audit: type=1326 audit(575.375:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.538429][ T29] audit: type=1326 audit(575.375:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.561411][ T29] audit: type=1326 audit(575.375:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23888 comm="syz.1.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 319.607074][T23893] loop9: detected capacity change from 0 to 4096 [ 319.618612][T23893] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.625132][T23893] EXT4-fs: test_dummy_encryption option not supported [ 319.785532][T23919] loop8: detected capacity change from 0 to 512 [ 319.793703][T23919] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 319.804375][T23919] EXT4-fs (loop8): bad block size 8192 [ 319.843062][T23925] netlink: 124 bytes leftover after parsing attributes in process `syz.8.7784'. [ 319.852289][T23925] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7784'. [ 319.891052][T23930] blktrace: Concurrent blktraces are not allowed on loop11 [ 320.085352][T23944] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7794'. [ 320.112303][T23946] loop9: detected capacity change from 0 to 128 [ 320.522291][T23970] lo speed is unknown, defaulting to 1000 [ 320.573829][T23996] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.7813'. [ 320.615777][T23998] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7815'. [ 320.634947][T23998] IPVS: Unknown mcast interface: [ 321.373424][T24029] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7827'. [ 321.833578][T24068] loop9: detected capacity change from 0 to 1024 [ 321.863037][T24074] netlink: 'syz.5.7845': attribute type 10 has an invalid length. [ 321.864622][T24068] EXT4-fs: Ignoring removed bh option [ 321.870954][T24074] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7845'. [ 321.904213][T24068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.906665][T24074] dummy0: entered promiscuous mode [ 321.958806][T24079] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 322.024162][T24074] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 322.055388][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.232138][T24092] netlink: 'syz.5.7853': attribute type 10 has an invalid length. [ 322.240015][T24092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7853'. [ 322.277075][T24092] veth1_vlan: left promiscuous mode [ 322.284638][T24092] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 322.350118][T24088] lo speed is unknown, defaulting to 1000 [ 322.557984][T24116] loop9: detected capacity change from 0 to 1024 [ 322.590059][T24116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.701238][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.634888][T24169] __nla_validate_parse: 1 callbacks suppressed [ 323.634983][T24169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7881'. [ 323.819735][T24190] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7890'. [ 323.924979][ T3427] hid_parser_main: 19 callbacks suppressed [ 323.925077][ T3427] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 323.964291][ T3427] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.964910][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7896'. [ 324.043632][T24210] serio: Serial port ptm0 [ 324.053672][T24195] lo speed is unknown, defaulting to 1000 [ 324.184950][T24231] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7908'. [ 324.200723][T24210] serio: Serial port ptm0 [ 324.257334][T24242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7913'. [ 324.274845][T24242] ip6gre5: entered allmulticast mode [ 324.286233][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 324.286248][ T29] audit: type=1400 audit(580.265:16581): avc: denied { read } for pid=24243 comm="syz.8.7914" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 324.354680][T24249] loop8: detected capacity change from 0 to 1024 [ 324.372032][T24249] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 324.383736][T24249] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 324.415873][T24249] JBD2: no valid journal superblock found [ 324.421958][T24249] EXT4-fs (loop8): Could not load journal inode [ 324.428709][ T29] audit: type=1326 audit(580.405:16582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.452095][ T29] audit: type=1326 audit(580.405:16583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.475236][ T29] audit: type=1326 audit(580.415:16584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.498301][ T29] audit: type=1326 audit(580.415:16585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.534127][ T29] audit: type=1326 audit(580.415:16586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.557197][ T29] audit: type=1326 audit(580.415:16587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.559369][T24249] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 324.580231][ T29] audit: type=1326 audit(580.415:16588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.580261][ T29] audit: type=1326 audit(580.415:16589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.636358][ T29] audit: type=1326 audit(580.415:16590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24251 comm="syz.0.7919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 324.717341][T24260] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.7922'. [ 324.727101][T24260] netlink: zone id is out of range [ 324.732288][T24260] netlink: zone id is out of range [ 324.739930][T24260] netlink: zone id is out of range [ 324.745463][T24260] netlink: zone id is out of range [ 324.751393][T24260] netlink: del zone limit has 8 unknown bytes [ 324.777316][T24267] tipc: Enabling of bearer rejected, already enabled [ 324.785892][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7925'. [ 324.794969][T24267] tipc: Disabling bearer [ 324.876652][T24278] loop1: detected capacity change from 0 to 512 [ 324.883418][T24278] EXT4-fs: Ignoring removed i_version option [ 324.889837][T24278] EXT4-fs: Ignoring removed bh option [ 324.891149][T24280] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7930'. [ 324.988459][T24278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.226203][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.303873][T24265] Set syz1 is full, maxelem 65536 reached [ 325.373911][T24312] Falling back ldisc for ptm0. [ 325.416772][T24319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7944'. [ 325.426296][T24319] unsupported nlmsg_type 40 [ 325.445320][T24323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.454402][T24323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.986893][T24354] loop1: detected capacity change from 0 to 128 [ 326.314502][T24382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24382 comm=syz.8.7973 [ 326.332516][T24372] lo speed is unknown, defaulting to 1000 [ 326.422121][T24389] loop8: detected capacity change from 0 to 1024 [ 326.437509][T24387] loop9: detected capacity change from 0 to 2048 [ 326.438895][T24389] EXT4-fs: Ignoring removed bh option [ 326.459684][T24387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 326.486954][T24389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.537401][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.578416][T24387] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 326.608863][T24387] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1214 with error 28 [ 326.621599][T24387] EXT4-fs (loop9): This should not happen!! Data will be lost [ 326.621599][T24387] [ 326.631405][T24387] EXT4-fs (loop9): Total free blocks count 0 [ 326.637378][T24387] EXT4-fs (loop9): Free/Dirty block details [ 326.643365][T24387] EXT4-fs (loop9): free_blocks=2415919104 [ 326.649280][T24387] EXT4-fs (loop9): dirty_blocks=1216 [ 326.654573][T24387] EXT4-fs (loop9): Block reservation details [ 326.660612][T24387] EXT4-fs (loop9): i_reserved_data_blocks=76 [ 326.858923][T13854] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 1212 with error 28 [ 326.878655][T24420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7988'. [ 326.888062][T24420] netem: change failed [ 326.941063][T24430] tipc: Started in network mode [ 326.946124][T24430] tipc: Node identity ac14140f, cluster identity 4711 [ 326.954110][T24430] tipc: New replicast peer: 255.255.255.255 [ 326.960247][T24430] tipc: Enabled bearer , priority 10 [ 326.967713][T24430] tipc: Disabling bearer [ 327.020172][T24438] netlink: 'syz.0.7996': attribute type 30 has an invalid length. [ 327.436795][T24450] netlink: 'syz.0.8001': attribute type 7 has an invalid length. [ 327.446534][T24446] loop1: detected capacity change from 0 to 2048 [ 327.469023][T24446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 327.561260][T24446] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 327.580657][T24446] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1716 with error 28 [ 327.593390][T24446] EXT4-fs (loop1): This should not happen!! Data will be lost [ 327.593390][T24446] [ 327.603047][T24446] EXT4-fs (loop1): Total free blocks count 0 [ 327.609073][T24446] EXT4-fs (loop1): Free/Dirty block details [ 327.614970][T24446] EXT4-fs (loop1): free_blocks=2415919104 [ 327.620748][T24446] EXT4-fs (loop1): dirty_blocks=1728 [ 327.626078][T24446] EXT4-fs (loop1): Block reservation details [ 327.632108][T24446] EXT4-fs (loop1): i_reserved_data_blocks=108 [ 327.887807][T13999] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 70 with max blocks 1646 with error 28 [ 328.101963][T24497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24497 comm=syz.9.8019 [ 328.338826][T24509] loop8: detected capacity change from 0 to 2048 [ 328.359950][T24509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 328.401052][T24517] loop1: detected capacity change from 0 to 512 [ 328.418256][T24517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.436192][T24509] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.465882][T24517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 328.474174][T24517] System zones: 1-12 [ 328.478419][T24509] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1232 with error 28 [ 328.491114][T24509] EXT4-fs (loop8): This should not happen!! Data will be lost [ 328.491114][T24509] [ 328.500804][T24509] EXT4-fs (loop8): Total free blocks count 0 [ 328.506880][T24509] EXT4-fs (loop8): Free/Dirty block details [ 328.506897][T24509] EXT4-fs (loop8): free_blocks=2415919104 [ 328.506908][T24509] EXT4-fs (loop8): dirty_blocks=1232 [ 328.506920][T24509] EXT4-fs (loop8): Block reservation details [ 328.506931][T24509] EXT4-fs (loop8): i_reserved_data_blocks=77 [ 328.571537][T24517] EXT4-fs (loop1): 1 truncate cleaned up [ 328.607494][T24517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.640537][T24533] geneve2: entered promiscuous mode [ 328.646143][T24533] geneve2: entered allmulticast mode [ 328.697765][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.850120][T24561] __nla_validate_parse: 4 callbacks suppressed [ 328.850136][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8045'. [ 328.923677][ T8110] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1228 with error 28 [ 329.015484][T24574] loop9: detected capacity change from 0 to 512 [ 329.044435][T24574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.129941][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.183553][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8053'. [ 329.192997][T24583] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8053'. [ 329.257976][T24592] loop8: detected capacity change from 0 to 512 [ 329.279935][T24592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.660548][T24604] lo speed is unknown, defaulting to 1000 [ 329.861659][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.893394][T24627] SELinux: failed to load policy [ 330.146098][T24648] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8080'. [ 330.587633][T24679] gretap0: left allmulticast mode [ 330.592954][T24679] gretap0: left promiscuous mode [ 330.598149][T24679] bridge0: port 3(gretap0) entered disabled state [ 330.671142][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8095'. [ 330.692347][T24685] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 330.910633][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8104'. [ 330.919776][T24709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8104'. [ 330.928781][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8104'. [ 330.942798][T24709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8104'. [ 330.951829][T24709] netlink: 'syz.5.8104': attribute type 6 has an invalid length. [ 331.110529][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8114'. [ 331.244504][T24750] netem: change failed [ 331.339007][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 331.339024][ T29] audit: type=1400 audit(331.322:16865): avc: denied { create } for pid=24767 comm="syz.9.8130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 331.440106][T24779] loop9: detected capacity change from 0 to 1024 [ 331.448691][T24779] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.8136: bad orphan inode 134217728 [ 331.460291][T24779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.756723][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.786656][ T29] audit: type=1326 audit(331.762:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.809833][ T29] audit: type=1326 audit(331.762:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.832879][ T29] audit: type=1326 audit(331.762:16868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.856340][ T29] audit: type=1326 audit(331.762:16869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.879764][ T29] audit: type=1326 audit(331.762:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.903487][ T29] audit: type=1326 audit(331.762:16871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.926815][ T29] audit: type=1326 audit(331.762:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.950027][ T29] audit: type=1326 audit(331.762:16873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.973224][ T29] audit: type=1326 audit(331.762:16874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24793 comm="syz.9.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 331.998718][T24796] tipc: Enabling of bearer rejected, already enabled [ 332.079648][T24808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24808 comm=syz.0.8143 [ 332.537065][T24820] loop8: detected capacity change from 0 to 8192 [ 332.588461][T24820] loop8: p1 p2 p3 p4 [ 332.593624][T24820] loop8: p3 start 331777 is beyond EOD, truncated [ 332.600272][T24820] loop8: p4 size 262144 extends beyond EOD, truncated [ 332.678464][T24829] loop8: detected capacity change from 0 to 1024 [ 332.685401][T24829] EXT4-fs: Ignoring removed orlov option [ 332.693451][T24829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.293850][T24884] futex_wake_op: syz.9.8181 tries to shift op by -1; fix this program [ 333.346613][T24892] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 333.353672][T24892] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 333.360880][T24892] 0ªî{X¹¦: entered allmulticast mode [ 333.367000][T24892] 0ªî{X¹¦: left allmulticast mode [ 333.527473][ T9695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.656211][T24924] Cannot find add_set index 0 as target [ 333.742150][T24927] loop9: detected capacity change from 0 to 1024 [ 333.757846][T24927] EXT4-fs: Ignoring removed bh option [ 333.871659][T24927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.929486][T24927] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 333.965312][T24927] EXT4-fs (loop9): Remounting filesystem read-only [ 333.997089][T24927] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 334.059529][T20338] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.356050][T24975] loop1: detected capacity change from 0 to 4096 [ 334.365083][T24975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.379167][T24975] EXT4-fs (loop1): shut down requested (2) [ 334.385398][T24975] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 334.394575][T24975] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 334.404058][T24975] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 334.424710][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.517847][T11437] Process accounting resumed [ 334.644343][T25002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.000909][T25029] veth18: entered promiscuous mode [ 335.006047][T25029] veth18: entered allmulticast mode [ 335.064867][T25034] loop8: detected capacity change from 0 to 2048 [ 335.089101][T25034] EXT4-fs (loop8): #clusters per group too big: 16384 [ 335.103658][T25044] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 2, id = 0 [ 335.214816][T25059] __nla_validate_parse: 2 callbacks suppressed [ 335.214843][T25059] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8253'. [ 335.253176][T25059] syzkaller1: entered promiscuous mode [ 335.258761][T25059] syzkaller1: entered allmulticast mode [ 335.300523][T25067] netlink: 'syz.9.8257': attribute type 1 has an invalid length. [ 335.666695][T25111] loop8: detected capacity change from 0 to 128 [ 335.826695][T25125] loop1: detected capacity change from 0 to 1024 [ 335.865472][T25125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.983899][T25125] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.8283: Allocating blocks 449-513 which overlap fs metadata [ 336.087950][T25124] EXT4-fs (loop1): pa ffff888107e38d90: logic 48, phys. 177, len 21 [ 336.096011][T25124] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 336.207359][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.338663][T25143] syzkaller0: entered allmulticast mode [ 336.353105][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 336.353122][ T29] audit: type=1326 audit(336.333:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 336.363995][T25143] syzkaller0: entered promiscuous mode [ 336.482321][ T29] audit: type=1326 audit(336.333:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 336.505458][ T29] audit: type=1326 audit(336.333:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 336.528816][ T29] audit: type=1326 audit(336.343:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 336.551926][ T29] audit: type=1326 audit(336.343:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 336.574815][ T29] audit: type=1326 audit(336.343:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 336.598143][ T29] audit: type=1326 audit(336.393:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 336.599133][T25143] syzkaller0 (unregistering): left allmulticast mode [ 336.621323][ T29] audit: type=1326 audit(336.393:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 336.621351][ T29] audit: type=1326 audit(336.393:17822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 336.628050][T25143] syzkaller0 (unregistering): left promiscuous mode [ 336.650926][ T29] audit: type=1326 audit(336.393:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25122 comm="syz.8.8282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 336.955829][T25156] tipc: Enabling of bearer rejected, already enabled [ 336.967359][T25155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8293'. [ 336.997978][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8293'. [ 337.150374][T25169] veth4: entered promiscuous mode [ 337.155492][T25169] veth4: entered allmulticast mode [ 337.164635][T25168] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.8300'. [ 337.178297][T25154] lo speed is unknown, defaulting to 1000 [ 337.192757][T25168] netlink: zone id is out of range [ 337.198135][T25168] netlink: zone id is out of range [ 337.212650][T25168] netlink: zone id is out of range [ 337.225258][T25168] netlink: zone id is out of range [ 337.237842][T25168] netlink: zone id is out of range [ 337.261348][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8302'. [ 337.364489][T25168] netlink: set zone limit has 8 unknown bytes [ 337.449840][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8306'. [ 337.481762][T25181] team2: entered promiscuous mode [ 337.486821][T25181] team2: entered allmulticast mode [ 337.499018][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8308'. [ 337.508485][T25181] 8021q: adding VLAN 0 to HW filter on device team2 [ 337.672365][T25197] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 337.733265][T25203] netlink: 204 bytes leftover after parsing attributes in process `syz.5.8317'. [ 337.772287][T25210] loop9: detected capacity change from 0 to 256 [ 337.913931][T25222] dvmrp6: entered allmulticast mode [ 338.063865][T25193] loop8: detected capacity change from 0 to 32768 [ 338.098668][T25193] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 338.121787][T25193] loop8: p1 start 460800 is beyond EOD, truncated [ 338.128270][T25193] loop8: p2 size 83886080 extends beyond EOD, truncated [ 338.158495][T25193] loop8: p5 start 460800 is beyond EOD, truncated [ 338.165075][T25193] loop8: p6 size 83886080 extends beyond EOD, truncated [ 338.415531][T25262] veth14: entered promiscuous mode [ 338.420722][T25262] veth14: entered allmulticast mode [ 338.598649][T25273] netlink: 'syz.8.8347': attribute type 1 has an invalid length. [ 338.606475][T25273] netlink: 'syz.8.8347': attribute type 4 has an invalid length. [ 338.614245][T25273] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.8347'. [ 338.654268][T25273] netlink: 'syz.8.8347': attribute type 1 has an invalid length. [ 338.662061][T25273] netlink: 'syz.8.8347': attribute type 4 has an invalid length. [ 338.669924][T25273] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.8347'. [ 338.762568][T25280] netlink: 'syz.8.8350': attribute type 10 has an invalid length. [ 338.780085][T25280] bond0: (slave dummy0): Releasing backup interface [ 338.796965][T25280] dummy0: entered promiscuous mode [ 338.809025][T25280] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.827605][T25280] team0: Failed to send options change via netlink (err -105) [ 338.835160][T25280] team0: Port device dummy0 added [ 338.848275][T25283] netlink: 'syz.8.8350': attribute type 10 has an invalid length. [ 338.865756][T25283] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.884205][T25283] dummy0: left promiscuous mode [ 338.900733][T25283] team0: Failed to send options change via netlink (err -105) [ 338.917163][T25283] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.936111][T25283] team0: Port device dummy0 removed [ 338.951105][T25283] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.125318][T25296] veth22: entered promiscuous mode [ 339.130599][T25296] veth22: entered allmulticast mode [ 340.227211][T25365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8388'. [ 340.694726][T25392] netlink: 'syz.5.8399': attribute type 10 has an invalid length. [ 340.713959][T25395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8401'. [ 340.715561][T25392] dummy0: left promiscuous mode [ 340.739843][T25398] netlink: 'syz.5.8399': attribute type 10 has an invalid length. [ 340.774426][T25392] dummy0: entered promiscuous mode [ 340.792693][T25392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.810285][T25392] team0: Failed to send options change via netlink (err -105) [ 340.817881][T25392] team0: Port device dummy0 added [ 340.845216][T25398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.888864][T25398] dummy0: left promiscuous mode [ 340.905173][T25398] team0: Failed to send options change via netlink (err -105) [ 340.956620][T25398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 340.977084][T25398] team0: Port device dummy0 removed [ 340.991842][T25398] dummy0: entered promiscuous mode [ 341.010610][T25398] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 341.101542][T25417] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.8409'. [ 341.121632][T25417] netlink: zone id is out of range [ 341.127118][T25417] netlink: zone id is out of range [ 341.138698][T25417] netlink: zone id is out of range [ 341.144765][T25417] netlink: zone id is out of range [ 341.155802][T25417] netlink: zone id is out of range [ 341.256924][T25417] netlink: set zone limit has 8 unknown bytes [ 341.366035][ T29] kauditd_printk_skb: 1004 callbacks suppressed [ 341.366049][ T29] audit: type=1326 audit(341.343:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 341.401367][ T29] audit: type=1326 audit(341.343:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 341.424514][ T29] audit: type=1326 audit(341.343:18830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 341.447471][ T29] audit: type=1326 audit(341.363:18831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 341.470471][ T29] audit: type=1326 audit(341.363:18832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 341.493356][ T29] audit: type=1326 audit(341.363:18833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 341.516356][ T29] audit: type=1326 audit(341.363:18834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 341.539246][ T29] audit: type=1326 audit(341.363:18835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f111fd7b829 code=0x7ffc0000 [ 341.562198][ T29] audit: type=1326 audit(341.363:18836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 341.585169][ T29] audit: type=1326 audit(341.383:18837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25413 comm="syz.8.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f111fdd65e7 code=0x7ffc0000 [ 341.786871][T25431] netlink: 'syz.9.8415': attribute type 1 has an invalid length. [ 341.824270][T25431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.841361][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8415'. [ 341.873921][T25433] bond2 (unregistering): Released all slaves [ 342.196254][T25428] lo speed is unknown, defaulting to 1000 [ 342.526160][T25471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8432'. [ 342.868734][T25499] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8442'. [ 343.045233][T25516] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.8450'. [ 343.115971][T25523] loop1: detected capacity change from 0 to 512 [ 343.126429][T25523] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.161863][T25523] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 343.202474][T25523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8453: bg 0: block 248: padding at end of block bitmap is not set [ 343.264010][T25523] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8453: Failed to acquire dquot type 1 [ 343.311106][T25523] EXT4-fs (loop1): 1 truncate cleaned up [ 343.327659][T25523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 343.357498][T25544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8460'. [ 343.388655][ T9338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 343.398254][ T8101] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:48: Failed to release dquot type 1 [ 343.478769][T25553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8464'. [ 343.566054][T25563] tipc: Enabling of bearer rejected, failed to enable media [ 343.828598][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8479'. [ 344.262991][T25635] netlink: 'syz.1.8498': attribute type 10 has an invalid length. [ 344.273538][T25635] $Hÿ: (slave dummy0): Releasing backup interface [ 344.281602][T25635] dummy0: left promiscuous mode [ 344.289457][T25635] dummy0: entered promiscuous mode [ 344.295935][T25635] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 344.305024][T25635] team0: Failed to send options change via netlink (err -105) [ 344.312532][T25635] team0: Port device dummy0 added [ 344.328296][T25636] netlink: 'syz.1.8498': attribute type 10 has an invalid length. [ 344.359854][T25636] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 344.383759][T25636] dummy0: left promiscuous mode [ 344.389100][T25636] team0: Failed to send options change via netlink (err -105) [ 344.396595][T25636] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 344.438407][T25636] team0: Port device dummy0 removed [ 344.444981][T25636] dummy0: entered promiscuous mode [ 344.445032][T13999] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 344.488565][T25636] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 344.497618][T25626] lo speed is unknown, defaulting to 1000 [ 345.173630][T25667] $Hÿ: renamed from bond0 [ 345.189812][T25667] $Hÿ: entered promiscuous mode [ 345.194872][T25667] bond_slave_0: entered promiscuous mode [ 345.200611][T25667] bond_slave_1: entered promiscuous mode [ 345.265969][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8515'. [ 345.293675][T25677] ip6gre1: entered allmulticast mode [ 345.352548][T25688] netlink: 'syz.9.8521': attribute type 10 has an invalid length. [ 345.364317][T25688] netlink: 'syz.9.8521': attribute type 10 has an invalid length. [ 345.374321][T25688] team0: Port device dummy0 removed [ 345.383769][T25688] dummy0: entered promiscuous mode [ 345.390471][T25688] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 345.462333][T25697] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8524'. [ 345.842374][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8537'. [ 345.851403][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8537'. [ 345.899340][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8537'. [ 345.908640][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8537'. [ 345.942823][T25734] netlink: 'syz.8.8540': attribute type 1 has an invalid length. [ 345.974982][T25719] lo speed is unknown, defaulting to 1000 [ 345.989330][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8541'. [ 346.008416][T25734] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.015252][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8540'. [ 346.066271][T25741] bond11 (unregistering): Released all slaves [ 346.318538][T25766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25766 comm=syz.9.8552 [ 346.604002][T25757] Set syz1 is full, maxelem 65536 reached [ 346.705175][T25776] netlink: 'syz.0.8555': attribute type 10 has an invalid length. [ 346.731928][T25776] bond1: (slave dummy0): Releasing backup interface [ 346.741257][T25776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 346.751033][T25776] team0: Failed to send options change via netlink (err -105) [ 346.758781][T25776] team0: Port device dummy0 added [ 346.767080][T25776] netlink: 'syz.0.8555': attribute type 10 has an invalid length. [ 346.775737][T25776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 346.785877][T25776] team0: Failed to send options change via netlink (err -105) [ 346.793591][T25776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 346.802687][T25776] team0: Port device dummy0 removed [ 346.809354][T25776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 346.838665][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 346.838679][ T29] audit: type=1326 audit(346.823:19060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 346.893005][ T29] audit: type=1326 audit(346.853:19061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 346.916103][ T29] audit: type=1326 audit(346.853:19062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 346.939204][ T29] audit: type=1326 audit(346.853:19063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 346.962180][ T29] audit: type=1326 audit(346.853:19064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 346.985288][ T29] audit: type=1326 audit(346.853:19065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 347.008533][ T29] audit: type=1326 audit(346.853:19066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 347.031527][ T29] audit: type=1326 audit(346.853:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 347.054503][ T29] audit: type=1326 audit(346.853:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 347.077751][ T29] audit: type=1326 audit(346.853:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25782 comm="syz.5.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 347.574232][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8583'. [ 347.589209][T25848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.601293][T25848] macvlan2: entered promiscuous mode [ 347.606619][T25848] macvlan2: entered allmulticast mode [ 347.613935][T25848] bond3: (slave macvlan2): Opening slave failed [ 348.297287][T25893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25893 comm=syz.9.8600 [ 348.869403][T25923] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8612'. [ 348.993281][T25920] lo speed is unknown, defaulting to 1000 [ 349.114611][T25933] veth0: entered promiscuous mode [ 349.139298][T25933] veth0 (unregistering): left promiscuous mode [ 349.697167][T25987] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.773128][T25987] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.820423][T25987] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.879815][T25987] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.908832][T26006] netlink: 'syz.9.8647': attribute type 1 has an invalid length. [ 349.929420][T26006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.943278][T26006] bond0 (unregistering): Released all slaves [ 349.957020][ T385] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.976244][ T385] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.991603][ T385] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.015709][ T385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.428512][T26064] netlink: 'syz.0.8674': attribute type 12 has an invalid length. [ 351.306626][T26114] __nla_validate_parse: 4 callbacks suppressed [ 351.306640][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8695'. [ 351.529193][T26116] lo speed is unknown, defaulting to 1000 [ 351.922229][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 351.922243][ T29] audit: type=1326 audit(351.903:19247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 351.978438][ T29] audit: type=1326 audit(351.903:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.001506][ T29] audit: type=1326 audit(351.903:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.024608][ T29] audit: type=1326 audit(351.903:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.047789][ T29] audit: type=1326 audit(351.903:19251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.070812][ T29] audit: type=1326 audit(351.903:19252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.093800][ T29] audit: type=1326 audit(351.903:19253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.116846][ T29] audit: type=1326 audit(351.903:19254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.139950][ T29] audit: type=1326 audit(351.903:19255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.162906][ T29] audit: type=1326 audit(351.903:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 352.270108][T26157] netlink: 'syz.1.8712': attribute type 4 has an invalid length. [ 352.361982][T26154] lo speed is unknown, defaulting to 1000 [ 352.911195][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8733'. [ 352.940688][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8733'. [ 353.972257][T26246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8749'. [ 354.440394][T26272] lo speed is unknown, defaulting to 1000 [ 356.539349][T26346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8787'. [ 356.612305][T26346] $Hÿ: (slave team0): Releasing backup interface [ 356.649653][T26346] team0 (unregistering): left promiscuous mode [ 356.655921][T26346] team_slave_0: left promiscuous mode [ 356.661465][T26346] team_slave_1: left promiscuous mode [ 356.736434][T26346] team0 (unregistering): Port device team_slave_0 removed [ 356.749567][T26346] team0 (unregistering): Port device team_slave_1 removed [ 356.894778][T26371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8797'. [ 357.042626][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 357.042639][ T29] audit: type=1326 audit(357.023:19363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26333 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7fc00000 [ 357.141995][ T29] audit: type=1400 audit(357.113:19364): avc: denied { write } for pid=26393 comm="syz.8.8807" lport=43699 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 357.215979][ T29] audit: type=1400 audit(357.193:19365): avc: denied { map } for pid=26408 comm="syz.5.8813" path="socket:[100868]" dev="sockfs" ino=100868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 357.362556][ T29] audit: type=1400 audit(357.343:19366): avc: denied { bind } for pid=26423 comm="syz.5.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.680186][T26443] netlink: 'LX[X': attribute type 13 has an invalid length. [ 357.700276][T26443] 0ªî{X¹¦: refused to change device tx_queue_len [ 357.721171][T26443] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 357.722979][T26446] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.8828'. [ 357.737276][T11438] lo speed is unknown, defaulting to 1000 [ 357.737295][T11438] syz2: Port: 1 Link ACTIVE [ 357.767942][ T29] audit: type=1326 audit(357.743:19367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 357.778344][T26446] netlink: zone id is out of range [ 357.796282][T26446] netlink: zone id is out of range [ 357.834882][T26446] netlink: zone id is out of range [ 357.838057][T26438] lo speed is unknown, defaulting to 1000 [ 357.846654][T26446] netlink: zone id is out of range [ 357.866669][ T29] audit: type=1326 audit(357.773:19368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 357.878415][T26446] netlink: zone id is out of range [ 357.889790][ T29] audit: type=1326 audit(357.773:19369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa2dc58f749 code=0x7ffc0000 [ 357.889818][ T29] audit: type=1326 audit(357.773:19370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2dc58f783 code=0x7ffc0000 [ 357.889881][ T29] audit: type=1326 audit(357.773:19371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2dc58e1ff code=0x7ffc0000 [ 357.889906][ T29] audit: type=1326 audit(357.773:19372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26447 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa2dc58f7d7 code=0x7ffc0000 [ 358.109877][T26446] netlink: set zone limit has 8 unknown bytes [ 358.273013][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8846'. [ 359.136991][T26529] vlan0: entered allmulticast mode [ 359.142183][T26529] bridge_slave_0: entered allmulticast mode [ 359.638796][T26558] netlink: 'syz.9.8878': attribute type 30 has an invalid length. [ 359.819747][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8885'. [ 359.863147][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8885'. [ 359.980995][T26588] netlink: 204 bytes leftover after parsing attributes in process `syz.5.8891'. [ 360.875343][T26620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26620 comm=syz.0.8905 [ 360.928706][T26622] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 361.120835][T26634] netlink: 'syz.0.8912': attribute type 3 has an invalid length. [ 361.172985][T26638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8913'. [ 362.036431][T26651] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8919'. [ 362.049165][T26654] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8921'. [ 362.077602][T26658] netlink: 'syz.8.8920': attribute type 8 has an invalid length. [ 362.141587][T26674] netlink: 'syz.9.8928': attribute type 1 has an invalid length. [ 362.157919][T26674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.185048][T26674] bond0: (slave veth1): Enslaving as an active interface with a down link [ 362.187090][T26682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8931'. [ 362.204392][T26674] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 362.213024][T26674] bond0: (slave batadv1): making interface the new active one [ 362.221724][T26674] batadv1: entered promiscuous mode [ 362.227100][T26674] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 362.247577][T26680] veth0: entered promiscuous mode [ 362.258916][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8930'. [ 362.273877][T26680] veth0 (unregistering): left promiscuous mode [ 362.351523][T26696] pim6reg: entered allmulticast mode [ 362.359144][T26696] pim6reg: left allmulticast mode [ 362.433099][T26701] xt_hashlimit: max too large, truncated to 1048576 [ 362.532076][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 362.532089][ T29] audit: type=1326 audit(362.513:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 362.561404][ T29] audit: type=1326 audit(362.513:19544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 362.585420][ T29] audit: type=1326 audit(362.513:19545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.608576][ T29] audit: type=1326 audit(362.513:19546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.631566][ T29] audit: type=1326 audit(362.513:19547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.654588][ T29] audit: type=1326 audit(362.513:19548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.677703][ T29] audit: type=1326 audit(362.523:19549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.700954][ T29] audit: type=1326 audit(362.523:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.723913][ T29] audit: type=1326 audit(362.523:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.747061][ T29] audit: type=1326 audit(362.523:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26705 comm="syz.5.8942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587b2e2005 code=0x7ffc0000 [ 362.891957][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8945'. [ 363.086097][T26714] syz.8.8944 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 363.099971][T26714] CPU: 0 UID: 0 PID: 26714 Comm: syz.8.8944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 363.100006][T26714] Tainted: [W]=WARN [ 363.100013][T26714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.100031][T26714] Call Trace: [ 363.100038][T26714] [ 363.100044][T26714] __dump_stack+0x1d/0x30 [ 363.100096][T26714] dump_stack_lvl+0x95/0xd0 [ 363.100109][T26714] dump_stack+0x15/0x1b [ 363.100152][T26714] dump_header+0x81/0x240 [ 363.100164][T26714] oom_kill_process+0x295/0x350 [ 363.100178][T26714] out_of_memory+0x97b/0xb80 [ 363.100191][T26714] try_charge_memcg+0x610/0xa10 [ 363.100244][T26714] obj_cgroup_charge_pages+0xa6/0x150 [ 363.100305][T26714] __memcg_kmem_charge_page+0x9f/0x170 [ 363.100321][T26714] __alloc_frozen_pages_noprof+0x18f/0x360 [ 363.100381][T26714] alloc_pages_mpol+0xb3/0x260 [ 363.100397][T26714] alloc_pages_noprof+0x90/0x130 [ 363.100453][T26714] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 363.100551][T26714] __kvmalloc_node_noprof+0x492/0x6b0 [ 363.100565][T26714] ? ip_set_alloc+0x24/0x30 [ 363.100684][T26714] ? ip_set_alloc+0x24/0x30 [ 363.100701][T26714] ip_set_alloc+0x24/0x30 [ 363.100765][T26714] hash_netiface_create+0x282/0x740 [ 363.100784][T26714] ? __pfx_hash_netiface_create+0x10/0x10 [ 363.100816][T26714] ip_set_create+0x3cc/0x970 [ 363.100840][T26714] ? __nla_parse+0x40/0x60 [ 363.100855][T26714] nfnetlink_rcv_msg+0x4c6/0x590 [ 363.100921][T26714] netlink_rcv_skb+0x123/0x220 [ 363.100966][T26714] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 363.100983][T26714] nfnetlink_rcv+0x167/0x16c0 [ 363.100999][T26714] ? is_bpf_text_address+0x141/0x160 [ 363.101012][T26714] ? kernel_text_address+0x94/0xb0 [ 363.101067][T26714] ? __kernel_text_address+0xd/0x40 [ 363.101109][T26714] ? unwind_get_return_address+0x16/0x40 [ 363.101128][T26714] ? perf_callchain_kernel+0x2e9/0x350 [ 363.101238][T26714] ? get_perf_callchain+0x55f/0x640 [ 363.101276][T26714] ? __bpf_get_stack+0x238/0x650 [ 363.101293][T26714] ? should_fail_ex+0x30/0x280 [ 363.101310][T26714] ? selinux_nlmsg_lookup+0x99/0x890 [ 363.101325][T26714] ? __rcu_read_unlock+0x34/0x70 [ 363.101337][T26714] ? __netlink_lookup+0x266/0x2a0 [ 363.101372][T26714] netlink_unicast+0x5c0/0x690 [ 363.101466][T26714] netlink_sendmsg+0x58b/0x6b0 [ 363.101529][T26714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.101550][T26714] __sock_sendmsg+0x145/0x180 [ 363.101571][T26714] ____sys_sendmsg+0x31e/0x4a0 [ 363.101601][T26714] ___sys_sendmsg+0x17b/0x1d0 [ 363.101696][T26714] __x64_sys_sendmsg+0xd4/0x160 [ 363.101713][T26714] x64_sys_call+0x17ba/0x3000 [ 363.101727][T26714] do_syscall_64+0xca/0x2b0 [ 363.101784][T26714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.101797][T26714] RIP: 0033:0x7f111fddf749 [ 363.101811][T26714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.101822][T26714] RSP: 002b:00007f111e847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.101834][T26714] RAX: ffffffffffffffda RBX: 00007f1120035fa0 RCX: 00007f111fddf749 [ 363.101841][T26714] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 363.101848][T26714] RBP: 00007f111fe63f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.101874][T26714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.101897][T26714] R13: 00007f1120036038 R14: 00007f1120035fa0 R15: 00007ffff9373b08 [ 363.101908][T26714] [ 363.101912][T26714] memory: usage 307200kB, limit 307200kB, failcnt 817 [ 363.445499][T26714] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 363.453500][T26714] kmem: usage 238972kB, limit 9007199254740988kB, failcnt 0 [ 363.460801][T26714] Memory cgroup stats for /syz8: [ 363.474473][T26714] cache 69255168 [ 363.482967][T26714] rss 565248 [ 363.486186][T26714] shmem 69255168 [ 363.489744][T26714] mapped_file 0 [ 363.493193][T26714] dirty 0 [ 363.496118][T26714] writeback 0 [ 363.499476][T26714] workingset_refault_anon 2008 [ 363.504288][T26714] workingset_refault_file 352 [ 363.508981][T26714] swap 245760 [ 363.512259][T26714] swapcached 32768 [ 363.515998][T26714] pgpgin 380593 [ 363.519478][T26714] pgpgout 363536 [ 363.523027][T26714] pgfault 346622 [ 363.526604][T26714] pgmajfault 268 [ 363.530175][T26714] inactive_anon 0 [ 363.533807][T26714] active_anon 69853184 [ 363.537918][T26714] inactive_file 0 [ 363.541616][T26714] active_file 12288 [ 363.545441][T26714] unevictable 0 [ 363.548947][T26714] hierarchical_memory_limit 314572800 [ 363.554307][T26714] hierarchical_memsw_limit 9223372036854771712 [ 363.560484][T26714] total_cache 69255168 [ 363.564537][T26714] total_rss 565248 [ 363.568348][T26714] total_shmem 69255168 [ 363.572495][T26714] total_mapped_file 0 [ 363.576460][T26714] total_dirty 0 [ 363.579925][T26714] total_writeback 0 [ 363.583773][T26714] total_workingset_refault_anon 2008 [ 363.589065][T26714] total_workingset_refault_file 352 [ 363.594249][T26714] total_swap 245760 [ 363.598084][T26714] total_swapcached 32768 [ 363.602370][T26714] total_pgpgin 380593 [ 363.606337][T26714] total_pgpgout 363536 [ 363.610402][T26714] total_pgfault 346622 [ 363.614450][T26714] total_pgmajfault 268 [ 363.618534][T26714] total_inactive_anon 0 [ 363.622707][T26714] total_active_anon 69853184 [ 363.627309][T26714] total_inactive_file 0 [ 363.631467][T26714] total_active_file 12288 [ 363.635774][T26714] total_unevictable 0 [ 363.639784][T26714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6540,pid=20386,uid=0 [ 363.654518][T26714] Memory cgroup out of memory: Killed process 20386 (syz.8.6540) total-vm:93836kB, anon-rss:1272kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 363.847170][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8955'. [ 363.856246][T26743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8955'. [ 363.865422][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8955'. [ 363.876188][T26743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8955'. [ 363.885200][T26743] netlink: 'syz.0.8955': attribute type 6 has an invalid length. [ 364.214405][T26741] lo speed is unknown, defaulting to 1000 [ 364.250057][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8954'. [ 364.287351][T26759] ip6gre2: entered allmulticast mode [ 364.462404][T26763] netlink: 'syz.8.8963': attribute type 1 has an invalid length. [ 365.109744][T26819] netlink: 'syz.1.8986': attribute type 1 has an invalid length. [ 365.146461][T26819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.201574][T26819] bond4: (slave veth1): Enslaving as an active interface with a down link [ 365.244321][T26831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.273096][T26831] bond4: (slave batadv0): making interface the new active one [ 365.295285][T26831] batadv0: entered promiscuous mode [ 365.301151][T26831] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 365.479243][T26826] lo speed is unknown, defaulting to 1000 [ 365.506569][T26851] netlink: 'syz.8.8999': attribute type 7 has an invalid length. [ 365.685108][T26868] netlink: 'syz.0.9006': attribute type 1 has an invalid length. [ 365.720574][T26868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.744582][T26868] bond5: (slave veth21): Enslaving as an active interface with a down link [ 365.772331][T26868] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 365.782541][T26868] bond5: (slave batadv2): making interface the new active one [ 365.793155][T26868] batadv2: entered promiscuous mode [ 365.799430][T26868] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 366.681458][T26915] lo speed is unknown, defaulting to 1000 [ 367.684705][T26999] __nla_validate_parse: 8 callbacks suppressed [ 367.684722][T26999] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9059'. [ 367.714280][ T29] kauditd_printk_skb: 1196 callbacks suppressed [ 367.714294][ T29] audit: type=1326 audit(367.693:20749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.743672][ T29] audit: type=1326 audit(367.693:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.766545][ T29] audit: type=1326 audit(367.693:20751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.789600][ T29] audit: type=1326 audit(367.693:20752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.812566][ T29] audit: type=1326 audit(367.693:20753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.837383][ T29] audit: type=1326 audit(367.693:20754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.860426][ T29] audit: type=1326 audit(367.693:20755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.883555][ T29] audit: type=1326 audit(367.693:20756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.906630][ T29] audit: type=1326 audit(367.693:20757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.929568][ T29] audit: type=1326 audit(367.703:20758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27000 comm="syz.0.9060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f34454ef749 code=0x7ffc0000 [ 367.963458][T27007] bridge0: port 3(macsec1) entered blocking state [ 367.970033][T27007] bridge0: port 3(macsec1) entered disabled state [ 367.977742][T27007] macsec1: entered allmulticast mode [ 367.983122][T27007] bridge0: entered allmulticast mode [ 367.989297][T27007] macsec1: left allmulticast mode [ 367.994439][T27007] bridge0: left allmulticast mode [ 368.305251][T27034] xt_hashlimit: max too large, truncated to 1048576 [ 368.336230][T27040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9077'. [ 368.364440][T27042] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9079'. [ 368.421355][T27049] bridge0: port 4(macsec0) entered blocking state [ 368.427829][T27049] bridge0: port 4(macsec0) entered disabled state [ 368.434683][T27049] macsec0: entered allmulticast mode [ 368.440090][T27049] bridge0: entered allmulticast mode [ 368.446246][T27049] macsec0: left allmulticast mode [ 368.451484][T27049] bridge0: left allmulticast mode [ 370.045451][T27136] xt_hashlimit: max too large, truncated to 1048576 [ 370.162513][T27150] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9117'. [ 370.171824][T27150] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9117'. [ 370.344040][T27176] xt_hashlimit: max too large, truncated to 1048576 [ 370.778946][T27217] xt_hashlimit: max too large, truncated to 1048576 [ 371.536856][T27230] syz.0.9154 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 371.550904][T27230] CPU: 1 UID: 0 PID: 27230 Comm: syz.0.9154 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.551008][T27230] Tainted: [W]=WARN [ 371.551014][T27230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.551028][T27230] Call Trace: [ 371.551034][T27230] [ 371.551042][T27230] __dump_stack+0x1d/0x30 [ 371.551069][T27230] dump_stack_lvl+0x95/0xd0 [ 371.551169][T27230] dump_stack+0x15/0x1b [ 371.551185][T27230] dump_header+0x81/0x240 [ 371.551203][T27230] oom_kill_process+0x295/0x350 [ 371.551301][T27230] out_of_memory+0x97b/0xb80 [ 371.551327][T27230] try_charge_memcg+0x610/0xa10 [ 371.551371][T27230] obj_cgroup_charge_pages+0xa6/0x150 [ 371.551444][T27230] __memcg_kmem_charge_page+0x9f/0x170 [ 371.551473][T27230] __alloc_frozen_pages_noprof+0x18f/0x360 [ 371.551506][T27230] alloc_pages_mpol+0xb3/0x260 [ 371.551594][T27230] alloc_pages_noprof+0x90/0x130 [ 371.551624][T27230] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 371.551664][T27230] __kvmalloc_node_noprof+0x492/0x6b0 [ 371.551698][T27230] ? ip_set_alloc+0x24/0x30 [ 371.551727][T27230] ? ip_set_alloc+0x24/0x30 [ 371.551778][T27230] ip_set_alloc+0x24/0x30 [ 371.551842][T27230] hash_netiface_create+0x282/0x740 [ 371.551889][T27230] ? __pfx_hash_netiface_create+0x10/0x10 [ 371.551922][T27230] ip_set_create+0x3cc/0x970 [ 371.551964][T27230] ? __nla_parse+0x40/0x60 [ 371.552041][T27230] nfnetlink_rcv_msg+0x4c6/0x590 [ 371.552090][T27230] netlink_rcv_skb+0x123/0x220 [ 371.552149][T27230] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 371.552177][T27230] nfnetlink_rcv+0x167/0x16c0 [ 371.552278][T27230] ? is_bpf_text_address+0x141/0x160 [ 371.552298][T27230] ? kernel_text_address+0x94/0xb0 [ 371.552315][T27230] ? __kernel_text_address+0xd/0x40 [ 371.552331][T27230] ? unwind_get_return_address+0x16/0x40 [ 371.552399][T27230] ? perf_callchain_kernel+0x2e9/0x350 [ 371.552425][T27230] ? get_perf_callchain+0x55f/0x640 [ 371.552450][T27230] ? __bpf_get_stack+0x238/0x650 [ 371.552519][T27230] ? should_fail_ex+0x30/0x280 [ 371.552564][T27230] ? selinux_nlmsg_lookup+0x99/0x890 [ 371.552586][T27230] ? __rcu_read_unlock+0x34/0x70 [ 371.552607][T27230] ? __netlink_lookup+0x266/0x2a0 [ 371.552642][T27230] netlink_unicast+0x5c0/0x690 [ 371.552677][T27230] netlink_sendmsg+0x58b/0x6b0 [ 371.552704][T27230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.552798][T27230] __sock_sendmsg+0x145/0x180 [ 371.552820][T27230] ____sys_sendmsg+0x31e/0x4a0 [ 371.552848][T27230] ___sys_sendmsg+0x17b/0x1d0 [ 371.552883][T27230] __x64_sys_sendmsg+0xd4/0x160 [ 371.552975][T27230] x64_sys_call+0x17ba/0x3000 [ 371.552996][T27230] do_syscall_64+0xca/0x2b0 [ 371.553023][T27230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.553060][T27230] RIP: 0033:0x7f34454ef749 [ 371.553077][T27230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.553097][T27230] RSP: 002b:00007f3443f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.553130][T27230] RAX: ffffffffffffffda RBX: 00007f3445745fa0 RCX: 00007f34454ef749 [ 371.553141][T27230] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 371.553179][T27230] RBP: 00007f3445573f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.553190][T27230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.553201][T27230] R13: 00007f3445746038 R14: 00007f3445745fa0 R15: 00007ffc8e624ea8 [ 371.553218][T27230] [ 371.553225][T27230] memory: usage 307200kB, limit 307200kB, failcnt 1510 [ 371.894535][T27230] memory+swap: usage 372948kB, limit 9007199254740988kB, failcnt 0 [ 371.902439][T27230] kmem: usage 292860kB, limit 9007199254740988kB, failcnt 0 [ 371.909749][T27230] Memory cgroup stats for /syz0: [ 371.910259][T27230] cache 14352384 [ 371.918743][T27230] rss 212992 [ 371.921929][T27230] shmem 14352384 [ 371.925472][T27230] mapped_file 0 [ 371.928975][T27230] dirty 0 [ 371.931941][T27230] writeback 0 [ 371.935263][T27230] workingset_refault_anon 5182 [ 371.940036][T27230] workingset_refault_file 5657 [ 371.944862][T27230] swap 67325952 [ 371.948434][T27230] swapcached 118784 [ 371.952292][T27230] pgpgin 685687 [ 371.955791][T27230] pgpgout 682102 [ 371.959384][T27230] pgfault 553028 [ 371.962982][T27230] pgmajfault 729 [ 371.966531][T27230] inactive_anon 14606336 [ 371.970786][T27230] active_anon 77824 [ 371.974582][T27230] inactive_file 0 [ 371.978294][T27230] active_file 0 [ 371.981740][T27230] unevictable 0 [ 371.985289][T27230] hierarchical_memory_limit 314572800 [ 371.990743][T27230] hierarchical_memsw_limit 9223372036854771712 [ 371.996896][T27230] total_cache 14352384 [ 372.000999][T27230] total_rss 212992 [ 372.004700][T27230] total_shmem 14352384 [ 372.008814][T27230] total_mapped_file 0 [ 372.012781][T27230] total_dirty 0 [ 372.016244][T27230] total_writeback 0 [ 372.020087][T27230] total_workingset_refault_anon 5182 [ 372.025360][T27230] total_workingset_refault_file 5657 [ 372.030700][T27230] total_swap 67325952 [ 372.034669][T27230] total_swapcached 118784 [ 372.039080][T27230] total_pgpgin 685687 [ 372.043046][T27230] total_pgpgout 682102 [ 372.047104][T27230] total_pgfault 553028 [ 372.051201][T27230] total_pgmajfault 729 [ 372.055314][T27230] total_inactive_anon 14606336 [ 372.060143][T27230] total_active_anon 77824 [ 372.064488][T27230] total_inactive_file 0 [ 372.068638][T27230] total_active_file 0 [ 372.072648][T27230] total_unevictable 0 [ 372.076700][T27230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9154,pid=27229,uid=0 [ 372.091490][T27230] Memory cgroup out of memory: Killed process 27229 (syz.0.9154) total-vm:96016kB, anon-rss:1136kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 372.156622][T27270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9172'. [ 372.357347][T27283] lo speed is unknown, defaulting to 1000 [ 372.720254][ T29] kauditd_printk_skb: 1191 callbacks suppressed [ 372.720269][ T29] audit: type=1326 audit(372.703:21950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 372.784120][ T29] audit: type=1326 audit(372.703:21951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 372.807253][ T29] audit: type=1326 audit(372.703:21952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 372.830277][ T29] audit: type=1326 audit(372.703:21953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 372.853418][ T29] audit: type=1326 audit(372.743:21954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 372.876425][ T29] audit: type=1326 audit(372.743:21955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f111fddf749 code=0x7ffc0000 [ 372.899608][ T29] audit: type=1326 audit(372.743:21956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 372.922678][ T29] audit: type=1326 audit(372.743:21957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 372.945860][ T29] audit: type=1326 audit(372.743:21958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 372.968861][ T29] audit: type=1326 audit(372.743:21959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27273 comm="syz.8.9174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f111fe12005 code=0x7ffc0000 [ 373.438324][ T8101] batadv1: left promiscuous mode [ 373.465891][T27333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9199'. [ 375.078130][T27455] netlink: 'LX[X': attribute type 13 has an invalid length. [ 375.112519][T27455] gretap0: refused to change device tx_queue_len [ 375.129440][T27455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.727348][T27486] netlink: 3 bytes leftover after parsing attributes in process `syz.9.9264'. [ 375.746417][T27486] 0ªX¹¦À: renamed from caif0 [ 375.759221][T27486] 0ªX¹¦À: entered allmulticast mode [ 375.764438][T27486] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 376.089729][T27508] netlink: 'syz.8.9274': attribute type 3 has an invalid length. [ 376.114365][T27508] netlink: 'syz.8.9274': attribute type 3 has an invalid length. [ 376.588254][ T8083] batadv0: left promiscuous mode [ 376.825842][T27556] netlink: 'syz.0.9294': attribute type 4 has an invalid length. [ 376.988896][T27562] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.028426][ T8093] batadv2: left promiscuous mode [ 377.069368][T27562] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.151547][T27562] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.210598][T27562] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.288148][ T8093] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.303475][ T8093] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.325047][ T8093] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.347840][ T8093] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.386277][T27582] xt_hashlimit: max too large, truncated to 1048576 [ 377.401934][T27582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.524123][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9311'. [ 377.594296][T27596] ip6gre1: entered allmulticast mode [ 377.620214][T27608] netlink: 9 bytes leftover after parsing attributes in process `syz.9.9315'. [ 377.629744][T27608] netlink: 9 bytes leftover after parsing attributes in process `syz.9.9315'. [ 377.656250][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9316'. [ 377.714824][T27614] bridge: RTM_NEWNEIGH with invalid ether address [ 377.779534][T27622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9322'. [ 377.805674][T27622] IPVS: Unknown mcast interface: [ 377.818394][T27624] netlink: 'syz.0.9323': attribute type 1 has an invalid length. [ 377.863643][ T29] kauditd_printk_skb: 936 callbacks suppressed [ 377.863709][ T29] audit: type=1400 audit(377.843:22896): avc: denied { getopt } for pid=27623 comm="syz.0.9323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.912470][T27627] pimreg: entered allmulticast mode [ 377.935023][T27627] pimreg: left allmulticast mode [ 377.948434][ T29] audit: type=1326 audit(377.883:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 377.971497][ T29] audit: type=1326 audit(377.883:22898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 377.994498][ T29] audit: type=1326 audit(377.883:22899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.017548][ T29] audit: type=1326 audit(377.883:22900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.040622][ T29] audit: type=1326 audit(377.883:22901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.063653][ T29] audit: type=1326 audit(377.883:22902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.086754][ T29] audit: type=1326 audit(377.883:22903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.109771][ T29] audit: type=1326 audit(377.883:22904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.132704][ T29] audit: type=1326 audit(377.893:22905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27630 comm="syz.1.9326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a6a4f749 code=0x7ffc0000 [ 378.799835][T27666] netlink: 'syz.0.9339': attribute type 10 has an invalid length. [ 378.807852][T27666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9339'. [ 378.817121][T27647] lo speed is unknown, defaulting to 1000 [ 378.825630][T27668] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9340'. [ 378.837661][T27666] ipvlan2: entered promiscuous mode [ 378.843494][T27666] bridge0: port 3(ipvlan2) entered blocking state [ 378.850043][T27666] bridge0: port 3(ipvlan2) entered disabled state [ 378.868884][T27666] ipvlan2: entered allmulticast mode [ 378.874204][T27666] bridge0: entered allmulticast mode [ 378.880412][T27666] ipvlan2: left allmulticast mode [ 378.885454][T27666] bridge0: left allmulticast mode [ 378.900962][T27670] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9341'. [ 378.910057][T27670] netlink: 'syz.9.9341': attribute type 7 has an invalid length. [ 378.917811][T27670] netlink: 'syz.9.9341': attribute type 8 has an invalid length. [ 378.925565][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9341'. [ 379.003960][T27680] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9345'. [ 379.073585][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9345'. [ 379.082758][T27681] netlink: 'syz.0.9346': attribute type 10 has an invalid length. [ 379.111947][T27681] bond0: (slave dummy0): Releasing backup interface [ 379.129325][T27681] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 379.138881][T27692] netlink: 'syz.0.9346': attribute type 10 has an invalid length. [ 379.146808][T27681] team0: Failed to send options change via netlink (err -105) [ 379.154309][T27681] team0: Port device dummy0 added [ 379.161784][T27684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9343'. [ 379.221097][T27692] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 379.272689][T27692] team0: Failed to send options change via netlink (err -105) [ 379.288036][T27692] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 379.297349][T27692] team0: Port device dummy0 removed [ 379.304939][T27692] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.564722][T27712] lo speed is unknown, defaulting to 1000 [ 379.796077][T27738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27738 comm=syz.9.9368 [ 379.808664][T27738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27738 comm=syz.9.9368 [ 379.929251][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9374'. [ 379.941321][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9374'. [ 379.957249][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9374'. [ 380.071132][T27771] bridge0: entered allmulticast mode [ 380.265556][T27779] 9p: Bad value for 'rfdno' [ 380.932270][T27823] netlink: 'syz.5.9403': attribute type 10 has an invalid length. [ 380.961841][T27823] $Hÿ: (slave dummy0): Releasing backup interface [ 380.978328][T27823] dummy0: left promiscuous mode [ 380.987127][T27830] netlink: 'syz.5.9403': attribute type 10 has an invalid length. [ 380.997615][T27823] dummy0: entered promiscuous mode [ 381.003644][T27823] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 381.012743][T27823] team0: Failed to send options change via netlink (err -105) [ 381.020286][T27823] team0: Port device dummy0 added [ 381.027208][T27830] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 381.068602][T27830] dummy0: left promiscuous mode [ 381.076912][T27830] team0: Failed to send options change via netlink (err -105) [ 381.091532][T27830] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 381.101304][T27830] team0: Port device dummy0 removed [ 381.111643][T27830] dummy0: entered promiscuous mode [ 381.126514][T27830] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 381.388903][T27886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.137947][T27964] netlink: 'syz.5.9464': attribute type 1 has an invalid length. [ 383.159344][T27964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.200577][T27964] bond7: (slave veth25): Enslaving as an active interface with a down link [ 383.243646][T27964] $Hÿ: (slave dummy0): Releasing backup interface [ 383.253514][T27964] dummy0: left promiscuous mode [ 383.262801][T27964] bond7: (slave dummy0): making interface the new active one [ 383.274592][T27964] dummy0: entered promiscuous mode [ 383.279861][T27964] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 383.299474][T27973] bond7 (unregistering): (slave veth25): Releasing active interface [ 383.326632][T27973] bond7 (unregistering): (slave dummy0): Releasing active interface [ 383.358874][T27973] bond7 (unregistering): Released all slaves [ 383.543129][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 383.543178][ T29] audit: type=1326 audit(383.523:23674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.628478][ T29] audit: type=1326 audit(383.553:23675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.651659][ T29] audit: type=1326 audit(383.553:23676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.674654][ T29] audit: type=1326 audit(383.553:23677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.697650][ T29] audit: type=1326 audit(383.553:23678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.720605][ T29] audit: type=1326 audit(383.553:23679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.743552][ T29] audit: type=1326 audit(383.553:23680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.766642][ T29] audit: type=1326 audit(383.553:23681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.789622][ T29] audit: type=1326 audit(383.553:23682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.812566][ T29] audit: type=1326 audit(383.553:23683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27985 comm="syz.5.9473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587b2af749 code=0x7ffc0000 [ 383.906169][T28009] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=28009 comm=syz.1.9481 [ 383.927302][T28009] __nla_validate_parse: 1 callbacks suppressed [ 383.927319][T28009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9481'. [ 384.113713][T27995] Process accounting resumed [ 384.316506][T28026] vlan0: entered allmulticast mode [ 384.327307][T28026] dummy0: entered allmulticast mode [ 384.555651][T28037] veth6: entered promiscuous mode [ 384.560784][T28037] veth6: entered allmulticast mode [ 384.954161][T28060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9504'. [ 384.980444][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9504'. [ 385.467100][T28072] Set syz1 is full, maxelem 65536 reached [ 385.564756][T28119] vlan0: entered allmulticast mode [ 385.570093][T28119] dummy0: entered allmulticast mode [ 385.594647][T28121] netlink: 'syz.8.9531': attribute type 1 has an invalid length. [ 385.637349][T28121] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.700607][T28127] bond11: (slave veth17): Enslaving as an active interface with a down link [ 385.722079][T28121] bond0: (slave dummy0): Releasing backup interface [ 385.748587][T28121] bond11: (slave dummy0): making interface the new active one [ 385.756969][T28121] dummy0: entered promiscuous mode [ 385.767221][T28121] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 385.783585][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9535'. [ 385.818734][T28127] bond11 (unregistering): (slave veth17): Releasing active interface [ 385.846514][T28127] bond11 (unregistering): (slave dummy0): Releasing active interface [ 385.876878][T28127] bond11 (unregistering): Released all slaves [ 385.988786][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9542'. [ 386.028778][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9542'. [ 386.202384][T28181] netlink: 'syz.1.9555': attribute type 4 has an invalid length. [ 386.210161][T28181] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9555'. [ 386.225477][T28181] .`: renamed from $Hÿ [ 386.405896][ T8091] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.434725][ T8091] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.471313][ T8091] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.498227][ T8091] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.781314][T28236] syzkaller0: entered allmulticast mode [ 386.805818][T28236] syzkaller0: entered promiscuous mode [ 386.831797][T28236] syzkaller0 (unregistering): left allmulticast mode [ 386.838549][T28236] syzkaller0 (unregistering): left promiscuous mode [ 387.151092][T28250] lo speed is unknown, defaulting to 1000 [ 387.170206][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9605'. [ 387.254845][T28281] netlink: 'syz.9.9600': attribute type 1 has an invalid length. [ 387.274219][T28281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.295485][T28281] bond2: (slave veth9): Enslaving as an active interface with a down link [ 387.323962][T28281] $Hÿ: (slave dummy0): Releasing backup interface [ 387.331184][T28281] dummy0: left promiscuous mode [ 387.357998][T28297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9608'. [ 387.367453][T28281] bond2: (slave dummy0): making interface the new active one [ 387.386431][T28281] dummy0: entered promiscuous mode [ 387.401306][T28281] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 387.446712][T28302] bond2 (unregistering): (slave veth9): Releasing active interface [ 387.469396][T28302] bond2 (unregistering): (slave dummy0): Releasing active interface [ 387.478674][T28302] bond2 (unregistering): Released all slaves [ 387.489555][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9608'. [ 387.498963][T28307] netlink: 'syz.8.9611': attribute type 10 has an invalid length. [ 387.519455][T28307] team0: Failed to send options change via netlink (err -105) [ 387.526936][T28307] team0: Port device dummy0 added [ 387.534612][T28307] netlink: 'syz.8.9611': attribute type 10 has an invalid length. [ 387.552594][T28307] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 387.573723][T28307] team0: Failed to send options change via netlink (err -105) [ 387.581790][T28307] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 387.592822][T28307] team0: Port device dummy0 removed [ 387.603249][T28307] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 387.891804][T28329] netlink: 'syz.9.9621': attribute type 3 has an invalid length. [ 387.900902][T28329] netlink: 'syz.9.9621': attribute type 3 has an invalid length. [ 388.048504][T28334] netlink: 'syz.9.9624': attribute type 4 has an invalid length. [ 388.057728][T28334] .`: renamed from $Hÿ [ 388.250700][T28355] ip6gre7: entered allmulticast mode [ 388.504702][T28361] lo speed is unknown, defaulting to 1000 [ 388.674670][T28384] openvswitch: netlink: Missing key (keys=40, expected=100) [ 388.739785][T28392] netlink: 'syz.0.9647': attribute type 3 has an invalid length. [ 388.752594][T28392] netlink: 'syz.0.9647': attribute type 3 has an invalid length. [ 388.827251][T28400] netlink: 'syz.9.9650': attribute type 1 has an invalid length. [ 388.976566][T28416] __nla_validate_parse: 8 callbacks suppressed [ 388.976583][T28416] netlink: 1932 bytes leftover after parsing attributes in process `syz.9.9655'. [ 388.992173][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9655'. [ 389.158461][T28417] ================================================================== [ 389.166576][T28417] BUG: KCSAN: data-race in touch_atime / touch_atime [ 389.173264][T28417] [ 389.175579][T28417] write to 0xffff88815eb643d8 of 4 bytes by task 28405 on cpu 0: [ 389.183284][T28417] touch_atime+0x1e8/0x340 [ 389.187708][T28417] shmem_file_read_iter+0x477/0x540 [ 389.192904][T28417] copy_splice_read+0x442/0x660 [ 389.197766][T28417] splice_direct_to_actor+0x290/0x680 [ 389.203151][T28417] do_splice_direct+0xda/0x150 [ 389.207905][T28417] do_sendfile+0x380/0x650 [ 389.212316][T28417] __x64_sys_sendfile64+0x105/0x150 [ 389.217501][T28417] x64_sys_call+0x2db1/0x3000 [ 389.222168][T28417] do_syscall_64+0xca/0x2b0 [ 389.226663][T28417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.232557][T28417] [ 389.234865][T28417] read to 0xffff88815eb643d8 of 4 bytes by task 28417 on cpu 1: [ 389.242488][T28417] touch_atime+0x194/0x340 [ 389.246894][T28417] shmem_file_read_iter+0x477/0x540 [ 389.252080][T28417] copy_splice_read+0x442/0x660 [ 389.256924][T28417] splice_direct_to_actor+0x290/0x680 [ 389.262299][T28417] do_splice_direct+0xda/0x150 [ 389.267063][T28417] do_sendfile+0x380/0x650 [ 389.271484][T28417] __x64_sys_sendfile64+0x105/0x150 [ 389.276686][T28417] x64_sys_call+0x2db1/0x3000 [ 389.281363][T28417] do_syscall_64+0xca/0x2b0 [ 389.285861][T28417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.291757][T28417] [ 389.294065][T28417] value changed: 0x07edab8e -> 0x0886420e [ 389.299762][T28417] [ 389.302106][T28417] Reported by Kernel Concurrency Sanitizer on: [ 389.308248][T28417] CPU: 1 UID: 0 PID: 28417 Comm: syz.0.9651 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.319616][T28417] Tainted: [W]=WARN [ 389.323405][T28417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.333442][T28417] ==================================================================