last executing test programs: 5m24.316792487s ago: executing program 3 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 5m23.283327323s ago: executing program 3 (id=97): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 5m23.232026117s ago: executing program 3 (id=99): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 5m23.20333984s ago: executing program 3 (id=100): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 5m23.137227046s ago: executing program 3 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5m23.037745665s ago: executing program 3 (id=108): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m8.021523388s ago: executing program 32 (id=108): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.488183882s ago: executing program 0 (id=6613): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.352093505s ago: executing program 0 (id=6615): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x100, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x5537, 0x1c881, 0x8, 0x91}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x8848, 0x37, 0x0, 0x0) 1.332347736s ago: executing program 5 (id=6617): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1.319544018s ago: executing program 0 (id=6618): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7, 0x100000000000000) 1.228026537s ago: executing program 5 (id=6621): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000100)='\x00\x00', 0x12}], 0x2) 1.07305252s ago: executing program 5 (id=6623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.039134554s ago: executing program 4 (id=6625): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) ustat(0x6, &(0x7f0000000280)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 1.038273324s ago: executing program 5 (id=6626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) 989.224089ms ago: executing program 5 (id=6627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000010180)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000010040)='kfree\x00', r1, 0x0, 0x7}, 0x18) unlink(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000010000)='./file1\x00', 0xa50003d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe9}) close(r2) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0xfffffffffffffffe, 0x0) 906.355196ms ago: executing program 4 (id=6629): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 854.630551ms ago: executing program 4 (id=6632): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xfffffffffffffffb}, {0x3}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'geneve1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040000000200000000000011040000000000000000000000000000020000000002000000000000060200000002"], 0x0, 0x54}, 0x28) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 814.071134ms ago: executing program 2 (id=6633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4002) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@journal_async_commit}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$eJzs28tvG0UYAPBv7SQlfZBQlUfTAoGCiHgkTVpKD1xAIHEACQkO5RiStAp1G9QEiVYRBITKEVXijjgi8RdwggsCTkhc4Y4qVSiXFk5Ga+8mtmOneThxW/9+0iYzu+PMfN4de2YnG0DXGk5/JBH7I+LPiBioZusLDFd/3VpenPp3eXEqiXL5nX+SSrmby4tTedH8dfvyTE9E4YskjjSpd/7ylfOTpdLMpSw/tnDhw7H5y1demL0weW7m3MzFidOnT54Yf+nUxIttiTON6+bQJ3NHD7/x3rW3ps5ce//X75M8/oY42mR4vYNPl8ttrq6zDtSkk54ONoRNKVa7afRW+v9AFGP15A3E65/n6b5ONRDYMeVyufxQ68NLZeAelkSnWwB0Rv5Fn85/822Xhh53hBuvVCdAady3sq16pCcKWZnehvltOw1HxJml/75Jt9iZ+xAAAHV+TMc/zzcb/xWi9r7Q/dkaymBEPBARByPiVEQciogHIyplH46IRzZZf+MiydrxT+H6lgLboHT893K2tlU//stHfzFYzHIHKvH3JmdnSzPHs/dkJHr3pPnxder46bU/vmp1rHb8l25p/flYMGvH9Z499a+ZnlyY3E7MtW58FjHU0yz+ZGUlIImIwxExtMU6Zp/97mirY7ePfx1tWGcqfxvxTPX8L0VD/LlktaZm65Nj90Vp5vhYflWs9dvvV99uVf+24m+D9PzvbXr9r8Q/mNSu185vvo6rf33Zck6z1eu/L3m3bt/HkwsLl8Yj+pI3q42u3T/RUG5itXwa/8ix5v3/YKy+E0ciIr2IH42IxyLi8aztT0TEkxFxbJ34f3n1qQ+2Hv/OSuOf3tT5X030ReOe5oni+Z9/qKt0cDPxp+f/ZCU1ku3ZyOffRtq1tasZAAAA7j6FiNgfSWF0JV0ojI5W/4f/UOwtlObmF547O/fRxenqMwKD0VvI73QN1NwPHc+m9Xl+oiF/Irtv/HWxv5IfnZorTXc6eOhy+1r0/9TfxU63DthxnteC7qX/Q/fS/6F76f/QvZr0//5OtAPYfc2+/z/tQDuA3dfQ/y37QRcx/4fupf9D99L/oSvN98ftH5KXkFiTiMId0Yx7J5EkEdv/O0m0qT2d/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8DAAD//7Pm4aw=") setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 813.631895ms ago: executing program 4 (id=6634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 729.441042ms ago: executing program 2 (id=6635): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 707.417844ms ago: executing program 2 (id=6636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x15, &(0x7f0000000700), 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000800600024000000000240004800800024000119a4a9998c88c0800fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 648.10342ms ago: executing program 2 (id=6637): unshare(0x28000600) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff8000/0x3000)=nil) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'sit0\x00', 0x0}) 381.640804ms ago: executing program 0 (id=6639): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) 381.451794ms ago: executing program 2 (id=6640): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x100, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x5537, 0x1c881, 0x8, 0x91}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x8848, 0x37, 0x0, 0x0) 213.2711ms ago: executing program 2 (id=6642): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 213.05874ms ago: executing program 4 (id=6643): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40080) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001f40), 0x80800) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 212.48344ms ago: executing program 1 (id=6644): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = inotify_init1(0x80800) dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 161.323405ms ago: executing program 1 (id=6645): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010) 160.834934ms ago: executing program 4 (id=6646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 129.872408ms ago: executing program 1 (id=6647): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kmem_cache_free\x00'}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) socket(0x10, 0x3, 0x9) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 129.393957ms ago: executing program 1 (id=6648): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 95.466201ms ago: executing program 0 (id=6650): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x2089}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) unshare(0x20060400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x29e782}) io_uring_enter(r3, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 77.396962ms ago: executing program 1 (id=6651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "7cff0000080094cf", "c11d9a1e03550000000000000fd7aab9", ']G\x00', "5e33931677e0f2d7"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 64.645034ms ago: executing program 5 (id=6652): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32], 0x3c}}, 0x0) 3.057349ms ago: executing program 1 (id=6653): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 0s ago: executing program 0 (id=6663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000060696c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) kernel console output (not intermixed with test programs): es=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 269.085475][ T29] audit: type=1326 audit(1767120010.296:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 269.085579][ T29] audit: type=1326 audit(1767120010.296:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 269.085673][ T29] audit: type=1326 audit(1767120010.296:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="syz.1.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 269.353771][T19294] loop5: detected capacity change from 0 to 512 [ 269.402351][T19294] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.5108: Parent and EA inode have the same ino 15 [ 269.462619][T19294] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.5108: Parent and EA inode have the same ino 15 [ 269.495108][T19294] EXT4-fs (loop5): 1 orphan inode deleted [ 269.535994][T19294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.613819][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.621612][T19299] cgroup: fork rejected by pids controller in /syz0 [ 270.086056][T19562] lo speed is unknown, defaulting to 1000 [ 271.155701][T20080] lo speed is unknown, defaulting to 1000 [ 272.600754][T20149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.608896][T20149] batman_adv: batadv0: Removing interface: macsec1 [ 272.675853][T20163] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5142'. [ 272.731230][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5142'. [ 272.740372][T20167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5142'. [ 272.749542][T20167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5142'. [ 272.760696][T20167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5142'. [ 272.892482][T20176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5147'. [ 273.657004][T20208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5160'. [ 273.855034][T20221] lo speed is unknown, defaulting to 1000 [ 274.285441][T20253] pimreg: entered allmulticast mode [ 274.292402][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 274.292420][ T29] audit: type=1326 audit(1767120015.281:15505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.311806][T20252] pimreg: left allmulticast mode [ 274.323734][ T29] audit: type=1326 audit(1767120015.300:15506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.353229][ T29] audit: type=1326 audit(1767120015.300:15507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.377746][ T29] audit: type=1326 audit(1767120015.300:15508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.402228][ T29] audit: type=1326 audit(1767120015.300:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.426573][ T29] audit: type=1326 audit(1767120015.300:15510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.451228][ T29] audit: type=1326 audit(1767120015.300:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.475417][ T29] audit: type=1326 audit(1767120015.300:15512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.499768][ T29] audit: type=1326 audit(1767120015.300:15513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.523682][ T29] audit: type=1326 audit(1767120015.300:15514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20252 comm="syz.0.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 274.674084][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 276.417573][T20345] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5212'. [ 276.773997][T20374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5226'. [ 276.803215][T20376] netlink: 56 bytes leftover after parsing attributes in process `'. [ 277.105668][T20395] lo speed is unknown, defaulting to 1000 [ 277.440889][T20396] Set syz1 is full, maxelem 65536 reached [ 277.545817][T20410] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5240'. [ 277.556539][T20410] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 277.672001][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 278.145352][T20442] loop5: detected capacity change from 0 to 8192 [ 278.185936][T20442] loop5: p1 p4 < > [ 278.189848][T20442] loop5: partition table partially beyond EOD, truncated [ 278.197242][T20442] loop5: p1 start 16777216 is beyond EOD, truncated [ 278.203962][T20442] loop5: p4 start 16777216 is beyond EOD, truncated [ 278.230271][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5253'. [ 278.596960][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5257'. [ 278.638986][T20459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 278.699571][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 278.711436][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 278.711538][ T3317] Tainted: [W]=WARN [ 278.711546][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.711561][ T3317] Call Trace: [ 278.711570][ T3317] [ 278.711579][ T3317] __dump_stack+0x1d/0x30 [ 278.711602][ T3317] dump_stack_lvl+0x95/0xd0 [ 278.711626][ T3317] dump_stack+0x15/0x1b [ 278.711688][ T3317] dump_header+0x81/0x240 [ 278.711707][ T3317] oom_kill_process+0x295/0x350 [ 278.711781][ T3317] out_of_memory+0x97b/0xb80 [ 278.711807][ T3317] try_charge_memcg+0x610/0xa10 [ 278.711842][ T3317] charge_memcg+0x51/0xc0 [ 278.711944][ T3317] __mem_cgroup_charge+0x28/0xb0 [ 278.711978][ T3317] filemap_add_folio+0x111/0x360 [ 278.712004][ T3317] __filemap_get_folio_mpol+0x326/0x650 [ 278.712030][ T3317] filemap_fault+0x44d/0xb70 [ 278.712084][ T3317] __do_fault+0xbc/0x200 [ 278.712104][ T3317] handle_mm_fault+0xfab/0x2c60 [ 278.712148][ T3317] do_user_addr_fault+0x630/0x1080 [ 278.712260][ T3317] exc_page_fault+0x62/0xa0 [ 278.712352][ T3317] asm_exc_page_fault+0x26/0x30 [ 278.712374][ T3317] RIP: 0033:0x7f7b1f1d5fd4 [ 278.712435][ T3317] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 278.712456][ T3317] RSP: 002b:00007ffc10ce8080 EFLAGS: 00010202 [ 278.712477][ T3317] RAX: 0000001b33d24000 RBX: 0000000000000b38 RCX: 0000000000042a68 [ 278.712493][ T3317] RDX: 00000000020babe2 RSI: 00007ffc10ce8110 RDI: 0000000000000001 [ 278.712509][ T3317] RBP: 00007ffc10ce80bc R08: 0000000007cda5df R09: 7fffffffffffffff [ 278.712525][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 278.712540][ T3317] R13: 00000000000927c0 R14: 0000000000042a22 R15: 00007ffc10ce8110 [ 278.712628][ T3317] [ 278.712635][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 1294 [ 278.909208][ T3317] memory+swap: usage 357244kB, limit 9007199254740988kB, failcnt 0 [ 278.917552][ T3317] kmem: usage 219120kB, limit 9007199254740988kB, failcnt 0 [ 278.925121][ T3317] Memory cgroup stats for /syz2: [ 278.925426][ T3317] cache 85618688 [ 278.933996][ T3317] rss 4501504 [ 278.937373][ T3317] shmem 18468864 [ 278.940943][ T3317] mapped_file 0 [ 278.944409][ T3317] dirty 0 [ 278.947390][ T3317] writeback 0 [ 278.950690][ T3317] workingset_refault_anon 107 [ 278.955425][ T3317] workingset_refault_file 13774 [ 278.960350][ T3317] swap 51245056 [ 278.963885][ T3317] swapcached 53248 [ 278.967838][ T3317] pgpgin 406056 [ 278.971419][ T3317] pgpgout 384036 [ 278.975082][ T3317] pgfault 375162 [ 278.978834][ T3317] pgmajfault 139 [ 278.982724][ T3317] inactive_anon 446464 [ 278.986808][ T3317] active_anon 18575360 [ 278.990917][ T3317] inactive_file 4022272 [ 278.995173][ T3317] active_file 0 [ 278.998744][ T3317] unevictable 67149824 [ 279.002811][ T3317] hierarchical_memory_limit 314572800 [ 279.008179][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 279.014424][ T3317] total_cache 85618688 [ 279.018545][ T3317] total_rss 4501504 [ 279.022583][ T3317] total_shmem 18468864 [ 279.026664][ T3317] total_mapped_file 0 [ 279.030687][ T3317] total_dirty 0 [ 279.034152][ T3317] total_writeback 0 [ 279.038052][ T3317] total_workingset_refault_anon 107 [ 279.043460][ T3317] total_workingset_refault_file 13774 [ 279.048898][ T3317] total_swap 51245056 [ 279.053259][ T3317] total_swapcached 53248 [ 279.057523][ T3317] total_pgpgin 406056 [ 279.061676][ T3317] total_pgpgout 384036 [ 279.065892][ T3317] total_pgfault 375162 [ 279.069967][ T3317] total_pgmajfault 139 [ 279.074324][ T3317] total_inactive_anon 446464 [ 279.078906][ T3317] total_active_anon 18575360 [ 279.083496][ T3317] total_inactive_file 4022272 [ 279.088240][ T3317] total_active_file 0 [ 279.092226][ T3317] total_unevictable 67149824 [ 279.096830][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5242,pid=20413,uid=0 [ 279.111782][ T3317] Memory cgroup out of memory: Killed process 20413 (syz.2.5242) total-vm:96016kB, anon-rss:5364kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 279.148450][T20450] Cannot find add_set index 0 as target [ 279.265849][T20478] tipc: Enabling of bearer rejected, failed to enable media [ 279.511869][T20503] SET target dimension over the limit! [ 279.936547][T20547] loop5: detected capacity change from 0 to 8192 [ 279.990642][T20550] lo speed is unknown, defaulting to 1000 [ 280.630177][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 280.630197][ T29] audit: type=1326 audit(1767120021.212:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.674502][T20606] netlink: 'syz.1.5294': attribute type 13 has an invalid length. [ 280.688120][ T29] audit: type=1326 audit(1767120021.240:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.712937][ T29] audit: type=1326 audit(1767120021.249:15962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.737040][ T29] audit: type=1326 audit(1767120021.249:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.761637][ T29] audit: type=1326 audit(1767120021.249:15964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.786364][ T29] audit: type=1326 audit(1767120021.249:15965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.810914][ T29] audit: type=1326 audit(1767120021.249:15966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.835698][ T29] audit: type=1326 audit(1767120021.249:15967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.860034][ T29] audit: type=1326 audit(1767120021.249:15968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.884675][ T29] audit: type=1326 audit(1767120021.249:15969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.5.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 280.909496][T20606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.010594][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'. [ 281.036608][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'. [ 281.062309][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5296'. [ 281.220509][T20599] SET target dimension over the limit! [ 281.560214][T20701] all: renamed from team_slave_0 [ 281.764175][T20723] Cannot find add_set index 0 as target [ 281.963759][T20751] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5327'. [ 281.972914][T20751] 0ªî{X¹¦: renamed from gretap0 [ 281.979820][T20751] 0ªî{X¹¦: entered allmulticast mode [ 281.989777][T20751] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 282.246037][T20778] io-wq is not configured for unbound workers [ 282.588885][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5346'. [ 282.630125][T20801] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 283.657700][T20853] loop5: detected capacity change from 0 to 512 [ 283.704769][T20853] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 283.722205][T20853] EXT4-fs (loop5): orphan cleanup on readonly fs [ 283.746602][T20853] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.5369: corrupted inode contents [ 283.763491][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5371'. [ 283.777253][T20853] EXT4-fs (loop5): Remounting filesystem read-only [ 283.783927][T20853] EXT4-fs (loop5): 1 truncate cleaned up [ 283.789969][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 283.801151][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 283.829445][ T37] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 283.853249][T20853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.909504][T20866] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5374'. [ 283.938237][T20866] hsr_slave_0: left promiscuous mode [ 283.947192][T20866] hsr_slave_1: left promiscuous mode [ 283.959361][T20870] netlink: 'syz.1.5376': attribute type 29 has an invalid length. [ 283.983692][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.038186][T20872] lo speed is unknown, defaulting to 1000 [ 284.038381][T20877] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 284.060331][ T4655] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 284.067985][T20877] bond5: entered promiscuous mode [ 284.073161][T20877] bond5: entered allmulticast mode [ 284.090155][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5380'. [ 284.103041][T20877] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 284.108660][ T4655] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.114470][T20877] bond5: (slave bridge11): making interface the new active one [ 284.129620][T20877] bridge11: entered promiscuous mode [ 284.135112][T20877] bridge11: entered allmulticast mode [ 284.141567][T20877] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 284.155552][T20877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5380'. [ 284.187702][T20877] bond5: left promiscuous mode [ 284.192713][T20877] bridge11: left promiscuous mode [ 284.197948][T20877] bond5: left allmulticast mode [ 284.203042][T20877] bridge11: left allmulticast mode [ 284.231202][T20877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.457827][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5390'. [ 285.510487][T20973] netlink: 'syz.0.5418': attribute type 7 has an invalid length. [ 286.016503][T20990] lo speed is unknown, defaulting to 1000 [ 286.088304][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 286.088357][ T29] audit: type=1326 audit(1767120026.319:16282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.161835][ T29] audit: type=1326 audit(1767120026.347:16283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.185791][ T29] audit: type=1326 audit(1767120026.347:16284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.210631][ T29] audit: type=1326 audit(1767120026.347:16285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.234804][ T29] audit: type=1326 audit(1767120026.347:16286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.246512][T21000] pim6reg: entered allmulticast mode [ 286.259166][ T29] audit: type=1326 audit(1767120026.347:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.288291][ T29] audit: type=1326 audit(1767120026.347:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 286.312747][ T29] audit: type=1326 audit(1767120026.347:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc78feff783 code=0x7ffc0000 [ 286.336610][ T29] audit: type=1326 audit(1767120026.347:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc78fefe1ff code=0x7ffc0000 [ 286.361277][ T29] audit: type=1326 audit(1767120026.347:16291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20999 comm="syz.4.5429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc78feff7d7 code=0x7ffc0000 [ 286.495631][T21011] netlink: 'syz.0.5435': attribute type 15 has an invalid length. [ 286.504457][T21011] __nla_validate_parse: 5 callbacks suppressed [ 286.504476][T21011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5435'. [ 286.637819][T21020] netlink: 'syz.0.5439': attribute type 1 has an invalid length. [ 286.671848][T21020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.699301][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5439'. [ 286.715682][T21020] bond6 (unregistering): Released all slaves [ 286.750690][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.761263][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.770926][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.781398][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.801223][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.829932][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.845977][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.876884][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.899475][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.930683][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.978541][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 286.998970][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.016647][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.028839][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.051264][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.079836][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.092775][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.103898][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.115266][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.127049][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.150198][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.161778][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.199293][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.209592][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.220246][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.231792][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.242039][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.251515][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.261643][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.271828][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.281789][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.291039][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.302274][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.312980][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.323098][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.350969][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.371423][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.381340][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.394862][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.404326][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5452'. [ 287.412082][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.425017][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.438740][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.455400][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.468031][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.477357][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.487000][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.498315][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.513723][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.523268][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.533253][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.547388][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.566034][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.576539][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.634328][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.697672][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.766389][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.830500][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.892367][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.907477][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.925648][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.957387][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 287.997673][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.028769][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.063777][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.085717][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.130320][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.214084][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.240524][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.273822][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.306974][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.335347][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.367903][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.398874][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.433292][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.466607][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.498366][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.530201][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.557407][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.603704][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.662048][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.712882][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.728365][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 288.858886][T21026] 9pnet_fd: p9_fd_create_tcp (21026): problem connecting socket to 127.0.0.1 [ 289.004788][T21078] serio: Serial port ptm0 [ 289.420083][T21104] VFS: Mount too revealing [ 289.468116][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5471'. [ 289.508476][T21118] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.518413][T21118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.600574][T21118] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.611649][T21118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.704416][T21118] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.715139][T21118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.769612][T21137] pim6reg: entered allmulticast mode [ 289.798338][T21118] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.808416][T21118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.842168][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5488'. [ 289.917752][ T3711] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.926064][ T3711] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.951300][ T3695] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.959852][ T3695] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.973793][ T3695] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.982333][ T3695] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.996153][ T3695] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.004542][ T3695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.084207][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5493'. [ 290.622109][T21184] bond0: (slave dummy0): Releasing backup interface [ 290.630725][T21184] bond0: (slave bond_slave_0): Releasing backup interface [ 290.647651][T21184] bond0: (slave bond_slave_1): Releasing backup interface [ 290.662475][T21184] team0: Port device team_slave_0 removed [ 290.669572][T21184] team0: Port device team_slave_1 removed [ 290.694208][T21184] bond1: (slave bridge2): Releasing backup interface [ 290.716514][T21190] VFS: Mount too revealing [ 290.733461][T21184] bond2: (slave bond3): Releasing backup interface [ 290.755955][T21184] bond4: (slave bridge7): Removing an active aggregator [ 290.768344][T21184] bond4: (slave bridge7): Releasing backup interface [ 290.786973][T21184] bond5: (slave bridge11): Releasing active interface [ 290.830878][T21199] netlink: 'syz.5.5509': attribute type 30 has an invalid length. [ 291.012764][T21210] tipc: Started in network mode [ 291.017997][T21210] tipc: Node identity ac14140f, cluster identity 4711 [ 291.047166][T21210] tipc: New replicast peer: 255.255.255.255 [ 291.053451][T21210] tipc: Enabled bearer , priority 10 [ 291.167708][T21222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5514'. [ 291.730234][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 291.730302][ T29] audit: type=1326 audit(1767120031.585:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.789313][ T29] audit: type=1326 audit(1767120031.623:17058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.813389][ T29] audit: type=1326 audit(1767120031.623:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.837490][ T29] audit: type=1326 audit(1767120031.623:17060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.861937][ T29] audit: type=1326 audit(1767120031.623:17061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.885630][ T29] audit: type=1326 audit(1767120031.623:17062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.909659][ T29] audit: type=1326 audit(1767120031.623:17063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.933520][ T29] audit: type=1326 audit(1767120031.632:17064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.957861][ T29] audit: type=1326 audit(1767120031.632:17065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 291.982941][ T29] audit: type=1326 audit(1767120031.632:17066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21288 comm="syz.2.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 292.126320][ T3411] tipc: Node number set to 2886997007 [ 292.283485][T21326] lo speed is unknown, defaulting to 1000 [ 292.450282][T21344] lo speed is unknown, defaulting to 1000 [ 292.909863][T21403] set match dimension is over the limit! [ 293.076914][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 293.812212][T21453] lo speed is unknown, defaulting to 1000 [ 294.126619][T21458] netlink: 'syz.2.5558': attribute type 4 has an invalid length. [ 294.874568][T21478] lo speed is unknown, defaulting to 1000 [ 295.545704][T21513] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5578'. [ 297.112482][T21560] loop5: detected capacity change from 0 to 512 [ 297.121767][T21560] ext4: Unknown parameter 'fowner' [ 297.289887][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 297.289906][ T29] audit: type=1326 audit(1767120036.786:17466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff5240d65e7 code=0x7ffc0000 [ 297.319925][ T29] audit: type=1326 audit(1767120036.786:17467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff52407b829 code=0x7ffc0000 [ 297.344781][ T29] audit: type=1326 audit(1767120036.786:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff5240d65e7 code=0x7ffc0000 [ 297.368707][ T29] audit: type=1326 audit(1767120036.786:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff52407b829 code=0x7ffc0000 [ 297.392623][ T29] audit: type=1326 audit(1767120036.786:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.416391][ T29] audit: type=1326 audit(1767120036.786:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.440219][ T29] audit: type=1326 audit(1767120036.786:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.464032][ T29] audit: type=1326 audit(1767120036.786:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.487794][ T29] audit: type=1326 audit(1767120036.786:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.511739][ T29] audit: type=1326 audit(1767120036.786:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21575 comm="syz.1.5602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 297.844900][T21590] team0: Port device dummy0 removed [ 297.956843][T21590] bond1: (slave bridge3): Releasing backup interface [ 297.985910][T21590] bridge3: left promiscuous mode [ 298.099700][T21590] bond2: (slave bond3): Releasing backup interface [ 298.138675][T21590] bond3: left promiscuous mode [ 298.162076][T21590] bond0: (slave ip6gretap1): Releasing backup interface [ 298.170727][T21590] ip6gretap1: left promiscuous mode [ 298.176151][T21590] ip6gretap1: left allmulticast mode [ 298.436207][T21609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5616'. [ 299.018176][T21629] lo speed is unknown, defaulting to 1000 [ 299.594421][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'. [ 299.713493][T21668] lo speed is unknown, defaulting to 1000 [ 299.895185][T21671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 300.085468][T21681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5644'. [ 300.095164][T21681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5644'. [ 300.111922][T21681] bridge0: port 1(vlan0) entered blocking state [ 300.118332][T21681] bridge0: port 1(vlan0) entered disabled state [ 300.131077][T21681] vlan0: entered allmulticast mode [ 300.136458][T21681] bridge0: entered allmulticast mode [ 300.142667][T21681] vlan0: left allmulticast mode [ 300.147608][T21681] bridge0: left allmulticast mode [ 300.224506][T21689] lo speed is unknown, defaulting to 1000 [ 301.121285][T21730] lo speed is unknown, defaulting to 1000 [ 301.235751][ T11] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 301.615896][T21759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5676'. [ 301.625226][T21759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5676'. [ 301.634945][T21759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5676'. [ 301.705649][T21759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5676'. [ 302.023473][T21773] lo speed is unknown, defaulting to 1000 [ 302.212953][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5685'. [ 302.360544][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 302.371778][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.371886][ T3317] Tainted: [W]=WARN [ 302.371892][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.371904][ T3317] Call Trace: [ 302.371912][ T3317] [ 302.371968][ T3317] __dump_stack+0x1d/0x30 [ 302.371998][ T3317] dump_stack_lvl+0x95/0xd0 [ 302.372044][ T3317] dump_stack+0x15/0x1b [ 302.372068][ T3317] dump_header+0x81/0x240 [ 302.372168][ T3317] oom_kill_process+0x295/0x350 [ 302.372196][ T3317] out_of_memory+0x97b/0xb80 [ 302.372225][ T3317] try_charge_memcg+0x610/0xa10 [ 302.372351][ T3317] charge_memcg+0x51/0xc0 [ 302.372383][ T3317] __mem_cgroup_charge+0x28/0xb0 [ 302.372420][ T3317] filemap_add_folio+0x111/0x360 [ 302.372522][ T3317] __filemap_get_folio_mpol+0x326/0x650 [ 302.372547][ T3317] filemap_fault+0x44d/0xb70 [ 302.372593][ T3317] __do_fault+0xbc/0x200 [ 302.372651][ T3317] handle_mm_fault+0xfab/0x2c60 [ 302.372698][ T3317] do_user_addr_fault+0x630/0x1080 [ 302.372728][ T3317] exc_page_fault+0x62/0xa0 [ 302.372785][ T3317] asm_exc_page_fault+0x26/0x30 [ 302.372804][ T3317] RIP: 0033:0x7f7b1f1d5fd4 [ 302.372820][ T3317] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 302.372839][ T3317] RSP: 002b:00007ffc10ce8080 EFLAGS: 00010202 [ 302.372859][ T3317] RAX: 0000001b33d24000 RBX: 0000000000000c06 RCX: 0000000000048058 [ 302.372925][ T3317] RDX: 0000000008489d8c RSI: 00007ffc10ce8110 RDI: 0000000000000001 [ 302.372938][ T3317] RBP: 00007ffc10ce80bc R08: 000000001f99817f R09: 7fffffffffffffff [ 302.372952][ T3317] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 302.372967][ T3317] R13: 00000000000927c0 R14: 0000000000047ee4 R15: 00007ffc10ce8110 [ 302.372990][ T3317] [ 302.372999][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 1501 [ 302.567787][ T3317] memory+swap: usage 357244kB, limit 9007199254740988kB, failcnt 0 [ 302.575837][ T3317] kmem: usage 288508kB, limit 9007199254740988kB, failcnt 0 [ 302.583176][ T3317] Memory cgroup stats for /syz2: [ 302.584326][ T3317] cache 18468864 [ 302.593014][ T3317] rss 598016 [ 302.596253][ T3317] shmem 18468864 [ 302.599813][ T3317] mapped_file 0 [ 302.603781][ T3317] dirty 0 [ 302.606987][ T3317] writeback 0 [ 302.610285][ T3317] workingset_refault_anon 107 [ 302.615196][ T3317] workingset_refault_file 14014 [ 302.620511][ T3317] swap 51245056 [ 302.624148][ T3317] swapcached 53248 [ 302.627924][ T3317] pgpgin 431370 [ 302.631427][ T3317] pgpgout 426697 [ 302.635218][ T3317] pgfault 405679 [ 302.638798][ T3317] pgmajfault 143 [ 302.642645][ T3317] inactive_anon 18567168 [ 302.646418][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 302.646432][ T29] audit: type=1326 audit(1767120041.809:17693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.647050][ T3317] active_anon 552960 [ 302.653315][ T29] audit: type=1326 audit(1767120041.809:17694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.676954][ T3317] inactive_file 0 [ 302.708340][ T3317] active_file 20480 [ 302.710017][ T29] audit: type=1326 audit(1767120041.866:17695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.712157][ T3317] unevictable 0 [ 302.736337][ T29] audit: type=1326 audit(1767120041.894:17696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.739411][ T3317] hierarchical_memory_limit 314572800 [ 302.739423][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 302.774252][ T29] audit: type=1326 audit(1767120041.931:17697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.775521][ T3317] total_cache 18468864 [ 302.775531][ T3317] total_rss 598016 [ 302.775538][ T3317] total_shmem 18468864 [ 302.775545][ T3317] total_mapped_file 0 [ 302.775552][ T3317] total_dirty 0 [ 302.775559][ T3317] total_writeback 0 [ 302.775566][ T3317] total_workingset_refault_anon 107 [ 302.775574][ T3317] total_workingset_refault_file 14014 [ 302.799605][ T29] audit: type=1326 audit(1767120041.950:17698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.803405][ T3317] total_swap 51245056 [ 302.803417][ T3317] total_swapcached 53248 [ 302.807326][ T29] audit: type=1326 audit(1767120041.959:17699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.811260][ T3317] total_pgpgin 431370 [ 302.811275][ T3317] total_pgpgout 426697 [ 302.811282][ T3317] total_pgfault 405679 [ 302.811291][ T3317] total_pgmajfault 143 [ 302.815618][ T29] audit: type=1326 audit(1767120041.959:17700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.819170][ T3317] total_inactive_anon 18567168 [ 302.819183][ T3317] total_active_anon 552960 [ 302.823214][ T29] audit: type=1326 audit(1767120041.968:17701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.828211][ T3317] total_inactive_file 0 [ 302.828224][ T3317] total_active_file 20480 [ 302.828233][ T3317] total_unevictable 0 [ 302.828243][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 302.833913][ T29] audit: type=1326 audit(1767120041.978:17702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21785 comm="syz.5.5687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8958852005 code=0x7ffc0000 [ 302.857420][ T3317] ,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5668,pid=21741,uid=0 [ 302.857508][ T3317] Memory cgroup out of memory: Killed process 21741 (syz.2.5668) total-vm:95884kB, anon-rss:1268kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 303.075806][T21799] lo speed is unknown, defaulting to 1000 [ 303.497277][T21815] loop5: detected capacity change from 0 to 128 [ 303.595482][T21817] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.5696'. [ 303.640585][T21817] netlink: zone id is out of range [ 303.645870][T21817] netlink: zone id is out of range [ 303.653987][T21814] lo speed is unknown, defaulting to 1000 [ 303.661881][T21817] netlink: zone id is out of range [ 303.681506][T21817] netlink: zone id is out of range [ 303.686847][T21817] netlink: zone id is out of range [ 303.700429][T21817] netlink: zone id is out of range [ 303.757206][T21817] netlink: set zone limit has 8 unknown bytes [ 303.777448][T21815] bio_check_eod: 89 callbacks suppressed [ 303.777466][T21815] syz.5.5695: attempt to access beyond end of device [ 303.777466][T21815] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 303.895723][T21826] netlink: 'syz.0.5699': attribute type 30 has an invalid length. [ 303.956660][T21813] syz.5.5695: attempt to access beyond end of device [ 303.956660][T21813] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 303.995580][T21813] syz.5.5695: attempt to access beyond end of device [ 303.995580][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.024963][T21813] syz.5.5695: attempt to access beyond end of device [ 304.024963][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.046387][T21813] syz.5.5695: attempt to access beyond end of device [ 304.046387][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.072516][T21813] syz.5.5695: attempt to access beyond end of device [ 304.072516][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.100017][T21813] syz.5.5695: attempt to access beyond end of device [ 304.100017][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.142541][T21813] syz.5.5695: attempt to access beyond end of device [ 304.142541][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.196080][T21813] syz.5.5695: attempt to access beyond end of device [ 304.196080][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.236688][T21813] syz.5.5695: attempt to access beyond end of device [ 304.236688][T21813] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 304.266910][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5704'. [ 304.276150][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5704'. [ 304.424189][T21844] ip6gre3: entered promiscuous mode [ 304.429642][T21844] ip6gre3: entered allmulticast mode [ 304.436053][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.443841][ T12] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.459105][T21844] netlink: 768 bytes leftover after parsing attributes in process `syz.4.5707'. [ 304.468882][T21844] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.476811][ T4673] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 304.577374][ T4673] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 305.115366][ T4673] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 305.515438][T21886] loop5: detected capacity change from 0 to 1024 [ 305.525345][T21886] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.5725: bad orphan inode 134217728 [ 305.542352][T21886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.655687][T21895] bridge: RTM_NEWNEIGH with invalid ether address [ 305.834749][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.089766][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5742'. [ 306.098940][T21927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5742'. [ 306.205512][T21933] tipc: New replicast peer: 255.255.255.255 [ 306.211948][T21933] tipc: Enabled bearer , priority 10 [ 306.955157][T21946] bridge13: entered promiscuous mode [ 306.960525][T21946] bridge13: entered allmulticast mode [ 306.976541][T21946] team0: Port device bridge13 added [ 306.987547][T21946] bridge0: port 1(team0) entered blocking state [ 306.993968][T21946] bridge0: port 1(team0) entered disabled state [ 307.018505][T21946] team0: entered allmulticast mode [ 307.412429][ T3411] tipc: Node number set to 2081876078 [ 307.884618][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 307.909815][T21995] ip6gre4: entered allmulticast mode [ 308.001757][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 308.001778][ T29] audit: type=1326 audit(1767120046.804:18072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 308.047216][T21997] bridge: RTM_NEWNEIGH with invalid ether address [ 308.113256][ T29] audit: type=1326 audit(1767120046.823:18073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 308.138281][ T29] audit: type=1326 audit(1767120046.823:18074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 308.162123][ T29] audit: type=1326 audit(1767120046.823:18075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 308.185818][ T29] audit: type=1326 audit(1767120046.870:18076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 308.493550][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 308.617675][T22017] netlink: 'syz.5.5782': attribute type 4 has an invalid length. [ 308.645401][T22017] netlink: 'syz.5.5782': attribute type 4 has an invalid length. [ 308.706637][T22026] tipc: New replicast peer: 255.255.255.83 [ 308.712668][T22026] tipc: Enabled bearer , priority 10 [ 308.793699][T22031] loop5: detected capacity change from 0 to 764 [ 308.814349][ T29] audit: type=1326 audit(1767120047.571:18077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.0.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 308.838677][ T29] audit: type=1326 audit(1767120047.571:18078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.0.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 308.862621][ T29] audit: type=1326 audit(1767120047.571:18079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.0.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 308.886650][ T29] audit: type=1326 audit(1767120047.571:18080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.0.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 308.911100][ T29] audit: type=1326 audit(1767120047.571:18081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22033 comm="syz.0.5798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 308.996269][T22031] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 309.383646][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5790'. [ 311.887732][T22214] lo speed is unknown, defaulting to 1000 [ 312.082606][T22236] netlink: 24 bytes leftover after parsing attributes in process `gtp'. [ 312.172270][T22245] loop5: detected capacity change from 0 to 128 [ 312.323562][T22257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5825'. [ 312.362627][T22249] loop5: detected capacity change from 0 to 8192 [ 312.405405][T22264] netlink: 'syz.0.5828': attribute type 1 has an invalid length. [ 312.413225][T22264] netlink: 'syz.0.5828': attribute type 2 has an invalid length. [ 312.422332][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5828'. [ 312.556347][T22269] netlink: 'syz.0.5830': attribute type 1 has an invalid length. [ 312.580286][ T4510] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 312.588555][ T4510] FAT-fs (loop5): Filesystem has been set read-only [ 312.634681][T22269] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.654508][T22262] syz_tun: left allmulticast mode [ 312.677328][T22271] macvlan0: entered promiscuous mode [ 312.682691][T22271] macvlan0: entered allmulticast mode [ 312.714537][T22271] bond6: entered promiscuous mode [ 312.746205][T22271] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 312.772914][T22271] bond6: left promiscuous mode [ 312.980142][T22284] rdma_op ffff8881a9bf4180 conn xmit_rdma 0000000000000000 [ 313.047842][T22286] veth20: entered promiscuous mode [ 313.053008][T22286] veth20: entered allmulticast mode [ 313.087002][T22288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5837'. [ 313.126395][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5838'. [ 313.233892][T22297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5841'. [ 313.250152][T22297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5841'. [ 313.883276][T22324] netlink: 'syz.0.5851': attribute type 1 has an invalid length. [ 313.908060][T22324] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.918407][T22324] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 313.929846][T22324] bond7: (slave vxcan3): making interface the new active one [ 313.937936][T22324] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 313.953700][T22324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5851'. [ 313.964468][T22324] bond7 (unregistering): (slave vxcan3): Releasing backup interface [ 313.978071][T22324] bond7 (unregistering): Released all slaves [ 314.072100][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5852'. [ 314.315628][T22338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5857'. [ 314.427184][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 314.427201][ T29] audit: type=1326 audit(1767120052.828:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.489698][ T29] audit: type=1326 audit(1767120052.856:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.513888][ T29] audit: type=1326 audit(1767120052.856:18226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.533762][T22351] VFS: Mount too revealing [ 314.537616][ T29] audit: type=1326 audit(1767120052.856:18227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.566228][ T29] audit: type=1326 audit(1767120052.856:18228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.589989][ T29] audit: type=1326 audit(1767120052.856:18229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.613741][ T29] audit: type=1326 audit(1767120052.856:18230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.638466][ T29] audit: type=1326 audit(1767120052.856:18231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.662588][ T29] audit: type=1326 audit(1767120052.856:18232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 314.686659][ T29] audit: type=1326 audit(1767120052.856:18233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22343 comm="syz.2.5860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7b1f2ff749 code=0x7ffc0000 [ 315.184896][T22374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22374 comm=syz.1.5871 [ 315.998936][T22403] loop5: detected capacity change from 0 to 1024 [ 316.027402][T22403] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 316.038555][T22403] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 316.094665][T22403] JBD2: no valid journal superblock found [ 316.100588][T22403] EXT4-fs (loop5): Could not load journal inode [ 316.180623][T22409] VFS: Mount too revealing [ 316.789493][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 316.856373][T22451] netlink: 'syz.0.5902': attribute type 39 has an invalid length. [ 316.870132][T22451] syz_tun (unregistering): left allmulticast mode [ 316.899005][ T3707] smc: removing ib device syz1 [ 316.917652][T22453] netlink: 'syz.4.5903': attribute type 5 has an invalid length. [ 317.097737][ T4655] Process accounting resumed [ 317.150799][T22467] lo speed is unknown, defaulting to 1000 [ 317.165111][T22469] rdma_op ffff8881538df580 conn xmit_rdma 0000000000000000 [ 317.527208][T22477] syzkaller0: entered allmulticast mode [ 317.549543][T22477] syzkaller0 (unregistering): left allmulticast mode [ 317.688371][T22486] lo speed is unknown, defaulting to 1000 [ 317.714370][T22490] bridge: RTM_NEWNEIGH with invalid ether address [ 317.731707][T22492] __nla_validate_parse: 12 callbacks suppressed [ 317.731726][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5914'. [ 317.758030][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5914'. [ 318.258762][T22486] Set syz1 is full, maxelem 65536 reached [ 318.714620][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5932'. [ 318.793751][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5932'. [ 318.998005][T22541] netlink: 'syz.5.5937': attribute type 30 has an invalid length. [ 319.061567][T22544] netlink: 'syz.2.5938': attribute type 1 has an invalid length. [ 319.079435][T22544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.094180][T22544] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 319.121856][T22544] bond5: entered allmulticast mode [ 319.210688][T22548] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 319.317335][T22556] loop5: detected capacity change from 0 to 2048 [ 319.366360][T22556] loop5: p1 < > p4 [ 319.371058][T22556] loop5: p4 size 8388608 extends beyond EOD, truncated [ 319.718594][T22585] lo speed is unknown, defaulting to 1000 [ 319.971035][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 319.971052][ T29] audit: type=1400 audit(1767120058.011:18425): avc: denied { connect } for pid=22593 comm="syz.4.5958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.294318][T22601] netlink: 'syz.4.5960': attribute type 39 has an invalid length. [ 320.332150][T22603] netlink: 'syz.0.5961': attribute type 10 has an invalid length. [ 320.343675][T22603] dummy0: entered allmulticast mode [ 320.350549][T22603] team0: Failed to send options change via netlink (err -105) [ 320.358180][T22603] team0: Port device dummy0 added [ 320.397498][T22603] netlink: 'syz.0.5961': attribute type 10 has an invalid length. [ 320.430918][T22603] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 320.469097][T22603] dummy0: left allmulticast mode [ 320.499487][T22603] team0: Failed to send options change via netlink (err -105) [ 320.515401][T22603] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 320.550962][T22603] team0: Port device dummy0 removed [ 320.571189][T22603] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 320.682874][T22615] geneve2: entered promiscuous mode [ 320.688414][T22615] geneve2: entered allmulticast mode [ 320.844584][T22620] netlink: 'syz.1.5968': attribute type 1 has an invalid length. [ 320.859023][T22620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.897060][T22620] bond1: (slave dummy0): making interface the new active one [ 320.907530][T22620] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 321.035869][ T29] audit: type=1326 audit(1767120059.011:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.059640][ T29] audit: type=1326 audit(1767120059.011:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.156167][ T29] audit: type=1326 audit(1767120059.011:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.180644][ T29] audit: type=1326 audit(1767120059.011:18429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.204662][ T29] audit: type=1326 audit(1767120059.011:18430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.228482][ T29] audit: type=1326 audit(1767120059.011:18431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.252418][ T29] audit: type=1326 audit(1767120059.011:18432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.276558][ T29] audit: type=1326 audit(1767120059.011:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.300492][ T29] audit: type=1326 audit(1767120059.011:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.0.5972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 321.479771][T22611] loop5: detected capacity change from 0 to 1024 [ 321.564805][T22611] EXT4-fs: inline encryption not supported [ 321.578636][T22611] ext4: Unknown parameter 'subj_user' [ 321.916892][T22664] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 321.985961][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 321.996966][T22670] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5989'. [ 322.006967][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 322.016494][T22670] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5989'. [ 322.042761][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 322.076160][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5989'. [ 322.142306][T22684] netlink: 'syz.4.5993': attribute type 5 has an invalid length. [ 322.409095][T22701] netlink: 'syz.0.6001': attribute type 1 has an invalid length. [ 322.423762][T22701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.452427][T22701] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.459897][T22701] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 322.471294][T22701] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 323.127202][T22740] netlink: 'syz.1.6017': attribute type 1 has an invalid length. [ 323.175790][T22746] netlink: 'syz.0.6020': attribute type 5 has an invalid length. [ 323.203853][ T4655] page_pool_release_retry() stalled pool shutdown: id 185, 1 inflight 60 sec [ 323.305930][T22755] __nla_validate_parse: 13 callbacks suppressed [ 323.305952][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 323.323548][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 323.333942][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 323.345486][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 323.355972][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 323.447453][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6028'. [ 323.473977][T22767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6028'. [ 323.890092][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 323.933627][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 323.970894][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6037'. [ 324.911583][T22822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22822 comm=syz.1.6047 [ 325.138464][T22832] netlink: 'syz.1.6051': attribute type 13 has an invalid length. [ 325.155754][T22832] gretap0: refused to change device tx_queue_len [ 325.162886][T22832] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.178216][T22815] syz.5.6046 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 325.192619][T22815] CPU: 1 UID: 0 PID: 22815 Comm: syz.5.6046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.192678][T22815] Tainted: [W]=WARN [ 325.192686][T22815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.192700][T22815] Call Trace: [ 325.192707][T22815] [ 325.192715][T22815] __dump_stack+0x1d/0x30 [ 325.192745][T22815] dump_stack_lvl+0x95/0xd0 [ 325.192768][T22815] dump_stack+0x15/0x1b [ 325.192826][T22815] dump_header+0x81/0x240 [ 325.192874][T22815] oom_kill_process+0x295/0x350 [ 325.192896][T22815] out_of_memory+0x97b/0xb80 [ 325.192918][T22815] try_charge_memcg+0x610/0xa10 [ 325.193005][T22815] obj_cgroup_charge_pages+0xa6/0x150 [ 325.193033][T22815] __memcg_kmem_charge_page+0x9f/0x170 [ 325.193138][T22815] __alloc_frozen_pages_noprof+0x18f/0x360 [ 325.193228][T22815] alloc_pages_mpol+0xb3/0x260 [ 325.193256][T22815] alloc_pages_noprof+0x90/0x130 [ 325.193291][T22815] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 325.193398][T22815] __kvmalloc_node_noprof+0x492/0x6b0 [ 325.193478][T22815] ? ip_set_alloc+0x24/0x30 [ 325.193548][T22815] ? ip_set_alloc+0x24/0x30 [ 325.193586][T22815] ip_set_alloc+0x24/0x30 [ 325.193621][T22815] hash_netiface_create+0x282/0x740 [ 325.193662][T22815] ? __pfx_hash_netiface_create+0x10/0x10 [ 325.193705][T22815] ip_set_create+0x3cc/0x970 [ 325.193741][T22815] ? __nla_parse+0x40/0x60 [ 325.193801][T22815] nfnetlink_rcv_msg+0x4c6/0x590 [ 325.193832][T22815] ? __rcu_read_unlock+0x4f/0x70 [ 325.193891][T22815] netlink_rcv_skb+0x123/0x220 [ 325.193920][T22815] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 325.193958][T22815] nfnetlink_rcv+0x167/0x16c0 [ 325.193992][T22815] ? __rcu_read_unlock+0x4f/0x70 [ 325.194041][T22815] ? sock_def_readable+0xaf/0x190 [ 325.194078][T22815] ? netlink_sendskb+0x104/0x150 [ 325.194109][T22815] ? __list_add_valid_or_report+0x38/0xe0 [ 325.194188][T22815] ? merge_sched_in+0x605/0xa30 [ 325.194210][T22815] ? rb_next+0x5c/0x80 [ 325.194238][T22815] ? visit_groups_merge+0xf7e/0xfd0 [ 325.194323][T22815] ? should_fail_ex+0x30/0x280 [ 325.194348][T22815] ? selinux_nlmsg_lookup+0x99/0x890 [ 325.194373][T22815] ? __rcu_read_unlock+0x34/0x70 [ 325.194392][T22815] ? __netlink_lookup+0x266/0x2a0 [ 325.194423][T22815] netlink_unicast+0x5c0/0x690 [ 325.194600][T22815] netlink_sendmsg+0x58b/0x6b0 [ 325.194634][T22815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.194674][T22815] __sock_sendmsg+0x145/0x180 [ 325.194694][T22815] ____sys_sendmsg+0x31e/0x4a0 [ 325.194828][T22815] ___sys_sendmsg+0x17b/0x1d0 [ 325.194866][T22815] __x64_sys_sendmsg+0xd4/0x160 [ 325.194903][T22815] x64_sys_call+0x17ba/0x3000 [ 325.194937][T22815] do_syscall_64+0xca/0x2b0 [ 325.194972][T22815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.195035][T22815] RIP: 0033:0x7f895881f749 [ 325.195051][T22815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.195067][T22815] RSP: 002b:00007f8957287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.195086][T22815] RAX: ffffffffffffffda RBX: 00007f8958a75fa0 RCX: 00007f895881f749 [ 325.195165][T22815] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 325.195177][T22815] RBP: 00007f89588a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.195188][T22815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.195199][T22815] R13: 00007f8958a76038 R14: 00007f8958a75fa0 R15: 00007ffc5d528028 [ 325.195216][T22815] [ 325.195225][T22815] memory: usage 307200kB, limit 307200kB, failcnt 818 [ 325.547907][T22815] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 325.556019][T22815] kmem: usage 239144kB, limit 9007199254740988kB, failcnt 0 [ 325.563743][T22815] Memory cgroup stats for /syz5: [ 325.564132][T22815] cache 69255168 [ 325.572920][T22815] rss 397312 [ 325.576135][T22815] shmem 69255168 [ 325.579877][T22815] mapped_file 0 [ 325.583516][T22815] dirty 0 [ 325.586473][T22815] writeback 0 [ 325.589882][T22815] workingset_refault_anon 56 [ 325.594596][T22815] workingset_refault_file 35 [ 325.599426][T22815] swap 364544 [ 325.602857][T22815] swapcached 12288 [ 325.606591][T22815] pgpgin 393109 [ 325.610235][T22815] pgpgout 376095 [ 325.613967][T22815] pgfault 382212 [ 325.617611][T22815] pgmajfault 41 [ 325.621120][T22815] inactive_anon 0 [ 325.624899][T22815] active_anon 69664768 [ 325.629148][T22815] inactive_file 4096 [ 325.633088][T22815] active_file 20480 [ 325.636946][T22815] unevictable 0 [ 325.640424][T22815] hierarchical_memory_limit 314572800 [ 325.646020][T22815] hierarchical_memsw_limit 9223372036854771712 [ 325.652355][T22815] total_cache 69255168 [ 325.656595][T22815] total_rss 397312 [ 325.660345][T22815] total_shmem 69255168 [ 325.664562][T22815] total_mapped_file 0 [ 325.668562][T22815] total_dirty 0 [ 325.672058][T22815] total_writeback 0 [ 325.675961][T22815] total_workingset_refault_anon 56 [ 325.681281][T22815] total_workingset_refault_file 35 [ 325.686581][T22815] total_swap 364544 [ 325.690390][T22815] total_swapcached 12288 [ 325.694741][T22815] total_pgpgin 393109 [ 325.698779][T22815] total_pgpgout 376095 [ 325.702982][T22815] total_pgfault 382212 [ 325.707066][T22815] total_pgmajfault 41 [ 325.711055][T22815] total_inactive_anon 0 [ 325.715217][T22815] total_active_anon 69664768 [ 325.719833][T22815] total_inactive_file 4096 [ 325.724249][T22815] total_active_file 20480 [ 325.728620][T22815] total_unevictable 0 [ 325.732643][T22815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.6046,pid=22814,uid=0 [ 325.747577][T22815] Memory cgroup out of memory: Killed process 22814 (syz.5.6046) total-vm:96016kB, anon-rss:1268kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 325.861623][T22847] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.871665][T22847] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.927150][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 325.927168][ T29] audit: type=1326 audit(1767120063.576:18658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 325.996694][T22847] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.003435][ T29] audit: type=1326 audit(1767120063.614:18659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.006771][T22847] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.031741][ T29] audit: type=1326 audit(1767120063.614:18660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.065088][ T29] audit: type=1326 audit(1767120063.614:18661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.089082][ T29] audit: type=1326 audit(1767120063.614:18662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.112991][ T29] audit: type=1326 audit(1767120063.614:18663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.137114][ T29] audit: type=1326 audit(1767120063.614:18664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.161095][ T29] audit: type=1326 audit(1767120063.614:18665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.185401][ T29] audit: type=1326 audit(1767120063.614:18666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.209688][ T29] audit: type=1326 audit(1767120063.614:18667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 326.374364][T22847] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.384287][T22847] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.449235][T22847] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.459455][T22847] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.550733][ T2781] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.559165][ T2781] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.592570][ T2781] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.601094][ T2781] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.620746][T22868] lo speed is unknown, defaulting to 1000 [ 326.653030][ T2781] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.661378][ T2781] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.699386][ T2781] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.707774][ T2781] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.037438][T22875] lo speed is unknown, defaulting to 1000 [ 327.581576][T22918] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.644424][T22924] loop5: detected capacity change from 0 to 2048 [ 327.690611][T22924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 327.771240][T22924] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 327.796965][T22924] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 327.809423][T22924] EXT4-fs (loop5): This should not happen!! Data will be lost [ 327.809423][T22924] [ 327.819948][T22924] EXT4-fs (loop5): Total free blocks count 0 [ 327.826120][T22924] EXT4-fs (loop5): Free/Dirty block details [ 327.832067][T22924] EXT4-fs (loop5): free_blocks=2415919104 [ 327.838001][T22924] EXT4-fs (loop5): dirty_blocks=464 [ 327.843401][T22924] EXT4-fs (loop5): Block reservation details [ 327.849427][T22924] EXT4-fs (loop5): i_reserved_data_blocks=29 [ 328.086372][ T3673] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 448 with error 28 [ 328.510941][T22975] lo speed is unknown, defaulting to 1000 [ 329.165048][T22992] netlink: 'syz.5.6107': attribute type 20 has an invalid length. [ 329.173117][T22992] __nla_validate_parse: 46 callbacks suppressed [ 329.173132][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6107'. [ 329.218796][ T2781] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.228724][T22992] netlink: 'syz.5.6107': attribute type 20 has an invalid length. [ 329.236705][T22992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6107'. [ 329.246096][ T2781] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.269959][ T2781] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.286401][ T2781] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.461781][T23004] pimreg: entered allmulticast mode [ 329.620397][T23008] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 329.836185][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 329.858164][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 329.879827][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 329.897659][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 329.930649][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 329.952123][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 330.090339][T23047] netlink: 'syz.4.6130': attribute type 9 has an invalid length. [ 330.366924][T23069] lo speed is unknown, defaulting to 1000 [ 330.465222][T23079] xt_hashlimit: max too large, truncated to 1048576 [ 330.835678][T23092] netlink: 'syz.2.6149': attribute type 13 has an invalid length. [ 330.848979][T23092] gretap0: left promiscuous mode [ 330.856274][T23092] gretap0: refused to change device tx_queue_len [ 330.870795][T23092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 331.463778][T23115] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 331.463778][T23115] The task syz.5.6155 (23115) triggered the difference, watch for misbehavior. [ 331.560431][T23117] VFS: Mount too revealing [ 331.636792][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 331.636872][ T29] audit: type=1400 audit(1767120068.917:18884): avc: denied { getopt } for pid=23120 comm="syz.4.6159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 331.717283][ T29] audit: type=1326 audit(1767120068.992:18885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.717956][T23123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6158'. [ 331.741293][ T29] audit: type=1326 audit(1767120068.992:18886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.741346][ T29] audit: type=1326 audit(1767120068.992:18887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.741375][ T29] audit: type=1326 audit(1767120068.992:18888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.741407][ T29] audit: type=1326 audit(1767120068.992:18889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.845984][ T29] audit: type=1326 audit(1767120068.992:18890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.870016][ T29] audit: type=1326 audit(1767120068.992:18891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.894071][ T29] audit: type=1326 audit(1767120068.992:18892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 331.917948][ T29] audit: type=1326 audit(1767120068.992:18893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23124 comm="syz.4.6160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 332.386282][T23150] loop5: detected capacity change from 0 to 2048 [ 332.437231][T23150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 332.439790][T23123] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6158'. [ 332.526067][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 332.566428][T23150] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 332.622301][T23150] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 332.635098][T23150] EXT4-fs (loop5): This should not happen!! Data will be lost [ 332.635098][T23150] [ 332.644858][T23150] EXT4-fs (loop5): Total free blocks count 0 [ 332.651046][T23150] EXT4-fs (loop5): Free/Dirty block details [ 332.657015][T23150] EXT4-fs (loop5): free_blocks=2415919104 [ 332.663170][T23150] EXT4-fs (loop5): dirty_blocks=208 [ 332.668783][T23150] EXT4-fs (loop5): Block reservation details [ 332.675385][T23150] EXT4-fs (loop5): i_reserved_data_blocks=13 [ 332.739749][T23166] bridge: RTM_NEWNEIGH with invalid ether address [ 332.792440][ T2781] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 44 with max blocks 158 with error 28 [ 333.280932][T23191] netlink: 'syz.4.6184': attribute type 29 has an invalid length. [ 333.316523][T23191] netlink: 'syz.4.6184': attribute type 29 has an invalid length. [ 333.386535][T23203] lo speed is unknown, defaulting to 1000 [ 333.984020][T23203] Set syz1 is full, maxelem 65536 reached [ 334.055087][T23227] vlan0: entered allmulticast mode [ 334.060622][T23227] dummy0: entered allmulticast mode [ 334.271389][T23241] lo speed is unknown, defaulting to 1000 [ 334.608949][T23246] netlink: 'syz.0.6216': attribute type 3 has an invalid length. [ 334.761482][T23255] netlink: 'syz.4.6209': attribute type 3 has an invalid length. [ 334.770295][T23255] netlink: 'syz.4.6209': attribute type 1 has an invalid length. [ 334.779666][T23255] __nla_validate_parse: 3 callbacks suppressed [ 334.779749][T23255] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6209'. [ 335.069311][T23265] lo speed is unknown, defaulting to 1000 [ 335.252823][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'. [ 335.591786][T23265] Set syz1 is full, maxelem 65536 reached [ 335.666514][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6222'. [ 335.676126][T23286] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6222'. [ 335.686143][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6222'. [ 335.709049][ T4673] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 335.720388][T23289] loop5: detected capacity change from 0 to 2048 [ 335.727379][ T4673] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.742068][T23289] EXT4-fs: dax option not supported [ 336.452395][T23326] ip6t_rpfilter: unknown options [ 336.475290][T23328] Cannot find add_set index 0 as target [ 336.713228][T23341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6246'. [ 336.822256][T23345] pimreg: entered allmulticast mode [ 336.834508][T23345] pimreg: left allmulticast mode [ 336.842138][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6250'. [ 336.912249][T23356] loop5: detected capacity change from 0 to 1024 [ 336.919402][T23356] EXT4-fs: Ignoring removed orlov option [ 336.932378][T23356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.104768][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 337.104784][ T29] audit: type=1326 audit(1767120074.043:19134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.139080][ T29] audit: type=1326 audit(1767120074.071:19135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.162866][ T29] audit: type=1326 audit(1767120074.071:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.186601][ T29] audit: type=1326 audit(1767120074.071:19137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.210739][ T29] audit: type=1326 audit(1767120074.071:19138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.234804][ T29] audit: type=1326 audit(1767120074.071:19139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.258874][ T29] audit: type=1326 audit(1767120074.071:19140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.283349][ T29] audit: type=1326 audit(1767120074.071:19141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.307683][ T29] audit: type=1326 audit(1767120074.071:19142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.331879][ T29] audit: type=1326 audit(1767120074.071:19143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23360 comm="syz.0.6254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 337.365674][T23367] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 337.374778][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.389762][T23367] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.401387][T23369] lo speed is unknown, defaulting to 1000 [ 337.465271][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6257'. [ 337.474829][T23367] veth11: entered promiscuous mode [ 337.483345][T23367] bond8: (slave veth11): Enslaving as an active interface with a down link [ 337.514221][T23367] bond8: entered allmulticast mode [ 337.868442][T23398] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6267'. [ 338.012803][T23406] loop5: detected capacity change from 0 to 1024 [ 338.019731][T23406] EXT4-fs: Ignoring removed orlov option [ 338.029697][T23408] lo speed is unknown, defaulting to 1000 [ 338.048409][T23406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.458128][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.518084][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6286'. [ 340.108122][T23506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23506 comm=syz.1.6311 [ 340.455594][T23536] lo speed is unknown, defaulting to 1000 [ 340.601967][T23540] lo speed is unknown, defaulting to 1000 [ 340.875532][T23555] __nla_validate_parse: 5 callbacks suppressed [ 340.875589][T23555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6330'. [ 340.897223][T23557] $Hÿ: renamed from .` [ 340.902618][T23557] $Hÿ: entered promiscuous mode [ 341.575785][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6347'. [ 341.592163][T23595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6347'. [ 341.625696][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6348'. [ 341.658004][T23598] vlan0: entered allmulticast mode [ 341.663213][T23598] bridge0: entered allmulticast mode [ 341.669381][T23598] bridge12: port 1(vlan0) entered blocking state [ 341.675979][T23598] bridge12: port 1(vlan0) entered disabled state [ 341.680193][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6349'. [ 341.683446][T23598] vlan0: entered promiscuous mode [ 341.696383][T23598] bridge0: entered promiscuous mode [ 341.708053][T23600] team1: entered promiscuous mode [ 341.713177][T23600] team1: entered allmulticast mode [ 341.718856][T23600] 8021q: adding VLAN 0 to HW filter on device team1 [ 341.963201][T23623] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.991802][T23624] lo speed is unknown, defaulting to 1000 [ 342.028404][T23627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6361'. [ 342.049081][T23623] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.077579][T23627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23627 comm=syz.1.6361 [ 342.101695][T23631] lo speed is unknown, defaulting to 1000 [ 342.128961][T23623] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.193995][T23623] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.252353][ T1674] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.284025][ T1674] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.327789][ T1674] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.375188][ T1674] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.422780][T23640] lo speed is unknown, defaulting to 1000 [ 342.479610][T23643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6369'. [ 342.905832][T23666] netlink: 660 bytes leftover after parsing attributes in process `syz.5.6376'. [ 342.973150][T23670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6378'. [ 343.019808][T23670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23670 comm=syz.1.6378 [ 343.176862][T23690] loop5: detected capacity change from 0 to 512 [ 343.183556][T23690] EXT4-fs: Ignoring removed i_version option [ 343.206286][T23690] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 343.229126][T23690] EXT4-fs (loop5): 1 truncate cleaned up [ 343.238545][T23690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.288053][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.370083][T23702] lo speed is unknown, defaulting to 1000 [ 343.485613][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6394'. [ 343.494990][T23712] hsr_slave_0: left promiscuous mode [ 343.500821][T23712] hsr_slave_1: left promiscuous mode [ 344.114433][T23702] Set syz1 is full, maxelem 65536 reached [ 344.170849][ T29] kauditd_printk_skb: 1556 callbacks suppressed [ 344.170868][ T29] audit: type=1326 audit(1767120080.647:20700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.221329][ T29] audit: type=1326 audit(1767120080.675:20701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.245403][ T29] audit: type=1326 audit(1767120080.675:20702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.269326][ T29] audit: type=1326 audit(1767120080.675:20703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.293170][ T29] audit: type=1326 audit(1767120080.675:20704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.316894][ T29] audit: type=1326 audit(1767120080.675:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.341298][ T29] audit: type=1326 audit(1767120080.675:20706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.365108][ T29] audit: type=1326 audit(1767120080.675:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.388978][ T29] audit: type=1326 audit(1767120080.675:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.413035][ T29] audit: type=1326 audit(1767120080.675:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23721 comm="syz.4.6398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc78feff749 code=0x7ffc0000 [ 344.457946][T23729] syzkaller1: entered promiscuous mode [ 344.463497][T23729] syzkaller1: entered allmulticast mode [ 344.469895][T23727] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 344.598392][ T3673] Bluetooth: hci0: Frame reassembly failed (-84) [ 345.780585][T23800] netlink: 'syz.2.6431': attribute type 4 has an invalid length. [ 345.877720][T23810] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.887744][T23810] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.924253][T23810] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.934283][T23810] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.998210][T23810] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.008366][T23810] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.042656][T23810] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.052603][T23810] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.103101][ T3721] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.111551][ T3721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.120122][ T3721] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.128596][ T3721] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.137540][ T3721] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.146170][ T3721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.154621][ T3721] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.162842][ T3721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.640268][T23826] __nla_validate_parse: 5 callbacks suppressed [ 346.640287][T23826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6441'. [ 346.734331][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.775193][T23830] netlink: 'syz.1.6442': attribute type 1 has an invalid length. [ 346.788752][T23830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.804045][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6442'. [ 346.815610][T23830] bond2 (unregistering): Released all slaves [ 346.889443][T23839] lo speed is unknown, defaulting to 1000 [ 347.297040][T23855] netlink: 'syz.5.6451': attribute type 1 has an invalid length. [ 347.313542][T23855] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.339600][T23855] bond7: (slave veth1): Enslaving as an active interface with a down link [ 347.403391][T23855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.414044][T23855] bond7: (slave batadv0): making interface the new active one [ 347.426800][T23855] batadv0: entered promiscuous mode [ 347.435595][T23855] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 347.503763][T23861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 347.628605][T23870] netlink: 'syz.4.6457': attribute type 1 has an invalid length. [ 347.661305][T23870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.681514][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6457'. [ 347.692778][T23870] bond3 (unregistering): Released all slaves [ 347.700945][T23875] netlink: 'syz.0.6458': attribute type 1 has an invalid length. [ 347.718787][T23875] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.765380][T23875] bond0: (slave dummy0): Releasing backup interface [ 347.796550][T23875] bond9: (slave dummy0): making interface the new active one [ 347.811926][T23879] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.6459'. [ 347.814252][T23875] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 347.830558][T23883] bond9: entered allmulticast mode [ 347.841932][T23879] netlink: zone id is out of range [ 347.847315][T23879] netlink: zone id is out of range [ 347.874368][T23879] netlink: zone id is out of range [ 347.879662][T23879] netlink: zone id is out of range [ 347.885429][T23879] netlink: zone id is out of range [ 347.896025][T23879] netlink: zone id is out of range [ 347.905782][T23879] netlink: zone id is out of range [ 347.931843][T23879] netlink: del zone limit has 8 unknown bytes [ 347.963665][T23885] lo speed is unknown, defaulting to 1000 [ 348.119271][T23898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6467'. [ 348.310792][T23911] netlink: 'syz.5.6471': attribute type 1 has an invalid length. [ 348.353089][T23911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.376367][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6471'. [ 348.387840][T23913] lo speed is unknown, defaulting to 1000 [ 348.404897][T23918] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.6475'. [ 348.414938][T23918] netlink: zone id is out of range [ 348.440656][T23916] bond8 (unregistering): Released all slaves [ 348.688477][T23934] lo speed is unknown, defaulting to 1000 [ 348.781774][T23941] xt_hashlimit: overflow, try lower: 3/0 [ 349.692995][T23982] netlink: 'syz.0.6499': attribute type 1 has an invalid length. [ 349.709627][T23982] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.724291][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6499'. [ 349.738829][T23982] bond10 (unregistering): Released all slaves [ 349.916739][T23985] loop5: detected capacity change from 0 to 128 [ 349.972250][T23985] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 349.994101][T23985] ext4 filesystem being mounted at /1157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.121784][T24015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6512'. [ 350.172812][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 350.172830][ T29] audit: type=1326 audit(1767120342.260:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.219956][ T29] audit: type=1326 audit(1767120342.297:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.244413][ T29] audit: type=1326 audit(1767120342.297:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.268269][ T29] audit: type=1326 audit(1767120342.297:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.292010][ T29] audit: type=1326 audit(1767120342.297:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.315916][ T29] audit: type=1326 audit(1767120342.297:21838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.339912][ T29] audit: type=1326 audit(1767120342.297:21839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.363734][ T29] audit: type=1326 audit(1767120342.297:21840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.388513][ T29] audit: type=1326 audit(1767120342.297:21841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.412517][ T29] audit: type=1326 audit(1767120342.297:21842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24018 comm="syz.1.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5240df749 code=0x7ffc0000 [ 350.437443][ T4510] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.909179][T24066] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.919434][T24066] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.930471][T24066] .` (unregistering): Released all slaves [ 351.119943][T24070] netlink: 'syz.1.6532': attribute type 10 has an invalid length. [ 351.129939][T24070] bond1: (slave dummy0): Releasing active interface [ 351.146194][T24070] net_ratelimit: 6 callbacks suppressed [ 351.146214][T24070] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 351.439502][T24078] loop5: detected capacity change from 0 to 1024 [ 351.455966][T24078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.496243][ T4510] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.573115][T24089] netlink: 'syz.5.6539': attribute type 7 has an invalid length. [ 351.599043][ T3698] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.607471][ T3698] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.622451][ T3698] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.630999][ T3698] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.662792][ T3698] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.671222][ T3698] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.738503][ T3698] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.747183][ T3698] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.787129][T24105] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.797942][T24104] netlink: 'syz.1.6544': attribute type 1 has an invalid length. [ 351.814754][T24104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.828280][T24101] syz!: rxe_newlink: already configured on team_slave_0 [ 351.844801][T24105] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.869651][T24104] bond2: (slave dummy0): making interface the new active one [ 351.886482][T24104] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 351.899384][T24105] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.917889][T24104] bond2: entered allmulticast mode [ 351.952889][T24105] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.023066][ T3698] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.036437][ T3698] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.057159][ T3698] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.066824][ T3698] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.922941][T24146] netlink: 'syz.2.6559': attribute type 1 has an invalid length. [ 352.937990][T24146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 352.951863][T24146] __nla_validate_parse: 3 callbacks suppressed [ 352.951883][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6559'. [ 352.968738][T24146] bond6 (unregistering): Released all slaves [ 353.315061][T24165] sch_fq: defrate 0 ignored. [ 353.390978][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6571'. [ 353.446832][T24180] netlink: 'syz.5.6573': attribute type 1 has an invalid length. [ 353.462978][T24180] 8021q: adding VLAN 0 to HW filter on device bond8 [ 353.478407][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6573'. [ 353.489844][T24180] bond8 (unregistering): Released all slaves [ 353.568982][T24184] netlink: 'syz.0.6574': attribute type 29 has an invalid length. [ 353.682389][T24189] lo speed is unknown, defaulting to 1000 [ 354.125679][T24186] lo speed is unknown, defaulting to 1000 [ 354.132659][T24186] lo speed is unknown, defaulting to 1000 [ 354.138592][T24186] lo speed is unknown, defaulting to 1000 [ 354.151742][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 354.162824][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 354.162857][ T3316] Tainted: [W]=WARN [ 354.162863][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.162874][ T3316] Call Trace: [ 354.162882][ T3316] [ 354.162892][ T3316] __dump_stack+0x1d/0x30 [ 354.162922][ T3316] dump_stack_lvl+0x95/0xd0 [ 354.162950][ T3316] dump_stack+0x15/0x1b [ 354.163037][ T3316] dump_header+0x81/0x240 [ 354.163061][ T3316] oom_kill_process+0x295/0x350 [ 354.163121][ T3316] out_of_memory+0x97b/0xb80 [ 354.163146][ T3316] try_charge_memcg+0x610/0xa10 [ 354.163190][ T3316] charge_memcg+0x51/0xc0 [ 354.163224][ T3316] __mem_cgroup_charge+0x28/0xb0 [ 354.163303][ T3316] filemap_add_folio+0x111/0x360 [ 354.163324][ T3316] __filemap_get_folio_mpol+0x326/0x650 [ 354.163351][ T3316] filemap_fault+0x44d/0xb70 [ 354.163383][ T3316] __do_fault+0xbc/0x200 [ 354.163416][ T3316] handle_mm_fault+0xfab/0x2c60 [ 354.163518][ T3316] do_user_addr_fault+0x630/0x1080 [ 354.163564][ T3316] exc_page_fault+0x62/0xa0 [ 354.163591][ T3316] asm_exc_page_fault+0x26/0x30 [ 354.163611][ T3316] RIP: 0033:0x7fe088a25fd4 [ 354.163630][ T3316] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 354.163708][ T3316] RSP: 002b:00007ffd7835c7e0 EFLAGS: 00010206 [ 354.163727][ T3316] RAX: 0000001b33b24000 RBX: 0000000000000f1f RCX: 0000000000053bd8 [ 354.163741][ T3316] RDX: 000000000f97f7a9 RSI: 00007ffd7835c870 RDI: 0000000000000001 [ 354.163754][ T3316] RBP: 00007ffd7835c81c R08: 000000003b7c25b0 R09: 7fffffffffffffff [ 354.163766][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 354.163778][ T3316] R13: 00000000000927c0 R14: 0000000000053f37 R15: 00007ffd7835c870 [ 354.163936][ T3316] [ 354.173831][T24186] infiniband syz1: set active [ 354.175539][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 1925 [ 354.179377][T24186] infiniband syz1: added lo [ 354.189610][ T3316] memory+swap: usage 313156kB, limit 9007199254740988kB, failcnt 0 [ 354.196561][ T3411] lo speed is unknown, defaulting to 1000 [ 354.200281][ T3316] kmem: usage 306976kB, limit 9007199254740988kB, failcnt 0 [ 354.200298][ T3316] Memory cgroup stats for /syz0: [ 354.426861][ T3316] cache 1052672 [ 354.435646][ T3316] rss 192512 [ 354.438846][ T3316] shmem 4096 [ 354.442096][ T3316] mapped_file 8192 [ 354.445827][ T3316] dirty 8192 [ 354.449041][ T3316] writeback 0 [ 354.452576][ T3316] workingset_refault_anon 243 [ 354.457450][ T3316] workingset_refault_file 2043 [ 354.462458][ T3316] swap 6098944 [ 354.465979][ T3316] swapcached 32768 [ 354.469762][ T3316] pgpgin 498984 [ 354.473236][ T3316] pgpgout 498672 [ 354.476833][ T3316] pgfault 508176 [ 354.480386][ T3316] pgmajfault 219 [ 354.483949][ T3316] inactive_anon 159744 [ 354.488065][ T3316] active_anon 69632 [ 354.491885][ T3316] inactive_file 0 [ 354.495822][ T3316] active_file 1015808 [ 354.499909][ T3316] unevictable 0 [ 354.503459][ T3316] hierarchical_memory_limit 314572800 [ 354.508870][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 354.515091][ T3316] total_cache 1052672 [ 354.519117][ T3316] total_rss 192512 [ 354.523019][ T3316] total_shmem 4096 [ 354.526749][ T3316] total_mapped_file 8192 [ 354.531153][ T3316] total_dirty 8192 [ 354.535213][ T3316] total_writeback 0 [ 354.539084][ T3316] total_workingset_refault_anon 243 [ 354.544468][ T3316] total_workingset_refault_file 2043 [ 354.549802][ T3316] total_swap 6098944 [ 354.553720][ T3316] total_swapcached 32768 [ 354.558008][ T3316] total_pgpgin 498984 [ 354.562039][ T3316] total_pgpgout 498672 [ 354.566125][ T3316] total_pgfault 508176 [ 354.570331][ T3316] total_pgmajfault 219 [ 354.574510][ T3316] total_inactive_anon 159744 [ 354.579121][ T3316] total_active_anon 69632 [ 354.583526][ T3316] total_inactive_file 0 [ 354.587819][ T3316] total_active_file 1015808 [ 354.592470][ T3316] total_unevictable 0 [ 354.596477][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.6576,pid=24187,uid=0 [ 354.611478][ T3316] Memory cgroup out of memory: OOM victim 24187 (syz.0.6576) is already exiting. Skip killing the task [ 354.625390][T24195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.629191][T24186] RDS/IB: syz1: added [ 354.645777][T24195] netlink: 'syz.4.6578': attribute type 10 has an invalid length. [ 354.653720][T24195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6578'. [ 354.653775][T24186] smc: adding ib device syz1 with port count 1 [ 354.670272][T24195] veth1_vlan: left promiscuous mode [ 354.672146][T24186] smc: ib device syz1 port 1 has no pnetid [ 354.677679][T24195] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 354.757771][ T4662] lo speed is unknown, defaulting to 1000 [ 354.763861][T24186] lo speed is unknown, defaulting to 1000 [ 354.800848][T24202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6581'. [ 354.801423][T24186] lo speed is unknown, defaulting to 1000 [ 354.866506][T24186] lo speed is unknown, defaulting to 1000 [ 354.951688][T24186] lo speed is unknown, defaulting to 1000 [ 354.989502][T24186] lo speed is unknown, defaulting to 1000 [ 355.060496][T24186] lo speed is unknown, defaulting to 1000 [ 355.413974][T24262] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 355.715034][T24271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6607'. [ 355.739646][T24271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.827947][T24276] netlink: 'syz.2.6608': attribute type 4 has an invalid length. [ 355.902077][T24278] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.902077][T24278] program syz.5.6609 not setting count and/or reply_len properly [ 355.919914][T24279] netlink: 'syz.2.6608': attribute type 4 has an invalid length. [ 355.999328][T24281] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6610'. [ 356.015251][T24281] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6610'. [ 356.085841][T24283] loop5: detected capacity change from 0 to 164 [ 356.119177][T24283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 356.161738][T24283] IPVS: dh: FWM 3 0x00000003 - no destination available [ 356.220315][T24283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 356.224845][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 356.224861][ T29] audit: type=1326 audit(1767120347.919:22037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24282 comm="syz.5.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 356.259019][ T29] audit: type=1326 audit(1767120347.919:22038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24282 comm="syz.5.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 356.282811][ T29] audit: type=1326 audit(1767120347.919:22039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24282 comm="syz.5.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 356.283291][T24283] Symlink component flag not implemented [ 356.312882][T24283] Symlink component flag not implemented [ 356.318969][T24283] Symlink component flag not implemented (7) [ 356.325904][T24283] Symlink component flag not implemented (116) [ 356.344458][ T29] audit: type=1326 audit(1767120348.022:22040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24282 comm="syz.5.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 356.368860][ T29] audit: type=1326 audit(1767120348.022:22041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24282 comm="syz.5.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895881f749 code=0x7ffc0000 [ 356.452734][ T29] audit: type=1326 audit(1767120348.143:22042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24296 comm="syz.0.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 356.494581][ T29] audit: type=1326 audit(1767120348.143:22043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24296 comm="syz.0.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 356.518537][ T29] audit: type=1326 audit(1767120348.162:22044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24296 comm="syz.0.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 356.542440][ T29] audit: type=1326 audit(1767120348.162:22045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24296 comm="syz.0.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 356.570687][T24302] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6619'. [ 356.576558][ T29] audit: type=1326 audit(1767120348.228:22046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24296 comm="syz.0.6618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fe088b4f749 code=0x7ffc0000 [ 356.620235][T24302] 0ªX¹¦À: renamed from caif0 [ 356.649797][T24302] 0ªX¹¦À: entered allmulticast mode [ 356.655670][T24302] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 356.697781][T24311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6623'. [ 356.935869][T24334] IPVS: stopping backup sync thread 17993 ... [ 356.956961][T24334] netlink: 'syz.2.6633': attribute type 10 has an invalid length. [ 356.968088][T24334] bridge0: port 1(dummy0) entered blocking state [ 356.974497][T24334] bridge0: port 1(dummy0) entered disabled state [ 356.991091][T24334] netlink: 'syz.2.6633': attribute type 10 has an invalid length. [ 357.000443][T24334] bridge0: port 1(dummy0) entered disabled state [ 357.517656][T24357] netlink: 'syz.1.6641': attribute type 4 has an invalid length. [ 357.526628][T24357] netlink: 'syz.1.6641': attribute type 4 has an invalid length. [ 357.575832][T24364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24364 comm=syz.1.6645 [ 357.589284][T24364] netlink: 'syz.1.6645': attribute type 1 has an invalid length. [ 357.720212][T24377] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.771520][T24377] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.784531][T24381] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1048100619/1048100620 [ 357.795853][T24381] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1048100619/1048100620 [ 357.855572][T24377] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.914955][T24383] ================================================================== [ 357.923256][T24383] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 357.933104][T24383] [ 357.935431][T24383] write to 0xffff88811c4c5880 of 8 bytes by task 24379 on cpu 1: [ 357.943140][T24383] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 357.949062][T24383] page_pool_alloc_pages+0xd0/0x130 [ 357.954357][T24383] bpf_test_run_xdp_live+0x54d/0x11d0 [ 357.959737][T24383] bpf_prog_test_run_xdp+0x525/0x970 [ 357.965047][T24383] bpf_prog_test_run+0x204/0x340 [ 357.969994][T24383] __sys_bpf+0x4c0/0x7c0 [ 357.974356][T24383] __x64_sys_bpf+0x41/0x50 [ 357.978784][T24383] x64_sys_call+0x28e1/0x3000 [ 357.983475][T24383] do_syscall_64+0xca/0x2b0 [ 357.988067][T24383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.994041][T24383] [ 357.996370][T24383] read to 0xffff88811c4c5880 of 8 bytes by task 24383 on cpu 0: [ 358.003991][T24383] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 358.009886][T24383] napi_pp_put_page+0xe9/0x200 [ 358.014744][T24383] skb_free_head+0x12c/0x150 [ 358.019364][T24383] skb_release_data+0x33b/0x370 [ 358.024241][T24383] __kfree_skb+0x44/0x150 [ 358.028759][T24383] sk_skb_reason_drop+0xbd/0x270 [ 358.033692][T24383] __first_packet_length+0x352/0x3f0 [ 358.038995][T24383] first_packet_length+0x217/0x240 [ 358.044118][T24383] udp_poll+0xc8/0x150 [ 358.048471][T24383] sock_poll+0x20d/0x230 [ 358.052714][T24383] do_select+0x8f1/0xf40 [ 358.056951][T24383] core_sys_select+0x3dc/0x6e0 [ 358.061717][T24383] __se_sys_pselect6+0x213/0x280 [ 358.066650][T24383] __x64_sys_pselect6+0x78/0x90 [ 358.071591][T24383] x64_sys_call+0x2e98/0x3000 [ 358.076267][T24383] do_syscall_64+0xca/0x2b0 [ 358.080791][T24383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.086859][T24383] [ 358.089183][T24383] value changed: 0xffffea0006ca7880 -> 0x0000000000000000 [ 358.096294][T24383] [ 358.098611][T24383] Reported by Kernel Concurrency Sanitizer on: [ 358.104803][T24383] CPU: 0 UID: 0 PID: 24383 Comm: syz.1.6653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.116347][T24383] Tainted: [W]=WARN [ 358.120424][T24383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.130494][T24383] ================================================================== [ 358.144533][T24377] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.190368][ T3708] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.207141][ T3708] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.218156][ T3708] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.227454][ T3708] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.407223][ T3680] batadv0: left promiscuous mode