last executing test programs: 3.392900635s ago: executing program 3 (id=2704): syz_emit_ethernet(0x6d, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x4, [0x5e4, 0xcb8, 0x71f, 0x5f9]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) membarrier(0x10, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000019000100000000000000000000000000000000000000ffff00000000fc010000000000000000000000000000000000000003000002000000f7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000ff0700000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000008000c0005000000"], 0xc0}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001d001600"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x7) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) mlockall(0x7) 3.33485524s ago: executing program 3 (id=2709): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.269887015s ago: executing program 4 (id=2716): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={0x0}, 0x18) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="e90dacb3d700", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 3.254510707s ago: executing program 4 (id=2719): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) 3.186248852s ago: executing program 4 (id=2721): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a300000000008000340000000011400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.884395006s ago: executing program 2 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x1e, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110725bd7000fbdbc12504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 2.834443471s ago: executing program 2 (id=2748): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x2}], 0x1, 0x4020, 0x0) 2.566124122s ago: executing program 1 (id=2767): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x0, 0x3, 0x49, 0x2}}]}}]}}, 0x0) 2.487887048s ago: executing program 3 (id=2768): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.037149105s ago: executing program 1 (id=2769): bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 2.034570175s ago: executing program 4 (id=2779): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.013412277s ago: executing program 1 (id=2770): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) r2 = io_uring_setup(0x2bbc, &(0x7f0000000080)={0x0, 0x205356, 0x200, 0x3, 0x23b}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYBLOB="b7245007acd8a50f95b9baff0974f619879cf2f208367ff25e20eacf3d8ce720", @ANYBLOB="467e922bc8337c61559779b5bca742097c86bdc680df870d48f2f7a38a078958d4bcdd9b543704ff3066c5094bdbbcb5aa202b91d471bb407c138ee8fbb413795e83dea164c9863219aa809cd449e4cb562bb9cb7d75fafb", @ANYRES8, @ANYRES8=r3, @ANYRES64], 0x48) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$kcm(0xa, 0x2, 0x73) r8 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}]}}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x9}, 0x1c) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0x8, 0x80000000]) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10010, r2, 0x10000000) 1.946683952s ago: executing program 2 (id=2771): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1], 0x48) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r9, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400", 0x1a}, {&(0x7f0000000500)="b700000000000000b3b105499caf254b3599aad0dcfd45b1", 0x18}], 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) execve(0x0, 0x0, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRES64=r7], 0x10}}, 0x10) syz_read_part_table(0x5f0, &(0x7f0000000a00)="$eJzs1D9rW1cYB+D3ylGtOA4yJR1KOwQiMqU1NEMyRNBSFOElCqUtLXRumyEdAhkyGBkpc9p8gYYkDgQvJntGUxeKDXY7GI1GX8DGi4Zyi+4fqm4FtdgOzzOc+16dc/QeST/d4FSrRLValLPZeD4b+99PLqrVx+PvESsR8Weaq0TEF2utm0sXb3/y2eeVpxFJRLTen8+2JMXWNH/XeFXcd/L7mfEwF3G4trB1aXez8bxSzL+u5F3u7q9mTeO7x+UhJg408x9/C5xW681f6v2H99qPHjTv7LWXh1djLrJAX3t2Yxy1r4pgZblKozq5N03T7tT9I8b9y0AOGzvXX2ynnYPsLzIR03TaRpxI629FRJa/r98Z5+/Jhd6gN7p1+eX9xStvDza6PxUPwqPygZjEXB7J6vEdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCOtn416v1uJiI8j4uzw6rcftN77sfXD42vPbnS/fHe+XPe6kl9rEZH8vf3M1P2bSdJ/eK/96EHzzkp7edjYuf5iO+0c/Hz+w+rmzuijX6dtwIlWZmn8+++1l4dPLvQGvdGtyy/vL15JBhvdxXP5/NFE6GrHclIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LRo3Vy6WC3qbyJW4kxep7P5NSnmXhXXTvH60uxMPP3t08O1ha1Lu5uN57dX/yhXj85FxN391fo/Oy2URa0s5v+vD8W/9lcAAAD//wrae64=") 1.176758845s ago: executing program 4 (id=2773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="602f00e3e450cf69c96343d3f728d6b598edfcc31bbcc750f78605c716e4abdc185f2c87a1bfce1852efaf179b0b14826fbdebbf50569c3c6564bde210af58e902a676cd2a59f1fbd481abe703924eb2ffac862633bd45a1106917c244d37c71d88c137500000000000000000000000000000000000000ffffffe8", @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000055a5131600000500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000000)={0x3}) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14) shutdown(r9, 0x1) 1.175026005s ago: executing program 1 (id=2774): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) readv(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f00000002c0)=""/168, 0xa8}], 0x2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r10, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r10, 0x407, 0x100000) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001200)='kmem_cache_free\x00', r12}, 0x18) 1.174779645s ago: executing program 2 (id=2775): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1, 0x455b843fbdb64c65) 1.174492955s ago: executing program 3 (id=2776): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a3af765db4ccd083e922cb89b1cf63f116f626a6563745f723a737368645f7661725f72756e5f743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e6331303233203030"], 0x67) 1.133180698s ago: executing program 3 (id=2777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001f80)={0x14, 0x2, 0x7, 0x301, 0x0, 0x0, {0xf, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.132621608s ago: executing program 3 (id=2778): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000240)="32d95846105fbaa75739154e7852727318ef3f40ff517623ec1caed8eff01616300bc2", 0x20075, r0, 0x4}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000004ee0f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r7 = socket$kcm(0x21, 0x2, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x800) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESOCT=r3, @ANYRESHEX=r9], 0x181000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.120832259s ago: executing program 2 (id=2780): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a300000000008000340000000011400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 408.349547ms ago: executing program 0 (id=2782): syz_emit_ethernet(0x6d, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x4, [0x5e4, 0xcb8, 0x71f, 0x5f9]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) membarrier(0x10, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000019000100000000000000000000000000000000000000ffff00000000fc010000000000000000000000000000000000000003000002000000f7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000ff0700000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000008000c0005000000"], 0xc0}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001d001600"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r3}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd(0x7) socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) mlockall(0x7) 231.671091ms ago: executing program 1 (id=2783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) mlockall(0x7) 230.758682ms ago: executing program 2 (id=2785): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 229.926292ms ago: executing program 4 (id=2786): syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x74d5, 0x0, 0x2, 0x2de}, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4", 0x46}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) socket$nl_route(0x10, 0x3, 0x0) 210.190963ms ago: executing program 0 (id=2787): syz_emit_ethernet(0x6d, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x4, [0x5e4, 0xcb8, 0x71f, 0x5f9]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) membarrier(0x10, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000019000100000000000000000000000000000000000000ffff00000000fc010000000000000000000000000000000000000003000002000000f7000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000ff0700000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000008000c0005000000"], 0xc0}}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950000001d001600"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) mlockall(0x7) 126.16731ms ago: executing program 1 (id=2788): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) r2 = io_uring_setup(0x2bbc, &(0x7f0000000080)={0x0, 0x205356, 0x200, 0x3, 0x23b}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYBLOB="b7245007acd8a50f95b9baff0974f619879cf2f208367ff25e20eacf3d8ce720", @ANYBLOB="467e922bc8337c61559779b5bca742097c86bdc680df870d48f2f7a38a078958d4bcdd9b543704ff3066c5094bdbbcb5aa202b91d471bb407c138ee8fbb413795e83dea164c9863219aa809cd449e4cb562bb9cb7d75fafb", @ANYRES8, @ANYRES8=r3, @ANYRES64], 0x48) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$kcm(0xa, 0x2, 0x73) r8 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}]}}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x9}, 0x1c) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0x8, 0x80000000]) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10010, r2, 0x10000000) 125.3468ms ago: executing program 0 (id=2789): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797374656d5f753a3af765db4ccd083e922cb89b1cf63f116f626a6563745f723a737368645f7661725f72756e5f743a733020756e636f6e66696e65645f753a73797374656d5f723a696e736d6f645f743a73302d73303a63302e6331303233203030"], 0x67) 98.601322ms ago: executing program 0 (id=2790): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611", 0x2c}, {&(0x7f0000001dc0)="5e77157a66882aa3860970c1d7b120f04952f933c01abb65e2f07ae8de5ccf0f1d87e1b154d253e67d709f", 0x2b}], 0x2}, 0x0) 15.018809ms ago: executing program 0 (id=2791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2792): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) kernel console output (not intermixed with test programs): ] lo speed is unknown, defaulting to 1000 [ 142.345374][ T8144] netlink: 'syz.2.1279': attribute type 21 has an invalid length. [ 142.353273][ T8144] netlink: 'syz.2.1279': attribute type 4 has an invalid length. [ 142.376129][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 142.625524][ T8148] IPv6: Can't replace route, no match found [ 142.680117][ T8151] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 142.690099][ T8151] team0: Failed to send options change via netlink (err -105) [ 142.697734][ T8151] team0: Port device dummy0 added [ 142.705777][ T8148] rdma_op ffff88811a702580 conn xmit_rdma 0000000000000000 [ 142.716805][ T8151] loop1: detected capacity change from 0 to 512 [ 142.747666][ T8151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.854887][ T8151] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 142.887226][ T8164] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1287'. [ 142.897323][ T8151] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.919249][ T8151] team0: Failed to send options change via netlink (err -105) [ 142.931074][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 142.932366][ T8151] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 142.965521][ T8151] team0: Port device dummy0 removed [ 142.974201][ T8151] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 142.985218][ T8164] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 142.993965][ T8164] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.028096][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.038866][ T8172] sch_fq: defrate 4294967295 ignored. [ 143.095394][ T8179] __vm_enough_memory: pid: 8179, comm: syz.3.1292, bytes: 21199837044736 not enough memory for the allocation [ 143.118025][ T8175] loop1: detected capacity change from 0 to 2048 [ 143.162077][ T3492] loop1: p1 < > p3 p4 [ 143.166972][ T3492] loop1: p3 size 54016 extends beyond EOD, truncated [ 143.174469][ T3492] loop1: p4 start 4294967295 is beyond EOD, truncated [ 143.184246][ T8175] loop1: p1 < > p3 p4 [ 143.189084][ T8175] loop1: p3 size 54016 extends beyond EOD, truncated [ 143.196508][ T8175] loop1: p4 start 4294967295 is beyond EOD, truncated [ 143.237404][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 143.249498][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 143.264182][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 143.282942][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 143.724487][ T8186] loop1: detected capacity change from 0 to 128 [ 143.749400][ T8186] syz_tun: entered promiscuous mode [ 143.755035][ T8186] macvtap1: entered promiscuous mode [ 143.768379][ T8186] syz_tun: left promiscuous mode [ 143.788967][ T8188] bond0: (slave dummy0): Releasing backup interface [ 143.800602][ T8188] bridge_slave_0: left allmulticast mode [ 143.806435][ T8188] bridge_slave_0: left promiscuous mode [ 143.812213][ T8188] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.823933][ T8188] bridge_slave_1: left allmulticast mode [ 143.829627][ T8188] bridge_slave_1: left promiscuous mode [ 143.835525][ T8188] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.853968][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 143.853983][ T29] audit: type=1400 audit(1755232781.703:15570): avc: denied { ioctl } for pid=8181 comm="syz.1.1304" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.886684][ T8188] bond0: (slave bond_slave_0): Releasing backup interface [ 143.896640][ T8188] bond0: (slave bond_slave_1): Releasing backup interface [ 143.909226][ T8188] team0: Port device team_slave_0 removed [ 143.919280][ T8188] team0: Port device team_slave_1 removed [ 143.926338][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.933786][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.942779][ T8188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.950194][ T8188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.966357][ T8192] team0: Mode changed to "loadbalance" [ 143.980693][ T8193] team0: Device veth1_vlan failed to register rx_handler [ 144.579441][ T29] audit: type=1326 audit(1755232782.423:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.605148][ T29] audit: type=1326 audit(1755232782.453:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.628908][ T29] audit: type=1326 audit(1755232782.453:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.641760][ T8202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8202 comm=syz.2.1297 [ 144.652451][ T29] audit: type=1326 audit(1755232782.453:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.688554][ T29] audit: type=1326 audit(1755232782.453:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.712050][ T29] audit: type=1326 audit(1755232782.453:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.735731][ T29] audit: type=1326 audit(1755232782.453:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.762344][ T8208] loop1: detected capacity change from 0 to 512 [ 144.791518][ T29] audit: type=1326 audit(1755232782.643:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.793329][ T8208] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 144.815189][ T29] audit: type=1326 audit(1755232782.643:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8204 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 144.867033][ T8208] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1296: invalid indirect mapped block 2683928664 (level 1) [ 144.907035][ T8208] EXT4-fs (loop1): 1 truncate cleaned up [ 144.945085][ T8208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.990030][ T8208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.000717][ T8215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.094436][ T8202] lo speed is unknown, defaulting to 1000 [ 145.145584][ T8215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.211315][ T8202] lo speed is unknown, defaulting to 1000 [ 145.217667][ T8202] lo speed is unknown, defaulting to 1000 [ 145.287360][ T8222] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 145.300344][ T8224] IPv6: Can't replace route, no match found [ 145.300782][ T8222] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 145.333481][ T8215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.352581][ T8224] rdma_op ffff888119322980 conn xmit_rdma 0000000000000000 [ 145.434013][ T8215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.454476][ T8227] netlink: '+}[@': attribute type 3 has an invalid length. [ 145.479430][ T8231] 9pnet_fd: p9_fd_create_tcp (8231): problem connecting socket to 127.0.0.1 [ 145.488911][ T8227] loop1: detected capacity change from 0 to 1024 [ 145.538363][ T8227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.580077][ T8227] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.631331][ T310] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.661946][ T8236] __vm_enough_memory: pid: 8236, comm: syz.2.1307, bytes: 21199608320000 not enough memory for the allocation [ 145.704593][ T310] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.724614][ T310] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.738868][ T8227] usb usb1: check_ctrlrecip: process 8227 (+}[@) requesting ep 01 but needs 81 [ 145.758233][ T8227] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 145.780653][ T8227] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 15) [ 145.797601][ T310] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.812489][ T8227] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 145.825191][ T8227] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.825191][ T8227] [ 145.828447][ T8244] netlink: 'syz.3.1309': attribute type 39 has an invalid length. [ 145.842721][ T8245] __nla_validate_parse: 6 callbacks suppressed [ 145.842736][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 145.884087][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1308'. [ 145.916967][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.970081][ T8252] lo speed is unknown, defaulting to 1000 [ 146.039401][ T8252] lo speed is unknown, defaulting to 1000 [ 146.046149][ T8252] lo speed is unknown, defaulting to 1000 [ 146.075788][ T8255] loop1: detected capacity change from 0 to 512 [ 146.099048][ T8255] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1311: error while reading EA inode 32 err=-116 [ 146.111836][ T8255] EXT4-fs (loop1): Remounting filesystem read-only [ 146.118716][ T8255] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.132009][ T8255] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 146.142774][ T8255] EXT4-fs (loop1): 1 orphan inode deleted [ 146.149090][ T8255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.161973][ T8255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.644379][ T3382] Process accounting resumed [ 146.712512][ T8265] loop1: detected capacity change from 0 to 2048 [ 146.753669][ T3492] Alternate GPT is invalid, using primary GPT. [ 146.762079][ T3492] loop1: p2 p3 p7 [ 146.783345][ T8265] Alternate GPT is invalid, using primary GPT. [ 146.790512][ T8265] loop1: p2 p3 p7 [ 146.821274][ T8260] rdma_rxe: rxe_newlink: failed to add lo [ 146.857441][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 146.868691][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 146.869238][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 146.948493][ T8274] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1315'. [ 146.959117][ T8274] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 146.967533][ T8274] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 146.995574][ T8272] loop1: detected capacity change from 0 to 512 [ 147.006784][ T8272] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.013845][ T8272] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1314: bg 0: block 248: padding at end of block bitmap is not set [ 147.028804][ T8272] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1314: Failed to acquire dquot type 1 [ 147.041821][ T8272] EXT4-fs (loop1): 1 truncate cleaned up [ 147.048186][ T8272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.074855][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 147.094205][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.112637][ T8280] IPv6: Can't replace route, no match found [ 147.134125][ T8280] loop1: detected capacity change from 0 to 1024 [ 147.142098][ T8280] EXT4-fs: Ignoring removed bh option [ 147.148397][ T8280] EXT4-fs: inline encryption not supported [ 147.161034][ T8280] ext4: Unknown parameter 'smackfsroot' [ 147.171010][ T8280] rdma_op ffff88811a68b180 conn xmit_rdma 0000000000000000 [ 147.194131][ T8280] loop1: detected capacity change from 0 to 2048 [ 147.238348][ T8280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.280875][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.363184][ T8287] __vm_enough_memory: pid: 8287, comm: syz.1.1318, bytes: 21200292425728 not enough memory for the allocation [ 147.451584][ T8289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1319'. [ 147.460629][ T8289] netem: unknown loss type 12 [ 147.465523][ T8289] netem: change failed [ 147.482469][ T8289] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1319'. [ 147.529267][ T8295] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 147.593935][ T8305] wg2: entered promiscuous mode [ 147.598917][ T8305] wg2: entered allmulticast mode [ 147.608147][ T8309] syzkaller0: entered promiscuous mode [ 147.613867][ T8309] syzkaller0: entered allmulticast mode [ 147.621182][ T8308] 9pnet_fd: p9_fd_create_tcp (8308): problem connecting socket to 127.0.0.1 [ 147.641572][ T8311] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 147.905887][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 148.522444][ T8339] __vm_enough_memory: pid: 8339, comm: syz.4.1335, bytes: 21200520720384 not enough memory for the allocation [ 148.721110][ T8342] netem: change failed [ 148.725664][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'. [ 148.743512][ T8342] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1336'. [ 148.849111][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1340'. [ 148.873618][ T29] kauditd_printk_skb: 1032 callbacks suppressed [ 148.873665][ T29] audit: type=1326 audit(1755232786.723:16610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8350 comm="syz.0.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 149.105246][ T29] audit: type=1326 audit(1755232786.953:16611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.129107][ T29] audit: type=1326 audit(1755232786.953:16612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.152686][ T29] audit: type=1326 audit(1755232786.973:16613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.176525][ T29] audit: type=1326 audit(1755232786.973:16614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.200156][ T29] audit: type=1326 audit(1755232786.973:16615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.224503][ T29] audit: type=1326 audit(1755232786.973:16616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.248196][ T29] audit: type=1326 audit(1755232786.973:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.272188][ T29] audit: type=1326 audit(1755232786.973:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.295708][ T29] audit: type=1326 audit(1755232786.973:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 149.679062][ T8379] __vm_enough_memory: pid: 8379, comm: syz.4.1346, bytes: 21200520720384 not enough memory for the allocation [ 150.063778][ T8392] lo speed is unknown, defaulting to 1000 [ 150.117213][ T8393] process 'syz.3.1350' launched '/dev/fd/6' with NULL argv: empty string added [ 150.136540][ T8392] lo speed is unknown, defaulting to 1000 [ 150.142892][ T8392] lo speed is unknown, defaulting to 1000 [ 150.332697][ T8399] __vm_enough_memory: pid: 8399, comm: syz.3.1351, bytes: 21199837044736 not enough memory for the allocation [ 151.310563][ T8420] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 151.321160][ T8419] __nla_validate_parse: 3 callbacks suppressed [ 151.321176][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1357'. [ 151.357041][ T8420] $Hÿ: (slave dummy0): Releasing backup interface [ 151.374474][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1356'. [ 151.395741][ T8420] team0: Failed to send options change via netlink (err -105) [ 151.403421][ T8420] team0: Port device dummy0 added [ 151.424357][ T8425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8425 comm=syz.0.1357 [ 151.451904][ T8420] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 151.464121][ T8420] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 151.493404][ T8420] team0: Failed to send options change via netlink (err -105) [ 151.501333][ T8420] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 151.521342][ T8420] team0: Port device dummy0 removed [ 151.533790][ T8420] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 151.580840][ T8419] lo speed is unknown, defaulting to 1000 [ 151.963838][ T8440] loop1: detected capacity change from 0 to 512 [ 152.176308][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 152.273959][ T8419] lo speed is unknown, defaulting to 1000 [ 152.280194][ T8419] lo speed is unknown, defaulting to 1000 [ 152.305698][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 152.482261][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 152.548151][ T8453] pim6reg: entered allmulticast mode [ 152.561385][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 152.656518][ T8457] pim6reg: left allmulticast mode [ 153.325539][ T8471] __vm_enough_memory: pid: 8471, comm: syz.2.1369, bytes: 21199608320000 not enough memory for the allocation [ 153.425944][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 153.469128][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'. [ 153.478287][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1371'. [ 153.487520][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1371'. [ 153.491076][ T8478] x_tables: ip_tables: udp match: only valid for protocol 17 [ 153.518047][ T8481] sch_fq: defrate 4294967295 ignored. [ 153.620639][ T8491] loop1: detected capacity change from 0 to 1024 [ 153.682347][ T8491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.783184][ T8499] $Hÿ: (slave dummy0): Releasing backup interface [ 153.838466][ T8499] bond1: (slave bridge2): Releasing active interface [ 153.873296][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.882776][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 153.882788][ T29] audit: type=1326 audit(1755232791.723:17278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 153.997714][ T29] audit: type=1326 audit(1755232791.843:17279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.004868][ T8499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8499 comm=syz.3.1378 [ 154.021430][ T29] audit: type=1326 audit(1755232791.843:17280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.057427][ T29] audit: type=1326 audit(1755232791.843:17281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.081073][ T29] audit: type=1326 audit(1755232791.843:17282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.104688][ T29] audit: type=1326 audit(1755232791.843:17283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.128205][ T29] audit: type=1326 audit(1755232791.843:17284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.152009][ T29] audit: type=1326 audit(1755232791.843:17285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.170763][ T8519] __vm_enough_memory: pid: 8519, comm: syz.4.1382, bytes: 21200520720384 not enough memory for the allocation [ 154.175495][ T29] audit: type=1326 audit(1755232791.843:17286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.211010][ T29] audit: type=1326 audit(1755232791.843:17287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.2.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 154.683883][ T8512] lo speed is unknown, defaulting to 1000 [ 155.062496][ T8535] sch_fq: defrate 4294967295 ignored. [ 155.337534][ T8544] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 155.410432][ T8544] dummy0: entered promiscuous mode [ 155.427740][ T8544] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 155.628192][ T8536] lo speed is unknown, defaulting to 1000 [ 155.968287][ T8512] lo speed is unknown, defaulting to 1000 [ 155.986773][ T8512] lo speed is unknown, defaulting to 1000 [ 155.991362][ T8536] lo speed is unknown, defaulting to 1000 [ 156.000311][ T8536] lo speed is unknown, defaulting to 1000 [ 156.400878][ T8563] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 156.422988][ T8563] $Hÿ: (slave dummy0): Releasing backup interface [ 156.430915][ T8563] dummy0: left promiscuous mode [ 156.442804][ T8563] team0: Failed to send options change via netlink (err -105) [ 156.450430][ T8563] team0: Port device dummy0 added [ 156.538526][ T8567] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 156.557049][ T8567] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.591826][ T8567] team0: Failed to send options change via netlink (err -105) [ 156.604383][ T8567] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 156.623763][ T8567] team0: Port device dummy0 removed [ 156.639358][ T8567] dummy0: entered promiscuous mode [ 156.650889][ T8567] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 156.963291][ T8585] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.036174][ T8590] __nla_validate_parse: 6 callbacks suppressed [ 157.036212][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 157.058438][ T8585] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.160512][ T8593] sch_fq: defrate 4294967295 ignored. [ 157.184627][ T8585] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.263957][ T8593] program syz.1.1399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.307444][ T8585] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.377164][ T8596] __vm_enough_memory: pid: 8596, comm: syz.3.1401, bytes: 21199837044736 not enough memory for the allocation [ 157.392566][ T8598] loop1: detected capacity change from 0 to 512 [ 157.416045][ T8598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 157.437700][ T8598] System zones: 1-12 [ 157.453076][ T8598] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1400: error while reading EA inode 32 err=-116 [ 157.480364][ T6747] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.560993][ T6747] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.587276][ T8598] EXT4-fs (loop1): Remounting filesystem read-only [ 157.593880][ T8598] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 157.599692][ T6747] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.631618][ T8598] EXT4-fs (loop1): 1 orphan inode deleted [ 157.651434][ T8598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.661220][ T6747] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.680833][ T8604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'. [ 157.891242][ T8612] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 157.903551][ T8610] lo speed is unknown, defaulting to 1000 [ 157.915136][ T8612] $Hÿ: (slave dummy0): Releasing backup interface [ 157.932095][ T8612] dummy0: left promiscuous mode [ 157.955212][ T8612] team0: Failed to send options change via netlink (err -105) [ 157.962749][ T8612] team0: Port device dummy0 added [ 157.984936][ T8620] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 158.020341][ T8612] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 158.052518][ T8612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.075827][ T8621] netlink: 'syz.0.1405': attribute type 3 has an invalid length. [ 158.089972][ T8612] team0: Failed to send options change via netlink (err -105) [ 158.108979][ T8612] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 158.134164][ T8612] team0: Port device dummy0 removed [ 158.148109][ T8612] dummy0: entered promiscuous mode [ 158.155536][ T8612] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 158.167765][ T8610] lo speed is unknown, defaulting to 1000 [ 158.182666][ T8610] lo speed is unknown, defaulting to 1000 [ 158.191408][ T8617] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 158.246556][ T8630] __vm_enough_memory: pid: 8630, comm: syz.4.1410, bytes: 21200520720384 not enough memory for the allocation [ 158.346053][ T8637] __vm_enough_memory: pid: 8637, comm: syz.2.1413, bytes: 21199608320000 not enough memory for the allocation [ 158.371763][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.500502][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 159.030614][ T8663] netlink: 'syz.2.1420': attribute type 3 has an invalid length. [ 159.038710][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1420'. [ 159.072311][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 159.072323][ T29] audit: type=1400 audit(1755232796.923:17922): avc: denied { setopt } for pid=8662 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.129917][ T8666] netlink: 'syz.3.1421': attribute type 10 has an invalid length. [ 159.155099][ T8666] team0: Failed to send options change via netlink (err -105) [ 159.163192][ T8666] team0: Port device dummy0 added [ 159.227061][ T29] audit: type=1400 audit(1755232797.073:17923): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.262813][ T8666] netlink: 'syz.3.1421': attribute type 10 has an invalid length. [ 159.282257][ T8666] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 159.301006][ T29] audit: type=1400 audit(1755232797.133:17924): avc: denied { tracepoint } for pid=8672 comm="syz.4.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.327207][ T8666] team0: Failed to send options change via netlink (err -105) [ 159.341414][ T8666] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 159.352603][ T8673] netlink: '+}[@': attribute type 3 has an invalid length. [ 159.373386][ T8666] team0: Port device dummy0 removed [ 159.379483][ T29] audit: type=1400 audit(1755232797.173:17925): avc: denied { execute } for pid=8672 comm="syz.4.1423" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 159.391892][ T8675] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1425'. [ 159.406894][ T29] audit: type=1400 audit(1755232797.203:17926): avc: denied { shutdown } for pid=8676 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.435519][ T29] audit: type=1400 audit(1755232797.213:17927): avc: denied { name_connect } for pid=8676 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 159.455883][ T29] audit: type=1326 audit(1755232797.213:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 159.479461][ T29] audit: type=1326 audit(1755232797.213:17929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 159.503298][ T29] audit: type=1326 audit(1755232797.213:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 159.526869][ T29] audit: type=1326 audit(1755232797.213:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.0.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 159.553143][ T8666] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 159.572379][ T8675] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 159.589410][ T8675] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.651571][ T8683] __vm_enough_memory: pid: 8683, comm: syz.3.1427, bytes: 21199837044736 not enough memory for the allocation [ 159.674293][ T8690] __vm_enough_memory: pid: 8690, comm: syz.1.1426, bytes: 21200292425728 not enough memory for the allocation [ 159.976877][ T8701] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1433'. [ 160.002625][ T8701] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 160.131236][ T8710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 160.214295][ T8716] team0: Failed to send options change via netlink (err -105) [ 160.221890][ T8716] team0: Port device dummy0 added [ 160.229600][ T8714] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 160.254361][ T8714] SELinux: failed to load policy [ 160.345814][ T8716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.400658][ T8716] team0: Failed to send options change via netlink (err -105) [ 160.443780][ T8716] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.452805][ T8716] team0: Port device dummy0 removed [ 160.460655][ T8716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.598238][ T8725] __vm_enough_memory: pid: 8725, comm: syz.2.1439, bytes: 21199608320000 not enough memory for the allocation [ 160.821503][ T8727] __vm_enough_memory: pid: 8727, comm: syz.2.1440, bytes: 21199608320000 not enough memory for the allocation [ 160.872881][ T8705] Set syz1 is full, maxelem 65536 reached [ 161.043544][ T8745] __vm_enough_memory: pid: 8745, comm: syz.0.1446, bytes: 21199926169600 not enough memory for the allocation [ 161.159387][ T8749] loop1: detected capacity change from 0 to 128 [ 161.393370][ T8762] lo speed is unknown, defaulting to 1000 [ 161.592419][ T8749] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 161.600501][ T8749] FAT-fs (loop1): Filesystem has been set read-only [ 161.756875][ T8749] bio_check_eod: 21 callbacks suppressed [ 161.756892][ T8749] syz.1.1444: attempt to access beyond end of device [ 161.756892][ T8749] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 161.929984][ T8749] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 161.938372][ T8749] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 161.955979][ T8767] syz.1.1444: attempt to access beyond end of device [ 161.955979][ T8767] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 161.969648][ T8767] buffer_io_error: 21 callbacks suppressed [ 161.969662][ T8767] Buffer I/O error on dev loop1, logical block 2065, async page read [ 161.999938][ T8772] validate_nla: 3 callbacks suppressed [ 161.999955][ T8772] netlink: 'syz.2.1450': attribute type 10 has an invalid length. [ 162.069990][ T8772] bond0: (slave dummy0): Releasing backup interface [ 162.112216][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.112216][ T8767] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 162.125679][ T8767] Buffer I/O error on dev loop1, logical block 2066, async page read [ 162.168885][ T8772] team0: Failed to send options change via netlink (err -105) [ 162.176861][ T8772] team0: Port device dummy0 added [ 162.183599][ T8773] netlink: 'syz.2.1450': attribute type 10 has an invalid length. [ 162.211010][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.211010][ T8767] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 162.224313][ T8767] Buffer I/O error on dev loop1, logical block 2067, async page read [ 162.235955][ T8762] lo speed is unknown, defaulting to 1000 [ 162.236422][ T8773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.286625][ T8773] team0: Failed to send options change via netlink (err -105) [ 162.314894][ T8773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.322090][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.322090][ T8767] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 162.338295][ T8767] Buffer I/O error on dev loop1, logical block 2068, async page read [ 162.345160][ T8773] team0: Port device dummy0 removed [ 162.384187][ T8773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.406144][ T8762] lo speed is unknown, defaulting to 1000 [ 162.412513][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.412513][ T8767] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 162.426409][ T8767] Buffer I/O error on dev loop1, logical block 2069, async page read [ 162.435632][ T8764] siw: device registration error -23 [ 162.511810][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.511810][ T8767] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 162.525323][ T8767] Buffer I/O error on dev loop1, logical block 2070, async page read [ 162.578960][ T8783] __vm_enough_memory: pid: 8783, comm: syz.2.1453, bytes: 21199608320000 not enough memory for the allocation [ 162.618628][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.618628][ T8767] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 162.632871][ T8767] Buffer I/O error on dev loop1, logical block 2071, async page read [ 162.724009][ T8767] syz.1.1444: attempt to access beyond end of device [ 162.724009][ T8767] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 162.737366][ T8767] Buffer I/O error on dev loop1, logical block 2072, async page read [ 162.804144][ T8798] netlink: 'syz.4.1459': attribute type 27 has an invalid length. [ 162.831999][ T8798] 0ªî{X¹¦: left allmulticast mode [ 162.870435][ T8798] $Hÿ: left promiscuous mode [ 162.902823][ T8798] dummy0: left promiscuous mode [ 162.912467][ T8806] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 163.424707][ T8798] wg2: left promiscuous mode [ 163.429338][ T8798] wg2: left allmulticast mode [ 163.452759][ T3357] lo speed is unknown, defaulting to 1000 [ 163.486938][ T8802] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 163.515425][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.552029][ T8802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.567850][ T36] lo speed is unknown, defaulting to 1000 [ 163.681263][ T8818] __vm_enough_memory: pid: 8818, comm: syz.4.1466, bytes: 21200520720384 not enough memory for the allocation [ 163.689571][ T8819] netlink: 'syz.0.1464': attribute type 39 has an invalid length. [ 163.773462][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 163.959599][ T8838] loop1: detected capacity change from 0 to 512 [ 163.994913][ T8838] journal_path: Lookup failure for './file0/../file0' [ 164.002020][ T8838] EXT4-fs: error: could not find journal device path [ 164.197533][ T8854] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 164.217111][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 164.217126][ T29] audit: type=1326 audit(1755232802.063:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.277238][ T8854] $Hÿ: (slave dummy0): Releasing backup interface [ 164.304394][ T8854] dummy0: left promiscuous mode [ 164.346563][ T8854] team0: Failed to send options change via netlink (err -105) [ 164.354192][ T8854] team0: Port device dummy0 added [ 164.374858][ T29] audit: type=1326 audit(1755232802.093:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.398582][ T29] audit: type=1326 audit(1755232802.103:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.415712][ T8876] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 164.422133][ T29] audit: type=1326 audit(1755232802.103:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.453722][ T29] audit: type=1326 audit(1755232802.113:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.477526][ T29] audit: type=1326 audit(1755232802.113:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.501074][ T29] audit: type=1326 audit(1755232802.113:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.524734][ T29] audit: type=1326 audit(1755232802.123:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.548558][ T29] audit: type=1326 audit(1755232802.123:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.572117][ T29] audit: type=1326 audit(1755232802.123:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d7cdebe9 code=0x7ffc0000 [ 164.623011][ T8881] __vm_enough_memory: pid: 8881, comm: syz.1.1487, bytes: 21200292425728 not enough memory for the allocation [ 164.721434][ T8876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.791621][ T8876] team0: Failed to send options change via netlink (err -105) [ 164.799303][ T8876] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.831063][ T8876] team0: Port device dummy0 removed [ 164.859654][ T8876] dummy0: entered promiscuous mode [ 164.866467][ T8876] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 165.179451][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.1507, bytes: 21199608320000 not enough memory for the allocation [ 165.811322][ T8961] __vm_enough_memory: pid: 8961, comm: syz.0.1523, bytes: 21199926169600 not enough memory for the allocation [ 166.291797][ T8977] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 166.340063][ T8977] $Hÿ: (slave dummy0): Releasing backup interface [ 166.401842][ T8977] dummy0: left promiscuous mode [ 166.408370][ T8983] __vm_enough_memory: pid: 8983, comm: syz.2.1532, bytes: 21199608320000 not enough memory for the allocation [ 166.451666][ T8977] team0: Failed to send options change via netlink (err -105) [ 166.459168][ T8977] team0: Port device dummy0 added [ 166.531223][ T8984] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 166.584124][ T8984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.671540][ T8984] team0: Failed to send options change via netlink (err -105) [ 166.719641][ T8995] __vm_enough_memory: pid: 8995, comm: syz.1.1533, bytes: 21200292425728 not enough memory for the allocation [ 166.735898][ T8984] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 166.801387][ T8984] team0: Port device dummy0 removed [ 166.844689][ T8984] dummy0: entered promiscuous mode [ 166.907817][ T8984] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 167.173070][ T9016] __vm_enough_memory: pid: 9016, comm: syz.4.1544, bytes: 21200520720384 not enough memory for the allocation [ 167.531272][ T9032] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 167.567301][ T9032] $Hÿ: (slave dummy0): Releasing backup interface [ 167.608049][ T9032] dummy0: left promiscuous mode [ 167.641168][ T9032] team0: Failed to send options change via netlink (err -105) [ 167.648710][ T9032] team0: Port device dummy0 added [ 167.730555][ T9032] netlink: 'syz.0.1551': attribute type 10 has an invalid length. [ 167.742827][ T9051] 9pnet_fd: Insufficient options for proto=fd [ 167.761005][ T9053] futex_wake_op: syz.4.1559 tries to shift op by -1; fix this program [ 167.781068][ T9032] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.832559][ T9032] team0: Failed to send options change via netlink (err -105) [ 167.840411][ T9032] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 167.857888][ T9061] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 167.872192][ T9032] team0: Port device dummy0 removed [ 167.902598][ T9032] dummy0: entered promiscuous mode [ 167.908549][ T9032] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 168.095949][ T9080] __vm_enough_memory: pid: 9080, comm: syz.4.1572, bytes: 21200520720384 not enough memory for the allocation [ 168.100392][ T9085] 9pnet_fd: Insufficient options for proto=fd [ 168.133382][ T9084] IPVS: length: 128 != 8 [ 168.252450][ T9099] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 168.268994][ T9099] $Hÿ: (slave dummy0): Releasing backup interface [ 168.292350][ T9094] __vm_enough_memory: pid: 9094, comm: syz.0.1578, bytes: 21199926169600 not enough memory for the allocation [ 168.311904][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 168.315846][ T9099] team0: Failed to send options change via netlink (err -105) [ 168.328658][ T9099] team0: Port device dummy0 added [ 168.374691][ T9103] random: crng reseeded on system resumption [ 168.401194][ T9099] netlink: 'syz.4.1581': attribute type 10 has an invalid length. [ 168.433176][ T9099] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.451714][ T9112] netlink: 'syz.0.1585': attribute type 27 has an invalid length. [ 168.463762][ T9099] team0: Failed to send options change via netlink (err -105) [ 168.492557][ T9099] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.522673][ T9099] team0: Port device dummy0 removed [ 168.555276][ T9099] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 168.622014][ T9124] __vm_enough_memory: pid: 9124, comm: syz.2.1591, bytes: 21199608320000 not enough memory for the allocation [ 168.634300][ T9129] veth3: entered promiscuous mode [ 168.639355][ T9129] veth3: entered allmulticast mode [ 168.659939][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 168.717112][ T9138] __vm_enough_memory: pid: 9138, comm: syz.0.1598, bytes: 21199926169600 not enough memory for the allocation [ 168.818447][ T9158] __vm_enough_memory: pid: 9158, comm: syz.3.1607, bytes: 21199837044736 not enough memory for the allocation [ 169.226171][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'. [ 169.275621][ T9219] netlink: 'syz.3.1636': attribute type 22 has an invalid length. [ 169.283597][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 169.302025][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 169.302041][ T29] audit: type=1400 audit(1755232807.153:19148): avc: denied { read } for pid=9222 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.350289][ T29] audit: type=1326 audit(1755232807.193:19149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 169.373963][ T29] audit: type=1326 audit(1755232807.193:19150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 169.397759][ T29] audit: type=1326 audit(1755232807.193:19151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 169.421476][ T29] audit: type=1326 audit(1755232807.193:19152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 169.445163][ T29] audit: type=1326 audit(1755232807.193:19153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 169.452278][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1637'. [ 169.493818][ T29] audit: type=1326 audit(1755232807.323:19154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 169.517458][ T29] audit: type=1326 audit(1755232807.323:19155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 169.540969][ T29] audit: type=1326 audit(1755232807.323:19156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 169.564401][ T29] audit: type=1326 audit(1755232807.323:19157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9224 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b13e1ebe9 code=0x7ffc0000 [ 169.734158][ T9264] netlink: 'syz.3.1655': attribute type 21 has an invalid length. [ 169.762974][ T9264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1655'. [ 169.772083][ T9264] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 169.865497][ T9277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1660'. [ 169.905237][ T9281] wireguard0: entered promiscuous mode [ 169.910809][ T9281] wireguard0: entered allmulticast mode [ 169.944318][ T9288] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 169.980727][ T9290] netlink: 'syz.1.1666': attribute type 3 has an invalid length. [ 169.988560][ T9290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1666'. [ 170.132860][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1672'. [ 170.141864][ T9304] netem: unknown loss type 12 [ 170.146610][ T9304] netem: change failed [ 170.204778][ T9304] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1672'. [ 170.222057][ T9313] bond0: (slave dummy0): Releasing backup interface [ 170.241533][ T9313] team0: Failed to send options change via netlink (err -105) [ 170.249064][ T9313] team0: Port device dummy0 added [ 170.279051][ T9316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1677'. [ 170.310017][ T9313] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.341474][ T9313] team0: Failed to send options change via netlink (err -105) [ 170.365575][ T9313] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 170.391168][ T9313] team0: Port device dummy0 removed [ 170.409107][ T9313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.436414][ T9327] wireguard0: entered promiscuous mode [ 170.441997][ T9327] wireguard0: entered allmulticast mode [ 170.474546][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 170.520594][ T9343] __vm_enough_memory: 8 callbacks suppressed [ 170.520608][ T9343] __vm_enough_memory: pid: 9343, comm: syz.3.1686, bytes: 21199837044736 not enough memory for the allocation [ 170.648441][ T9356] netem: unknown loss type 12 [ 170.653285][ T9356] netem: change failed [ 170.735427][ T9369] __vm_enough_memory: pid: 9369, comm: syz.4.1699, bytes: 21200520720384 not enough memory for the allocation [ 170.878839][ T9384] 9pnet_fd: Insufficient options for proto=fd [ 170.884940][ T9382] lo speed is unknown, defaulting to 1000 [ 171.026807][ T9382] lo speed is unknown, defaulting to 1000 [ 171.073816][ T9382] lo speed is unknown, defaulting to 1000 [ 171.082071][ T9396] loop1: detected capacity change from 0 to 512 [ 171.137143][ T9396] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 171.177353][ T9396] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 171.202113][ T9396] EXT4-fs (loop1): 1 truncate cleaned up [ 171.221480][ T9396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.278499][ T9396] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.1710: lblock 0 mapped to illegal pblock 4 (length 1) [ 171.313698][ T9396] EXT4-fs (loop1): Remounting filesystem read-only [ 171.336169][ T9410] wg2: entered promiscuous mode [ 171.341111][ T9410] wg2: entered allmulticast mode [ 171.349774][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.468154][ T9426] __vm_enough_memory: pid: 9426, comm: syz.0.1722, bytes: 21199926169600 not enough memory for the allocation [ 171.502937][ T9428] loop1: detected capacity change from 0 to 2048 [ 171.552282][ T9428] loop1: p1 < > p3 p4 [ 171.558710][ T9428] loop1: p3 size 54016 extends beyond EOD, truncated [ 171.574172][ T9428] loop1: p4 start 4294967295 is beyond EOD, truncated [ 171.766126][ T9372] syz.3.1700 (9372) used greatest stack depth: 6416 bytes left [ 171.832088][ T9461] __vm_enough_memory: pid: 9461, comm: syz.4.1737, bytes: 21200520720384 not enough memory for the allocation [ 171.834186][ T9463] __vm_enough_memory: pid: 9463, comm: syz.3.1738, bytes: 21199837044736 not enough memory for the allocation [ 171.905743][ T9471] __vm_enough_memory: pid: 9471, comm: syz.3.1749, bytes: 21199837044736 not enough memory for the allocation [ 172.005034][ T9468] wireguard0: entered promiscuous mode [ 172.010536][ T9468] wireguard0: entered allmulticast mode [ 172.141879][ T9477] macvlan1: entered promiscuous mode [ 172.154836][ T9477] ipvlan0: entered promiscuous mode [ 172.211567][ T9477] ipvlan0: left promiscuous mode [ 172.221066][ T9477] macvlan1: left promiscuous mode [ 172.479624][ T9486] random: crng reseeded on system resumption [ 172.676307][ T9498] __vm_enough_memory: pid: 9498, comm: syz.4.1751, bytes: 21200520720384 not enough memory for the allocation [ 173.185309][ T9484] syz.2.1743 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 173.196160][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.2.1743 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 173.196189][ T9484] Tainted: [W]=WARN [ 173.196195][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.196205][ T9484] Call Trace: [ 173.196212][ T9484] [ 173.196220][ T9484] __dump_stack+0x1d/0x30 [ 173.196299][ T9484] dump_stack_lvl+0xe8/0x140 [ 173.196357][ T9484] dump_stack+0x15/0x1b [ 173.196371][ T9484] dump_header+0x81/0x220 [ 173.196400][ T9484] oom_kill_process+0x342/0x400 [ 173.196433][ T9484] out_of_memory+0x979/0xb80 [ 173.196515][ T9484] try_charge_memcg+0x5e6/0x9e0 [ 173.196542][ T9484] charge_memcg+0x51/0xc0 [ 173.196557][ T9484] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 173.196576][ T9484] __read_swap_cache_async+0x1df/0x350 [ 173.196654][ T9484] swap_cluster_readahead+0x376/0x3e0 [ 173.196732][ T9484] swapin_readahead+0xde/0x6f0 [ 173.196778][ T9484] ? __filemap_get_folio+0x4f7/0x6b0 [ 173.196859][ T9484] ? __rcu_read_unlock+0x34/0x70 [ 173.196881][ T9484] ? swap_cache_get_folio+0x77/0x200 [ 173.196916][ T9484] do_swap_page+0x301/0x2430 [ 173.196938][ T9484] ? css_rstat_updated+0xb7/0x240 [ 173.196968][ T9484] ? __pfx_default_wake_function+0x10/0x10 [ 173.196990][ T9484] handle_mm_fault+0x9a5/0x2c20 [ 173.197021][ T9484] do_user_addr_fault+0x636/0x1090 [ 173.197054][ T9484] exc_page_fault+0x62/0xa0 [ 173.197109][ T9484] asm_exc_page_fault+0x26/0x30 [ 173.197125][ T9484] RIP: 0033:0x7f44ffcd5618 [ 173.197145][ T9484] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d aa 27 35 00 00 0f 8e 09 fe ff ff e8 43 9e fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 [ 173.197228][ T9484] RSP: 002b:00007ffe547fca50 EFLAGS: 00010216 [ 173.197244][ T9484] RAX: 000000000002a46a RBX: 00007f4500027da0 RCX: 000000000002a3c8 [ 173.197256][ T9484] RDX: 00000000000000a2 RSI: 00007ffe547fca30 RDI: 0000000000000001 [ 173.197268][ T9484] RBP: 00007f4500027da0 R08: 0000000009b61036 R09: 7fffffffffffffff [ 173.197329][ T9484] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002a4b5 [ 173.197341][ T9484] R13: 00007ffe547fcb40 R14: ffffffffffffffff R15: 00007ffe547fcb60 [ 173.197358][ T9484] [ 173.197365][ T9484] memory: usage 307200kB, limit 307200kB, failcnt 210 [ 173.423858][ T9484] memory+swap: usage 308904kB, limit 9007199254740988kB, failcnt 0 [ 173.431861][ T9484] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 173.439246][ T9484] Memory cgroup stats for /syz2: [ 173.439563][ T9484] cache 0 [ 173.447558][ T9484] rss 0 [ 173.450481][ T9484] shmem 0 [ 173.453541][ T9484] mapped_file 0 [ 173.456995][ T9484] dirty 0 [ 173.460406][ T9484] writeback 0 [ 173.463737][ T9484] workingset_refault_anon 71 [ 173.468314][ T9484] workingset_refault_file 560 [ 173.473076][ T9484] swap 1744896 [ 173.476447][ T9484] swapcached 0 [ 173.479843][ T9484] pgpgin 782816 [ 173.483433][ T9484] pgpgout 782816 [ 173.486976][ T9484] pgfault 176055 [ 173.490582][ T9484] pgmajfault 24 [ 173.494084][ T9484] inactive_anon 0 [ 173.497757][ T9484] active_anon 0 [ 173.501251][ T9484] inactive_file 0 [ 173.504972][ T9484] active_file 0 [ 173.508432][ T9484] unevictable 0 [ 173.511938][ T9484] hierarchical_memory_limit 314572800 [ 173.517409][ T9484] hierarchical_memsw_limit 9223372036854771712 [ 173.523595][ T9484] total_cache 0 [ 173.527067][ T9484] total_rss 0 [ 173.530347][ T9484] total_shmem 0 [ 173.533950][ T9484] total_mapped_file 0 [ 173.537995][ T9484] total_dirty 0 [ 173.541505][ T9484] total_writeback 0 [ 173.545598][ T9484] total_workingset_refault_anon 71 [ 173.550794][ T9484] total_workingset_refault_file 560 [ 173.556102][ T9484] total_swap 1744896 [ 173.560010][ T9484] total_swapcached 0 [ 173.563916][ T9484] total_pgpgin 782816 [ 173.567946][ T9484] total_pgpgout 782816 [ 173.572065][ T9484] total_pgfault 176055 [ 173.576196][ T9484] total_pgmajfault 24 [ 173.580244][ T9484] total_inactive_anon 0 [ 173.584413][ T9484] total_active_anon 0 [ 173.588397][ T9484] total_inactive_file 0 [ 173.592562][ T9484] total_active_file 0 [ 173.596567][ T9484] total_unevictable 0 [ 173.600621][ T9484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.33,pid=3624,uid=0 [ 173.615410][ T9484] Memory cgroup out of memory: Killed process 3624 (syz.2.33) total-vm:93632kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 173.639479][ T9485] syz.2.1743 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 173.654022][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.2.1743 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 173.654099][ T9485] Tainted: [W]=WARN [ 173.654107][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.654121][ T9485] Call Trace: [ 173.654128][ T9485] [ 173.654137][ T9485] __dump_stack+0x1d/0x30 [ 173.654160][ T9485] dump_stack_lvl+0xe8/0x140 [ 173.654244][ T9485] dump_stack+0x15/0x1b [ 173.654262][ T9485] dump_header+0x81/0x220 [ 173.654317][ T9485] oom_kill_process+0x342/0x400 [ 173.654354][ T9485] out_of_memory+0x979/0xb80 [ 173.654436][ T9485] try_charge_memcg+0x5e6/0x9e0 [ 173.654468][ T9485] obj_cgroup_charge_pages+0xa6/0x150 [ 173.654575][ T9485] __memcg_kmem_charge_page+0x9f/0x170 [ 173.654610][ T9485] __alloc_frozen_pages_noprof+0x188/0x360 [ 173.654649][ T9485] alloc_pages_mpol+0xb3/0x250 [ 173.654723][ T9485] alloc_pages_noprof+0x90/0x130 [ 173.654775][ T9485] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 173.654818][ T9485] __kvmalloc_node_noprof+0x30f/0x4e0 [ 173.654844][ T9485] ? ip_set_alloc+0x1f/0x30 [ 173.655077][ T9485] ? ip_set_alloc+0x1f/0x30 [ 173.655133][ T9485] ? __kmalloc_cache_noprof+0x189/0x320 [ 173.655193][ T9485] ip_set_alloc+0x1f/0x30 [ 173.655223][ T9485] hash_netiface_create+0x282/0x740 [ 173.655259][ T9485] ? __pfx_hash_netiface_create+0x10/0x10 [ 173.655313][ T9485] ip_set_create+0x3cc/0x960 [ 173.655339][ T9485] ? __nla_parse+0x40/0x60 [ 173.655361][ T9485] nfnetlink_rcv_msg+0x4c3/0x590 [ 173.655419][ T9485] netlink_rcv_skb+0x123/0x220 [ 173.655439][ T9485] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.655518][ T9485] nfnetlink_rcv+0x16b/0x1690 [ 173.655549][ T9485] ? nlmon_xmit+0x4f/0x60 [ 173.655575][ T9485] ? consume_skb+0x49/0x150 [ 173.655648][ T9485] ? nlmon_xmit+0x4f/0x60 [ 173.655686][ T9485] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 173.655713][ T9485] ? __dev_queue_xmit+0x1200/0x2000 [ 173.655802][ T9485] ? __dev_queue_xmit+0x182/0x2000 [ 173.655866][ T9485] ? ref_tracker_free+0x37d/0x3e0 [ 173.655893][ T9485] ? __netlink_deliver_tap+0x4dc/0x500 [ 173.655919][ T9485] netlink_unicast+0x5bd/0x690 [ 173.655948][ T9485] netlink_sendmsg+0x58b/0x6b0 [ 173.655969][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.655991][ T9485] __sock_sendmsg+0x142/0x180 [ 173.656054][ T9485] ____sys_sendmsg+0x31e/0x4e0 [ 173.656080][ T9485] ___sys_sendmsg+0x17b/0x1d0 [ 173.656115][ T9485] __x64_sys_sendmsg+0xd4/0x160 [ 173.656153][ T9485] x64_sys_call+0x191e/0x2ff0 [ 173.656176][ T9485] do_syscall_64+0xd2/0x200 [ 173.656270][ T9485] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.656384][ T9485] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 173.656411][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.656434][ T9485] RIP: 0033:0x7f44ffdfebe9 [ 173.656498][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.656519][ T9485] RSP: 002b:00007f44fe867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.656539][ T9485] RAX: ffffffffffffffda RBX: 00007f4500025fa0 RCX: 00007f44ffdfebe9 [ 173.656558][ T9485] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.656573][ T9485] RBP: 00007f44ffe81e19 R08: 0000000000000000 R09: 0000000000000000 [ 173.656585][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.656597][ T9485] R13: 00007f4500026038 R14: 00007f4500025fa0 R15: 00007ffe547fc8e8 [ 173.656614][ T9485] [ 173.656621][ T9485] memory: usage 307200kB, limit 307200kB, failcnt 247 [ 174.008957][ T9485] memory+swap: usage 308724kB, limit 9007199254740988kB, failcnt 0 [ 174.016860][ T9485] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 174.024140][ T9485] Memory cgroup stats for /syz2: [ 174.024377][ T9485] cache 4096 [ 174.032591][ T9485] rss 24576 [ 174.035678][ T9485] shmem 0 [ 174.038585][ T9485] mapped_file 4096 [ 174.042339][ T9485] dirty 0 [ 174.045321][ T9485] writeback 0 [ 174.048583][ T9485] workingset_refault_anon 84 [ 174.053271][ T9485] workingset_refault_file 562 [ 174.058035][ T9485] swap 1560576 [ 174.061448][ T9485] swapcached 32768 [ 174.065195][ T9485] pgpgin 782832 [ 174.068641][ T9485] pgpgout 782823 [ 174.072286][ T9485] pgfault 176076 [ 174.075816][ T9485] pgmajfault 38 [ 174.079291][ T9485] inactive_anon 32768 [ 174.083346][ T9485] active_anon 0 [ 174.086795][ T9485] inactive_file 4096 [ 174.090670][ T9485] active_file 0 [ 174.094150][ T9485] unevictable 0 [ 174.097595][ T9485] hierarchical_memory_limit 314572800 [ 174.102995][ T9485] hierarchical_memsw_limit 9223372036854771712 [ 174.109405][ T9485] total_cache 4096 [ 174.113160][ T9485] total_rss 24576 [ 174.116821][ T9485] total_shmem 0 [ 174.120301][ T9485] total_mapped_file 4096 [ 174.124870][ T9485] total_dirty 0 [ 174.128347][ T9485] total_writeback 0 [ 174.132180][ T9485] total_workingset_refault_anon 84 [ 174.137375][ T9485] total_workingset_refault_file 562 [ 174.142587][ T9485] total_swap 1560576 [ 174.146829][ T9485] total_swapcached 32768 [ 174.151070][ T9485] total_pgpgin 782832 [ 174.155098][ T9485] total_pgpgout 782823 [ 174.159159][ T9485] total_pgfault 176076 [ 174.163229][ T9485] total_pgmajfault 38 [ 174.167195][ T9485] total_inactive_anon 32768 [ 174.171693][ T9485] total_active_anon 0 [ 174.175668][ T9485] total_inactive_file 4096 [ 174.180140][ T9485] total_active_file 0 [ 174.184165][ T9485] total_unevictable 0 [ 174.188172][ T9485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1743,pid=9484,uid=0 [ 174.202816][ T9485] Memory cgroup out of memory: Killed process 9484 (syz.2.1743) total-vm:95680kB, anon-rss:924kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 174.312424][ T9485] syz.2.1743 (9485) used greatest stack depth: 6344 bytes left [ 174.346711][ T9520] wireguard0: entered promiscuous mode [ 174.352321][ T9520] wireguard0: entered allmulticast mode [ 174.434811][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 174.434825][ T29] audit: type=1326 audit(1755232812.283:19475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.464765][ T29] audit: type=1326 audit(1755232812.283:19476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.488390][ T29] audit: type=1326 audit(1755232812.283:19477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.511987][ T29] audit: type=1326 audit(1755232812.283:19478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.535808][ T29] audit: type=1326 audit(1755232812.283:19479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.559367][ T29] audit: type=1326 audit(1755232812.283:19480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.582863][ T29] audit: type=1326 audit(1755232812.283:19481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.606335][ T29] audit: type=1326 audit(1755232812.283:19482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.630263][ T29] audit: type=1326 audit(1755232812.283:19483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.654052][ T29] audit: type=1326 audit(1755232812.283:19484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.3.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 174.749626][ T9535] wg2: entered promiscuous mode [ 174.754833][ T9535] wg2: entered allmulticast mode [ 174.819903][ T9536] IPv6: Can't replace route, no match found [ 174.833031][ T9536] validate_nla: 6 callbacks suppressed [ 174.833049][ T9536] netlink: 'syz.0.1770': attribute type 13 has an invalid length. [ 174.846264][ T9543] IPVS: Error connecting to the multicast addr [ 174.856316][ T9548] __vm_enough_memory: pid: 9548, comm: syz.2.1764, bytes: 21199608320000 not enough memory for the allocation [ 174.878179][ T9536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.957962][ T9563] __nla_validate_parse: 8 callbacks suppressed [ 174.958042][ T9563] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1773'. [ 174.999951][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 175.030456][ T9570] wg2: entered promiscuous mode [ 175.035680][ T9570] wg2: entered allmulticast mode [ 175.049096][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'. [ 175.151861][ T9578] $Hÿ: (slave dummy0): Releasing backup interface [ 175.179053][ T9578] bond1: (slave bridge1): Releasing active interface [ 175.196985][ T9585] netlink: 'syz.1.1781': attribute type 21 has an invalid length. [ 175.220665][ T9588] __vm_enough_memory: pid: 9588, comm: syz.3.1782, bytes: 21199837044736 not enough memory for the allocation [ 175.283784][ T9578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9578 comm=syz.4.1779 [ 175.288329][ T9584] IPVS: Error connecting to the multicast addr [ 175.304618][ T9576] lo speed is unknown, defaulting to 1000 [ 175.366306][ T9600] __vm_enough_memory: pid: 9600, comm: syz.3.1794, bytes: 21199837044736 not enough memory for the allocation [ 175.427008][ T9607] netlink: 'syz.3.1787': attribute type 3 has an invalid length. [ 175.537843][ T9613] IPv6: Can't replace route, no match found [ 175.546016][ T9612] netlink: 'syz.3.1788': attribute type 13 has an invalid length. [ 175.568459][ T9612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.636427][ T9615] wg2: entered promiscuous mode [ 175.641829][ T9615] wg2: entered allmulticast mode [ 175.664222][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 175.684410][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1801'. [ 175.720659][ T9626] lo speed is unknown, defaulting to 1000 [ 175.812313][ T9576] lo speed is unknown, defaulting to 1000 [ 175.840790][ T9576] lo speed is unknown, defaulting to 1000 [ 175.950180][ T9626] lo speed is unknown, defaulting to 1000 [ 175.996979][ T9635] $Hÿ: (slave dummy0): Releasing backup interface [ 176.019069][ T9626] lo speed is unknown, defaulting to 1000 [ 176.065340][ T9635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9635 comm=syz.1.1796 [ 176.278089][ T9643] IPVS: Error connecting to the multicast addr [ 176.332216][ T9646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.364012][ T9649] __vm_enough_memory: pid: 9649, comm: syz.4.1799, bytes: 21200520720384 not enough memory for the allocation [ 176.425921][ T9646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.514733][ T9646] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.595146][ T9646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.650428][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.675317][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.697225][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.716564][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.748292][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1813'. [ 176.759767][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'. [ 176.773799][ T9663] IPv6: Can't replace route, no match found [ 176.786608][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1814'. [ 176.803122][ T9663] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 176.832439][ T9663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.312932][ T9683] rdma_rxe: rxe_newlink: failed to add syz_tun [ 177.430366][ T9685] lo speed is unknown, defaulting to 1000 [ 177.528720][ T9685] lo speed is unknown, defaulting to 1000 [ 177.535344][ T9685] lo speed is unknown, defaulting to 1000 [ 177.908847][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 177.939170][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 178.183968][ T9683] Set syz1 is full, maxelem 65536 reached [ 178.210437][ T9709] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 178.243073][ T9709] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 178.281014][ T9711] wg2: left promiscuous mode [ 178.285639][ T9711] wg2: left allmulticast mode [ 178.308506][ T9711] wg2: entered promiscuous mode [ 178.313574][ T9711] wg2: entered allmulticast mode [ 178.504748][ T9724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.733508][ T9724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.769774][ T9727] netlink: 'syz.2.1820': attribute type 3 has an invalid length. [ 178.792893][ T9717] lo speed is unknown, defaulting to 1000 [ 178.813820][ T9724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.882619][ T9724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.944722][ T6759] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.970466][ T6759] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.996656][ T6759] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.025222][ T6759] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.174603][ T9717] lo speed is unknown, defaulting to 1000 [ 179.200753][ T9717] lo speed is unknown, defaulting to 1000 [ 179.337231][ T9738] random: crng reseeded on system resumption [ 179.519256][ T9741] netlink: 'syz.3.1825': attribute type 10 has an invalid length. [ 179.575635][ T9748] __vm_enough_memory: pid: 9748, comm: syz.0.1837, bytes: 21199926169600 not enough memory for the allocation [ 179.588856][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 179.588870][ T29] audit: type=1326 audit(1755232817.423:20131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.618873][ T29] audit: type=1326 audit(1755232817.423:20132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.642464][ T29] audit: type=1326 audit(1755232817.423:20133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.666155][ T29] audit: type=1326 audit(1755232817.423:20134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.689932][ T29] audit: type=1326 audit(1755232817.423:20135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.713475][ T29] audit: type=1326 audit(1755232817.423:20136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.737207][ T29] audit: type=1326 audit(1755232817.423:20137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.761056][ T29] audit: type=1326 audit(1755232817.423:20138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.784865][ T29] audit: type=1326 audit(1755232817.423:20139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.808454][ T29] audit: type=1326 audit(1755232817.423:20140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 179.833973][ T9755] netlink: '+}[@': attribute type 3 has an invalid length. [ 180.020689][ T9759] lo speed is unknown, defaulting to 1000 [ 180.121574][ T9759] lo speed is unknown, defaulting to 1000 [ 180.128230][ T9759] lo speed is unknown, defaulting to 1000 [ 180.382954][ T9766] rdma_rxe: rxe_newlink: failed to add syz_tun [ 180.394061][ T9763] wg2: left promiscuous mode [ 180.398700][ T9763] wg2: left allmulticast mode [ 180.419164][ T9763] wg2: entered promiscuous mode [ 180.424135][ T9763] wg2: entered allmulticast mode [ 180.603860][ T9776] __nla_validate_parse: 6 callbacks suppressed [ 180.603874][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1845'. [ 180.620023][ T9769] bond0: (slave dummy0): Releasing backup interface [ 180.690525][ T9776] random: crng reseeded on system resumption [ 180.738144][ T9769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9769 comm=syz.2.1833 [ 180.881416][ T9766] Set syz1 is full, maxelem 65536 reached [ 181.006245][ T9794] netlink: 'syz.0.1835': attribute type 3 has an invalid length. [ 181.045825][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1838'. [ 181.056908][ T9798] netlink: 'syz.0.1836': attribute type 3 has an invalid length. [ 181.109723][ T9802] __vm_enough_memory: pid: 9802, comm: syz.3.1841, bytes: 21199837044736 not enough memory for the allocation [ 181.130843][ T9804] netlink: 'syz.0.1842': attribute type 10 has an invalid length. [ 181.141874][ T9804] $Hÿ: (slave dummy0): Releasing backup interface [ 181.150413][ T9804] dummy0: left promiscuous mode [ 181.158375][ T9804] team0: Failed to send options change via netlink (err -105) [ 181.166025][ T9804] team0: Port device dummy0 added [ 181.190237][ T9804] netlink: 'syz.0.1842': attribute type 10 has an invalid length. [ 181.198680][ T9804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.208911][ T9804] team0: Failed to send options change via netlink (err -105) [ 181.217011][ T9804] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.226368][ T9804] team0: Port device dummy0 removed [ 181.234035][ T9804] dummy0: entered promiscuous mode [ 181.239730][ T9804] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 181.316375][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1844'. [ 181.360998][ T9814] loop1: detected capacity change from 0 to 512 [ 181.375420][ T9814] FAT-fs (loop1): error, corrupted file size (i_pos 2306, 2048) [ 181.383202][ T9814] FAT-fs (loop1): Filesystem has been set read-only [ 181.390281][ T9814] FAT-fs (loop1): error, corrupted file size (i_pos 2306, 2048) [ 181.519771][ T9821] netlink: '+}[@': attribute type 3 has an invalid length. [ 181.531377][ T9821] loop1: detected capacity change from 0 to 1024 [ 181.543606][ T9821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.556956][ T9821] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.578350][ T9821] usb usb1: check_ctrlrecip: process 9821 (+}[@) requesting ep 01 but needs 81 [ 181.587460][ T9821] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 181.597169][ T9821] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 15) [ 181.611459][ T9821] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 181.623836][ T9821] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.623836][ T9821] [ 181.699574][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.767497][ T9836] loop1: detected capacity change from 0 to 2048 [ 181.811545][ T3492] loop1: p1 < > p3 p4 [ 181.816519][ T3492] loop1: p3 size 54016 extends beyond EOD, truncated [ 181.823876][ T3492] loop1: p4 start 4294967295 is beyond EOD, truncated [ 181.832858][ T9836] loop1: p1 < > p3 p4 [ 181.837640][ T9836] loop1: p3 size 54016 extends beyond EOD, truncated [ 181.845133][ T9836] loop1: p4 start 4294967295 is beyond EOD, truncated [ 181.914386][ T9839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1854'. [ 181.934343][ T9841] rdma_rxe: rxe_newlink: failed to add syz_tun [ 181.956867][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 182.019081][ T9845] __vm_enough_memory: pid: 9845, comm: syz.4.1856, bytes: 21200520720384 not enough memory for the allocation [ 182.076133][ T9849] netlink: 'syz.4.1857': attribute type 3 has an invalid length. [ 182.129600][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1858'. [ 182.145725][ T9855] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 182.166176][ T9855] $Hÿ: (slave dummy0): Releasing backup interface [ 182.176370][ T9855] dummy0: left promiscuous mode [ 182.183383][ T9855] team0: Failed to send options change via netlink (err -105) [ 182.190907][ T9855] team0: Port device dummy0 added [ 182.220842][ T9855] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 182.229532][ T9855] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.234050][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1871'. [ 182.247674][ T9855] team0: Failed to send options change via netlink (err -105) [ 182.256089][ T9855] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.257566][ T9864] random: crng reseeded on system resumption [ 182.265451][ T9855] team0: Port device dummy0 removed [ 182.278628][ T9855] dummy0: entered promiscuous mode [ 182.284523][ T9855] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 182.519604][ T9874] netlink: '+}[@': attribute type 3 has an invalid length. [ 182.531154][ T9875] netlink: 'syz.0.1874': attribute type 10 has an invalid length. [ 182.552168][ T9875] $Hÿ: (slave dummy0): Releasing backup interface [ 182.563131][ T9875] dummy0: left promiscuous mode [ 182.581322][ T9875] team0: Failed to send options change via netlink (err -105) [ 182.588869][ T9875] team0: Port device dummy0 added [ 182.638719][ T9875] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.651374][ T9875] team0: Failed to send options change via netlink (err -105) [ 182.659274][ T9875] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 182.669735][ T9875] team0: Port device dummy0 removed [ 182.677846][ T9875] dummy0: entered promiscuous mode [ 182.685391][ T9875] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 183.045301][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1868'. [ 183.063573][ T9893] __vm_enough_memory: pid: 9893, comm: syz.3.1869, bytes: 21199837044736 not enough memory for the allocation [ 183.080694][ T9895] loop1: detected capacity change from 0 to 512 [ 183.106655][ T9895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.151336][ T9895] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.189332][ T9899] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.254893][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.816631][ T9926] lo speed is unknown, defaulting to 1000 [ 183.817204][ T9904] Set syz1 is full, maxelem 65536 reached [ 183.906643][ T9933] team0: Failed to send options change via netlink (err -105) [ 183.914275][ T9933] team0: Port device dummy0 added [ 183.950025][ T9926] lo speed is unknown, defaulting to 1000 [ 183.963642][ T9926] lo speed is unknown, defaulting to 1000 [ 183.984388][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1881'. [ 184.009624][ T9933] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.020833][ T9933] team0: Failed to send options change via netlink (err -105) [ 184.028418][ T9933] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.037327][ T9933] team0: Port device dummy0 removed [ 184.045068][ T9933] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.068825][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1882'. [ 184.090323][ T9945] __vm_enough_memory: pid: 9945, comm: syz.2.1883, bytes: 21199608320000 not enough memory for the allocation [ 184.148521][ T9949] bond0: (slave dummy0): Releasing backup interface [ 184.159210][ T9949] team0: Failed to send options change via netlink (err -105) [ 184.166769][ T9949] team0: Port device dummy0 added [ 184.193772][ T9949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.205079][ T9949] team0: Failed to send options change via netlink (err -105) [ 184.212889][ T9949] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 184.222468][ T9949] team0: Port device dummy0 removed [ 184.229790][ T9949] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 185.385058][ T9968] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.543838][ T9971] $Hÿ: (slave dummy0): Releasing backup interface [ 185.564907][ T9971] dummy0: left promiscuous mode [ 185.635539][ T9978] rdma_rxe: rxe_newlink: failed to add syz_tun [ 185.661407][ T9966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9966 comm=syz.0.1900 [ 185.719494][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 185.719508][ T29] audit: type=1326 audit(1755232823.563:20311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.724260][ T9985] __vm_enough_memory: pid: 9985, comm: syz.0.1897, bytes: 21199926169600 not enough memory for the allocation [ 185.751182][ T29] audit: type=1326 audit(1755232823.563:20312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.784786][ T29] audit: type=1326 audit(1755232823.563:20313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.808321][ T29] audit: type=1326 audit(1755232823.573:20314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.831802][ T29] audit: type=1326 audit(1755232823.573:20315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.855390][ T29] audit: type=1326 audit(1755232823.573:20316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.878901][ T29] audit: type=1326 audit(1755232823.573:20317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.902681][ T29] audit: type=1326 audit(1755232823.573:20318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.926185][ T29] audit: type=1326 audit(1755232823.573:20319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 185.949763][ T29] audit: type=1326 audit(1755232823.573:20320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 186.104377][ T9990] validate_nla: 5 callbacks suppressed [ 186.104393][ T9990] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 186.182282][ T9990] team0: Port device dummy0 added [ 186.323099][ T9990] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 186.411892][ T9990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.439743][ T9990] team0: Failed to send options change via netlink (err -105) [ 186.447643][ T9990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 186.466873][ T9990] team0: Port device dummy0 removed [ 186.529647][ T9990] dummy0: entered promiscuous mode [ 186.536699][ T9990] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 186.863798][ T9978] Set syz1 is full, maxelem 65536 reached [ 187.037991][T10020] loop1: detected capacity change from 0 to 2048 [ 187.091693][ T3492] loop1: p1 < > p3 p4 [ 187.105940][ T3492] loop1: p3 size 54016 extends beyond EOD, truncated [ 187.114596][ T3492] loop1: p4 start 4294967295 is beyond EOD, truncated [ 187.182256][T10022] __vm_enough_memory: pid: 10022, comm: syz.4.1909, bytes: 21200520720384 not enough memory for the allocation [ 187.203688][T10024] __vm_enough_memory: pid: 10024, comm: syz.2.1908, bytes: 21199608320000 not enough memory for the allocation [ 187.398361][T10028] lo speed is unknown, defaulting to 1000 [ 187.419820][T10020] loop1: p1 < > p3 p4 [ 187.424915][T10020] loop1: p3 size 54016 extends beyond EOD, truncated [ 187.433508][T10020] loop1: p4 start 4294967295 is beyond EOD, truncated [ 187.483648][T10028] lo speed is unknown, defaulting to 1000 [ 187.489862][T10028] lo speed is unknown, defaulting to 1000 [ 187.648038][T10043] netlink: 'syz.2.1922': attribute type 27 has an invalid length. [ 187.667481][T10043] 0ªî{X¹¦: left allmulticast mode [ 187.667507][T10042] loop1: detected capacity change from 0 to 512 [ 187.836236][T10045] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 187.867208][T10042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.880513][T10043] wg2: left promiscuous mode [ 187.885155][T10043] wg2: left allmulticast mode [ 187.913868][T10043] hsr0: left promiscuous mode [ 187.923896][T10043] vlan0: left promiscuous mode [ 187.938425][ T3357] lo speed is unknown, defaulting to 1000 [ 187.941454][T10042] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 187.944268][ T3357] syz0: Port: 1 Link DOWN [ 187.958018][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.966476][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.981658][T10042] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 187.990571][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.999274][ T59] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.017839][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.523501][T10058] __nla_validate_parse: 1 callbacks suppressed [ 188.523517][T10058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1916'. [ 188.566387][T10061] loop1: detected capacity change from 0 to 4096 [ 188.597958][T10061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.655898][T10072] lo speed is unknown, defaulting to 1000 [ 188.718863][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.805228][T10085] __vm_enough_memory: pid: 10085, comm: syz.1.1921, bytes: 21200292425728 not enough memory for the allocation [ 188.881773][T10072] lo speed is unknown, defaulting to 1000 [ 188.905531][T10072] lo speed is unknown, defaulting to 1000 [ 190.099107][T10102] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1925'. [ 190.353829][T10116] __vm_enough_memory: pid: 10116, comm: syz.4.1934, bytes: 21200520720384 not enough memory for the allocation [ 190.379277][T10126] netlink: 'syz.3.1939': attribute type 27 has an invalid length. [ 190.436938][T10134] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1942'. [ 190.456396][T10136] __vm_enough_memory: pid: 10136, comm: syz.2.1952, bytes: 21199608320000 not enough memory for the allocation [ 190.464814][T10141] tmpfs: Bad value for 'mpol' [ 190.501258][T10144] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 190.519573][T10126] wg2: left promiscuous mode [ 190.524497][T10126] wg2: left allmulticast mode [ 190.583349][T10126] vlan0: left promiscuous mode [ 190.615254][T10126] veth3: left promiscuous mode [ 190.620079][T10126] veth3: left allmulticast mode [ 190.661208][T10137] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 190.682542][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.709541][T10137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.731186][ T3382] syz1: Port: 1 Link DOWN [ 190.735695][ T310] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.774921][ T310] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.783468][T10163] lo speed is unknown, defaulting to 1000 [ 190.800874][ T310] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.814973][T10159] loop1: detected capacity change from 0 to 256 [ 190.822059][ T310] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.846819][T10159] vfat: Unknown parameter '(öƒ±Jì’6µa0 B®|' [ 190.975218][T10163] lo speed is unknown, defaulting to 1000 [ 190.987998][T10163] lo speed is unknown, defaulting to 1000 [ 191.037918][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 191.062222][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1959'. [ 191.443418][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1960'. [ 191.464168][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 191.464183][ T29] audit: type=1326 audit(1755232829.313:20448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.494249][ T29] audit: type=1326 audit(1755232829.313:20449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.519716][T10193] random: crng reseeded on system resumption [ 191.521942][T10192] __vm_enough_memory: pid: 10192, comm: syz.2.1961, bytes: 21199608320000 not enough memory for the allocation [ 191.543917][ T29] audit: type=1326 audit(1755232829.363:20450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.567553][ T29] audit: type=1326 audit(1755232829.363:20451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.591160][ T29] audit: type=1326 audit(1755232829.363:20452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.614807][ T29] audit: type=1326 audit(1755232829.363:20453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.638797][ T29] audit: type=1326 audit(1755232829.363:20454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.662426][ T29] audit: type=1326 audit(1755232829.363:20455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.686116][ T29] audit: type=1326 audit(1755232829.363:20456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.709606][ T29] audit: type=1326 audit(1755232829.363:20457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10191 comm="syz.2.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 191.757405][T10214] netlink: 'syz.4.1982': attribute type 32 has an invalid length. [ 191.818255][T10220] __vm_enough_memory: pid: 10220, comm: syz.2.1973, bytes: 21199608320000 not enough memory for the allocation [ 191.902368][T10234] lo speed is unknown, defaulting to 1000 [ 191.984128][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1987'. [ 191.995080][T10234] lo speed is unknown, defaulting to 1000 [ 192.001507][T10234] lo speed is unknown, defaulting to 1000 [ 192.033072][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1989'. [ 192.061940][T10263] __vm_enough_memory: pid: 10263, comm: syz.3.1993, bytes: 21199837044736 not enough memory for the allocation [ 192.156852][T10272] __vm_enough_memory: pid: 10272, comm: syz.3.2005, bytes: 21199837044736 not enough memory for the allocation [ 192.262580][T10280] loop1: detected capacity change from 0 to 1024 [ 192.270484][T10280] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.289848][T10280] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1999: Invalid block bitmap block 0 in block_group 0 [ 192.319903][T10280] EXT4-fs (loop1): Remounting filesystem read-only [ 192.326792][T10280] EXT4-fs (loop1): 1 orphan inode deleted [ 192.333266][T10280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.698931][T10300] __vm_enough_memory: pid: 10300, comm: syz.0.2006, bytes: 21199926169600 not enough memory for the allocation [ 192.735623][T10302] __vm_enough_memory: pid: 10302, comm: syz.0.2007, bytes: 21199926169600 not enough memory for the allocation [ 192.780466][T10304] __vm_enough_memory: pid: 10304, comm: syz.0.2008, bytes: 21199926169600 not enough memory for the allocation [ 192.831382][T10313] netlink: 'syz.0.2012': attribute type 27 has an invalid length. [ 192.853497][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 192.862548][T10313] 0ªî{X¹¦: left allmulticast mode [ 192.892144][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 192.951060][T10320] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 193.001600][T10313] $Hÿ: left promiscuous mode [ 193.006390][T10313] dummy0: left promiscuous mode [ 193.035539][T10313] wg2: left promiscuous mode [ 193.040239][T10313] wg2: left allmulticast mode [ 193.060857][T10317] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 193.069487][T10317] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.079313][T10317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.306682][T10338] lo speed is unknown, defaulting to 1000 [ 193.363492][T10338] lo speed is unknown, defaulting to 1000 [ 193.369757][T10338] lo speed is unknown, defaulting to 1000 [ 193.652828][T10349] __vm_enough_memory: pid: 10349, comm: syz.4.2018, bytes: 21200520720384 not enough memory for the allocation [ 193.686630][T10351] __vm_enough_memory: pid: 10351, comm: syz.2.2019, bytes: 21199608320000 not enough memory for the allocation [ 193.757190][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2020'. [ 194.561944][T10359] __vm_enough_memory: pid: 10359, comm: syz.2.2023, bytes: 21199608320000 not enough memory for the allocation [ 194.575132][T10361] __vm_enough_memory: pid: 10361, comm: syz.0.2033, bytes: 21199926169600 not enough memory for the allocation [ 194.688701][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2030'. [ 194.708376][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2034'. [ 194.717928][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 195.251073][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.263413][T10383] __vm_enough_memory: pid: 10383, comm: syz.4.2036, bytes: 21200520720384 not enough memory for the allocation [ 195.295842][T10385] loop1: detected capacity change from 0 to 2048 [ 195.302899][T10385] FAT-fs (loop1): bogus logical sector size 0 [ 195.309181][T10385] FAT-fs (loop1): Can't find a valid FAT filesystem [ 195.454880][T10407] __vm_enough_memory: pid: 10407, comm: syz.4.2047, bytes: 21200520720384 not enough memory for the allocation [ 195.469525][T10408] __vm_enough_memory: pid: 10408, comm: syz.1.2043, bytes: 21200292425728 not enough memory for the allocation [ 195.700566][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 195.713875][T10444] random: crng reseeded on system resumption [ 195.725272][T10447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2062'. [ 195.743450][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2062'. [ 195.758885][T10455] 9pnet_fd: Insufficient options for proto=fd [ 195.804674][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 195.879336][T10477] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 195.899215][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'. [ 195.934720][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2083'. [ 196.135120][T10520] IPVS: length: 128 != 8 [ 196.370035][T10560] ./file0: Can't lookup blockdev [ 196.390510][T10563] tmpfs: Unknown parameter 'smackfshat' [ 196.519876][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 196.519944][ T29] audit: type=1326 audit(1755232834.363:20908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.549806][ T29] audit: type=1326 audit(1755232834.363:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.573545][ T29] audit: type=1326 audit(1755232834.363:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.597108][ T29] audit: type=1326 audit(1755232834.363:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.620745][ T29] audit: type=1326 audit(1755232834.363:20912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.657202][ T29] audit: type=1326 audit(1755232834.363:20913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.681046][ T29] audit: type=1326 audit(1755232834.363:20914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.705080][ T29] audit: type=1326 audit(1755232834.363:20915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.728762][ T29] audit: type=1326 audit(1755232834.363:20916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 196.752319][ T29] audit: type=1326 audit(1755232834.363:20917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10587 comm="syz.3.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67ba33ebe9 code=0x7ffc0000 [ 197.225349][T10664] loop1: detected capacity change from 0 to 164 [ 197.236434][T10664] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 197.262386][T10666] netlink: 'syz.1.2169': attribute type 3 has an invalid length. [ 197.474672][T10679] netlink: 'syz.1.2175': attribute type 27 has an invalid length. [ 197.706210][T10704] veth5: entered promiscuous mode [ 197.711389][T10704] veth5: entered allmulticast mode [ 197.763571][T10711] __vm_enough_memory: 18 callbacks suppressed [ 197.763584][T10711] __vm_enough_memory: pid: 10711, comm: syz.1.2185, bytes: 21200292425728 not enough memory for the allocation [ 197.785084][T10717] __vm_enough_memory: pid: 10717, comm: syz.3.2192, bytes: 21199837044736 not enough memory for the allocation [ 197.977874][T10746] __vm_enough_memory: pid: 10746, comm: syz.2.2206, bytes: 21199608320000 not enough memory for the allocation [ 198.001666][T10750] usb usb1: usbfs: process 10750 (syz.1.2208) did not claim interface 0 before use [ 198.127741][T10770] __vm_enough_memory: pid: 10770, comm: syz.1.2214, bytes: 21200292425728 not enough memory for the allocation [ 198.215278][T10782] __vm_enough_memory: pid: 10782, comm: syz.2.2223, bytes: 21199608320000 not enough memory for the allocation [ 198.360030][T10806] __vm_enough_memory: pid: 10806, comm: syz.2.2235, bytes: 21199608320000 not enough memory for the allocation [ 198.429980][T10814] netlink: 'syz.2.2239': attribute type 30 has an invalid length. [ 198.436304][T10815] __vm_enough_memory: pid: 10815, comm: syz.1.2236, bytes: 21200292425728 not enough memory for the allocation [ 198.513954][T10825] netlink: 'syz.2.2244': attribute type 21 has an invalid length. [ 198.655309][T10841] __vm_enough_memory: pid: 10841, comm: syz.1.2248, bytes: 21200292425728 not enough memory for the allocation [ 198.710971][T10847] hsr_slave_0: left promiscuous mode [ 198.740735][T10847] hsr_slave_1: left promiscuous mode [ 198.747890][T10851] tmpfs: Bad value for 'mpol' [ 198.837117][T10857] __vm_enough_memory: pid: 10857, comm: syz.3.2259, bytes: 21199837044736 not enough memory for the allocation [ 199.002864][T10873] __nla_validate_parse: 16 callbacks suppressed [ 199.002879][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 199.022545][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 199.035160][T10874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2265'. [ 199.099513][T10892] __vm_enough_memory: pid: 10892, comm: syz.0.2276, bytes: 21199926169600 not enough memory for the allocation [ 199.348188][T10933] netlink: 'syz.1.2294': attribute type 22 has an invalid length. [ 199.356152][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 199.371979][T10937] netlink: 270 bytes leftover after parsing attributes in process `syz.2.2296'. [ 199.394067][T10940] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2307'. [ 199.409351][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 199.684907][T10987] netlink: 'syz.2.2321': attribute type 8 has an invalid length. [ 199.744318][T11001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.760059][T10999] netlink: 'syz.0.2327': attribute type 21 has an invalid length. [ 199.769544][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'. [ 199.778761][T10999] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 199.820097][T11003] 0ªî{X¹¦: left allmulticast mode [ 199.869143][T11019] netlink: 'syz.3.2338': attribute type 19 has an invalid length. [ 199.877018][T11019] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2338'. [ 199.894107][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 199.936265][T11003] wg2: left promiscuous mode [ 199.940983][T11003] wg2: left allmulticast mode [ 199.978536][T11003] hsr0: left promiscuous mode [ 199.992893][ T23] lo speed is unknown, defaulting to 1000 [ 199.998658][ T23] sz1: Port: 1 Link DOWN [ 200.003148][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.030036][ T3410] lo speed is unknown, defaulting to 1000 [ 200.036204][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.045047][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.054105][ T51] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.227931][T11079] netlink: 'syz.0.2366': attribute type 3 has an invalid length. [ 200.254419][T11082] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 200.426017][T11096] loop1: detected capacity change from 0 to 512 [ 200.435175][T11096] journal_path: Lookup failure for './file0/../file0' [ 200.442065][T11096] EXT4-fs: error: could not find journal device path [ 200.931195][T11160] bond0: (slave dummy0): Releasing backup interface [ 200.947204][T11160] team0: Port device dummy0 added [ 200.983304][T11166] vlan0: entered promiscuous mode [ 201.140110][T11200] 9pnet_fd: Insufficient options for proto=fd [ 201.533124][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 201.533138][ T29] audit: type=1326 audit(1755232839.373:21670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.2.2452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ffdfebe9 code=0x7ffc0000 [ 201.598644][ T29] audit: type=1400 audit(1755232839.443:21671): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.622992][ T29] audit: type=1400 audit(1755232839.443:21672): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.647240][ T29] audit: type=1400 audit(1755232839.443:21673): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.719859][ T29] audit: type=1400 audit(1755232839.563:21674): avc: denied { prog_load } for pid=11267 comm="syz.2.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.739257][ T29] audit: type=1400 audit(1755232839.563:21675): avc: denied { bpf } for pid=11267 comm="syz.2.2458" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.760001][ T29] audit: type=1400 audit(1755232839.563:21676): avc: denied { perfmon } for pid=11267 comm="syz.2.2458" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.809177][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.836029][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.854920][ T29] audit: type=1400 audit(1755232839.573:21677): avc: denied { prog_run } for pid=11267 comm="syz.2.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.874247][ T29] audit: type=1400 audit(1755232839.593:21678): avc: denied { map_create } for pid=11270 comm="syz.4.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.893638][ T29] audit: type=1400 audit(1755232839.593:21679): avc: denied { map_read map_write } for pid=11270 comm="syz.4.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.925244][T11285] ÿÿÿÿÿÿ: renamed from vlan1 [ 202.307617][T11346] validate_nla: 4 callbacks suppressed [ 202.307632][T11346] netlink: 'syz.0.2495': attribute type 6 has an invalid length. [ 202.484438][T11378] netlink: 'syz.1.2511': attribute type 10 has an invalid length. [ 202.498617][T11378] team0: Port device geneve1 added [ 202.504626][ T6759] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.519895][ T6759] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.543947][ T6759] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.553633][ T6759] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.575750][T11394] loop1: detected capacity change from 0 to 512 [ 202.602396][T11394] EXT4-fs (loop1): too many log groups per flexible block group [ 202.610407][T11394] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 202.622939][T11394] EXT4-fs (loop1): mount failed [ 202.809250][T11433] __vm_enough_memory: 31 callbacks suppressed [ 202.809262][T11433] __vm_enough_memory: pid: 11433, comm: syz.1.2533, bytes: 21200292425728 not enough memory for the allocation [ 202.856393][T11441] tmpfs: Bad value for 'mpol' [ 202.870074][T11440] __vm_enough_memory: pid: 11440, comm: syz.0.2540, bytes: 21199926169600 not enough memory for the allocation [ 202.961452][T11457] netlink: 'syz.4.2549': attribute type 11 has an invalid length. [ 203.054855][T11475] __vm_enough_memory: pid: 11475, comm: syz.2.2558, bytes: 21199608320000 not enough memory for the allocation [ 203.109051][T11480] random: crng reseeded on system resumption [ 203.157820][T11494] veth1_to_team: entered allmulticast mode [ 203.163937][T11494] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 203.184350][T11495] __vm_enough_memory: pid: 11495, comm: syz.4.2566, bytes: 21200520720384 not enough memory for the allocation [ 203.239122][T11503] __vm_enough_memory: pid: 11503, comm: syz.2.2570, bytes: 21199608320000 not enough memory for the allocation [ 203.328536][T11521] __vm_enough_memory: pid: 11521, comm: syz.4.2579, bytes: 21200520720384 not enough memory for the allocation [ 203.417357][T11533] __vm_enough_memory: pid: 11533, comm: syz.4.2585, bytes: 21200520720384 not enough memory for the allocation [ 203.509401][T11546] __vm_enough_memory: pid: 11546, comm: syz.3.2591, bytes: 21199837044736 not enough memory for the allocation [ 203.580577][T11558] __vm_enough_memory: pid: 11558, comm: syz.4.2598, bytes: 21200520720384 not enough memory for the allocation [ 203.653406][T11573] __vm_enough_memory: pid: 11573, comm: syz.4.2605, bytes: 21200520720384 not enough memory for the allocation [ 203.708811][T11585] netlink: 'syz.4.2611': attribute type 5 has an invalid length. [ 203.733248][T11591] ip6erspan0: entered allmulticast mode [ 203.932484][T11632] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 204.012782][T11641] netlink: 'syz.2.2638': attribute type 3 has an invalid length. [ 204.036151][T11643] __nla_validate_parse: 30 callbacks suppressed [ 204.036165][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2636'. [ 204.083467][T11647] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2640'. [ 204.102608][T11647] bridge_slave_0: entered allmulticast mode [ 204.108599][T11647] netlink: 'syz.4.2640': attribute type 3 has an invalid length. [ 204.162614][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'. [ 204.181529][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2641'. [ 204.250303][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 204.259420][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2648'. [ 204.409054][T11696] mmap: syz.4.2664 (11696): VmData 29093888 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 204.682860][T11740] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2685'. [ 204.753815][T11754] netlink: 'syz.1.2691': attribute type 13 has an invalid length. [ 204.774215][T11754] 0ªî{X¹¦: refused to change device tx_queue_len [ 204.782773][T11754] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 204.798680][ T3382] lo speed is unknown, defaulting to 1000 [ 204.804535][ T3382] sz1: Port: 1 Link ACTIVE [ 204.810174][ T3382] lo speed is unknown, defaulting to 1000 [ 205.045861][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2709'. [ 205.147603][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2721'. [ 205.170604][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'. [ 205.727925][T11912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.736568][T11912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.257050][T11917] futex_wake_op: syz.1.2769 tries to shift op by -1; fix this program [ 206.284571][T11921] netlink: 'syz.1.2770': attribute type 27 has an invalid length. [ 206.307667][ T3410] lo speed is unknown, defaulting to 1000 [ 206.313524][ T3410] sz1: Port: 1 Link DOWN [ 206.319885][ T310] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.339754][T11921] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 206.348038][T11921] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.357590][T11921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.374261][ T3410] lo speed is unknown, defaulting to 1000 [ 206.382816][T11927] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 206.397768][ T310] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.408558][ T6759] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.417295][ T36] lo speed is unknown, defaulting to 1000 [ 206.423127][ T36] sz1: Port: 1 Link ACTIVE [ 206.425656][ T6759] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.129286][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 207.129308][ T29] audit: type=1400 audit(1755232844.973:22492): avc: denied { connect } for pid=11936 comm="syz.1.2774" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.173864][ T29] audit: type=1400 audit(1755232845.003:22493): avc: denied { execmem } for pid=11933 comm="syz.4.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.282025][ T29] audit: type=1400 audit(1755232845.113:22494): avc: denied { sys_module } for pid=11934 comm="syz.0.2784" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.805955][ T29] audit: type=1326 audit(1755232845.653:22495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.829652][ T29] audit: type=1326 audit(1755232845.653:22496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.853334][ T29] audit: type=1326 audit(1755232845.653:22497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.876964][ T29] audit: type=1326 audit(1755232845.653:22498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.900831][ T29] audit: type=1326 audit(1755232845.653:22499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.924472][ T29] audit: type=1326 audit(1755232845.653:22500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 207.936611][T11961] __vm_enough_memory: 20 callbacks suppressed [ 207.936624][T11961] __vm_enough_memory: pid: 11961, comm: syz.0.2782, bytes: 21199926169600 not enough memory for the allocation [ 207.948037][ T29] audit: type=1326 audit(1755232845.653:22501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11954 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65febfebe9 code=0x7ffc0000 [ 208.099176][T11970] __vm_enough_memory: pid: 11970, comm: syz.0.2787, bytes: 21199926169600 not enough memory for the allocation [ 208.143794][T11974] netlink: 'syz.1.2788': attribute type 27 has an invalid length. [ 208.190840][ T23] lo speed is unknown, defaulting to 1000 [ 208.196687][ T23] sz1: Port: 1 Link DOWN [ 208.221546][ T23] lo speed is unknown, defaulting to 1000 [ 208.273447][T11974] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 208.291491][T11974] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.292851][T11979] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 208.308916][T11947] ================================================================== [ 208.317023][T11947] BUG: KCSAN: data-race in touch_atime / touch_atime [ 208.323719][T11947] [ 208.326039][T11947] write to 0xffff88811e6e29a0 of 4 bytes by task 11951 on cpu 1: [ 208.333743][T11947] touch_atime+0x1e8/0x340 [ 208.338179][T11947] shmem_file_splice_read+0x5b1/0x600 [ 208.343564][T11947] splice_direct_to_actor+0x26c/0x680 [ 208.348947][T11947] do_splice_direct+0xda/0x150 [ 208.353726][T11947] do_sendfile+0x380/0x650 [ 208.358163][T11947] __x64_sys_sendfile64+0x105/0x150 [ 208.363379][T11947] x64_sys_call+0x2bb0/0x2ff0 [ 208.368062][T11947] do_syscall_64+0xd2/0x200 [ 208.372577][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.378464][T11947] [ 208.380773][T11947] read to 0xffff88811e6e29a0 of 4 bytes by task 11947 on cpu 0: [ 208.388478][T11947] touch_atime+0x194/0x340 [ 208.392899][T11947] shmem_file_splice_read+0x5b1/0x600 [ 208.398270][T11947] splice_direct_to_actor+0x26c/0x680 [ 208.403634][T11947] do_splice_direct+0xda/0x150 [ 208.408390][T11947] do_sendfile+0x380/0x650 [ 208.412811][T11947] __x64_sys_sendfile64+0x105/0x150 [ 208.418010][T11947] x64_sys_call+0x2bb0/0x2ff0 [ 208.422677][T11947] do_syscall_64+0xd2/0x200 [ 208.427178][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.433144][T11947] [ 208.435447][T11947] value changed: 0x07eeabd3 -> 0x091fd8d3 [ 208.441151][T11947] [ 208.443460][T11947] Reported by Kernel Concurrency Sanitizer on: [ 208.449606][T11947] CPU: 0 UID: 0 PID: 11947 Comm: syz.3.2778 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 208.463658][T11947] Tainted: [W]=WARN [ 208.467443][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.477484][T11947] ================================================================== [ 208.500837][T11974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.516641][ T3410] lo speed is unknown, defaulting to 1000 [ 208.522440][ T3410] sz1: Port: 1 Link ACTIVE [ 208.527108][ T3410] lo speed is unknown, defaulting to 1000