last executing test programs: 3m35.140356202s ago: executing program 0 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m34.56903732s ago: executing program 0 (id=655): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) eventfd(0x6) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) 3m34.418012857s ago: executing program 0 (id=657): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012100800083a00fe8000000000000000000000000000bbfe800000000004"], 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 3m34.065188415s ago: executing program 0 (id=668): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x24ffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 3m33.159752668s ago: executing program 0 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r2, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 3m32.214115735s ago: executing program 0 (id=696): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c80)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xdeb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000680)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe4IH\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\x96\x9ch\xbc\xedi\x99\xf8\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="98"], 0x98}, 0x4000000) 2m43.566237615s ago: executing program 3 (id=1336): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m43.545670176s ago: executing program 33 (id=1336): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.85498845s ago: executing program 5 (id=3109): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xe}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r2, 0x50487, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}}}]}, 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtclass={0x24, 0x28, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffff}, {0x6, 0xfff3}, {0x6, 0x8}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.725244267s ago: executing program 5 (id=3113): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f0000000740)=""/4096}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 2.685119678s ago: executing program 1 (id=3114): r0 = gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000"], 0x164}, 0x1, 0x0, 0x0, 0x400081c}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 2.684037878s ago: executing program 6 (id=3115): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_usb_connect(0x3, 0x48, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.336567405s ago: executing program 5 (id=3117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2.117207476s ago: executing program 5 (id=3120): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.111513496s ago: executing program 1 (id=3121): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210002, &(0x7f0000000780)={[{@dioread_nolock}, {@noload}, {@noblock_validity}, {@nombcache}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") 2.015125961s ago: executing program 5 (id=3122): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041000000", @ANYRES32, @ANYBLOB], 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 1.316112146s ago: executing program 4 (id=3124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.263627618s ago: executing program 2 (id=3125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) readv(r3, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.059376428s ago: executing program 6 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x2, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.055747348s ago: executing program 5 (id=3127): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 951.402233ms ago: executing program 2 (id=3128): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 951.012973ms ago: executing program 1 (id=3129): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffc, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x44}, @multicast2, 0xffffff00, 0x0, 'bond_slave_1\x00', 'wg0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0x7, 0x1ff, 0x5, 0x20000000, 0x6, 0xf, 0x4]}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x148, 0x5, 0x1}}, @common=@icmp={{0x28}, {0x15, 'fY', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x3, 0x0, 0x2, 0x0, 0x5], 0x1}, {0x0, [0x3, 0x7, 0x0, 0x4, 0x0, 0x6], 0x6, 0x7}}}}, {{@ip={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff000000, 'bridge_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x8, 0x1, 0xa}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xa, 0x80000000, 0xc0000, 0x8, 0x8, 0xa05, 0x5]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x30, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 915.169325ms ago: executing program 2 (id=3130): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2, 0x0, 0xfffe}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000002a00)=""/4096, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 914.906935ms ago: executing program 6 (id=3131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) unshare(0x22020600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 854.107638ms ago: executing program 4 (id=3132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000400), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) getsockname$packet(r2, 0x0, &(0x7f0000000340)) 843.652228ms ago: executing program 1 (id=3133): r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4810) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 749.064873ms ago: executing program 1 (id=3134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 692.785656ms ago: executing program 4 (id=3135): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 486.723156ms ago: executing program 1 (id=3136): unshare(0x6a040000) inotify_init1(0x80000) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 389.019721ms ago: executing program 4 (id=3137): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000240)=0x1, 0x4) gettid() 370.521602ms ago: executing program 6 (id=3138): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 312.909404ms ago: executing program 4 (id=3139): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 312.661524ms ago: executing program 6 (id=3140): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 311.953005ms ago: executing program 2 (id=3141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r3, 0x25, 0x4, @val=@tcx}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r2}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 155.081962ms ago: executing program 4 (id=3142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 38.068858ms ago: executing program 2 (id=3143): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db91"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 37.857958ms ago: executing program 6 (id=3144): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=3145): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c231, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x2, 0xfb3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) kernel console output (not intermixed with test programs): ompat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.636233][ T28] audit: type=1326 audit(1773920859.251:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.666360][ T9124] Memory cgroup out of memory: Killed process 9124 (syz.1.1762) total-vm:94164kB, anon-rss:1404kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 166.728558][ T28] audit: type=1326 audit(1773920859.251:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.802346][ T28] audit: type=1326 audit(1773920859.251:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.863983][ T28] audit: type=1326 audit(1773920859.251:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.898153][ T28] audit: type=1326 audit(1773920859.251:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 166.906583][ T9173] lo speed is unknown, defaulting to 1000 [ 167.320571][ T9194] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.353311][ T9194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 39834 - 0 [ 167.389396][ T9194] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.467468][ T9194] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.477750][ T9194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 39834 - 0 [ 167.488441][ T9194] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.547576][ T9194] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.565417][ T9194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 39834 - 0 [ 167.581933][ T9194] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.648141][ T9194] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.693683][ T9194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 39834 - 0 [ 167.727644][ T9194] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.832766][ T264] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.841338][ T264] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 39834 - 0 [ 167.854449][ T264] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.889349][ T2261] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.916529][ T2261] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 39834 - 0 [ 167.947715][ T2261] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 167.991901][ T2261] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.029809][ T2261] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 39834 - 0 [ 168.055337][ T2261] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.102805][ T2261] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.125049][ T2261] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 39834 - 0 [ 168.143890][ T2261] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.545913][ T9183] syz.4.1783 (9183) used greatest stack depth: 7216 bytes left [ 169.226008][ T9265] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 169.323771][ T9265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.481400][ T9273] bond4: (slave veth5): Enslaving as an active interface with a down link [ 169.527635][ T9276] bond4: (slave dummy0): making interface the new active one [ 169.536970][ T9276] dummy0: entered promiscuous mode [ 169.542303][ T9276] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 169.573526][ T9272] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.609885][ T9265] bond4 (unregistering): (slave veth5): Releasing active interface [ 169.667160][ T9265] bond4 (unregistering): (slave dummy0): Releasing active interface [ 169.792416][ T9265] bond4 (unregistering): Released all slaves [ 169.803221][ T9272] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.914906][ T9272] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.958866][ T9272] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.037585][ T1883] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.062158][ T1883] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.076545][ T1883] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.106325][ T1883] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.128902][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1828'. [ 170.144006][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1828'. [ 170.185898][ T9295] netlink: 'syz.6.1828': attribute type 10 has an invalid length. [ 170.794402][ T9318] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 170.842038][ T9318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.948725][ T9318] bond2: (slave dummy0): making interface the new active one [ 170.967060][ T9318] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 170.999897][ T9318] bond2 (unregistering): (slave dummy0): Releasing active interface [ 171.053130][ T9318] bond2 (unregistering): Released all slaves [ 171.219952][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 171.219973][ T28] audit: type=1400 audit(1773920864.301:5886): avc: denied { getopt } for pid=9346 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.247625][ T28] audit: type=1400 audit(1773920864.331:5887): avc: denied { bind } for pid=9346 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.326760][ T9349] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1848'. [ 171.749359][ T9357] lo speed is unknown, defaulting to 1000 [ 172.261560][ T9371] loop5: detected capacity change from 0 to 512 [ 172.324962][ T9371] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.387524][ T9371] EXT4-fs (loop5): 1 truncate cleaned up [ 172.409708][ T9371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.790347][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.832754][ T9385] loop5: detected capacity change from 0 to 1024 [ 172.858323][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1862'. [ 172.877536][ T9385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.920181][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1863'. [ 173.018687][ T28] audit: type=1400 audit(1773920866.101:5888): avc: denied { setattr } for pid=9384 comm="syz.5.1860" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.051458][ T9385] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.1860: Allocating blocks 497-513 which overlap fs metadata [ 173.076080][ T9385] EXT4-fs (loop5): Remounting filesystem read-only [ 173.122584][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1864'. [ 173.135780][ T9384] EXT4-fs (loop5): pa ffff8881089fee00: logic 304, phys. 433, len 5 [ 173.234467][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.719473][ T28] audit: type=1326 audit(1773920866.801:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.778105][ T28] audit: type=1326 audit(1773920866.801:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.843382][ T28] audit: type=1326 audit(1773920866.801:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.868516][ T28] audit: type=1326 audit(1773920866.801:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.892293][ T28] audit: type=1326 audit(1773920866.821:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.916249][ T28] audit: type=1326 audit(1773920866.821:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 173.940260][ T28] audit: type=1326 audit(1773920866.821:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9414 comm="syz.5.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 175.256941][ T9477] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1897'. [ 175.342319][ T9481] netlink: 'syz.2.1894': attribute type 11 has an invalid length. [ 175.370139][ T9472] loop6: detected capacity change from 0 to 512 [ 175.429459][ T9472] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.504979][ T9472] EXT4-fs (loop6): 1 truncate cleaned up [ 175.552056][ T9472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.073459][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.478504][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 176.478601][ T28] audit: type=1400 audit(1773920869.561:5920): avc: denied { wake_alarm } for pid=9506 comm="syz.1.1909" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.646557][ T9484] syz.5.1911 (9484) used greatest stack depth: 5880 bytes left [ 176.785102][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 177.187818][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1919'. [ 177.282757][ T9507] kexec: Could not allocate control_code_buffer [ 177.572245][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1922'. [ 177.696652][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 177.991746][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'. [ 178.089237][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 178.121639][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 178.208491][ T9568] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1932'. [ 178.236281][ T9568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.502321][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 179.756687][ T28] audit: type=1400 audit(1773920872.841:5921): avc: denied { setopt } for pid=9615 comm="syz.1.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.647558][ T9644] __nla_validate_parse: 1 callbacks suppressed [ 180.647614][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 180.687668][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 180.888081][ T28] audit: type=1326 audit(1773920873.971:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 180.912309][ T28] audit: type=1326 audit(1773920873.971:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 180.936447][ T9652] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.937609][ T28] audit: type=1326 audit(1773920873.971:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 180.967620][ T28] audit: type=1326 audit(1773920873.971:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 180.991590][ T28] audit: type=1326 audit(1773920874.021:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 181.026827][ T28] audit: type=1326 audit(1773920874.021:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 181.052823][ T28] audit: type=1326 audit(1773920874.021:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 181.082057][ T28] audit: type=1326 audit(1773920874.021:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9653 comm="syz.1.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406285c799 code=0x7ffc0000 [ 181.221920][ T9678] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 181.248939][ T9678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.084679][ T9678] bond4: entered promiscuous mode [ 182.090108][ T9678] bond4: left promiscuous mode [ 182.114839][ T9684] bond4: (slave dummy0): making interface the new active one [ 182.136723][ T9684] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 182.164161][ T9686] bond4 (unregistering): (slave dummy0): Releasing active interface [ 182.185889][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 182.185907][ T28] audit: type=1400 audit(1773920875.271:5950): avc: denied { override_creds } for pid=9689 comm="syz.1.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.213989][ T9686] bond4 (unregistering): Released all slaves [ 182.375731][ T28] audit: type=1326 audit(1773920875.411:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.429751][ T28] audit: type=1326 audit(1773920875.411:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.453947][ T28] audit: type=1326 audit(1773920875.411:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.486591][ T28] audit: type=1326 audit(1773920875.411:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.516459][ T28] audit: type=1326 audit(1773920875.411:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.543682][ T9719] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1998'. [ 182.565548][ T28] audit: type=1326 audit(1773920875.411:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.591809][ T9719] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.621521][ T28] audit: type=1326 audit(1773920875.411:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.662992][ T28] audit: type=1326 audit(1773920875.411:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 182.699628][ T28] audit: type=1326 audit(1773920875.411:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9704 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 183.115053][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 183.288621][ T9724] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1991'. [ 183.305091][ T9724] lo: Caught tx_queue_len zero misconfig [ 183.723923][ T9754] netlink: 'syz.4.2001': attribute type 4 has an invalid length. [ 184.087178][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 184.370366][ T9772] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2009'. [ 184.720382][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2013'. [ 185.417642][ T9792] loop6: detected capacity change from 0 to 512 [ 185.585183][ T9792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.697030][ T9792] EXT4-fs (loop6): 1 truncate cleaned up [ 185.733615][ T9792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.042464][ T9756] syz.1.2003 (9756) used greatest stack depth: 5776 bytes left [ 186.069372][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'. [ 186.092573][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.112440][ T9802] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2018'. [ 186.207827][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 186.444880][ T9819] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2025'. [ 186.661435][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2029'. [ 187.265467][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 187.265488][ T28] audit: type=1326 audit(1773920880.351:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9838 comm="syz.2.2033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x0 [ 187.517323][ T9855] lo speed is unknown, defaulting to 1000 [ 187.555390][ T28] audit: type=1400 audit(1773920880.631:5974): avc: denied { ioctl } for pid=9853 comm="syz.5.2037" path="socket:[38883]" dev="sockfs" ino=38883 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.363720][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 188.577743][ T9893] lo speed is unknown, defaulting to 1000 [ 188.706274][ T28] audit: type=1400 audit(1773920881.791:5975): avc: denied { nlmsg_write } for pid=9892 comm="syz.2.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 189.625330][ T28] audit: type=1400 audit(1773920882.701:5976): avc: denied { ioctl } for pid=9904 comm="syz.6.2058" path="socket:[40021]" dev="sockfs" ino=40021 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 189.664111][ T9910] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2056'. [ 189.686975][ T9910] lo: Caught tx_queue_len zero misconfig [ 189.982824][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2060'. [ 190.056910][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'. [ 190.333345][ T9908] lo: Caught tx_queue_len zero misconfig [ 190.339241][ T9908] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 190.527418][ T9930] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 191.476297][ T9961] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2077'. [ 191.485473][ T9961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 191.553100][ T264] bond0: (slave bond_slave_0): interface is now down [ 191.553645][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.570201][ T264] bond0: (slave bond_slave_1): interface is now down [ 191.599347][ T28] audit: type=1326 audit(1773920884.681:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.650059][ T4242] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 191.665698][ T28] audit: type=1326 audit(1773920884.681:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.673942][ T4242] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 191.704897][ T28] audit: type=1326 audit(1773920884.721:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.730958][ T4242] bond0: now running without any active interface! [ 191.782703][ T28] audit: type=1326 audit(1773920884.721:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.807061][ T28] audit: type=1326 audit(1773920884.721:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.831626][ T28] audit: type=1326 audit(1773920884.721:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.6.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 191.992087][ T9984] netlink: 'syz.5.2086': attribute type 1 has an invalid length. [ 192.010251][ T9984] netlink: 'syz.5.2086': attribute type 4 has an invalid length. [ 192.035871][ T9984] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2086'. [ 192.874674][ T4242] bond0: (slave bond_slave_0): interface is now down [ 192.875356][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.888136][ T4242] bond0: (slave bond_slave_1): interface is now down [ 192.916214][ T4242] bond0: now running without any active interface! [ 193.050025][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 193.050046][ T28] audit: type=1400 audit(1773920886.131:5991): avc: denied { setopt } for pid=10008 comm="syz.5.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.226623][T10011] lo speed is unknown, defaulting to 1000 [ 193.887810][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2105'. [ 194.607192][T10061] lo speed is unknown, defaulting to 1000 [ 195.650462][ T28] audit: type=1400 audit(1773920888.731:5992): avc: denied { ioctl } for pid=10093 comm="syz.6.2128" path="socket:[40322]" dev="sockfs" ino=40322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.704834][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.712211][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.759052][T10094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.777709][T10094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.831148][T10095] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2125'. [ 195.845374][ T102] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.853771][ T102] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.899052][ T102] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.910663][ T102] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.137262][ T28] audit: type=1400 audit(1773920889.141:5993): avc: denied { lock } for pid=10099 comm="syz.1.2130" path="socket:[40332]" dev="sockfs" ino=40332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.686101][T10114] netlink: 'syz.6.2135': attribute type 1 has an invalid length. [ 196.693882][T10114] netlink: 'syz.6.2135': attribute type 4 has an invalid length. [ 196.739799][T10114] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2135'. [ 196.884502][T10119] lo speed is unknown, defaulting to 1000 [ 198.036880][T10154] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 198.065047][T10154] netlink: 'syz.4.2149': attribute type 4 has an invalid length. [ 198.095312][T10154] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2149'. [ 198.606889][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.614938][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.668239][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.708015][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.735043][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.761298][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.791068][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.818075][T10165] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 198.831793][ T28] audit: type=1326 audit(1773920891.911:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 198.886315][ T28] audit: type=1326 audit(1773920891.941:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 198.948299][ T28] audit: type=1326 audit(1773920891.951:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.035388][ T28] audit: type=1326 audit(1773920891.951:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.072927][ T28] audit: type=1326 audit(1773920891.951:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.137889][ T28] audit: type=1326 audit(1773920891.951:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.163691][ T28] audit: type=1326 audit(1773920891.951:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.189476][ T28] audit: type=1326 audit(1773920891.951:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.222781][ T28] audit: type=1326 audit(1773920891.961:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.302799][ T28] audit: type=1326 audit(1773920891.961:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.6.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 199.363351][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 199.491824][T10206] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2170'. [ 200.943744][T10241] batadv_slave_1: entered promiscuous mode [ 201.027233][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 201.157215][T10241] batadv_slave_1 (unregistering): left promiscuous mode [ 201.702781][T10248] bond1: left allmulticast mode [ 201.707802][T10248] bond1: left promiscuous mode [ 201.738065][ T1758] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.755437][ T1758] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 39834 - 0 [ 201.765709][ T1758] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.795337][ T1758] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.803729][ T1758] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 39834 - 0 [ 201.835150][ T1758] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.855615][ T1758] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.864903][ T1758] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 39834 - 0 [ 201.893814][ T1758] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 201.911231][ T1758] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.923709][ T1758] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 39834 - 0 [ 201.958014][ T1758] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.797308][T10287] lo speed is unknown, defaulting to 1000 [ 202.826227][T10294] sit0: Caught tx_queue_len zero misconfig [ 203.869904][T10323] validate_nla: 22 callbacks suppressed [ 203.869926][T10323] netlink: 'syz.6.2213': attribute type 1 has an invalid length. [ 203.991156][T10323] bond2: entered promiscuous mode [ 204.008592][T10323] bond2: entered allmulticast mode [ 204.031596][T10323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.115152][T10323] bridge4: entered promiscuous mode [ 204.136285][T10323] bridge4: entered allmulticast mode [ 204.142386][T10323] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 204.180050][T10331] bond2: entered promiscuous mode [ 204.205359][ T102] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.224572][T10331] ip6gretap1: entered promiscuous mode [ 204.268472][T10331] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 204.325407][ T2261] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.337566][T10335] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 204.369357][T10335] ip6gretap1: left promiscuous mode [ 204.388045][T10335] bond2 (unregistering): Released all slaves [ 204.465405][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 204.465427][ T28] audit: type=1400 audit(1773920897.541:6029): avc: denied { setopt } for pid=10338 comm="syz.2.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 204.503613][T10338] delete_channel: no stack [ 204.586539][T10345] loop5: detected capacity change from 0 to 1024 [ 204.603172][T10345] EXT4-fs: Ignoring removed nobh option [ 204.621150][T10345] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 204.650171][T10345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.667233][T10345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.752763][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2224'. [ 204.767440][T10356] lo speed is unknown, defaulting to 1000 [ 205.032498][T10363] lo speed is unknown, defaulting to 1000 [ 205.173790][T10363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2225'. [ 205.211305][T10363] gtp0: entered promiscuous mode [ 205.871286][T10383] bond3: entered promiscuous mode [ 205.895869][T10383] ip6gretap1: entered promiscuous mode [ 205.901857][T10383] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.917540][T10383] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 205.928714][T10383] ip6gretap1: left promiscuous mode [ 205.935328][T10383] bond3 (unregistering): Released all slaves [ 206.414326][T10395] netlink: 'syz.4.2237': attribute type 2 has an invalid length. [ 206.452127][T10395] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.2237'. [ 207.023838][T10422] netlink: 'syz.5.2256': attribute type 4 has an invalid length. [ 207.053439][T10422] netlink: 'syz.5.2256': attribute type 4 has an invalid length. [ 207.387487][T10425] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 207.413068][T10425] netlink: 'syz.1.2248': attribute type 3 has an invalid length. [ 207.439863][T10425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 207.645389][T10425] ------------[ cut here ]------------ [ 207.650973][T10425] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 207.663148][T10425] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.1.2248/10425 [ 207.672945][T10425] Modules linked in: [ 207.676954][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.1.2248 Not tainted syzkaller #0 PREEMPT(full) [ 207.686407][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.696664][T10425] RIP: 0010:u32_change+0x1463/0x14d0 [ 207.702141][T10425] Code: 31 ed e9 96 fe ff ff e8 8b 0c c2 fc 48 8d 3d 44 3f 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 97 92 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 207.721916][T10425] RSP: 0018:ffffc900018b35e0 EFLAGS: 00010283 [ 207.728117][T10425] RAX: ffffffff849751f5 RBX: ffffc900018b37f0 RCX: 0000000000000010 [ 207.736136][T10425] RDX: ffffffff867e9297 RSI: 0000000000000020 RDI: ffffffff87209140 [ 207.744290][T10425] RBP: ffffc900018b36e8 R08: 00018881497f6187 R09: 0000000000000000 [ 207.752354][T10425] R10: ffff8881497f6100 R11: 0000000000000002 R12: ffff88810d8cdd00 [ 207.760370][T10425] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810d8cddc0 [ 207.768595][T10425] FS: 00007f40612af6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 207.777675][T10425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.784299][T10425] CR2: 00007f40628a9e80 CR3: 00000001415fc000 CR4: 00000000003506f0 [ 207.792390][T10425] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 207.800446][T10425] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 207.808665][T10425] Call Trace: [ 207.811961][T10425] [ 207.814941][T10425] tc_new_tfilter+0xfc0/0x1200 [ 207.819979][T10425] ? ns_capable+0x7c/0xb0 [ 207.824340][T10425] ? __pfx_tc_new_tfilter+0x10/0x10 [ 207.829717][T10425] rtnetlink_rcv_msg+0x64b/0x720 [ 207.834687][T10425] ? avc_has_perm_noaudit+0xab/0x130 [ 207.840059][T10425] netlink_rcv_skb+0x123/0x220 [ 207.844930][T10425] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.850563][T10425] rtnetlink_rcv+0x1c/0x30 [ 207.855016][T10425] netlink_unicast+0x5c0/0x690 [ 207.859917][T10425] netlink_sendmsg+0x5c8/0x6f0 [ 207.864720][T10425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.870123][T10425] ____sys_sendmsg+0x563/0x5b0 [ 207.874941][T10425] ___sys_sendmsg+0x195/0x1e0 [ 207.879788][T10425] __sys_sendmmsg+0x185/0x320 [ 207.884544][T10425] __x64_sys_sendmmsg+0x57/0x70 [ 207.889536][T10425] x64_sys_call+0x27aa/0x3020 [ 207.894292][T10425] do_syscall_64+0x12c/0x370 [ 207.899034][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.904954][T10425] RIP: 0033:0x7f406285c799 [ 207.909495][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.929286][T10425] RSP: 002b:00007f40612af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.937947][T10425] RAX: ffffffffffffffda RBX: 00007f4062ad5fa0 RCX: 00007f406285c799 [ 207.946078][T10425] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 207.954156][T10425] RBP: 00007f40628f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 207.962355][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.970384][T10425] R13: 00007f4062ad6038 R14: 00007f4062ad5fa0 R15: 00007ffed9a355f8 [ 207.978493][T10425] [ 207.981536][T10425] ---[ end trace 0000000000000000 ]--- [ 207.987169][T10425] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2248'. [ 208.024424][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2250'. [ 208.142136][T10434] loop6: detected capacity change from 0 to 512 [ 208.396382][T10442] team0 (unregistering): Port device team_slave_0 removed [ 208.447141][T10442] team0 (unregistering): Port device team_slave_1 removed [ 208.480973][T10452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.495332][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 208.504313][T10453] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 209.162921][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2270'. [ 209.411839][T10487] lo speed is unknown, defaulting to 1000 [ 209.884699][T10506] netlink: 'syz.1.2280': attribute type 4 has an invalid length. [ 209.932925][T10506] netlink: 'syz.1.2280': attribute type 4 has an invalid length. [ 209.962195][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 210.884469][ T10] kernel read not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 211.017832][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2295'. [ 212.208860][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 212.448334][T10583] lo speed is unknown, defaulting to 1000 [ 212.951450][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2305'. [ 212.963417][T10583] gtp0: entered promiscuous mode [ 213.164324][T10602] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2313'. [ 213.215728][T10604] netlink: 'syz.4.2313': attribute type 10 has an invalid length. [ 213.238025][T10602] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.328374][T10602] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.354249][T10602] .` (unregistering): Released all slaves [ 213.370145][T10604] veth1_macvtap: left promiscuous mode [ 213.549757][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 213.741966][T10610] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 213.789534][ T10] lo speed is unknown, defaulting to 1000 [ 213.795503][ T10] syz2: Port: 1 Link DOWN [ 213.805524][T10610] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 213.833140][ T8920] lo speed is unknown, defaulting to 1000 [ 213.839124][ T8920] syz2: Port: 1 Link ACTIVE [ 214.067847][T10621] loop6: detected capacity change from 0 to 512 [ 214.093490][T10621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.130969][T10621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.162865][T10621] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.207466][ T28] audit: type=1400 audit(1773920907.291:6030): avc: denied { append } for pid=10617 comm="syz.6.2329" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.230300][ T28] audit: type=1400 audit(1773920907.301:6031): avc: denied { ioctl } for pid=10617 comm="syz.6.2329" path="/188/bus/file2" dev="loop6" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.298603][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.354597][T10636] lo speed is unknown, defaulting to 1000 [ 214.689617][T10654] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 214.776510][T10654] netlink: 'syz.5.2326': attribute type 3 has an invalid length. [ 214.794020][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2326'. [ 214.815367][T10654] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2326'. [ 215.018957][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2319'. [ 215.050464][T10636] gtp0: entered promiscuous mode [ 218.675300][ T28] audit: type=1400 audit(1773920911.751:6032): avc: denied { read } for pid=10710 comm="syz.6.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 218.808942][T10713] netlink: 'syz.6.2349': attribute type 10 has an invalid length. [ 218.827786][T10713] team0: Device vxcan1 is of different type [ 219.091100][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'. [ 219.211085][T10719] netlink: 'syz.5.2352': attribute type 1 has an invalid length. [ 219.266888][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 219.285577][T10723] gretap1: entered allmulticast mode [ 219.292597][T10723] bond3: (slave gretap1): making interface the new active one [ 219.355656][T10723] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 219.526286][ T28] audit: type=1326 audit(1773920912.611:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.5.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 219.581912][ T28] audit: type=1326 audit(1773920912.651:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.5.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 219.635085][ T28] audit: type=1326 audit(1773920912.651:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.5.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f8c27c799 code=0x7ffc0000 [ 219.692157][ T28] audit: type=1326 audit(1773920912.651:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10731 comm="syz.5.2357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8c27c799 code=0x0 [ 219.783970][T10736] loop6: detected capacity change from 0 to 1024 [ 219.796324][T10736] EXT4-fs: Ignoring removed orlov option [ 219.818297][T10736] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 219.960519][T10736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.298744][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.413352][T10750] loop5: detected capacity change from 0 to 164 [ 220.604567][ T28] audit: type=1400 audit(1773920913.681:6037): avc: denied { create } for pid=10760 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.467666][T10805] loop5: detected capacity change from 0 to 128 [ 221.488973][T10805] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.512966][T10805] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.543943][ T28] audit: type=1400 audit(1773920914.621:6038): avc: denied { create } for pid=10802 comm="syz.6.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.643262][ T6176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.901311][T10828] loop5: detected capacity change from 0 to 512 [ 221.901608][T10823] loop6: detected capacity change from 0 to 2048 [ 222.004766][T10828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.013899][ T3311] loop6: p1 < > p4 [ 222.024642][ T3311] loop6: p4 size 8388608 extends beyond EOD, truncated [ 222.041940][T10823] loop6: p1 < > p4 [ 222.055937][T10823] loop6: p4 size 8388608 extends beyond EOD, truncated [ 222.070426][T10828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.088939][T10828] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.107072][T10823] EXT4-fs (loop6p1): unable to read superblock [ 222.116506][ T28] audit: type=1400 audit(1773920915.181:6039): avc: denied { read } for pid=10822 comm="syz.6.2385" name="loop6p1" dev="devtmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.226672][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 222.239369][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 222.255665][ T28] audit: type=1400 audit(1773920915.191:6040): avc: denied { open } for pid=10822 comm="syz.6.2385" path="/dev/loop6p1" dev="devtmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.327834][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.864108][T10916] tipc: Failed to remove unknown binding: 66,0,0/0:284377573/284377574 [ 224.872656][T10916] tipc: Failed to remove unknown binding: 66,0,0/0:284377573/284377574 [ 226.761884][T10968] netlink: 'syz.2.2435': attribute type 13 has an invalid length. [ 226.779127][T10968] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2435'. [ 227.077979][T10981] loop6: detected capacity change from 0 to 128 [ 227.086285][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'. [ 227.125308][T10981] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.148146][T10981] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.173869][T10982] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 227.215863][T10982] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 227.224582][ T8000] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.239219][T10990] macvlan2: entered promiscuous mode [ 227.265765][T10990] macvlan2: entered allmulticast mode [ 227.279081][T10990] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 227.403428][T11001] loop6: detected capacity change from 0 to 2048 [ 227.446434][T11001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.566129][T11001] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2445: bg 0: block 234: padding at end of block bitmap is not set [ 227.607647][T11001] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 614 with error 28 [ 227.634256][T11001] EXT4-fs (loop6): This should not happen!! Data will be lost [ 227.634256][T11001] [ 227.667592][T11001] EXT4-fs (loop6): Total free blocks count 0 [ 227.673630][T11001] EXT4-fs (loop6): Free/Dirty block details [ 227.711360][T11001] EXT4-fs (loop6): free_blocks=0 [ 227.737061][T11001] EXT4-fs (loop6): dirty_blocks=624 [ 227.744324][T11001] EXT4-fs (loop6): Block reservation details [ 227.794352][T11001] EXT4-fs (loop6): i_reserved_data_blocks=39 [ 227.969364][T11015] bond3: entered allmulticast mode [ 227.979559][T11015] bridge12: entered promiscuous mode [ 227.985039][T11015] bridge12: entered allmulticast mode [ 227.993194][T11015] bond3: (slave bridge12): Enslaving as an active interface with an up link [ 228.241278][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.506099][T11030] syz.6.2458 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 228.522089][T11035] uprobe: syz.5.2459:11035 failed to unregister, leaking uprobe [ 228.525358][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.6.2458 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.525395][T11030] Tainted: [W]=WARN [ 228.525419][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.525433][T11030] Call Trace: [ 228.525513][T11030] [ 228.525523][T11030] __dump_stack+0x1d/0x30 [ 228.525556][T11030] dump_stack_lvl+0x95/0xd0 [ 228.525628][T11030] dump_stack+0x15/0x1b [ 228.525652][T11030] dump_header+0x80/0x240 [ 228.525677][T11030] oom_kill_process+0x295/0x350 [ 228.525705][T11030] out_of_memory+0x97d/0xb80 [ 228.525789][T11030] try_charge_memcg+0x62e/0xa10 [ 228.525833][T11030] obj_cgroup_charge_pages+0x23/0xc0 [ 228.525865][T11030] __memcg_kmem_charge_page+0x9e/0x170 [ 228.525894][T11030] __alloc_frozen_pages_noprof+0x18a/0x360 [ 228.526007][T11030] alloc_pages_mpol+0xb3/0x260 [ 228.526037][T11030] alloc_pages_noprof+0x8f/0x130 [ 228.526067][T11030] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 228.526209][T11030] __kvmalloc_node_noprof+0x3d4/0x650 [ 228.526237][T11030] ? futex_hash_allocate+0x190/0x9d0 [ 228.526345][T11030] ? futex_hash_allocate+0x190/0x9d0 [ 228.526437][T11030] futex_hash_allocate+0x190/0x9d0 [ 228.526469][T11030] ? cap_task_prctl+0x13f/0x6e0 [ 228.526497][T11030] futex_hash_prctl+0xd8/0xf0 [ 228.526526][T11030] __se_sys_prctl+0xa3d/0x13f0 [ 228.526618][T11030] __x64_sys_prctl+0x67/0x80 [ 228.526703][T11030] x64_sys_call+0x2533/0x3020 [ 228.526733][T11030] do_syscall_64+0x12c/0x370 [ 228.526762][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.526787][T11030] RIP: 0033:0x7fb2ddb4c799 [ 228.526861][T11030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.526927][T11030] RSP: 002b:00007fb2dc5a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 228.526951][T11030] RAX: ffffffffffffffda RBX: 00007fb2dddc5fa0 RCX: 00007fb2ddb4c799 [ 228.526967][T11030] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 228.526982][T11030] RBP: 00007fb2ddbe2c99 R08: 0000000000000000 R09: 0000000000000000 [ 228.526997][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.527011][T11030] R13: 00007fb2dddc6038 R14: 00007fb2dddc5fa0 R15: 00007ffc013c0488 [ 228.527034][T11030] [ 228.527071][T11030] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 228.775416][T11030] memory+swap: usage 311600kB, limit 9007199254740988kB, failcnt 0 [ 228.802611][T11030] kmem: usage 186768kB, limit 9007199254740988kB, failcnt 0 [ 228.844276][T11030] Memory cgroup stats for /syz6: [ 228.844674][T11030] cache 63782912 [ 228.890490][T11030] rss 200704 [ 228.893859][T11030] shmem 63782912 [ 228.912425][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'. [ 228.929258][T11030] mapped_file 0 [ 228.939448][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'. [ 228.948718][T11030] dirty 0 [ 228.956166][T11030] writeback 0 [ 228.967483][T11030] workingset_refault_anon 1017 [ 228.985752][T11030] workingset_refault_file 0 [ 228.990324][T11030] swap 5808128 [ 229.007993][T11030] swapcached 9539584 [ 229.011932][T11030] pgpgin 149788 [ 229.025881][T11030] pgpgout 134164 [ 229.029520][T11030] pgfault 87420 [ 229.033000][T11030] pgmajfault 136 [ 229.049303][T11030] inactive_anon 380928 [ 229.053540][T11030] active_anon 63614976 [ 229.057687][T11030] inactive_file 0 [ 229.061700][T11030] active_file 0 [ 229.065174][T11030] unevictable 0 [ 229.071552][T11030] hierarchical_memory_limit 314572800 [ 229.089937][T11030] hierarchical_memsw_limit 9223372036854771712 [ 229.100056][T11030] total_cache 63782912 [ 229.104383][T11030] total_rss 200704 [ 229.118549][T11030] total_shmem 63782912 [ 229.122708][T11030] total_mapped_file 0 [ 229.137884][T11030] total_dirty 0 [ 229.141419][T11030] total_writeback 0 [ 229.146713][T11030] total_workingset_refault_anon 1017 [ 229.157304][T11030] total_workingset_refault_file 0 [ 229.169118][T11030] total_swap 5808128 [ 229.178051][T11030] total_swapcached 9539584 [ 229.188431][T11030] total_pgpgin 149788 [ 229.194007][T11030] total_pgpgout 134164 [ 229.267200][T11030] total_pgfault 87420 [ 229.271316][T11030] total_pgmajfault 136 [ 229.288502][T11030] total_inactive_anon 380928 [ 229.293258][T11030] total_active_anon 63614976 [ 229.321972][T11030] total_inactive_file 0 [ 229.335497][T11030] total_active_file 0 [ 229.343064][T11030] total_unevictable 0 [ 229.347484][T11030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2458,pid=11029,uid=0 [ 229.365373][T11030] Memory cgroup out of memory: Killed process 11030 (syz.6.2458) total-vm:94164kB, anon-rss:1416kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 229.636490][T11066] loop5: detected capacity change from 0 to 128 [ 229.673223][T11068] loop6: detected capacity change from 0 to 512 [ 229.753342][T11068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.765944][T11066] FAT-fs (loop5): IO charset cp855 not found [ 229.785871][T11068] ext4 filesystem being mounted at /214/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.800140][T11066] loop5: detected capacity change from 0 to 2048 [ 229.818314][T11066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.851102][ T28] audit: type=1400 audit(1773920922.931:6041): avc: denied { read } for pid=11065 comm="syz.5.2471" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 229.851241][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.883552][T11066] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #12: block 2: comm syz.5.2471: lblock 0 mapped to illegal pblock 2 (length 1) [ 229.953639][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.577003][T11103] loop5: detected capacity change from 0 to 512 [ 230.637173][T11103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.775391][T11103] ext4 filesystem being mounted at /346/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.827858][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.936763][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2487'. [ 230.952576][ T28] audit: type=1400 audit(1773920924.021:6042): avc: denied { accept } for pid=11109 comm="syz.5.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 231.908908][ T28] audit: type=1400 audit(1773920924.991:6043): avc: denied { nlmsg_read } for pid=11130 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 233.319993][T11158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2505'. [ 233.564226][T11170] lo speed is unknown, defaulting to 1000 [ 233.773852][T11186] netlink: 'syz.5.2516': attribute type 13 has an invalid length. [ 234.094866][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 234.136753][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 234.317123][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2520'. [ 234.342783][T11195] ip6gre1: entered promiscuous mode [ 234.381501][T11195] ip6gre1: entered allmulticast mode [ 234.405930][T11195] netlink: 'syz.5.2520': attribute type 6 has an invalid length. [ 234.425442][T11195] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2520'. [ 234.476541][ T28] audit: type=1400 audit(1773920927.551:6044): avc: denied { read write } for pid=11203 comm="syz.6.2524" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.580046][ T28] audit: type=1400 audit(1773920927.551:6045): avc: denied { open } for pid=11203 comm="syz.6.2524" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.626282][ T28] audit: type=1400 audit(1773920927.691:6046): avc: denied { getattr } for pid=11209 comm="syz.6.2526" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.085800][ T28] audit: type=1401 audit(1773920928.151:6047): op=setxattr invalid_context=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 [ 236.801374][ T28] audit: type=1400 audit(1773920929.881:6048): avc: denied { ioctl } for pid=11264 comm="syz.4.2544" path="socket:[52598]" dev="sockfs" ino=52598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.983929][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 236.993695][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 237.164144][T11288] netlink: 'syz.2.2555': attribute type 13 has an invalid length. [ 237.329869][ T28] audit: type=1326 audit(1773920930.411:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.385613][ T28] audit: type=1326 audit(1773920930.411:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.416422][ T28] audit: type=1326 audit(1773920930.411:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.445091][ T28] audit: type=1326 audit(1773920930.411:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.469892][ T28] audit: type=1326 audit(1773920930.441:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.495136][ T28] audit: type=1326 audit(1773920930.441:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.523150][ T28] audit: type=1326 audit(1773920930.441:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 237.550458][ T28] audit: type=1326 audit(1773920930.441:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.2558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 238.474306][T11328] netlink: 'syz.1.2570': attribute type 13 has an invalid length. [ 238.948619][T11321] syz.5.2568 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 239.022966][T11321] CPU: 1 UID: 0 PID: 11321 Comm: syz.5.2568 Tainted: G W syzkaller #0 PREEMPT(full) [ 239.023040][T11321] Tainted: [W]=WARN [ 239.023047][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.023124][T11321] Call Trace: [ 239.023132][T11321] [ 239.023141][T11321] __dump_stack+0x1d/0x30 [ 239.023239][T11321] dump_stack_lvl+0x95/0xd0 [ 239.023267][T11321] dump_stack+0x15/0x1b [ 239.023290][T11321] dump_header+0x80/0x240 [ 239.023342][T11321] oom_kill_process+0x295/0x350 [ 239.023371][T11321] out_of_memory+0x97d/0xb80 [ 239.023399][T11321] try_charge_memcg+0x62e/0xa10 [ 239.023556][T11321] obj_cgroup_charge_pages+0x23/0xc0 [ 239.023584][T11321] __memcg_kmem_charge_page+0x9e/0x170 [ 239.023653][T11321] __alloc_frozen_pages_noprof+0x18a/0x360 [ 239.023689][T11321] alloc_pages_mpol+0xb3/0x260 [ 239.023721][T11321] alloc_pages_noprof+0x8f/0x130 [ 239.023768][T11321] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 239.023873][T11321] __kvmalloc_node_noprof+0x3d4/0x650 [ 239.023921][T11321] ? ip_set_alloc+0x24/0x30 [ 239.023956][T11321] ? ip_set_alloc+0x24/0x30 [ 239.024002][T11321] ip_set_alloc+0x24/0x30 [ 239.024034][T11321] hash_netiface_create+0x282/0x740 [ 239.024066][T11321] ? __pfx_hash_netiface_create+0x10/0x10 [ 239.024106][T11321] ip_set_create+0x3cf/0x970 [ 239.024146][T11321] ? __nla_parse+0x40/0x60 [ 239.024192][T11321] nfnetlink_rcv_msg+0x509/0x5d0 [ 239.024250][T11321] netlink_rcv_skb+0x123/0x220 [ 239.024282][T11321] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.024325][T11321] nfnetlink_rcv+0x167/0x1720 [ 239.024357][T11321] ? __list_del_entry_valid_or_report+0x65/0x130 [ 239.024462][T11321] ? __rmqueue_pcplist+0x9b0/0xb70 [ 239.024497][T11321] ? _raw_spin_lock_bh+0x56/0xb0 [ 239.024545][T11321] ? _raw_spin_unlock_bh+0x18/0x20 [ 239.024655][T11321] ? selinux_nlmsg_lookup+0x99/0x890 [ 239.024763][T11321] ? __rcu_read_unlock+0x33/0x70 [ 239.024788][T11321] ? __netlink_lookup+0x276/0x2b0 [ 239.024903][T11321] netlink_unicast+0x5c0/0x690 [ 239.024938][T11321] netlink_sendmsg+0x5c8/0x6f0 [ 239.024975][T11321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.025075][T11321] ____sys_sendmsg+0x563/0x5b0 [ 239.025109][T11321] ___sys_sendmsg+0x195/0x1e0 [ 239.025189][T11321] __x64_sys_sendmsg+0xd4/0x160 [ 239.025233][T11321] x64_sys_call+0x194c/0x3020 [ 239.025270][T11321] do_syscall_64+0x12c/0x370 [ 239.025298][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.025363][T11321] RIP: 0033:0x7f8f8c27c799 [ 239.025422][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.025495][T11321] RSP: 002b:00007f8f8accf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.025522][T11321] RAX: ffffffffffffffda RBX: 00007f8f8c4f5fa0 RCX: 00007f8f8c27c799 [ 239.025540][T11321] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 239.025557][T11321] RBP: 00007f8f8c312c99 R08: 0000000000000000 R09: 0000000000000000 [ 239.025619][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.025634][T11321] R13: 00007f8f8c4f6038 R14: 00007f8f8c4f5fa0 R15: 00007ffcaf0dffb8 [ 239.025656][T11321] [ 239.400120][T11321] memory: usage 307072kB, limit 307200kB, failcnt 400 [ 239.475553][T11321] memory+swap: usage 358264kB, limit 9007199254740988kB, failcnt 0 [ 239.543081][T11321] kmem: usage 235132kB, limit 9007199254740988kB, failcnt 0 [ 239.608534][T11321] Memory cgroup stats for /syz5: [ 239.608820][T11321] cache 27836416 [ 239.745369][T11321] rss 8794112 [ 239.748765][T11321] shmem 27836416 [ 239.752360][T11321] mapped_file 0 [ 239.844069][T11350] netlink: 'syz.4.2578': attribute type 10 has an invalid length. [ 239.855352][T11321] dirty 0 [ 239.858327][T11321] writeback 0 [ 239.861624][T11321] workingset_refault_anon 1473 [ 239.867923][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.875102][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.895317][T11321] workingset_refault_file 0 [ 239.899862][T11321] swap 52420608 [ 239.916212][T11321] swapcached 62578688 [ 239.933832][T11321] pgpgin 113888 [ 239.943832][T11321] pgpgout 104914 [ 239.953914][T11321] pgfault 117938 [ 239.985428][T11321] pgmajfault 206 [ 239.989012][T11321] inactive_anon 315392 [ 239.998348][T11321] active_anon 36438016 [ 240.006666][T11321] inactive_file 0 [ 240.010443][T11321] active_file 4096 [ 240.014400][T11353] netlink: 'syz.4.2579': attribute type 1 has an invalid length. [ 240.039232][T11321] unevictable 0 [ 240.042756][T11321] hierarchical_memory_limit 314572800 [ 240.051208][T11353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.057917][T11321] hierarchical_memsw_limit 9223372036854771712 [ 240.069808][T11357] vlan0: entered promiscuous mode [ 240.074932][T11357] bond0: entered promiscuous mode [ 240.080240][T11321] total_cache 27836416 [ 240.084322][T11321] total_rss 8794112 [ 240.096761][T11321] total_shmem 27836416 [ 240.103042][T11353] bond0: (slave geneve0): making interface the new active one [ 240.111113][T11321] total_mapped_file 0 [ 240.115215][T11353] geneve0: entered promiscuous mode [ 240.120680][T11321] total_dirty 0 [ 240.124205][T11321] total_writeback 0 [ 240.130196][T11353] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 240.139284][T11321] total_workingset_refault_anon 1473 [ 240.144653][T11321] total_workingset_refault_file 0 [ 240.153011][T11321] total_swap 52420608 [ 240.181864][T11321] total_swapcached 62578688 [ 240.228742][T11321] total_pgpgin 113888 [ 240.237216][T11321] total_pgpgout 104914 [ 240.244614][T11321] total_pgfault 117938 [ 240.431113][T11321] total_pgmajfault 206 [ 240.435328][T11321] total_inactive_anon 315392 [ 240.439941][T11321] total_active_anon 36438016 [ 240.444589][T11321] total_inactive_file 0 [ 240.448957][T11321] total_active_file 4096 [ 240.453378][T11321] total_unevictable 0 [ 240.457660][T11321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2568,pid=11320,uid=0 [ 240.495143][T11321] Memory cgroup out of memory: Killed process 11321 (syz.5.2568) total-vm:96344kB, anon-rss:9620kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 241.413104][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 241.413124][ T28] audit: type=1400 audit(1773921190.490:6095): avc: denied { unmount } for pid=11395 comm="syz.1.2596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 241.503755][T11402] loop6: detected capacity change from 0 to 128 [ 241.933029][T11406] syz.2.2598 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 242.017330][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.2.2598 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.017435][T11406] Tainted: [W]=WARN [ 242.017443][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.017458][T11406] Call Trace: [ 242.017465][T11406] [ 242.017475][T11406] __dump_stack+0x1d/0x30 [ 242.017510][T11406] dump_stack_lvl+0x95/0xd0 [ 242.017609][T11406] dump_stack+0x15/0x1b [ 242.017632][T11406] dump_header+0x80/0x240 [ 242.017655][T11406] oom_kill_process+0x295/0x350 [ 242.017683][T11406] out_of_memory+0x97d/0xb80 [ 242.017717][T11406] try_charge_memcg+0x62e/0xa10 [ 242.017830][T11406] __mem_cgroup_charge+0x65/0x150 [ 242.017860][T11406] shmem_get_folio_gfp+0x47b/0xd60 [ 242.017892][T11406] shmem_write_begin+0xfc/0x1f0 [ 242.018007][T11406] generic_perform_write+0x183/0x490 [ 242.018073][T11406] shmem_file_write_iter+0xc5/0xf0 [ 242.018136][T11406] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 242.018174][T11406] vfs_write+0x5a6/0x9f0 [ 242.018216][T11406] ksys_write+0xdc/0x1a0 [ 242.018251][T11406] __x64_sys_write+0x40/0x50 [ 242.018274][T11406] x64_sys_call+0x27e1/0x3020 [ 242.018304][T11406] do_syscall_64+0x12c/0x370 [ 242.018341][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.018367][T11406] RIP: 0033:0x7f3a967dc799 [ 242.018386][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.018413][T11406] RSP: 002b:00007f3a95216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.018458][T11406] RAX: ffffffffffffffda RBX: 00007f3a96a56090 RCX: 00007f3a967dc799 [ 242.018475][T11406] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 242.018492][T11406] RBP: 00007f3a96872c99 R08: 0000000000000000 R09: 0000000000000000 [ 242.018508][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.018523][T11406] R13: 00007f3a96a56128 R14: 00007f3a96a56090 R15: 00007ffd68705ad8 [ 242.018547][T11406] [ 242.018556][T11406] memory: usage 307200kB, limit 307200kB, failcnt 1072 [ 242.265454][T11406] memory+swap: usage 307208kB, limit 9007199254740988kB, failcnt 0 [ 242.273454][T11406] kmem: usage 290368kB, limit 9007199254740988kB, failcnt 0 [ 242.291911][T11406] Memory cgroup stats for /syz2: [ 242.292113][T11406] cache 8642560 [ 242.306213][T11406] rss 8593408 [ 242.313897][T11406] shmem 8642560 [ 242.322907][T11406] mapped_file 0 [ 242.330905][T11406] dirty 0 [ 242.338023][T11406] writeback 0 [ 242.345487][T11406] workingset_refault_anon 2099 [ 242.355580][T11406] workingset_refault_file 1938 [ 242.365397][T11406] swap 8192 [ 242.372975][T11406] swapcached 3125248 [ 242.383576][T11406] pgpgin 148628 [ 242.390467][T11406] pgpgout 144420 [ 242.397454][T11406] pgfault 176636 [ 242.418585][T11406] pgmajfault 332 [ 242.426619][T11406] inactive_anon 2338816 [ 242.429022][T11427] batadv_slave_1: entered promiscuous mode [ 242.435193][T11406] active_anon 14897152 [ 242.443146][T11406] inactive_file 0 [ 242.452537][T11406] active_file 0 [ 242.460489][T11406] unevictable 0 [ 242.467452][T11406] hierarchical_memory_limit 314572800 [ 242.470375][T11427] pimreg: entered allmulticast mode [ 242.479520][T11406] hierarchical_memsw_limit 9223372036854771712 [ 242.482793][T11427] pimreg: left allmulticast mode [ 242.492134][T11406] total_cache 8642560 [ 242.501831][T11406] total_rss 8593408 [ 242.510111][T11406] total_shmem 8642560 [ 242.518611][T11406] total_mapped_file 0 [ 242.526742][T11406] total_dirty 0 [ 242.533706][T11406] total_writeback 0 [ 242.540268][T11426] batadv_slave_1: left promiscuous mode [ 242.542012][T11406] total_workingset_refault_anon 2099 [ 242.561493][T11406] total_workingset_refault_file 1938 [ 242.573457][T11406] total_swap 8192 [ 242.589582][T11406] total_swapcached 3125248 [ 242.600005][T11406] total_pgpgin 148628 [ 242.607732][T11406] total_pgpgout 144420 [ 242.620814][T11406] total_pgfault 176636 [ 242.629443][T11406] total_pgmajfault 332 [ 242.637967][T11406] total_inactive_anon 2338816 [ 242.671518][T11406] total_active_anon 14897152 [ 242.680904][T11406] total_inactive_file 0 [ 242.690697][T11406] total_active_file 0 [ 242.717526][T11406] total_unevictable 0 [ 242.725546][T11406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2598,pid=11399,uid=0 [ 242.756871][T11406] Memory cgroup out of memory: Killed process 11399 (syz.2.2598) total-vm:96344kB, anon-rss:9612kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 243.106908][T11453] loop6: detected capacity change from 0 to 512 [ 243.113979][T11453] EXT4-fs: inline encryption not supported [ 243.160423][T11453] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 243.247234][ T28] audit: type=1400 audit(1773921192.330:6096): avc: denied { write } for pid=11460 comm="syz.6.2625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 244.205428][ T28] audit: type=1400 audit(1773921193.270:6097): avc: denied { accept } for pid=11482 comm="syz.6.2634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 244.286949][T11471] tipc: Started in network mode [ 244.302160][T11471] tipc: Node identity 0101010101010101, cluster identity 4711 [ 244.326302][T11471] tipc: Enabling of bearer rejected, failed to enable media [ 244.712464][T11475] syz.4.2630 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 244.734286][T11475] CPU: 1 UID: 0 PID: 11475 Comm: syz.4.2630 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.734326][T11475] Tainted: [W]=WARN [ 244.734336][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.734350][T11475] Call Trace: [ 244.734381][T11475] [ 244.734390][T11475] __dump_stack+0x1d/0x30 [ 244.734422][T11475] dump_stack_lvl+0x95/0xd0 [ 244.734544][T11475] dump_stack+0x15/0x1b [ 244.734570][T11475] dump_header+0x80/0x240 [ 244.734598][T11475] oom_kill_process+0x295/0x350 [ 244.734626][T11475] out_of_memory+0x97d/0xb80 [ 244.734678][T11475] try_charge_memcg+0x62e/0xa10 [ 244.734724][T11475] __mem_cgroup_charge+0x65/0x150 [ 244.734763][T11475] shmem_get_folio_gfp+0x47b/0xd60 [ 244.734879][T11475] shmem_write_begin+0xfc/0x1f0 [ 244.734912][T11475] generic_perform_write+0x183/0x490 [ 244.734948][T11475] shmem_file_write_iter+0xc5/0xf0 [ 244.735056][T11475] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 244.735088][T11475] vfs_write+0x5a6/0x9f0 [ 244.735140][T11475] ksys_write+0xdc/0x1a0 [ 244.735165][T11475] __x64_sys_write+0x40/0x50 [ 244.735189][T11475] x64_sys_call+0x27e1/0x3020 [ 244.735223][T11475] do_syscall_64+0x12c/0x370 [ 244.735332][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.735358][T11475] RIP: 0033:0x7fd62374c799 [ 244.735400][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.735421][T11475] RSP: 002b:00007fd62217e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.735445][T11475] RAX: ffffffffffffffda RBX: 00007fd6239c6090 RCX: 00007fd62374c799 [ 244.735505][T11475] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 244.735520][T11475] RBP: 00007fd6237e2c99 R08: 0000000000000000 R09: 0000000000000000 [ 244.735533][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.735545][T11475] R13: 00007fd6239c6128 R14: 00007fd6239c6090 R15: 00007ffc08fd2708 [ 244.735613][T11475] [ 244.959302][T11475] memory: usage 165224kB, limit 307200kB, failcnt 569 [ 244.986087][T11475] memory+swap: usage 185424kB, limit 9007199254740988kB, failcnt 0 [ 244.994045][T11475] kmem: usage 143768kB, limit 9007199254740988kB, failcnt 0 [ 245.001572][T11475] Memory cgroup stats for /syz4: [ 245.002102][T11475] cache 16691200 [ 245.010983][T11475] rss 8777728 [ 245.014511][T11475] shmem 16637952 [ 245.018572][T11475] mapped_file 53248 [ 245.022517][T11475] dirty 0 [ 245.025980][T11475] writeback 0 [ 245.029442][T11475] workingset_refault_anon 52 [ 245.034397][T11475] workingset_refault_file 2894 [ 245.040628][T11475] swap 176128 [ 245.044162][T11475] swapcached 11128832 [ 245.048993][T11475] pgpgin 282762 [ 245.052634][T11475] pgpgout 276544 [ 245.056519][T11475] pgfault 222014 [ 245.060230][T11475] pgmajfault 45 [ 245.063822][T11475] inactive_anon 12718080 [ 245.068818][T11475] active_anon 12697600 [ 245.073140][T11475] inactive_file 4096 [ 245.077459][T11475] active_file 0 [ 245.081119][T11475] unevictable 49152 [ 245.085093][T11475] hierarchical_memory_limit 314572800 [ 245.090795][T11475] hierarchical_memsw_limit 9223372036854771712 [ 245.097330][T11475] total_cache 16691200 [ 245.101906][T11475] total_rss 8777728 [ 245.121500][T11475] total_shmem 16637952 [ 245.127418][T11475] total_mapped_file 53248 [ 245.131796][T11475] total_dirty 0 [ 245.135575][T11475] total_writeback 0 [ 245.139389][T11475] total_workingset_refault_anon 52 [ 245.144518][T11475] total_workingset_refault_file 2894 [ 245.149946][T11475] total_swap 176128 [ 245.153843][T11475] total_swapcached 11128832 [ 245.158468][T11475] total_pgpgin 282762 [ 245.162527][T11475] total_pgpgout 276544 [ 245.166667][T11475] total_pgfault 222014 [ 245.170772][T11475] total_pgmajfault 45 [ 245.174764][T11475] total_inactive_anon 12718080 [ 245.179554][T11475] total_active_anon 12697600 [ 245.184186][T11475] total_inactive_file 4096 [ 245.188670][T11475] total_active_file 0 [ 245.192718][T11475] total_unevictable 49152 [ 245.197078][T11475] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.268,pid=4367,uid=0 [ 245.211772][T11475] Memory cgroup out of memory: Killed process 4367 (syz.4.268) total-vm:94032kB, anon-rss:1236kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 245.307485][ T1507] IPVS: starting estimator thread 0... [ 245.328678][T11504] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 245.344034][T11508] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 245.367550][T11508] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 245.415552][T11502] IPVS: using max 2544 ests per chain, 127200 per kthread [ 245.559685][ T28] audit: type=1400 audit(1773921194.640:6098): avc: denied { cpu } for pid=11518 comm="syz.2.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 245.764942][T11531] syzkaller0: entered allmulticast mode [ 245.784694][T11531] syzkaller0: entered promiscuous mode [ 245.809673][T11531] syzkaller0 (unregistering): left promiscuous mode [ 245.836563][T11531] syzkaller0 (unregistering): left allmulticast mode [ 247.451019][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2659'. [ 250.812714][T11630] dvmrp1: left allmulticast mode [ 251.236866][T11620] loop5: detected capacity change from 0 to 512 [ 251.311854][T11620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 251.322759][T11620] System zones: 1-12 [ 251.356429][T11620] EXT4-fs (loop5): orphan cleanup on readonly fs [ 251.395137][T11620] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2685: invalid indirect mapped block 8 (level 2) [ 251.463613][ T28] audit: type=1400 audit(1773921200.540:6099): avc: denied { ioctl } for pid=11643 comm="syz.2.2694" path="socket:[56584]" dev="sockfs" ino=56584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.490917][T11620] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.495295][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 251.510897][ C1] EXT4-fs (loop5): initial error at time 1773921200: ext4_free_branches:1023: inode 11 [ 251.520577][ C1] EXT4-fs (loop5): last error at time 1773921200: ext4_free_branches:1023: inode 11 [ 251.535759][T11620] EXT4-fs (loop5): 1 truncate cleaned up [ 251.555209][T11620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 251.612399][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 251.628424][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.804119][T11661] netlink: 'syz.1.2702': attribute type 1 has an invalid length. [ 251.838526][T11661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 251.904166][T11661] bond4: (slave geneve3): making interface the new active one [ 251.919580][T11661] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 251.928998][ T4242] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.945191][ T4242] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.954198][ T4242] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.962705][ T4242] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.798076][ T28] audit: type=1400 audit(1773921201.870:6100): avc: denied { create } for pid=11691 comm="syz.4.2713" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.891326][ T28] audit: type=1400 audit(1773921201.920:6101): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.938158][ T28] audit: type=1400 audit(1773921202.010:6102): avc: denied { lock } for pid=11695 comm="syz.5.2715" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 253.633773][ T28] audit: type=1400 audit(1773921202.700:6103): avc: denied { mount } for pid=11717 comm="syz.5.2722" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 253.768236][ T28] audit: type=1326 audit(1773921202.850:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.2.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 253.837070][ T28] audit: type=1326 audit(1773921202.850:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.2.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 253.891149][ T28] audit: type=1326 audit(1773921202.850:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.2.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 253.955901][ T28] audit: type=1326 audit(1773921202.850:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.2.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 254.036056][ T28] audit: type=1326 audit(1773921202.850:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11734 comm="syz.2.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3a967dc799 code=0x7ffc0000 [ 254.711957][T11763] Invalid ELF header magic: != ELF [ 254.990897][T11777] loop5: detected capacity change from 0 to 128 [ 255.149153][T11777] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.208821][T11777] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.668523][ T6176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.938348][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 256.938376][ T28] audit: type=1400 audit(1773921206.020:6161): avc: denied { create } for pid=11832 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.011929][ T28] audit: type=1400 audit(1773921206.050:6162): avc: denied { connect } for pid=11832 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.032250][ T28] audit: type=1400 audit(1773921206.060:6163): avc: denied { read } for pid=11832 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.084252][ T28] audit: type=1400 audit(1773921206.110:6164): avc: denied { write } for pid=11832 comm="syz.6.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.314922][T11846] loop5: detected capacity change from 0 to 1024 [ 257.365498][T11846] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 257.385721][T11846] System zones: 0-1, 3-36 [ 257.401751][ T28] audit: type=1400 audit(1773921206.480:6165): avc: denied { setopt } for pid=11849 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 257.441211][T11846] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2767: bad orphan inode 134217728 [ 257.454463][T11846] loop5: lost filesystem error report for type 5 error -117 [ 257.455393][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 257.471122][ C1] EXT4-fs (loop5): initial error at time 1773921206: ext4_orphan_get:1417 [ 257.480694][ C1] EXT4-fs (loop5): last error at time 1773921206: ext4_orphan_get:1417 [ 257.512222][T11846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.891868][T11860] loop6: detected capacity change from 0 to 128 [ 258.036504][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.192527][ T28] audit: type=1400 audit(1773921207.250:6166): avc: denied { bind } for pid=11870 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.391030][T11871] syz.5.2775 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 258.426209][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.5.2775 Tainted: G W syzkaller #0 PREEMPT(full) [ 258.426251][T11871] Tainted: [W]=WARN [ 258.426260][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.426275][T11871] Call Trace: [ 258.426284][T11871] [ 258.426295][T11871] __dump_stack+0x1d/0x30 [ 258.426325][T11871] dump_stack_lvl+0x95/0xd0 [ 258.426398][T11871] dump_stack+0x15/0x1b [ 258.426424][T11871] dump_header+0x80/0x240 [ 258.426452][T11871] oom_kill_process+0x295/0x350 [ 258.426546][T11871] out_of_memory+0x97d/0xb80 [ 258.426586][T11871] try_charge_memcg+0x62e/0xa10 [ 258.426685][T11871] obj_cgroup_charge_pages+0x23/0xc0 [ 258.426720][T11871] __memcg_kmem_charge_page+0x9e/0x170 [ 258.426757][T11871] __alloc_frozen_pages_noprof+0x18a/0x360 [ 258.426794][T11871] alloc_pages_mpol+0xb3/0x260 [ 258.426846][T11871] alloc_pages_noprof+0x8f/0x130 [ 258.426880][T11871] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 258.426923][T11871] __kvmalloc_node_noprof+0x3d4/0x650 [ 258.427001][T11871] ? futex_hash_allocate+0x190/0x9d0 [ 258.427034][T11871] ? futex_hash_allocate+0x190/0x9d0 [ 258.427068][T11871] futex_hash_allocate+0x190/0x9d0 [ 258.427148][T11871] ? cap_task_prctl+0x13f/0x6e0 [ 258.427179][T11871] futex_hash_prctl+0xd8/0xf0 [ 258.427208][T11871] __se_sys_prctl+0xa3d/0x13f0 [ 258.427297][T11871] __x64_sys_prctl+0x67/0x80 [ 258.427365][T11871] x64_sys_call+0x2533/0x3020 [ 258.427397][T11871] do_syscall_64+0x12c/0x370 [ 258.427426][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.427507][T11871] RIP: 0033:0x7f8f8c27c799 [ 258.427524][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.427542][T11871] RSP: 002b:00007f8f8accf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 258.427575][T11871] RAX: ffffffffffffffda RBX: 00007f8f8c4f5fa0 RCX: 00007f8f8c27c799 [ 258.427647][T11871] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 258.427663][T11871] RBP: 00007f8f8c312c99 R08: 0000000000000000 R09: 0000000000000000 [ 258.427746][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.427759][T11871] R13: 00007f8f8c4f6038 R14: 00007f8f8c4f5fa0 R15: 00007ffcaf0dffb8 [ 258.427783][T11871] [ 258.427793][T11871] memory: usage 307200kB, limit 307200kB, failcnt 500 [ 258.685291][T11871] memory+swap: usage 358392kB, limit 9007199254740988kB, failcnt 0 [ 258.693406][T11871] kmem: usage 289984kB, limit 9007199254740988kB, failcnt 0 [ 258.715316][T11871] Memory cgroup stats for /syz5: [ 258.715689][T11871] cache 17104896 [ 258.724814][T11871] rss 397312 [ 258.729107][T11871] shmem 17104896 [ 258.732711][T11871] mapped_file 0 [ 258.736709][T11871] dirty 0 [ 258.739722][T11871] writeback 0 [ 258.743074][T11871] workingset_refault_anon 1473 [ 258.757455][T11871] workingset_refault_file 0 [ 258.766592][T11871] swap 52420608 [ 258.774440][T11871] swapcached 62754816 [ 258.785037][T11871] pgpgin 119085 [ 258.794122][T11871] pgpgout 114781 [ 258.803244][T11871] pgfault 127397 [ 258.813720][T11871] pgmajfault 206 [ 258.822882][T11871] inactive_anon 17326080 [ 258.827400][T11871] active_anon 299008 [ 258.841459][T11871] inactive_file 0 [ 258.846262][T11871] active_file 4096 [ 258.852236][T11871] unevictable 0 [ 258.860137][T11871] hierarchical_memory_limit 314572800 [ 258.872199][T11871] hierarchical_memsw_limit 9223372036854771712 [ 258.886467][T11871] total_cache 17104896 [ 258.893908][T11871] total_rss 397312 [ 258.900911][T11871] total_shmem 17104896 [ 258.907729][T11871] total_mapped_file 0 [ 258.911800][T11871] total_dirty 0 [ 258.915663][T11871] total_writeback 0 [ 258.919512][T11871] total_workingset_refault_anon 1473 [ 258.924866][T11871] total_workingset_refault_file 0 [ 258.930874][T11871] total_swap 52420608 [ 258.960466][T11871] total_swapcached 62754816 [ 258.969573][T11871] total_pgpgin 119085 [ 258.987274][T11871] total_pgpgout 114781 [ 259.024379][T11871] total_pgfault 127397 [ 259.028613][T11871] total_pgmajfault 206 [ 259.032699][T11871] total_inactive_anon 17326080 [ 259.074695][T11871] total_active_anon 299008 [ 259.095385][T11871] total_inactive_file 0 [ 259.099589][T11871] total_active_file 4096 [ 259.103936][T11871] total_unevictable 0 [ 259.170400][T11871] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2775,pid=11867,uid=0 [ 259.221284][T11871] Memory cgroup out of memory: Killed process 11871 (syz.5.2775) total-vm:96212kB, anon-rss:1420kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 260.388488][ T28] audit: type=1400 audit(1773921209.450:6167): avc: denied { setopt } for pid=11998 comm="syz.4.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 260.450161][T12005] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 260.508646][T12005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.523088][T12007] bond1: (slave bridge10): making interface the new active one [ 260.532060][T12007] bond1: (slave bridge10): Enslaving as an active interface with an up link [ 261.384280][ T28] audit: type=1400 audit(1773921210.450:6168): avc: denied { ioctl } for pid=12035 comm="syz.6.2808" path="socket:[57648]" dev="sockfs" ino=57648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.636848][ T28] audit: type=1400 audit(1773921210.720:6169): avc: denied { read } for pid=12039 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 261.840296][T12053] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2814'. [ 261.849738][T12053] netlink: zone id is out of range [ 261.854864][T12053] netlink: zone id is out of range [ 261.862909][T12053] netlink: zone id is out of range [ 261.875768][T12053] netlink: zone id is out of range [ 261.892414][T12053] netlink: zone id is out of range [ 261.907587][T12053] netlink: zone id is out of range [ 261.930928][T12053] netlink: zone id is out of range [ 261.948527][T12053] netlink: zone id is out of range [ 261.986168][T12053] netlink: zone id is out of range [ 261.996507][T12053] netlink: zone id is out of range [ 263.120208][T12087] loop6: detected capacity change from 0 to 1024 [ 263.210101][T12087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 263.220368][T12087] System zones: 0-1, 3-36 [ 263.246492][T12087] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2826: bad orphan inode 134217728 [ 263.259376][T12087] loop6: lost filesystem error report for type 5 error -117 [ 263.280504][T12087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.646319][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.183144][ T28] audit: type=1400 audit(1773921213.260:6170): avc: denied { mount } for pid=12108 comm="syz.2.2833" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 265.254248][T12146] netlink: 'syz.6.2844': attribute type 1 has an invalid length. [ 265.275905][T12146] gretap1: entered allmulticast mode [ 265.283247][T12146] bond3: (slave gretap1): making interface the new active one [ 265.291301][T12146] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 267.814318][T12176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2856'. [ 267.907481][ T28] audit: type=1400 audit(1773921216.990:6171): avc: denied { read } for pid=12175 comm="syz.2.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.660736][T12198] usb usb7: usbfs: process 12198 (syz.6.2866) did not claim interface 0 before use [ 269.330888][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'. [ 269.374663][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2874'. [ 269.476820][ T28] audit: type=1326 audit(1773921218.560:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7fc00000 [ 269.504806][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'. [ 269.514444][ T28] audit: type=1326 audit(1773921218.580:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb2ddb4c799 code=0x7fc00000 [ 269.540211][ T28] audit: type=1326 audit(1773921218.620:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.6.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7fc00000 [ 269.617266][T12238] loop6: detected capacity change from 0 to 4096 [ 269.632454][T12238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.655523][ T28] audit: type=1400 audit(1773921218.730:6175): avc: denied { setattr } for pid=12237 comm="syz.6.2879" name="bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 269.709523][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.840957][ T28] audit: type=1400 audit(1773921218.740:6176): avc: denied { remove_name } for pid=12237 comm="syz.6.2879" name="bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.898804][ T28] audit: type=1400 audit(1773921218.740:6177): avc: denied { rmdir } for pid=12237 comm="syz.6.2879" name="bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 269.903576][T12247] lo speed is unknown, defaulting to 1000 [ 270.076049][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2887'. [ 270.125696][T12258] vlan2: entered allmulticast mode [ 270.130866][T12258] bridge0: entered allmulticast mode [ 270.156096][T12258] bridge5: port 1(vlan2) entered blocking state [ 270.172848][T12258] bridge5: port 1(vlan2) entered disabled state [ 270.188474][T12258] vlan2: entered promiscuous mode [ 270.197455][T12258] bridge0: entered promiscuous mode [ 270.552151][T12248] loop5: detected capacity change from 0 to 2048 [ 270.578532][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2891'. [ 270.587851][ T28] audit: type=1326 audit(1773921219.660:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7fc00000 [ 270.639694][ T28] audit: type=1326 audit(1773921219.660:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd62374c799 code=0x7fc00000 [ 270.682623][ T28] audit: type=1326 audit(1773921219.710:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12263 comm="syz.4.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7fc00000 [ 270.743793][T12279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12279 comm=syz.2.2894 [ 270.751398][T12280] loop6: detected capacity change from 0 to 512 [ 270.757313][T12279] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 270.790340][T12248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.797155][T12279] bond4: (slave gretap1): making interface the new active one [ 270.804449][T12280] EXT4-fs: Ignoring removed oldalloc option [ 270.831700][T12279] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 270.841207][T12248] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.882708][T12280] EXT4-fs (loop6): 1 truncate cleaned up [ 270.895862][T12280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.913748][T12279] vlan0: entered allmulticast mode [ 270.922390][T12279] bond4: entered allmulticast mode [ 270.927948][T12279] gretap1: entered allmulticast mode [ 270.934347][T12279] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.978418][ T28] audit: type=1400 audit(1773921220.060:6181): avc: denied { map } for pid=12277 comm="syz.6.2895" path="pipe:[24597]" dev="pipefs" ino=24597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 271.057326][T12289] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2883: bg 0: block 345: padding at end of block bitmap is not set [ 271.127753][T12289] EXT4-fs (loop5): Remounting filesystem read-only [ 271.510399][ T8000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.574615][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.454746][T12321] loop6: detected capacity change from 0 to 2048 [ 272.462654][T12321] EXT4-fs: Ignoring removed i_version option [ 272.768539][T12321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.429371][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 273.498043][T12337] netlink: 'syz.5.2913': attribute type 1 has an invalid length. [ 273.509929][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2907'. [ 273.512653][T12337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.560955][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2913'. [ 273.570216][T12337] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 273.581210][T12337] bond5: entered allmulticast mode [ 273.585415][ T264] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 273.615528][T12337] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 273.668978][ T264] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 273.766130][ T264] EXT4-fs (loop6): This should not happen!! Data will be lost [ 273.766130][ T264] [ 273.776034][ T264] EXT4-fs (loop6): Total free blocks count 0 [ 273.782056][ T264] EXT4-fs (loop6): Free/Dirty block details [ 273.788212][ T264] EXT4-fs (loop6): free_blocks=2415919504 [ 273.794236][ T264] EXT4-fs (loop6): dirty_blocks=3936 [ 273.800101][ T264] EXT4-fs (loop6): Block reservation details [ 273.807286][ T264] EXT4-fs (loop6): i_reserved_data_blocks=246 [ 273.828162][ T264] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1872 with error 28 [ 273.957987][T12352] bridge0: port 1(gretap0) entered blocking state [ 273.979726][T12352] bridge0: port 1(gretap0) entered disabled state [ 274.002657][T12352] gretap0: entered allmulticast mode [ 274.018091][T12352] gretap0: entered promiscuous mode [ 274.233994][T12356] Process accounting resumed [ 274.481039][T12345] syz.6.2914 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 274.495408][T12345] CPU: 0 UID: 0 PID: 12345 Comm: syz.6.2914 Tainted: G W syzkaller #0 PREEMPT(full) [ 274.495480][T12345] Tainted: [W]=WARN [ 274.495488][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.495504][T12345] Call Trace: [ 274.495512][T12345] [ 274.495522][T12345] __dump_stack+0x1d/0x30 [ 274.495558][T12345] dump_stack_lvl+0x95/0xd0 [ 274.495652][T12345] dump_stack+0x15/0x1b [ 274.495741][T12345] dump_header+0x80/0x240 [ 274.495764][T12345] oom_kill_process+0x295/0x350 [ 274.495789][T12345] out_of_memory+0x97d/0xb80 [ 274.495817][T12345] try_charge_memcg+0x62e/0xa10 [ 274.495876][T12345] obj_cgroup_charge_pages+0x23/0xc0 [ 274.495912][T12345] __memcg_kmem_charge_page+0x9e/0x170 [ 274.495983][T12345] __alloc_frozen_pages_noprof+0x18a/0x360 [ 274.496023][T12345] alloc_pages_mpol+0xb3/0x260 [ 274.496053][T12345] alloc_pages_noprof+0x8f/0x130 [ 274.496087][T12345] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 274.496130][T12345] __kvmalloc_node_noprof+0x3d4/0x650 [ 274.496195][T12345] ? futex_hash_allocate+0x190/0x9d0 [ 274.496262][T12345] ? futex_hash_allocate+0x190/0x9d0 [ 274.496290][T12345] futex_hash_allocate+0x190/0x9d0 [ 274.496333][T12345] ? cap_task_prctl+0x13f/0x6e0 [ 274.496445][T12345] futex_hash_prctl+0xd8/0xf0 [ 274.496472][T12345] __se_sys_prctl+0xa3d/0x13f0 [ 274.496568][T12345] __x64_sys_prctl+0x67/0x80 [ 274.496678][T12345] x64_sys_call+0x2533/0x3020 [ 274.496722][T12345] do_syscall_64+0x12c/0x370 [ 274.496754][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.496782][T12345] RIP: 0033:0x7fb2ddb4c799 [ 274.496801][T12345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.496821][T12345] RSP: 002b:00007fb2dc5a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 274.496857][T12345] RAX: ffffffffffffffda RBX: 00007fb2dddc5fa0 RCX: 00007fb2ddb4c799 [ 274.496876][T12345] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 274.496893][T12345] RBP: 00007fb2ddbe2c99 R08: 0000000000000000 R09: 0000000000000000 [ 274.496910][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.496925][T12345] R13: 00007fb2dddc6038 R14: 00007fb2dddc5fa0 R15: 00007ffc013c0488 [ 274.496944][T12345] [ 274.497827][T12345] memory: usage 307200kB, limit 307200kB, failcnt 581 [ 274.552122][T12368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12368 comm=syz.2.2922 [ 274.745569][T12345] memory+swap: usage 312864kB, limit 9007199254740988kB, failcnt 0 [ 274.789477][T12345] kmem: usage 244600kB, limit 9007199254740988kB, failcnt 0 [ 274.797241][T12345] Memory cgroup stats for /syz6: [ 274.797526][T12345] cache 63782912 [ 274.875617][T12345] rss 299008 [ 274.879050][T12345] shmem 63782912 [ 274.882613][T12345] mapped_file 0 [ 274.897270][T12345] dirty 0 [ 274.900270][T12345] writeback 0 [ 274.903598][T12345] workingset_refault_anon 1019 [ 274.930228][T12345] workingset_refault_file 0 [ 274.934875][T12345] swap 5799936 [ 274.954250][T12345] swapcached 9539584 [ 274.988648][T12345] pgpgin 201935 [ 274.992160][T12345] pgpgout 186285 [ 275.030609][T12345] pgfault 151056 [ 275.034247][T12345] pgmajfault 136 [ 275.042449][T12345] inactive_anon 368640 [ 275.062872][T12345] active_anon 63733760 [ 275.073014][T12345] inactive_file 0 [ 275.085588][T12345] active_file 0 [ 275.090817][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'. [ 275.095797][T12345] unevictable 0 [ 275.105725][T12345] hierarchical_memory_limit 314572800 [ 275.111201][T12345] hierarchical_memsw_limit 9223372036854771712 [ 275.115740][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2933'. [ 275.118502][ T28] audit: type=1400 audit(1773921224.190:6182): avc: denied { read } for pid=12394 comm="syz.1.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.147202][T12345] total_cache 63782912 [ 275.151638][T12345] total_rss 299008 [ 275.155581][T12345] total_shmem 63782912 [ 275.159802][T12345] total_mapped_file 0 [ 275.163805][T12345] total_dirty 0 [ 275.167378][T12345] total_writeback 0 [ 275.171270][T12345] total_workingset_refault_anon 1019 [ 275.176686][T12345] total_workingset_refault_file 0 [ 275.181771][T12345] total_swap 5799936 [ 275.185865][T12345] total_swapcached 9539584 [ 275.190385][T12345] total_pgpgin 201935 [ 275.194592][T12345] total_pgpgout 186285 [ 275.204386][T12399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12399 comm=syz.2.2932 [ 275.206766][T12345] total_pgfault 151056 [ 275.221371][T12345] total_pgmajfault 136 [ 275.226000][T12345] total_inactive_anon 368640 [ 275.230692][T12345] total_active_anon 63733760 [ 275.235661][T12345] total_inactive_file 0 [ 275.240081][T12345] total_active_file 0 [ 275.244208][T12345] total_unevictable 0 [ 275.248370][T12345] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2914,pid=12344,uid=0 [ 275.263372][T12345] Memory cgroup out of memory: Killed process 12345 (syz.6.2914) total-vm:96212kB, anon-rss:1416kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 275.465065][T12412] tipc: Failed to remove unknown binding: 66,0,0/0:2663849402/2663849403 [ 275.800776][T12424] Process accounting resumed [ 276.498329][T12445] loop6: detected capacity change from 0 to 256 [ 276.563622][T12445] loop6: detected capacity change from 0 to 764 [ 276.579650][T12445] iso9660: Unknown parameter 'ÿÿÿ' [ 276.664659][ T28] audit: type=1400 audit(1773921225.740:6183): avc: denied { read } for pid=12442 comm="syz.6.2948" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 276.736408][ T28] audit: type=1400 audit(1773921225.740:6184): avc: denied { open } for pid=12442 comm="syz.6.2948" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 277.775432][T12488] lo speed is unknown, defaulting to 1000 [ 278.118544][ T28] audit: type=1400 audit(1773921227.200:6185): avc: denied { write } for pid=12491 comm="syz.6.2964" path="socket:[59971]" dev="sockfs" ino=59971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.042039][ T28] audit: type=1400 audit(1773921228.120:6186): avc: denied { listen } for pid=12515 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 279.073524][T12516] netlink: 'syz.2.2974': attribute type 2 has an invalid length. [ 279.107925][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 279.789667][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2989'. [ 279.888712][T12558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12558 comm=syz.1.2989 [ 279.922192][T12562] bridge0: port 3(gretap0) entered blocking state [ 279.929527][T12562] bridge0: port 3(gretap0) entered disabled state [ 279.965737][T12562] gretap0: entered allmulticast mode [ 279.971794][T12562] gretap0: entered promiscuous mode [ 280.259206][ T28] audit: type=1326 audit(1773921229.340:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.309191][ T28] audit: type=1326 audit(1773921229.340:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.343057][ T28] audit: type=1326 audit(1773921229.340:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.367512][ T28] audit: type=1326 audit(1773921229.340:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.391823][ T28] audit: type=1326 audit(1773921229.340:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.415713][ T28] audit: type=1326 audit(1773921229.340:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.454622][ T28] audit: type=1326 audit(1773921229.340:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.478503][ T28] audit: type=1326 audit(1773921229.340:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.503896][ T28] audit: type=1326 audit(1773921229.340:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 280.527763][ T28] audit: type=1326 audit(1773921229.340:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.4.2995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd62374c799 code=0x7ffc0000 [ 281.330270][T12613] tipc: Failed to remove unknown binding: 66,0,0/0:1690318916/1690318917 [ 281.496133][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3013'. [ 281.509457][T12618] loop5: detected capacity change from 0 to 1024 [ 281.533490][T12618] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 281.616073][T12618] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 281.645455][T12618] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 281.740815][T12627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12627 comm=syz.1.3013 [ 281.985347][T12618] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.3012: unexpected bad inode w/o EXT4_IGET_BAD [ 281.998927][T12618] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 281.999149][T12618] EXT4-fs (loop5): no journal found [ 282.008326][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 282.008371][ C1] EXT4-fs (loop5): initial error at time 1773921231: ext4_get_journal_inode:5863: inode 5 [ 282.008402][ C1] EXT4-fs (loop5): last error at time 1773921231: ext4_get_journal_inode:5863: inode 5 [ 282.093478][T12618] EXT4-fs (loop5): can't get journal size [ 282.236139][T12618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.433013][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.305907][T12646] infiniband syz1: set down [ 283.321239][T12646] infiniband syz1: added syz_tun [ 283.343507][T12646] RDS/IB: syz1: added [ 283.347984][T12646] smc: adding ib device syz1 with port count 1 [ 283.354291][T12646] smc: ib device syz1 port 1 has no pnetid [ 283.523445][T12662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12662 comm=syz.4.3028 [ 283.553893][T12659] lo speed is unknown, defaulting to 1000 [ 284.053764][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 284.074024][T12686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3036'. [ 284.137542][T12686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12686 comm=syz.2.3036 [ 284.178345][T12690] netlink: 'syz.4.3037': attribute type 27 has an invalid length. [ 284.340412][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.389735][T12690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.394851][T12709] netlink: 'syz.2.3040': attribute type 16 has an invalid length. [ 284.409983][T12709] netlink: 'syz.2.3040': attribute type 17 has an invalid length. [ 284.486761][T12690] vlan0: left promiscuous mode [ 284.496007][T12690] bond0: left promiscuous mode [ 284.505496][T12690] geneve0: left promiscuous mode [ 284.526613][ T1507] lo speed is unknown, defaulting to 1000 [ 284.542448][T12694] bridge0: port 3(gretap0) entered blocking state [ 284.549021][T12694] bridge0: port 3(gretap0) entered forwarding state [ 284.604576][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.651227][T12694] net_ratelimit: 352 callbacks suppressed [ 284.651242][T12694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.760986][T12723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12723 comm=syz.6.3044 [ 284.773533][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.786471][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.797302][T12709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.814172][ T30] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.832445][ T30] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.862546][ T30] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.874074][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3044'. [ 284.880160][T12723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12723 comm=syz.6.3044 [ 284.907055][ T3426] lo speed is unknown, defaulting to 1000 [ 284.923799][ T30] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.949711][T12706] lo speed is unknown, defaulting to 1000 [ 286.456318][T12768] openvswitch: netlink: Missing key (keys=40, expected=100) [ 287.391041][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3073'. [ 287.753852][T12823] lo speed is unknown, defaulting to 1000 [ 287.808358][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 287.808377][ T28] audit: type=1400 audit(1773921236.890:6209): avc: denied { cmd } for pid=12819 comm="syz.2.3077" path="/623/file0" dev="tmpfs" ino=3229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 287.982357][T12827] lo speed is unknown, defaulting to 1000 [ 289.486565][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3088'. [ 289.877747][T12874] loop5: detected capacity change from 0 to 8192 [ 289.947494][T12874] loop5: p1 p2 p4 [ 289.952291][T12877] netlink: 'syz.1.3096': attribute type 27 has an invalid length. [ 289.961614][T12874] loop5: p4 size 262912 extends beyond EOD, truncated [ 289.984429][T12877] macsec1: left promiscuous mode [ 289.990060][T12874] netlink: 'syz.5.3094': attribute type 1 has an invalid length. [ 290.012422][T12877] geneve2: left promiscuous mode [ 290.042987][T12877] ip6gre1: left promiscuous mode [ 290.048215][T12877] ip6gre1: left allmulticast mode [ 290.053841][T12877] bond3: left allmulticast mode [ 290.075694][T12877] bridge12: left promiscuous mode [ 290.089112][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3098'. [ 290.100502][T12877] bridge12: left allmulticast mode [ 290.209092][T12879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.229769][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 290.238746][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 290.241341][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 290.262928][T12879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.287576][T12885] bond6: entered promiscuous mode [ 290.297134][T12885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.313100][ T264] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.321825][ T264] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.338480][ T3413] syz1: Port: 1 Link ACTIVE [ 290.353307][ T264] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.362375][ T264] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.508885][ T28] audit: type=1400 audit(1773921239.590:6210): avc: denied { read } for pid=12891 comm="syz.4.3101" path="socket:[63425]" dev="sockfs" ino=63425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 290.554381][T12885] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.570753][T12885] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 290.606252][T12885] bond6: (slave sit2): Error -95 calling set_mac_address [ 290.928585][T12916] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 291.054338][T12931] netlink: 'syz.2.3116': attribute type 83 has an invalid length. [ 291.228617][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3114'. [ 292.661297][T12958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 292.767224][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 292.816288][T12965] x_tables: duplicate underflow at hook 2 [ 292.894777][T12975] lo speed is unknown, defaulting to 1000 [ 292.968257][T12983] bridge0: port 3(gretap0) entered disabled state [ 293.141160][T12983] netlink: 'syz.4.3135': attribute type 16 has an invalid length. [ 293.185393][T12983] netlink: 'syz.4.3135': attribute type 17 has an invalid length. [ 293.195904][T12983] bridge0: port 3(gretap0) entered blocking state [ 293.202470][T12983] bridge0: port 3(gretap0) entered forwarding state [ 293.220308][T12983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.241934][T12960] lo speed is unknown, defaulting to 1000 [ 293.278118][T12992] lo speed is unknown, defaulting to 1000 [ 293.387713][ T28] audit: type=1326 audit(1773921242.470:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.460337][ T28] audit: type=1326 audit(1773921242.470:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.485178][ T28] audit: type=1326 audit(1773921242.470:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.513828][ T28] audit: type=1326 audit(1773921242.470:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.539973][ T28] audit: type=1326 audit(1773921242.470:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.564341][ T28] audit: type=1326 audit(1773921242.490:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.588864][ T28] audit: type=1326 audit(1773921242.490:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.667202][ T28] audit: type=1326 audit(1773921242.490:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.698922][ T28] audit: type=1326 audit(1773921242.490:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2ddb0cfce code=0x7ffc0000 [ 293.733616][ T28] audit: type=1326 audit(1773921242.490:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.6.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ddb4c799 code=0x7ffc0000 [ 293.808499][T13015] ================================================================== [ 293.816717][T13015] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 293.823689][T13015] [ 293.826040][T13015] read-write to 0xffff888126ba48ac of 4 bytes by task 13012 on cpu 0: [ 293.834264][T13015] fifo_open+0x86/0x5d0 [ 293.838532][T13015] do_dentry_open+0x4ca/0xa90 [ 293.843251][T13015] vfs_open+0x37/0x1e0 [ 293.847355][T13015] path_openat+0x1b70/0x2050 [ 293.851993][T13015] do_file_open_root+0x233/0x430 [ 293.856963][T13015] file_open_root+0xfd/0x130 [ 293.861756][T13015] do_handle_open+0x6b6/0x790 [ 293.866462][T13015] __x64_sys_open_by_handle_at+0x44/0x50 [ 293.872155][T13015] x64_sys_call+0x153d/0x3020 [ 293.877127][T13015] do_syscall_64+0x12c/0x370 [ 293.881760][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.887737][T13015] [ 293.890079][T13015] read to 0xffff888126ba48ac of 4 bytes by task 13015 on cpu 1: [ 293.897725][T13015] wait_for_partner+0xd5/0x1e0 [ 293.902518][T13015] fifo_open+0x462/0x5d0 [ 293.906790][T13015] do_dentry_open+0x4ca/0xa90 [ 293.911500][T13015] vfs_open+0x37/0x1e0 [ 293.915694][T13015] path_openat+0x1b70/0x2050 [ 293.920334][T13015] do_file_open+0x16c/0x290 [ 293.924963][T13015] do_sys_openat2+0x94/0x130 [ 293.929587][T13015] __x64_sys_openat+0xf2/0x120 [ 293.934397][T13015] x64_sys_call+0x1e39/0x3020 [ 293.939191][T13015] do_syscall_64+0x12c/0x370 [ 293.943810][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.949725][T13015] [ 293.952074][T13015] value changed: 0x00000001 -> 0x00000002 [ 293.957803][T13015] [ 293.960143][T13015] Reported by Kernel Concurrency Sanitizer on: [ 293.966444][T13015] CPU: 1 UID: 0 PID: 13015 Comm: syz.6.3144 Tainted: G W syzkaller #0 PREEMPT(full) [ 293.977421][T13015] Tainted: [W]=WARN [ 293.981237][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.991321][T13015] ==================================================================