last executing test programs: 3m43.336374664s ago: executing program 32 (id=144): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000380)="ca091cc2e0", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x3], 0x0, 0x0, 0x1}}, 0x40) 3m36.792999411s ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 3m36.759152004s ago: executing program 2 (id=323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 3m36.717598437s ago: executing program 2 (id=325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006140)={&(0x7f00000004c0)='sctp_probe_path\x00', r0}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) 3m36.649763973s ago: executing program 2 (id=330): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 3m36.544251081s ago: executing program 2 (id=336): unshare(0x62040200) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x6d}, 0x2c) 3m36.000671865s ago: executing program 2 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) 3m35.986262006s ago: executing program 33 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0) 3m3.781497338s ago: executing program 3 (id=1700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 3m3.738976031s ago: executing program 3 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 3m3.667748977s ago: executing program 3 (id=1706): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) unshare(0x2040400) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 3m3.61921673s ago: executing program 3 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m3.457087304s ago: executing program 3 (id=1720): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x801, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=tcp']) 3m3.158085638s ago: executing program 3 (id=1730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000080)=0x2e9aa845) 3m3.146568459s ago: executing program 34 (id=1730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x27, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000080)=0x2e9aa845) 3m2.934068126s ago: executing program 5 (id=1740): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.923717177s ago: executing program 5 (id=1742): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0x32) close(r0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000001340)=""/4096) 3m2.909461628s ago: executing program 5 (id=1744): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x2000, 0x10000, 0x7, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 3m2.606465643s ago: executing program 5 (id=1750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.394745149s ago: executing program 5 (id=1757): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:iptables_conf_t:s0\x00', 0x25, 0x1) 3m1.790552378s ago: executing program 5 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 3m1.790390038s ago: executing program 35 (id=1774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2m56.457513198s ago: executing program 8 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m56.419746361s ago: executing program 8 (id=1913): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) 2m56.270806113s ago: executing program 8 (id=1920): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.245228065s ago: executing program 8 (id=1921): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m56.209379978s ago: executing program 8 (id=1922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@in6_addr=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1080}, 0x0) 2m55.049043662s ago: executing program 8 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2m55.039465873s ago: executing program 36 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2m50.500992968s ago: executing program 9 (id=2088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="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", 0x392}], 0x1}}], 0x2, 0x4048884) close(0x3) 2m50.48707429s ago: executing program 9 (id=2090): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2m50.447073373s ago: executing program 9 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 2m50.434904404s ago: executing program 9 (id=2096): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) 2m50.386114658s ago: executing program 9 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000240)=""/61}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) 2m48.86215841s ago: executing program 9 (id=2159): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m48.86206233s ago: executing program 37 (id=2159): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.219082663s ago: executing program 7 (id=8882): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) statx(r0, 0x0, 0x1000, 0x66f, &(0x7f0000000e80)) 2.185154856s ago: executing program 7 (id=8886): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.982033762s ago: executing program 7 (id=8900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) 1.981838332s ago: executing program 7 (id=8901): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x10cf, &(0x7f0000000540)={0x0, 0x7734, 0x800, 0x0, 0x34f}, &(0x7f0000000600), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.891361479s ago: executing program 1 (id=8908): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r0}, 0x0, &(0x7f00000013c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syslog(0x3, &(0x7f0000000040)=""/108, 0x6c) 1.75420496s ago: executing program 1 (id=8912): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 1.682130256s ago: executing program 1 (id=8914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.550080507s ago: executing program 1 (id=8918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.543994327s ago: executing program 1 (id=8921): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 1.413034367s ago: executing program 1 (id=8926): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008090) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207000502"], 0x10}}, 0x4) 1.331952934s ago: executing program 4 (id=8930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.325498124s ago: executing program 0 (id=8931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 1.258136979s ago: executing program 4 (id=8932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(0x0, 0x10041, 0x83) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200400000}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 1.257806219s ago: executing program 0 (id=8933): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$eJzs3c9vFFUcAPDvm/7gR9EWYlQ8aBNjIFFaWsAQ4wHuhOCPmxdXWgiy/Ait0aIHSPBiYrx4MPHkQfwvlOjVkzcPXjwZEmIMRxPXzHamLHS3tGXXqcznk0w7b95uvm9289038/bNbAC1NZn/ySL2RsTlFDHeUTccReXk8uPu/vXJ6XxJ0Wq99WeKVGwrH5+K/2PFk7dHxC8/ptgztDruwtLV841mc/5KUZ5evHB5emHp6oFzFxpn58/OX5x9dfbokcNHjs4c7Nu+nrjx/ofjn51859uv/04z3/12MsWx2FXUde5Hv0zG5Mpr0il/XY/2O1hFhor96XyL03CFDWJDyvdvJCKeifEYintv3nh8+kaljQMGqpUiWkBNJfkPNVUeB5Tn9oM4Dwa2pjvHlwcAVuf/8PLYYGxvjw3svJuic1gnRUQ/RubyGD//dPJGvsSAxuGA7q5dj4hnu+V/aufmRHsUP8//7L78zyLiVPE/3/7mJuNPPlCW//DfeZT8f7cj/9/bZHz5DwAAAAAAAP1z63hEvNLt+79sZf5PdJn/MxYRx/oQ/+Hf/2W3+xAG6OLO8YjXu87/zcqHTAwVpSfa8wFG0plzzfmDEfFkROyPkW15eWaNGAc+3/NVr7rO+X/5kscv5wIW7bg9vO3+58w1FhuPss/AsjvXI57rOv83rfT/qUv/n38eXF5njD0v3TzVq+7h+Q8MSuubiH1d+/97d65Ia9+fY7p9PDBdHhWs9vzHX3zfK778h+rk/f/OtfN/InXer2dh4zEOLQ23etVt9vh/NL3dvuXMaLHto8bi4pWZiNF0YvX22Y23GR5HZT6U+ZLn//4X1x7/63b8vyMirq0z5tP/jP3eq07/D9XJ839uQ/3/xldmb0780Cv++vr/w+0+fX+xxfgfrG29CVp1OwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/yiLiF2RsqmV9SybmooYi4inYmfWvLSw+PKZSx9cnMvr2r//n5W/9Du+XE7l7/9PdJRnHygfiojdEfHl0I52eer0peZc1TsPAAAAAAAAAAAAAAAAAAAAW8RYj+v/c38MVd06YOCGq24AUBn5D/Ul/6G+5D/Ul/yH+pL/UF/yH+pL/kN9yX+oL/kPAAAAAACPld0v3Po1RcS113a0l9xoUTdSacuAQcuqbgBQGbf4gfoy9Qfqyzk+kB5Sv33TzwQAAAAAAAAAAAAA+mXfXtf/Q125/h/qy/X/UF+u/4f6co4PuP4fAAAAAAAAAAAAALa+haWr5xvN5vwVK1asWFlZqfqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP0bAAD//zn7JB8=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000fc0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0xfff, 0x6b2, 0xff, 0x7, 0x8}}, 0x118) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6b2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000000000]}) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './bus'}, 0x9) 1.25492471s ago: executing program 4 (id=8934): set_tid_address(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x3f57955e7be81d85, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 1.207067703s ago: executing program 0 (id=8935): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 1.179798686s ago: executing program 4 (id=8936): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) 1.118233081s ago: executing program 0 (id=8937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) 1.017951009s ago: executing program 7 (id=8938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 941.875025ms ago: executing program 4 (id=8941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x4546, &(0x7f0000000380)={0x0, 0x4661, 0x800, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x5fe, 0x217, 0xa5, 0x0, 0x0) 718.180862ms ago: executing program 4 (id=8944): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)=';', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 370.22097ms ago: executing program 7 (id=8948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000500)={0x7, 0x4, 0x7, 0x8000}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x4, 0x1, 0x9}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000180)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 277.717317ms ago: executing program 0 (id=8951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffff9, 0xffffff62}]}}}}}}}, 0x0) 230.151521ms ago: executing program 6 (id=8952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) dup3(r3, r0, 0x80000) 229.874121ms ago: executing program 0 (id=8953): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000080)=""/102, 0x18) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) 229.721891ms ago: executing program 6 (id=8954): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 196.299554ms ago: executing program 6 (id=8955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xa}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x3b}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 126.61256ms ago: executing program 6 (id=8956): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 46.138746ms ago: executing program 6 (id=8957): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 0s ago: executing program 6 (id=8958): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f6261746164760024000380"], 0x50}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) kernel console output (not intermixed with test programs): get: fail, usb_gadget_register_driver returned -16 [ 171.488532][T17496] vlan2: entered allmulticast mode [ 171.493794][T17496] bridge_slave_0: entered allmulticast mode [ 171.570722][T17498] lo speed is unknown, defaulting to 1000 [ 171.703224][T17503] atomic_op ffff888102424d28 conn xmit_atomic 0000000000000000 [ 171.771352][T17511] dummy0: left allmulticast mode [ 171.779462][T17511] bridge0: port 3(dummy0) entered disabled state [ 171.808312][T17511] bridge_slave_0: left promiscuous mode [ 171.814273][T17511] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.839984][T17511] bridge_slave_1: left allmulticast mode [ 171.845677][T17511] bridge_slave_1: left promiscuous mode [ 171.851402][T17511] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.905568][T17511] bond0: (slave bond_slave_0): Releasing backup interface [ 172.007263][T17511] bond0: (slave bond_slave_1): Releasing backup interface [ 172.052379][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.059846][T17511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.099998][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.107446][T17511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.221441][T17511] bond1: (slave batadv1): Releasing active interface [ 172.250138][T17511] bond3: (slave bridge2): Releasing active interface [ 172.273973][T17521] vlan2: entered allmulticast mode [ 172.411037][T17529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.421614][T17529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.467669][T17469] syz.1.5528 (17469) used greatest stack depth: 6408 bytes left [ 172.498531][T17529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.508964][T17529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.566809][T17529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.577140][T17529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.598957][T17544] lo speed is unknown, defaulting to 1000 [ 172.660861][T17529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.671454][T17529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.739890][ T6688] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.748175][ T6688] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.767125][ T6688] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.775392][ T6688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.784717][ T6688] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.793226][ T6688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.842065][ T6688] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.850349][ T6688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.059996][T17583] __nla_validate_parse: 5 callbacks suppressed [ 173.060012][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5581'. [ 173.076693][T17585] lo speed is unknown, defaulting to 1000 [ 173.330911][T17613] bond0: (slave dummy0): Releasing backup interface [ 173.360346][T17613] bond0: (slave bond_slave_0): Releasing backup interface [ 173.372332][T17613] team0: Port device team_slave_0 removed [ 173.380000][T17613] team0: Port device team_slave_1 removed [ 173.386068][T17613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.397159][T17613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.522191][T17623] lo speed is unknown, defaulting to 1000 [ 173.552877][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5600'. [ 173.662752][T17648] bridge_slave_0: left allmulticast mode [ 173.668481][T17648] bridge_slave_0: left promiscuous mode [ 173.674181][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.691512][T17648] bridge_slave_1: left allmulticast mode [ 173.697266][T17648] bridge_slave_1: left promiscuous mode [ 173.703165][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.720473][T17648] bond0: (slave bond_slave_0): Releasing backup interface [ 173.728864][T17648] bond0: (slave bond_slave_1): Releasing backup interface [ 173.742552][T17648] team0: Port device team_slave_0 removed [ 173.751126][T17648] team0: Port device team_slave_1 removed [ 173.757022][T17648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.765110][T17648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.774664][T17648] batman_adv: batadv0: Removing interface: ip6gretap1 [ 173.782687][T17648] bond1: (slave bridge1): Releasing active interface [ 173.794634][T17646] lo speed is unknown, defaulting to 1000 [ 173.801521][T17658] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.845379][T17658] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.939742][T17666] lo speed is unknown, defaulting to 1000 [ 173.949837][T17672] vlan2: entered allmulticast mode [ 173.981332][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5621'. [ 174.001655][T17658] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.089029][T17658] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.106499][T17680] IPVS: stopping master sync thread 17684 ... [ 174.125721][T17685] siw: device registration error -23 [ 174.138704][T17687] pimreg: entered allmulticast mode [ 174.143806][T17685] openvswitch: netlink: Message has 6 unknown bytes. [ 174.151075][T17687] pimreg: left allmulticast mode [ 174.173892][ T6688] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.193007][ T6688] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.201328][ T6688] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.218504][ T6688] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.262832][T17698] : (slave bond_slave_0): Releasing backup interface [ 174.277566][T17698] : (slave bond_slave_1): Releasing backup interface [ 174.288281][T17698] team0: Port device team_slave_0 removed [ 174.297926][T17698] team0: Port device team_slave_1 removed [ 174.318551][T17698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.336544][T17698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.369078][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5632'. [ 174.378153][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5632'. [ 174.413532][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5632'. [ 174.422507][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5632'. [ 174.431710][ T6716] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.450242][ T6716] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.470918][ T6716] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.505169][ T6716] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.689106][T17770] lo speed is unknown, defaulting to 1000 [ 174.965387][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5660'. [ 175.136977][T17847] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5664'. [ 175.190713][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5666'. [ 175.228189][T17863] lo speed is unknown, defaulting to 1000 [ 175.330950][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 175.330966][ T29] audit: type=1400 audit(687.378:5661): avc: denied { ioctl } for pid=17881 comm="syz.4.5669" path="socket:[51419]" dev="sockfs" ino=51419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.665637][ T29] audit: type=1400 audit(687.708:5662): avc: denied { create } for pid=17935 comm="syz.0.5679" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.698243][ T29] audit: type=1400 audit(687.738:5663): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=6340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.784855][ T29] audit: type=1326 audit(687.828:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.841007][ T29] audit: type=1326 audit(687.848:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.864115][ T29] audit: type=1326 audit(687.848:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.887095][ T29] audit: type=1326 audit(687.858:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.910059][ T29] audit: type=1326 audit(687.858:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.933118][ T29] audit: type=1326 audit(687.858:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 175.956127][ T29] audit: type=1326 audit(687.858:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17951 comm="syz.1.5686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 176.005438][T17964] wireguard0: entered promiscuous mode [ 176.011033][T17964] wireguard0: entered allmulticast mode [ 176.187403][T17985] tipc: Enabling of bearer rejected, failed to enable media [ 176.208783][T17990] netlink: 'syz.4.5702': attribute type 21 has an invalid length. [ 176.218007][T17990] netlink: 'syz.4.5702': attribute type 1 has an invalid length. [ 176.565320][T18055] 0ªî{X¹¦: left allmulticast mode [ 176.657347][T18055] $Hÿ: left promiscuous mode [ 176.874509][T18055] bond2: left promiscuous mode [ 176.917188][T18062] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.927084][T18062] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.976395][ T6696] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.985028][ T6696] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.024426][ T6696] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.032879][ T6696] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.077887][ T6696] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.086546][ T6696] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.098817][T18123] lo speed is unknown, defaulting to 1000 [ 177.789530][T18260] lo speed is unknown, defaulting to 1000 [ 177.855843][T18267] IPVS: Error connecting to the multicast addr [ 177.884721][T18260] lo speed is unknown, defaulting to 1000 [ 177.924824][T18276] netlink: 'syz.7.5775': attribute type 2 has an invalid length. [ 177.932677][T18276] netlink: 'syz.7.5775': attribute type 1 has an invalid length. [ 178.292303][T18310] __nla_validate_parse: 10 callbacks suppressed [ 178.292318][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'. [ 178.307564][T18310] netlink: 'syz.1.5788': attribute type 18 has an invalid length. [ 178.315505][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'. [ 178.324558][T18310] netlink: 'syz.1.5788': attribute type 18 has an invalid length. [ 178.447579][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5795'. [ 178.470323][T18328] bond4: entered promiscuous mode [ 178.475479][T18328] bond4: entered allmulticast mode [ 178.480950][T18328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.494145][T18328] bond4 (unregistering): Released all slaves [ 178.673700][T18349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5806'. [ 178.682926][T18349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5806'. [ 178.776109][T18360] lo speed is unknown, defaulting to 1000 [ 178.818115][T18363] netlink: 'syz.1.5812': attribute type 3 has an invalid length. [ 178.971877][T18380] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5820'. [ 179.140233][T18400] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 179.175982][T18405] bridge1: entered promiscuous mode [ 179.181325][T18405] bridge1: entered allmulticast mode [ 179.188500][T18405] team0: Port device bridge1 added [ 179.267871][T18423] netlink: 'syz.7.5840': attribute type 29 has an invalid length. [ 179.276391][T18423] netlink: 'syz.7.5840': attribute type 29 has an invalid length. [ 179.290086][T18423] netlink: 'syz.7.5840': attribute type 29 has an invalid length. [ 179.441782][T18453] lo speed is unknown, defaulting to 1000 [ 179.550919][T18453] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.998181][T18519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5881'. [ 180.007276][T18519] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5881'. [ 180.603483][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 180.603500][ T29] audit: type=1326 audit(692.648:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18486 comm="syz.4.5868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd81c64ebe9 code=0x7fc00000 [ 180.676743][ T29] audit: type=1326 audit(692.718:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.4.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 180.699959][ T29] audit: type=1326 audit(692.718:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.4.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 180.722930][ T29] audit: type=1326 audit(692.718:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.4.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd81c64ec23 code=0x7ffc0000 [ 180.745944][ T29] audit: type=1326 audit(692.718:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.4.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd81c64d69f code=0x7ffc0000 [ 180.769050][ T29] audit: type=1326 audit(692.768:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18535 comm="syz.1.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 180.792177][ T29] audit: type=1326 audit(692.768:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18535 comm="syz.1.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 180.815189][ T29] audit: type=1326 audit(692.768:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18535 comm="syz.1.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 180.838204][ T29] audit: type=1326 audit(692.768:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18535 comm="syz.1.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 180.861811][ T29] audit: type=1326 audit(692.768:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18535 comm="syz.1.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 181.190963][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5902'. [ 181.924378][T18607] dummy0: left promiscuous mode [ 182.003073][T18607] 0·: left allmulticast mode [ 182.007857][T18607] hsr_slave_0: left allmulticast mode [ 182.013304][T18607] hsr_slave_1: left allmulticast mode [ 182.096091][ T6688] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.104720][ T6688] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.113818][T18608] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.123657][T18608] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.151683][ T6688] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.160125][ T6688] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.183309][ T6688] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.191879][ T6688] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.393693][T18643] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.447511][T18651] vlan0: entered allmulticast mode [ 182.452871][T18651] bridge_slave_0: entered allmulticast mode [ 182.698836][T18668] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.855381][T18690] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5952'. [ 183.116873][T18708] vlan2: entered allmulticast mode [ 183.122212][T18708] bridge_slave_0: entered allmulticast mode [ 183.220340][T18719] lo speed is unknown, defaulting to 1000 [ 184.627835][T18793] lo speed is unknown, defaulting to 1000 [ 184.874857][T18821] siw: device registration error -23 [ 184.881027][T18821] openvswitch: netlink: Message has 6 unknown bytes. [ 184.941599][T18829] __nla_validate_parse: 1 callbacks suppressed [ 184.941613][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6010'. [ 185.267062][T18835] pimreg: entered allmulticast mode [ 185.273937][T18835] pimreg: left allmulticast mode [ 185.361087][T18844] IPVS: Error connecting to the multicast addr [ 185.404689][T18849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6027'. [ 185.443140][T18857] siw: device registration error -23 [ 185.457612][T18857] openvswitch: netlink: Message has 6 unknown bytes. [ 185.502084][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 185.511045][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6022'. [ 185.530700][T18865] 0ªî{X¹¦: left allmulticast mode [ 185.546801][T18865] geneve0: left allmulticast mode [ 185.571998][T18865] geneve2: left promiscuous mode [ 185.597637][ T41] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.603327][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 185.606142][ T41] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.615087][T18861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6022'. [ 185.633149][T18868] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.643138][T18868] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.669211][ T41] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.677639][ T41] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.729400][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6029'. [ 185.734467][ T41] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.746806][ T41] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.762424][ T41] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.770710][ T41] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.779353][ T41] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.789006][ T41] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.170332][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 186.170350][ T29] audit: type=1326 audit(698.218:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18899 comm="syz.7.6038" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa2598ebe9 code=0x0 [ 186.198900][ T29] audit: type=1326 audit(698.218:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.221859][ T29] audit: type=1326 audit(698.218:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.245049][ T29] audit: type=1326 audit(698.218:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.268184][ T29] audit: type=1326 audit(698.218:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.291206][ T29] audit: type=1326 audit(698.218:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.314177][ T29] audit: type=1326 audit(698.218:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.337235][ T29] audit: type=1326 audit(698.218:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.360141][ T29] audit: type=1326 audit(698.218:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.383129][ T29] audit: type=1326 audit(698.218:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18900 comm="syz.0.6037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 186.417389][T18910] lo speed is unknown, defaulting to 1000 [ 187.260683][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6063'. [ 187.449875][T18978] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6071'. [ 187.636520][T18996] tmpfs: Unknown parameter 'usrquota0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 187.636520][T18996] 0 [ 188.044656][T19047] IPVS: Error connecting to the multicast addr [ 188.200599][T19075] IPVS: Error connecting to the multicast addr [ 188.211548][T19079] validate_nla: 3 callbacks suppressed [ 188.211598][T19079] netlink: 'syz.0.6116': attribute type 2 has an invalid length. [ 188.225145][T19079] netlink: 'syz.0.6116': attribute type 1 has an invalid length. [ 188.233062][T19079] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.6116'. [ 188.391754][T19110] wireguard0: entered promiscuous mode [ 188.397276][T19110] wireguard0: entered allmulticast mode [ 188.727945][T19165] wireguard0: entered promiscuous mode [ 188.733658][T19165] wireguard0: entered allmulticast mode [ 188.782260][T19180] 9pnet_fd: Insufficient options for proto=fd [ 188.834873][T19189] netlink: 'syz.0.6164': attribute type 18 has an invalid length. [ 188.848779][ T6705] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.848805][T19189] netlink: 'syz.0.6164': attribute type 18 has an invalid length. [ 188.864958][ T6705] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.873534][ T6705] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.883537][ T6705] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.964121][T19203] lo speed is unknown, defaulting to 1000 [ 189.866784][T19228] syz_tun: entered allmulticast mode [ 189.876721][T19227] netlink: 'syz.4.6179': attribute type 18 has an invalid length. [ 189.899184][T19231] wireguard0: entered promiscuous mode [ 189.904710][T19231] wireguard0: entered allmulticast mode [ 189.917343][T19227] netlink: 'syz.4.6179': attribute type 18 has an invalid length. [ 189.943693][T19232] lo speed is unknown, defaulting to 1000 [ 189.960615][T19225] syz_tun: left allmulticast mode [ 189.976361][T19241] tmpfs: Unknown parameter 'usrquota0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.976361][T19241] 0 [ 189.995180][T19238] lo speed is unknown, defaulting to 1000 [ 190.197282][T19246] IPVS: Error connecting to the multicast addr [ 190.266153][T19251] bond6: entered promiscuous mode [ 190.271405][T19251] bond6: entered allmulticast mode [ 190.276815][T19251] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.287504][T19251] bond6 (unregistering): Released all slaves [ 190.297246][T19244] lo speed is unknown, defaulting to 1000 [ 190.337669][T19253] lo speed is unknown, defaulting to 1000 [ 190.401089][T19265] __nla_validate_parse: 6 callbacks suppressed [ 190.401167][T19265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6195'. [ 190.416683][T19265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6195'. [ 190.447646][T19270] syz_tun: entered allmulticast mode [ 190.488032][T19268] syz_tun: left allmulticast mode [ 190.707867][T19279] lo speed is unknown, defaulting to 1000 [ 191.225785][T19294] wireguard1: entered promiscuous mode [ 191.231362][T19294] wireguard1: entered allmulticast mode [ 191.269813][T19293] lo speed is unknown, defaulting to 1000 [ 191.291702][T19301] bond2: entered promiscuous mode [ 191.297034][T19301] bond2: entered allmulticast mode [ 191.303043][T19301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.311855][T19301] bond2 (unregistering): Released all slaves [ 191.337240][T19306] lo speed is unknown, defaulting to 1000 [ 191.388207][T19308] lo speed is unknown, defaulting to 1000 [ 191.396549][T19310] syz_tun: entered allmulticast mode [ 191.422579][T19309] syz_tun: left allmulticast mode [ 191.530169][T19320] lo speed is unknown, defaulting to 1000 [ 191.562202][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 191.562220][ T29] audit: type=1326 audit(703.608:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.591426][ T29] audit: type=1326 audit(703.608:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.623457][ T29] audit: type=1326 audit(703.658:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.646364][ T29] audit: type=1326 audit(703.658:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19329 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.669355][ T29] audit: type=1326 audit(703.668:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.692379][ T29] audit: type=1326 audit(703.668:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.694107][T19332] tmpfs: Unknown parameter 'usrquota0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.694107][T19332] 0 [ 191.715816][ T29] audit: type=1326 audit(703.668:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.922788][ T29] audit: type=1326 audit(703.668:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 191.945805][ T29] audit: type=1326 audit(703.668:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19324 comm="syz.1.6216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 192.092024][T19344] vxlan0: left promiscuous mode [ 192.097036][T19344] ip6tnl1: left promiscuous mode [ 192.170611][ T29] audit: type=1326 audit(704.218:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19351 comm="syz.6.6239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 192.204307][T19353] lo speed is unknown, defaulting to 1000 [ 192.958505][T19358] lo speed is unknown, defaulting to 1000 [ 193.021395][T19371] lo speed is unknown, defaulting to 1000 [ 193.072000][T19377] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 193.153598][T19388] openvswitch: netlink: Message has 6 unknown bytes. [ 193.216027][T19397] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 193.307580][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6258'. [ 193.422709][T19434] team0: Device veth1_vlan failed to register rx_handler [ 193.430971][T19438] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 193.439839][T19438] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 193.450858][T19438] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 193.463808][T19438] netlink: 'syz.6.6264': attribute type 29 has an invalid length. [ 193.523476][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6279'. [ 193.532493][T19449] netlink: 312 bytes leftover after parsing attributes in process `syz.6.6279'. [ 193.541729][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6279'. [ 193.553917][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6270'. [ 193.579009][T19453] vlan2: entered allmulticast mode [ 193.584253][T19453] dummy0: entered allmulticast mode [ 193.594656][T19456] wireguard0: entered promiscuous mode [ 193.600245][T19456] wireguard0: entered allmulticast mode [ 193.638260][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'. [ 193.647473][T19461] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6284'. [ 193.650882][T19460] lo speed is unknown, defaulting to 1000 [ 193.656795][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'. [ 193.721908][T19465] lo speed is unknown, defaulting to 1000 [ 194.190189][T19496] lo speed is unknown, defaulting to 1000 [ 194.325346][T19496] netlink: 'syz.0.6286': attribute type 13 has an invalid length. [ 194.333316][T19496] netlink: 'syz.0.6286': attribute type 17 has an invalid length. [ 194.347825][T19496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.415287][T19513] vlan2: entered allmulticast mode [ 194.421016][T19513] dummy0: entered allmulticast mode [ 194.435297][T19515] wireguard1: entered promiscuous mode [ 194.440861][T19515] wireguard1: entered allmulticast mode [ 194.453990][T19517] lo speed is unknown, defaulting to 1000 [ 194.523643][T19520] lo speed is unknown, defaulting to 1000 [ 194.797343][T19563] vlan0: entered allmulticast mode [ 194.802643][T19563] dummy0: entered allmulticast mode [ 194.867129][T19570] lo speed is unknown, defaulting to 1000 [ 195.004917][T19570] netlink: 'syz.6.6315': attribute type 13 has an invalid length. [ 195.012908][T19570] netlink: 'syz.6.6315': attribute type 17 has an invalid length. [ 195.023716][T19570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.106768][T19579] lo speed is unknown, defaulting to 1000 [ 195.155294][T19587] lo speed is unknown, defaulting to 1000 [ 195.624521][T19624] vlan2: entered allmulticast mode [ 195.631135][T19624] dummy0: entered allmulticast mode [ 195.647473][T19626] lo speed is unknown, defaulting to 1000 [ 195.662555][T19630] lo speed is unknown, defaulting to 1000 [ 195.732196][T19633] lo speed is unknown, defaulting to 1000 [ 195.792526][T19626] netlink: 'syz.4.6330': attribute type 13 has an invalid length. [ 195.800555][T19626] netlink: 'syz.4.6330': attribute type 17 has an invalid length. [ 195.848374][T19626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.462953][T19687] lo speed is unknown, defaulting to 1000 [ 196.762778][T19687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 196.981642][ T3432] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.995593][T19718] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.017335][ T3432] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.039252][ T3432] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.111763][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 197.111782][ T29] audit: type=1400 audit(709.158:6251): avc: denied { ioctl } for pid=19723 comm="syz.4.6378" path="socket:[56271]" dev="sockfs" ino=56271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.243413][ T29] audit: type=1326 audit(709.288:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.273641][T19739] lo speed is unknown, defaulting to 1000 [ 197.309334][ T29] audit: type=1326 audit(709.308:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.332455][ T29] audit: type=1326 audit(709.308:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.355405][ T29] audit: type=1326 audit(709.308:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.378365][ T29] audit: type=1326 audit(709.308:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.401366][ T29] audit: type=1326 audit(709.318:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.424291][ T29] audit: type=1326 audit(709.318:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.447279][ T29] audit: type=1326 audit(709.318:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.470378][ T29] audit: type=1326 audit(709.318:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19742 comm="syz.1.6385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 197.576874][T19739] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 197.937070][T19784] __nla_validate_parse: 4 callbacks suppressed [ 197.937087][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6405'. [ 198.193193][T19831] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6427'. [ 198.261550][T19835] /dev/loop7: Can't lookup blockdev [ 198.668141][T19891] lo speed is unknown, defaulting to 1000 [ 198.804614][T19891] validate_nla: 4 callbacks suppressed [ 198.804630][T19891] netlink: 'syz.7.6452': attribute type 13 has an invalid length. [ 198.818085][T19891] netlink: 'syz.7.6452': attribute type 17 has an invalid length. [ 198.876794][T19891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.000414][T19928] 9pnet_fd: Insufficient options for proto=fd [ 199.011081][T19930] netlink: 'syz.6.6470': attribute type 83 has an invalid length. [ 199.105441][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6473'. [ 199.116683][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6473'. [ 199.132727][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6474'. [ 199.141678][T19940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6474'. [ 199.338761][T19967] lo speed is unknown, defaulting to 1000 [ 199.755745][T19967] netlink: 'syz.1.6485': attribute type 13 has an invalid length. [ 199.763853][T19967] netlink: 'syz.1.6485': attribute type 17 has an invalid length. [ 199.776468][ T3301] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 199.787442][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.787472][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.787485][ T3301] Call Trace: [ 199.787491][ T3301] [ 199.787552][ T3301] __dump_stack+0x1d/0x30 [ 199.787575][ T3301] dump_stack_lvl+0xe8/0x140 [ 199.787596][ T3301] dump_stack+0x15/0x1b [ 199.787635][ T3301] dump_header+0x81/0x220 [ 199.787688][ T3301] oom_kill_process+0x342/0x400 [ 199.787724][ T3301] out_of_memory+0x979/0xb80 [ 199.787756][ T3301] try_charge_memcg+0x5e6/0x9e0 [ 199.787881][ T3301] charge_memcg+0x51/0xc0 [ 199.787902][ T3301] __mem_cgroup_charge+0x28/0xb0 [ 199.787999][ T3301] filemap_add_folio+0x4e/0x1b0 [ 199.788031][ T3301] __filemap_get_folio+0x31e/0x6b0 [ 199.788066][ T3301] filemap_fault+0x41f/0xb40 [ 199.788091][ T3301] __do_fault+0xb9/0x200 [ 199.788231][ T3301] handle_mm_fault+0xf78/0x2c20 [ 199.788264][ T3301] do_user_addr_fault+0x636/0x1090 [ 199.788300][ T3301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 199.788349][ T3301] exc_page_fault+0x62/0xa0 [ 199.788373][ T3301] asm_exc_page_fault+0x26/0x30 [ 199.788393][ T3301] RIP: 0033:0x7fd81c525c24 [ 199.788465][ T3301] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 199.788483][ T3301] RSP: 002b:00007ffdb7733770 EFLAGS: 00010202 [ 199.788519][ T3301] RAX: 0000001b33024000 RBX: 0000000000000beb RCX: 0000000000030958 [ 199.788533][ T3301] RDX: 000000000b441ee9 RSI: 00007ffdb7733800 RDI: 0000000000000001 [ 199.788547][ T3301] RBP: 00007ffdb77337ac R08: 000000002afa0c2d R09: 7fffffffffffffff [ 199.788641][ T3301] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 199.788654][ T3301] R13: 00000000000927c0 R14: 0000000000030982 R15: 00007ffdb7733800 [ 199.788674][ T3301] [ 199.788682][ T3301] memory: usage 307200kB, limit 307200kB, failcnt 417 [ 199.803137][T19967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.808715][ T3301] memory+swap: usage 308132kB, limit 9007199254740988kB, failcnt 0 [ 200.004376][ T3301] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 200.011723][ T3301] Memory cgroup stats for /syz4: [ 200.026008][ T3301] cache 0 [ 200.033962][ T3301] rss 4096 [ 200.037145][ T3301] shmem 0 [ 200.040174][ T3301] mapped_file 0 [ 200.043737][ T3301] dirty 0 [ 200.046676][ T3301] writeback 0 [ 200.050041][ T3301] workingset_refault_anon 36 [ 200.054638][ T3301] workingset_refault_file 195 [ 200.059433][ T3301] swap 954368 [ 200.062730][ T3301] swapcached 12288 [ 200.066463][ T3301] pgpgin 197053 [ 200.069993][ T3301] pgpgout 197047 [ 200.073546][ T3301] pgfault 252305 [ 200.077106][ T3301] pgmajfault 23 [ 200.080688][ T3301] inactive_anon 12288 [ 200.084665][ T3301] active_anon 0 [ 200.088100][ T3301] inactive_file 12288 [ 200.092080][ T3301] active_file 0 [ 200.095512][ T3301] unevictable 0 [ 200.098949][ T3301] hierarchical_memory_limit 314572800 [ 200.104368][ T3301] hierarchical_memsw_limit 9223372036854771712 [ 200.110579][ T3301] total_cache 0 [ 200.114287][ T3301] total_rss 4096 [ 200.117811][ T3301] total_shmem 0 [ 200.121294][ T3301] total_mapped_file 0 [ 200.125250][ T3301] total_dirty 0 [ 200.128722][ T3301] total_writeback 0 [ 200.132608][ T3301] total_workingset_refault_anon 36 [ 200.137701][ T3301] total_workingset_refault_file 195 [ 200.142891][ T3301] total_swap 954368 [ 200.146702][ T3301] total_swapcached 12288 [ 200.150947][ T3301] total_pgpgin 197053 [ 200.154899][ T3301] total_pgpgout 197047 [ 200.159000][ T3301] total_pgfault 252305 [ 200.163145][ T3301] total_pgmajfault 23 [ 200.167104][ T3301] total_inactive_anon 12288 [ 200.171603][ T3301] total_active_anon 0 [ 200.175604][ T3301] total_inactive_file 12288 [ 200.180143][ T3301] total_active_file 0 [ 200.184156][ T3301] total_unevictable 0 [ 200.188109][ T3301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1203,pid=6801,uid=0 [ 200.202728][ T3301] Memory cgroup out of memory: Killed process 6801 (syz.4.1203) total-vm:95680kB, anon-rss:952kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 200.226966][T19924] syz.4.6468 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 200.240897][T19924] CPU: 0 UID: 0 PID: 19924 Comm: syz.4.6468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.240972][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.240983][T19924] Call Trace: [ 200.241050][T19924] [ 200.241059][T19924] __dump_stack+0x1d/0x30 [ 200.241081][T19924] dump_stack_lvl+0xe8/0x140 [ 200.241098][T19924] dump_stack+0x15/0x1b [ 200.241159][T19924] dump_header+0x81/0x220 [ 200.241204][T19924] oom_kill_process+0x342/0x400 [ 200.241241][T19924] out_of_memory+0x979/0xb80 [ 200.241345][T19924] try_charge_memcg+0x5e6/0x9e0 [ 200.241373][T19924] obj_cgroup_charge_pages+0xa6/0x150 [ 200.241425][T19924] __memcg_kmem_charge_page+0x9f/0x170 [ 200.241458][T19924] __alloc_frozen_pages_noprof+0x188/0x360 [ 200.241494][T19924] alloc_pages_mpol+0xb3/0x250 [ 200.241594][T19924] alloc_pages_noprof+0x90/0x130 [ 200.241623][T19924] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 200.241660][T19924] __kvmalloc_node_noprof+0x30f/0x4e0 [ 200.241703][T19924] ? ip_set_alloc+0x1f/0x30 [ 200.241747][T19924] ? ip_set_alloc+0x1f/0x30 [ 200.241775][T19924] ip_set_alloc+0x1f/0x30 [ 200.241813][T19924] hash_netiface_create+0x282/0x740 [ 200.241852][T19924] ? __pfx_hash_netiface_create+0x10/0x10 [ 200.241959][T19924] ip_set_create+0x3cc/0x960 [ 200.241987][T19924] ? __nla_parse+0x40/0x60 [ 200.242010][T19924] nfnetlink_rcv_msg+0x4c6/0x590 [ 200.242059][T19924] netlink_rcv_skb+0x120/0x220 [ 200.242152][T19924] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.242202][T19924] nfnetlink_rcv+0x16b/0x1690 [ 200.242241][T19924] ? __rcu_read_unlock+0x4f/0x70 [ 200.242261][T19924] ? merge_sched_in+0x2d0/0xa60 [ 200.242279][T19924] ? __list_add_valid_or_report+0x38/0xe0 [ 200.242315][T19924] ? merge_sched_in+0x605/0xa60 [ 200.242401][T19924] ? rb_next+0x5c/0x80 [ 200.242438][T19924] ? visit_groups_merge+0xf7e/0xfd0 [ 200.242521][T19924] ? should_fail_ex+0x30/0x280 [ 200.242539][T19924] ? selinux_nlmsg_lookup+0x99/0x890 [ 200.242579][T19924] ? __rcu_read_unlock+0x34/0x70 [ 200.242674][T19924] ? __netlink_lookup+0x266/0x2a0 [ 200.242701][T19924] netlink_unicast+0x5c0/0x690 [ 200.242778][T19924] netlink_sendmsg+0x58b/0x6b0 [ 200.242798][T19924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.242886][T19924] __sock_sendmsg+0x142/0x180 [ 200.242962][T19924] ____sys_sendmsg+0x31e/0x4e0 [ 200.242984][T19924] ___sys_sendmsg+0x17b/0x1d0 [ 200.243013][T19924] __x64_sys_sendmsg+0xd4/0x160 [ 200.243053][T19924] x64_sys_call+0x191e/0x2ff0 [ 200.243071][T19924] do_syscall_64+0xd2/0x200 [ 200.243095][T19924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.243177][T19924] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.243208][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.243255][T19924] RIP: 0033:0x7fd81c64ebe9 [ 200.243270][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.243286][T19924] RSP: 002b:00007fd81b0af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.243304][T19924] RAX: ffffffffffffffda RBX: 00007fd81c875fa0 RCX: 00007fd81c64ebe9 [ 200.243316][T19924] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 200.243327][T19924] RBP: 00007fd81c6d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.243337][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.243406][T19924] R13: 00007fd81c876038 R14: 00007fd81c875fa0 R15: 00007ffdb77333e8 [ 200.243422][T19924] [ 200.243430][T19924] memory: usage 307200kB, limit 307200kB, failcnt 419 [ 200.586901][T19924] memory+swap: usage 308064kB, limit 9007199254740988kB, failcnt 0 [ 200.594842][T19924] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 200.602320][T19924] Memory cgroup stats for /syz4: [ 200.602582][T19924] cache 0 [ 200.610764][T19924] rss 4096 [ 200.613832][T19924] shmem 0 [ 200.616772][T19924] mapped_file 0 [ 200.620262][T19924] dirty 0 [ 200.623213][T19924] writeback 0 [ 200.626510][T19924] workingset_refault_anon 36 [ 200.631308][T19924] workingset_refault_file 195 [ 200.635997][T19924] swap 954368 [ 200.639293][T19924] swapcached 12288 [ 200.642990][T19924] pgpgin 197053 [ 200.646424][T19924] pgpgout 197047 [ 200.649971][T19924] pgfault 252305 [ 200.653510][T19924] pgmajfault 23 [ 200.656946][T19924] inactive_anon 12288 [ 200.660948][T19924] active_anon 0 [ 200.664393][T19924] inactive_file 12288 [ 200.668348][T19924] active_file 0 [ 200.671791][T19924] unevictable 0 [ 200.675278][T19924] hierarchical_memory_limit 314572800 [ 200.680658][T19924] hierarchical_memsw_limit 9223372036854771712 [ 200.686786][T19924] total_cache 0 [ 200.690269][T19924] total_rss 4096 [ 200.693852][T19924] total_shmem 0 [ 200.697312][T19924] total_mapped_file 0 [ 200.701377][T19924] total_dirty 0 [ 200.704816][T19924] total_writeback 0 [ 200.708596][T19924] total_workingset_refault_anon 36 [ 200.713692][T19924] total_workingset_refault_file 195 [ 200.718873][T19924] total_swap 954368 [ 200.722676][T19924] total_swapcached 12288 [ 200.726933][T19924] total_pgpgin 197053 [ 200.730901][T19924] total_pgpgout 197047 [ 200.734941][T19924] total_pgfault 252305 [ 200.739131][T19924] total_pgmajfault 23 [ 200.743199][T19924] total_inactive_anon 12288 [ 200.747774][T19924] total_active_anon 0 [ 200.751824][T19924] total_inactive_file 12288 [ 200.756301][T19924] total_active_file 0 [ 200.760263][T19924] total_unevictable 0 [ 200.764244][T19924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.123,pid=3770,uid=0 [ 200.778783][T19924] Memory cgroup out of memory: Killed process 3770 (syz.4.123) total-vm:95680kB, anon-rss:952kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 200.804051][T19923] syz.4.6468 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 200.814919][T19923] CPU: 0 UID: 0 PID: 19923 Comm: syz.4.6468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 200.814951][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.814961][T19923] Call Trace: [ 200.814967][T19923] [ 200.814976][T19923] __dump_stack+0x1d/0x30 [ 200.815055][T19923] dump_stack_lvl+0xe8/0x140 [ 200.815077][T19923] dump_stack+0x15/0x1b [ 200.815095][T19923] dump_header+0x81/0x220 [ 200.815126][T19923] oom_kill_process+0x342/0x400 [ 200.815167][T19923] out_of_memory+0x979/0xb80 [ 200.815272][T19923] try_charge_memcg+0x5e6/0x9e0 [ 200.815297][T19923] charge_memcg+0x51/0xc0 [ 200.815371][T19923] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 200.815391][T19923] __read_swap_cache_async+0x1df/0x350 [ 200.815492][T19923] swap_cluster_readahead+0x277/0x3e0 [ 200.815577][T19923] swapin_readahead+0xde/0x6f0 [ 200.815603][T19923] ? __filemap_get_folio+0x4f7/0x6b0 [ 200.815632][T19923] ? swap_cache_get_folio+0x77/0x200 [ 200.815695][T19923] do_swap_page+0x301/0x2430 [ 200.815715][T19923] ? css_rstat_updated+0xb7/0x240 [ 200.815740][T19923] ? __pfx_default_wake_function+0x10/0x10 [ 200.815761][T19923] handle_mm_fault+0x9a5/0x2c20 [ 200.815855][T19923] do_user_addr_fault+0x636/0x1090 [ 200.815889][T19923] ? fpregs_restore_userregs+0xe2/0x1d0 [ 200.815923][T19923] ? switch_fpu_return+0xe/0x20 [ 200.815946][T19923] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 200.816094][T19923] exc_page_fault+0x62/0xa0 [ 200.816115][T19923] asm_exc_page_fault+0x26/0x30 [ 200.816132][T19923] RIP: 0033:0x7fd81c52563c [ 200.816147][T19923] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 200.816169][T19923] RSP: 002b:00007ffdb7733550 EFLAGS: 00010206 [ 200.816195][T19923] RAX: 0000000000000000 RBX: 00007fd81c875fa0 RCX: 0000000000000000 [ 200.816208][T19923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555ca6a808 [ 200.816221][T19923] RBP: 00007fd81c877da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 200.816233][T19923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000030c59 [ 200.816245][T19923] R13: 00007fd81c876090 R14: ffffffffffffffff R15: 00007ffdb7733660 [ 200.816262][T19923] [ 200.816270][T19923] memory: usage 307200kB, limit 307200kB, failcnt 419 [ 201.043175][T19923] memory+swap: usage 308000kB, limit 9007199254740988kB, failcnt 0 [ 201.051067][T19923] kmem: usage 307052kB, limit 9007199254740988kB, failcnt 0 [ 201.058406][T19923] Memory cgroup stats for /syz4: [ 201.058558][T19923] cache 0 [ 201.066543][T19923] rss 0 [ 201.069355][T19923] shmem 0 [ 201.072318][T19923] mapped_file 0 [ 201.075806][T19923] dirty 0 [ 201.078758][T19923] writeback 0 [ 201.082198][T19923] workingset_refault_anon 36 [ 201.086789][T19923] workingset_refault_file 196 [ 201.091513][T19923] swap 819200 [ 201.094819][T19923] swapcached 0 [ 201.098394][T19923] pgpgin 197054 [ 201.102068][T19923] pgpgout 197051 [ 201.105659][T19923] pgfault 252307 [ 201.109339][T19923] pgmajfault 24 [ 201.112793][T19923] inactive_anon 0 [ 201.116420][T19923] active_anon 0 [ 201.119941][T19923] inactive_file 12288 [ 201.123928][T19923] active_file 0 [ 201.127358][T19923] unevictable 0 [ 201.130847][T19923] hierarchical_memory_limit 314572800 [ 201.136239][T19923] hierarchical_memsw_limit 9223372036854771712 [ 201.142485][T19923] total_cache 0 [ 201.145946][T19923] total_rss 0 [ 201.149311][T19923] total_shmem 0 [ 201.152747][T19923] total_mapped_file 0 [ 201.156797][T19923] total_dirty 0 [ 201.160507][T19923] total_writeback 0 [ 201.164305][T19923] total_workingset_refault_anon 36 [ 201.169460][T19923] total_workingset_refault_file 196 [ 201.174741][T19923] total_swap 819200 [ 201.178550][T19923] total_swapcached 0 [ 201.182502][T19923] total_pgpgin 197054 [ 201.186542][T19923] total_pgpgout 197051 [ 201.190728][T19923] total_pgfault 252307 [ 201.194794][T19923] total_pgmajfault 24 [ 201.198752][T19923] total_inactive_anon 0 [ 201.203000][T19923] total_active_anon 0 [ 201.207022][T19923] total_inactive_file 12288 [ 201.211606][T19923] total_active_file 0 [ 201.215567][T19923] total_unevictable 0 [ 201.219556][T19923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1833,pid=8308,uid=0 [ 201.234228][T19923] Memory cgroup out of memory: Killed process 8308 (syz.4.1833) total-vm:95680kB, anon-rss:980kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 201.318860][T20023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20023 comm=syz.0.6510 [ 201.344644][T19924] syz.4.6468 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 201.358625][T19924] CPU: 0 UID: 0 PID: 19924 Comm: syz.4.6468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.358653][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.358665][T19924] Call Trace: [ 201.358673][T19924] [ 201.358682][T19924] __dump_stack+0x1d/0x30 [ 201.358705][T19924] dump_stack_lvl+0xe8/0x140 [ 201.358736][T19924] dump_stack+0x15/0x1b [ 201.358754][T19924] dump_header+0x81/0x220 [ 201.358786][T19924] oom_kill_process+0x342/0x400 [ 201.358904][T19924] out_of_memory+0x979/0xb80 [ 201.358935][T19924] try_charge_memcg+0x5e6/0x9e0 [ 201.359040][T19924] obj_cgroup_charge_pages+0xa6/0x150 [ 201.359100][T19924] __memcg_kmem_charge_page+0x9f/0x170 [ 201.359140][T19924] __alloc_frozen_pages_noprof+0x188/0x360 [ 201.359181][T19924] alloc_pages_mpol+0xb3/0x250 [ 201.359311][T19924] alloc_pages_noprof+0x90/0x130 [ 201.359341][T19924] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 201.359394][T19924] __kvmalloc_node_noprof+0x30f/0x4e0 [ 201.359427][T19924] ? ip_set_alloc+0x1f/0x30 [ 201.359535][T19924] ? ip_set_alloc+0x1f/0x30 [ 201.359566][T19924] ip_set_alloc+0x1f/0x30 [ 201.359640][T19924] hash_netiface_create+0x282/0x740 [ 201.359670][T19924] ? __pfx_hash_netiface_create+0x10/0x10 [ 201.359709][T19924] ip_set_create+0x3cc/0x960 [ 201.359741][T19924] ? __nla_parse+0x40/0x60 [ 201.359785][T19924] nfnetlink_rcv_msg+0x4c6/0x590 [ 201.359839][T19924] netlink_rcv_skb+0x120/0x220 [ 201.359864][T19924] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 201.359945][T19924] nfnetlink_rcv+0x16b/0x1690 [ 201.359978][T19924] ? __rcu_read_unlock+0x4f/0x70 [ 201.360004][T19924] ? merge_sched_in+0x2d0/0xa60 [ 201.360028][T19924] ? __list_add_valid_or_report+0x38/0xe0 [ 201.360077][T19924] ? merge_sched_in+0x605/0xa60 [ 201.360096][T19924] ? rb_next+0x5c/0x80 [ 201.360118][T19924] ? visit_groups_merge+0xf7e/0xfd0 [ 201.360138][T19924] ? should_fail_ex+0x30/0x280 [ 201.360273][T19924] ? selinux_nlmsg_lookup+0x99/0x890 [ 201.360301][T19924] ? __rcu_read_unlock+0x34/0x70 [ 201.360319][T19924] ? __netlink_lookup+0x266/0x2a0 [ 201.360342][T19924] netlink_unicast+0x5c0/0x690 [ 201.360385][T19924] netlink_sendmsg+0x58b/0x6b0 [ 201.360407][T19924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.360427][T19924] __sock_sendmsg+0x142/0x180 [ 201.360511][T19924] ____sys_sendmsg+0x31e/0x4e0 [ 201.360534][T19924] ___sys_sendmsg+0x17b/0x1d0 [ 201.360611][T19924] __x64_sys_sendmsg+0xd4/0x160 [ 201.360634][T19924] x64_sys_call+0x191e/0x2ff0 [ 201.360708][T19924] do_syscall_64+0xd2/0x200 [ 201.360732][T19924] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.360781][T19924] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.360870][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.360891][T19924] RIP: 0033:0x7fd81c64ebe9 [ 201.360978][T19924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.361056][T19924] RSP: 002b:00007fd81b0af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.361079][T19924] RAX: ffffffffffffffda RBX: 00007fd81c875fa0 RCX: 00007fd81c64ebe9 [ 201.361091][T19924] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 201.361103][T19924] RBP: 00007fd81c6d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 201.361171][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.361183][T19924] R13: 00007fd81c876038 R14: 00007fd81c875fa0 R15: 00007ffdb77333e8 [ 201.361199][T19924] [ 201.370690][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6510'. [ 201.371168][T19924] memory: usage 307200kB, limit 307200kB, failcnt 602 [ 201.397912][T20023] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 201.400961][T19924] memory+swap: usage 307848kB, limit 9007199254740988kB, failcnt 0 [ 201.406866][T20023] bond6: (slave vcan1): Error -95 calling set_mac_address [ 201.410356][T19924] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 201.410382][T19924] Memory cgroup stats for /syz4: [ 201.745936][T19924] cache 0 [ 201.753917][T19924] rss 0 [ 201.756661][T19924] shmem 0 [ 201.759649][T19924] mapped_file 0 [ 201.763169][T19924] dirty 0 [ 201.766140][T19924] writeback 0 [ 201.769485][T19924] workingset_refault_anon 44 [ 201.774077][T19924] workingset_refault_file 197 [ 201.778729][T19924] swap 663552 [ 201.782101][T19924] swapcached 0 [ 201.785511][T19924] pgpgin 197063 [ 201.788944][T19924] pgpgout 197060 [ 201.792518][T19924] pgfault 252316 [ 201.796112][T19924] pgmajfault 31 [ 201.799582][T19924] inactive_anon 0 [ 201.803210][T19924] active_anon 0 [ 201.806641][T19924] inactive_file 0 [ 201.810297][T19924] active_file 12288 [ 201.814112][T19924] unevictable 0 [ 201.817620][T19924] hierarchical_memory_limit 314572800 [ 201.823079][T19924] hierarchical_memsw_limit 9223372036854771712 [ 201.829294][T19924] total_cache 0 [ 201.832732][T19924] total_rss 0 [ 201.836006][T19924] total_shmem 0 [ 201.839554][T19924] total_mapped_file 0 [ 201.843562][T19924] total_dirty 0 [ 201.847076][T19924] total_writeback 0 [ 201.850931][T19924] total_workingset_refault_anon 44 [ 201.856033][T19924] total_workingset_refault_file 197 [ 201.861236][T19924] total_swap 663552 [ 201.865021][T19924] total_swapcached 0 [ 201.868895][T19924] total_pgpgin 197063 [ 201.872949][T19924] total_pgpgout 197060 [ 201.877005][T19924] total_pgfault 252316 [ 201.881171][T19924] total_pgmajfault 31 [ 201.885126][T19924] total_inactive_anon 0 [ 201.889288][T19924] total_active_anon 0 [ 201.893352][T19924] total_inactive_file 0 [ 201.897476][T19924] total_active_file 12288 [ 201.901816][T19924] total_unevictable 0 [ 201.905931][T19924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6468,pid=19923,uid=0 [ 201.920667][T19924] Memory cgroup out of memory: Killed process 19923 (syz.4.6468) total-vm:95812kB, anon-rss:948kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 202.266316][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 202.266335][ T29] audit: type=1326 audit(714.308:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.317004][ T29] audit: type=1326 audit(714.358:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.340224][ T29] audit: type=1326 audit(714.358:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.363372][ T29] audit: type=1326 audit(714.358:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.386372][ T29] audit: type=1326 audit(714.358:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.414136][ T29] audit: type=1326 audit(714.458:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.437326][ T29] audit: type=1326 audit(714.458:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 202.509229][ T29] audit: type=1400 audit(714.548:6340): avc: denied { name_bind } for pid=20073 comm="syz.7.6530" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 202.549811][ T29] audit: type=1326 audit(714.588:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20069 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 202.572899][ T29] audit: type=1326 audit(714.588:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20069 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 202.661515][T20091] netlink: 'syz.1.6539': attribute type 1 has an invalid length. [ 202.931936][T20137] pim6reg: entered allmulticast mode [ 202.952743][T20137] pim6reg: left allmulticast mode [ 203.010712][T20151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20151 comm=syz.7.6565 [ 203.023490][T20151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20151 comm=syz.7.6565 [ 203.067094][T20152] vlan2: entered allmulticast mode [ 203.156278][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.165681][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.175230][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.195186][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.204227][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.214807][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.241091][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.250059][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.259497][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6572'. [ 203.276664][T20177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20177 comm=syz.4.6576 [ 203.302234][T20179] netlink: 'syz.7.6577': attribute type 1 has an invalid length. [ 203.342517][T20185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6580'. [ 203.913997][T20246] bridge: RTM_NEWNEIGH with invalid ether address [ 203.983821][T20255] netem: change failed [ 205.058850][T20371] 9pnet_fd: Insufficient options for proto=fd [ 205.498410][T20408] 9pnet_fd: Insufficient options for proto=fd [ 205.970035][T20471] netlink: 'syz.0.6709': attribute type 4 has an invalid length. [ 205.980186][T20471] netlink: 'syz.0.6709': attribute type 4 has an invalid length. [ 206.353476][T20485] bridge: RTM_NEWNEIGH with invalid ether address [ 206.659988][T20488] netem: change failed [ 207.056721][T20558] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.100785][T20558] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.160573][T20558] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.243813][T20558] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.343340][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 207.343360][ T29] audit: type=1326 audit(719.388:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.378520][ T29] audit: type=1326 audit(719.388:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.401555][ T29] audit: type=1326 audit(719.388:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.424925][ T29] audit: type=1326 audit(719.428:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.448473][ T29] audit: type=1326 audit(719.438:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.471600][ T29] audit: type=1326 audit(719.458:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.495083][ T29] audit: type=1326 audit(719.458:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.518217][ T29] audit: type=1326 audit(719.458:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.541730][ T29] audit: type=1326 audit(719.458:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.564644][ T29] audit: type=1326 audit(719.458:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.6755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 207.639654][ T6736] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.658224][ T6736] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.678507][ T6736] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.689803][ T6736] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.897022][T20650] netlink: 'syz.1.6781': attribute type 4 has an invalid length. [ 207.927500][T20650] netlink: 'syz.1.6781': attribute type 4 has an invalid length. [ 208.246456][T20682] __nla_validate_parse: 21 callbacks suppressed [ 208.246475][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6801'. [ 208.263373][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6801'. [ 208.410797][T20709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6803'. [ 208.484075][T20714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6803'. [ 208.493230][T20714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6803'. [ 208.554518][T20724] openvswitch: netlink: Message has 6 unknown bytes. [ 208.580928][T20720] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 208.645252][T20729] netlink: 'syz.6.6807': attribute type 4 has an invalid length. [ 208.660843][T20729] netlink: 'syz.6.6807': attribute type 4 has an invalid length. [ 208.697474][T16227] lo speed is unknown, defaulting to 1000 [ 208.703377][T16227] syz2: Port: 1 Link ACTIVE [ 209.015570][T20772] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 209.736822][T20828] netlink: 'syz.4.6851': attribute type 4 has an invalid length. [ 209.748564][T20828] netlink: 'syz.4.6851': attribute type 4 has an invalid length. [ 210.195708][T20844] netlink: 'syz.0.6860': attribute type 1 has an invalid length. [ 210.203619][T20844] netlink: 'syz.0.6860': attribute type 4 has an invalid length. [ 210.211384][T20844] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6860'. [ 210.657262][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6891'. [ 211.143121][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6915'. [ 211.496275][T20984] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6928'. [ 211.782860][T21007] /dev/loop0: Can't lookup blockdev [ 211.947657][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6943'. [ 212.005571][T21033] /dev/loop6: Can't lookup blockdev [ 212.303828][T21077] 9pnet_fd: Insufficient options for proto=fd [ 212.334669][T21085] /dev/loop4: Can't lookup blockdev [ 212.352558][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 212.352575][ T29] audit: type=1326 audit(724.398:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 212.409287][ T29] audit: type=1326 audit(724.428:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 212.431800][ T29] audit: type=1326 audit(724.428:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 212.454661][ T29] audit: type=1326 audit(724.438:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 212.477228][ T29] audit: type=1326 audit(724.438:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21083 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81c64ebe9 code=0x7ffc0000 [ 212.712917][T21106] netlink: 'syz.7.6971': attribute type 4 has an invalid length. [ 212.761906][T21106] netlink: 'syz.7.6971': attribute type 4 has an invalid length. [ 212.846613][ T29] audit: type=1326 audit(724.888:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.1.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 212.869616][ T29] audit: type=1326 audit(724.888:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.1.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 212.894215][ T29] audit: type=1326 audit(724.888:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.1.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 212.917308][ T29] audit: type=1326 audit(724.888:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.1.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 212.940775][ T29] audit: type=1326 audit(724.888:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21120 comm="syz.1.6987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 213.757262][T21194] /dev/loop1: Can't lookup blockdev [ 213.897341][T21216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21216 comm=syz.7.7031 [ 213.910640][T21216] __nla_validate_parse: 1 callbacks suppressed [ 213.910659][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7031'. [ 213.940038][T21216] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 213.951558][T21216] bond3: (slave vcan0): Error -95 calling set_mac_address [ 214.167670][T21257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21257 comm=syz.1.7048 [ 214.188832][T21257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7048'. [ 214.247310][T21257] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 214.274687][T21257] bond2: (slave vcan1): Error -95 calling set_mac_address [ 214.816799][T21345] netlink: 'syz.7.7089': attribute type 1 has an invalid length. [ 215.148556][T21375] /dev/loop7: Can't lookup blockdev [ 215.229828][T21388] pim6reg: entered allmulticast mode [ 215.241479][T21388] pim6reg: left allmulticast mode [ 215.379501][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.388493][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.400469][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.415796][T21407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21407 comm=syz.7.7117 [ 215.419220][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.437347][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.448447][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.482064][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.491056][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7116'. [ 215.560977][T21422] netlink: 'syz.4.7121': attribute type 1 has an invalid length. [ 215.696885][T21450] netlink: 'syz.4.7132': attribute type 1 has an invalid length. [ 215.823819][T21466] netlink: 'syz.1.7139': attribute type 1 has an invalid length. [ 215.915724][T21482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21482 comm=syz.1.7150 [ 215.948115][T21485] vlan0: entered allmulticast mode [ 216.014410][T21493] netlink: 'syz.1.7152': attribute type 4 has an invalid length. [ 216.033156][T21493] netlink: 'syz.1.7152': attribute type 4 has an invalid length. [ 216.853141][T21502] macvtap0: refused to change device tx_queue_len [ 216.870403][T21501] netlink: 'syz.6.7156': attribute type 1 has an invalid length. [ 217.407481][T21600] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 217.431287][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 217.431305][ T29] audit: type=1326 audit(729.478:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.521981][ T29] audit: type=1326 audit(729.508:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.545023][ T29] audit: type=1326 audit(729.508:7098): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.568553][ T29] audit: type=1326 audit(729.508:7099): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.591810][ T29] audit: type=1326 audit(729.508:7100): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.615293][ T29] audit: type=1326 audit(729.508:7101): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.638706][ T29] audit: type=1326 audit(729.508:7102): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21604 comm="syz.6.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 217.662331][ T29] audit: type=1326 audit(729.548:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21610 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 217.685235][ T29] audit: type=1326 audit(729.548:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21610 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 217.708327][ T29] audit: type=1326 audit(729.548:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21610 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 219.823233][T21782] __nla_validate_parse: 12 callbacks suppressed [ 219.823252][T21782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7284'. [ 219.838829][T21782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7284'. [ 219.924621][T21800] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7295'. [ 220.015978][T21815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7302'. [ 220.025119][T21815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7302'. [ 220.757563][T21851] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7318'. [ 220.763689][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7317'. [ 220.775733][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7317'. [ 220.806606][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 220.833379][T21859] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7322'. [ 220.985382][T21878] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7332'. [ 221.007239][T21882] netlink: 'syz.4.7333': attribute type 3 has an invalid length. [ 221.253759][T16690] kernel write not supported for file bpf-prog (pid: 16690 comm: kworker/1:12) [ 221.593309][T16690] kernel write not supported for file bpf-prog (pid: 16690 comm: kworker/1:12) [ 222.502085][T22046] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 222.521809][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 222.521823][ T29] audit: type=1400 audit(734.568:7432): avc: denied { read } for pid=22047 comm="syz.7.7412" path="socket:[64140]" dev="sockfs" ino=64140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.149256][ T29] audit: type=1326 audit(735.138:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.172351][ T29] audit: type=1326 audit(735.138:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.195354][ T29] audit: type=1326 audit(735.138:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.218468][ T29] audit: type=1326 audit(735.138:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.241462][ T29] audit: type=1326 audit(735.138:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.250519][T22093] netem: change failed [ 223.264483][ T29] audit: type=1326 audit(735.138:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.264513][ T29] audit: type=1326 audit(735.138:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.314214][ T29] audit: type=1326 audit(735.138:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.337514][ T29] audit: type=1326 audit(735.138:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.1.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 223.831780][T22143] vlan0: entered allmulticast mode [ 224.620655][T22271] netlink: 'syz.4.7508': attribute type 83 has an invalid length. [ 224.812743][T22302] atomic_op ffff88811fb67128 conn xmit_atomic 0000000000000000 [ 224.887572][T22306] atomic_op ffff88811fb67128 conn xmit_atomic 0000000000000000 [ 225.044789][T22318] veth0_vlan: left promiscuous mode [ 225.060252][T22318] veth0_vlan: entered promiscuous mode [ 225.277766][T22340] __nla_validate_parse: 5 callbacks suppressed [ 225.277784][T22340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7540'. [ 225.320872][T22342] netlink: 812 bytes leftover after parsing attributes in process `syz.1.7541'. [ 225.330227][T22342] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7541'. [ 225.339302][T22342] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7541'. [ 225.348433][T22342] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7541'. [ 225.496968][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7548'. [ 225.532446][T22369] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 225.540395][T22369] netlink: 'syz.4.7550': attribute type 1 has an invalid length. [ 225.548163][T22369] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7550'. [ 225.605219][T22379] pim6reg: entered allmulticast mode [ 225.617157][T22379] pim6reg: left allmulticast mode [ 226.101082][T22434] pim6reg: entered allmulticast mode [ 226.107166][T22434] pim6reg: left allmulticast mode [ 226.250163][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7584'. [ 226.272019][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7584'. [ 226.510403][T22453] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7590'. [ 226.543441][T22453] xt_policy: neither incoming nor outgoing policy selected [ 226.649037][T22458] lo speed is unknown, defaulting to 1000 [ 226.955507][T22413] syz.7.7572 (22413) used greatest stack depth: 6136 bytes left [ 226.980154][T22491] pimreg: entered allmulticast mode [ 226.986248][T22491] pimreg: left allmulticast mode [ 227.206656][T22517] netlink: 'syz.7.7617': attribute type 1 has an invalid length. [ 227.363404][T22547] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 227.453029][T22567] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 227.632664][T22590] bridge0: port 1(macvlan2) entered blocking state [ 227.639305][T22590] bridge0: port 1(macvlan2) entered disabled state [ 227.656704][T22590] macvlan2: entered allmulticast mode [ 227.662245][T22590] bridge0: entered allmulticast mode [ 227.692657][T22590] macvlan2: left allmulticast mode [ 227.697864][T22590] bridge0: left allmulticast mode [ 227.779773][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 227.779792][ T29] audit: type=1326 audit(739.818:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22602 comm="syz.6.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 227.821640][ T29] audit: type=1326 audit(739.828:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22602 comm="syz.6.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 227.844839][ T29] audit: type=1326 audit(739.828:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22602 comm="syz.6.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 227.867991][ T29] audit: type=1326 audit(739.828:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22602 comm="syz.6.7656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.142635][T22648] netlink: 'syz.0.7673': attribute type 2 has an invalid length. [ 228.152907][ T29] audit: type=1326 audit(740.198:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.178477][ T29] audit: type=1326 audit(740.198:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.201744][ T29] audit: type=1326 audit(740.198:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.224822][ T29] audit: type=1326 audit(740.198:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.247881][ T29] audit: type=1326 audit(740.198:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.271177][ T29] audit: type=1326 audit(740.198:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22649 comm="syz.6.7674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 228.406050][T22674] netlink: 'syz.6.7686': attribute type 14 has an invalid length. [ 228.429820][T22674] netlink: 'syz.6.7686': attribute type 14 has an invalid length. [ 228.437720][ T6736] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.447777][ T6736] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.458443][ T6736] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.468344][ T6736] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.543203][T22854] netlink: 'syz.1.7768': attribute type 1 has an invalid length. [ 230.551830][T22854] netlink: 'syz.1.7768': attribute type 4 has an invalid length. [ 230.559600][T22854] __nla_validate_parse: 12 callbacks suppressed [ 230.559619][T22854] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7768'. [ 230.626425][T22857] netlink: 'syz.4.7771': attribute type 7 has an invalid length. [ 230.634325][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7771'. [ 230.649560][T22864] ref_ctr_offset mismatch. inode: 0x2059 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 230.785529][T22890] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7784'. [ 231.276188][T22953] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7810'. [ 231.296160][T22953] bond0 (unregistering): Released all slaves [ 231.422134][T22983] SELinux: security_context_str_to_sid () failed with errno=-22 [ 231.454191][T22987] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 231.505679][T22994] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7831'. [ 231.622688][T23013] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 231.636957][T23013] netem: change failed [ 231.671307][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7846'. [ 231.682264][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7846'. [ 231.898005][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7861'. [ 232.026563][T23056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7861'. [ 232.053010][T23065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23065 comm=syz.1.7865 [ 232.736260][T23179] IPVS: Error connecting to the multicast addr [ 232.748626][T23181] tipc: Started in network mode [ 232.753649][T23181] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 232.764840][T23181] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 232.773140][T23181] tipc: Enabled bearer , priority 10 [ 232.834254][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 232.834273][ T29] audit: type=1400 audit(744.878:7744): avc: denied { execute } for pid=23192 comm="syz.7.7924" path="/memory.swap.current" dev="ramfs" ino=67087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 233.051195][T23223] hsr_slave_0: left promiscuous mode [ 233.057494][T23223] hsr_slave_1: left promiscuous mode [ 233.405960][ T29] audit: type=1326 audit(745.448:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.429280][ T29] audit: type=1326 audit(745.448:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.452844][ T29] audit: type=1326 audit(745.458:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.476188][ T29] audit: type=1326 audit(745.458:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.499545][ T29] audit: type=1326 audit(745.458:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.522449][ T29] audit: type=1326 audit(745.458:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.545430][ T29] audit: type=1326 audit(745.458:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.568442][ T29] audit: type=1326 audit(745.458:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.591409][ T29] audit: type=1326 audit(745.468:7753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23275 comm="syz.0.7962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 233.779145][T16227] tipc: Node number set to 1 [ 234.489775][T23415] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 234.791374][T23471] 9pnet_fd: Insufficient options for proto=fd [ 234.993127][T23492] netlink: 'syz.4.8059': attribute type 1 has an invalid length. [ 235.306552][T23538] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 235.411167][T23558] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 235.489597][T23569] 9pnet_fd: Insufficient options for proto=fd [ 235.660800][T23585] netlink: 'syz.0.8100': attribute type 4 has an invalid length. [ 236.493528][T23693] veth1_to_bond: entered allmulticast mode [ 236.509380][T23693] bond_slave_1: entered promiscuous mode [ 236.520014][T23693] bond_slave_1: left promiscuous mode [ 236.525523][T23693] veth1_to_bond: left allmulticast mode [ 236.764427][T23724] __nla_validate_parse: 13 callbacks suppressed [ 236.764445][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.779848][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.810641][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.853970][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.862989][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.914866][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.990543][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 236.999741][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 237.019344][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8172'. [ 237.028335][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8162'. [ 237.045492][T23756] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 237.104597][T23768] lo speed is unknown, defaulting to 1000 [ 237.336727][T23814] netlink: 'syz.4.8202': attribute type 1 has an invalid length. [ 237.380828][T23814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.415941][T23814] bond4: (slave gretap2): making interface the new active one [ 237.428242][T23814] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 237.552442][T23856] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 238.212483][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 238.212501][ T29] audit: type=1326 audit(750.258:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.245948][ T29] audit: type=1326 audit(750.258:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.269064][ T29] audit: type=1326 audit(750.288:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe5c96ad457 code=0x7ffc0000 [ 238.292272][ T29] audit: type=1326 audit(750.288:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.315402][ T29] audit: type=1326 audit(750.288:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.338641][ T29] audit: type=1326 audit(750.288:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.361671][ T29] audit: type=1326 audit(750.288:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.384602][ T29] audit: type=1326 audit(750.288:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.407539][ T29] audit: type=1326 audit(750.358:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.430611][ T29] audit: type=1326 audit(750.358:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23946 comm="syz.1.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 238.843157][T23977] IPVS: Error connecting to the multicast addr [ 238.876379][T23978] ref_ctr_offset mismatch. inode: 0x1e07 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc0000000a [ 239.069047][T24011] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 239.255268][T24030] netlink: 'syz.4.8297': attribute type 298 has an invalid length. [ 239.303876][T24034] lo speed is unknown, defaulting to 1000 [ 240.404679][T24134] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 241.795645][T24266] netlink: 'syz.7.8401': attribute type 83 has an invalid length. [ 241.812633][T24273] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.833444][T24269] __nla_validate_parse: 12 callbacks suppressed [ 241.833476][T24269] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8402'. [ 241.850676][T24273] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.889729][T24286] atomic_op ffff88812715e528 conn xmit_atomic 0000000000000000 [ 241.920997][T24273] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.974012][T24273] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.999822][T24298] veth0_vlan: left promiscuous mode [ 242.012817][T24298] veth0_vlan: entered promiscuous mode [ 242.039356][ T6736] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.070647][ T6731] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.078968][ T6731] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.100890][T24307] atomic_op ffff88812959d928 conn xmit_atomic 0000000000000000 [ 242.108747][ T6731] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.647459][T24365] pim6reg: entered allmulticast mode [ 242.655632][T24365] pim6reg: left allmulticast mode [ 242.700103][T24363] lo speed is unknown, defaulting to 1000 [ 242.764314][T24372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8450'. [ 242.776783][T24372] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8450'. [ 242.831128][T24381] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8453'. [ 242.841579][T24381] xt_policy: neither incoming nor outgoing policy selected [ 243.561372][T24421] pimreg: entered allmulticast mode [ 243.590722][T24421] pimreg: left allmulticast mode [ 243.670576][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 243.670604][ T29] audit: type=1326 audit(755.718:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.1.8473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x0 [ 243.734592][T24431] netlink: 'syz.0.8475': attribute type 1 has an invalid length. [ 243.871090][T24407] syz.4.8463 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 243.882109][T24407] CPU: 0 UID: 0 PID: 24407 Comm: syz.4.8463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.882141][T24407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.882155][T24407] Call Trace: [ 243.882164][T24407] [ 243.882173][T24407] __dump_stack+0x1d/0x30 [ 243.882198][T24407] dump_stack_lvl+0xe8/0x140 [ 243.882235][T24407] dump_stack+0x15/0x1b [ 243.882325][T24407] dump_header+0x81/0x220 [ 243.882430][T24407] oom_kill_process+0x342/0x400 [ 243.882515][T24407] out_of_memory+0x979/0xb80 [ 243.882552][T24407] try_charge_memcg+0x5e6/0x9e0 [ 243.882621][T24407] charge_memcg+0x51/0xc0 [ 243.882643][T24407] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 243.882665][T24407] __read_swap_cache_async+0x1df/0x350 [ 243.882695][T24407] swap_cluster_readahead+0x277/0x3e0 [ 243.882868][T24407] swapin_readahead+0xde/0x6f0 [ 243.882900][T24407] ? __filemap_get_folio+0x4f7/0x6b0 [ 243.882932][T24407] ? swap_cache_get_folio+0x77/0x200 [ 243.883028][T24407] do_swap_page+0x301/0x2430 [ 243.883054][T24407] ? css_rstat_updated+0xb7/0x240 [ 243.883094][T24407] ? __pfx_default_wake_function+0x10/0x10 [ 243.883120][T24407] handle_mm_fault+0x9a5/0x2c20 [ 243.883151][T24407] do_user_addr_fault+0x636/0x1090 [ 243.883259][T24407] exc_page_fault+0x62/0xa0 [ 243.883350][T24407] asm_exc_page_fault+0x26/0x30 [ 243.883371][T24407] RIP: 0033:0x7fd81c52563c [ 243.883446][T24407] Code: 66 0f 1f 44 00 00 69 3d 76 00 e8 00 e8 03 00 00 48 8d 1d 77 09 35 00 e8 12 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 243.883494][T24407] RSP: 002b:00007ffdb7733550 EFLAGS: 00010283 [ 243.883514][T24407] RAX: 0000000000000000 RBX: 00007fd81c877080 RCX: 0000000000000000 [ 243.883529][T24407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555ca6a808 [ 243.883541][T24407] RBP: 00007fd81c877da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 243.883553][T24407] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000003b8b4 [ 243.883619][T24407] R13: 00007ffdb7733640 R14: ffffffffffffffff R15: 00007ffdb7733660 [ 243.883639][T24407] [ 243.883646][T24407] memory: usage 307200kB, limit 307200kB, failcnt 902 [ 244.094312][T24407] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 244.102258][T24407] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 244.109945][T24407] Memory cgroup stats for /syz4: [ 244.117829][T24448] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 244.152273][T24407] cache 0 [ 244.155429][T24407] rss 0 [ 244.158390][T24407] shmem 0 [ 244.161554][T24407] mapped_file 0 [ 244.165035][T24407] dirty 0 [ 244.167983][T24407] writeback 8192 [ 244.171734][T24407] workingset_refault_anon 96 [ 244.176323][T24407] workingset_refault_file 455 [ 244.181081][T24407] swap 774144 [ 244.184412][T24407] swapcached 20480 [ 244.188213][T24407] pgpgin 281728 [ 244.191754][T24407] pgpgout 281720 [ 244.195320][T24407] pgfault 330449 [ 244.198836][T24407] pgmajfault 51 [ 244.202329][T24407] inactive_anon 20480 [ 244.206292][T24407] active_anon 0 [ 244.209763][T24407] inactive_file 12288 [ 244.213800][T24407] active_file 0 [ 244.217308][T24407] unevictable 0 [ 244.221024][T24407] hierarchical_memory_limit 314572800 [ 244.226397][T24407] hierarchical_memsw_limit 9223372036854771712 [ 244.232557][T24407] total_cache 0 [ 244.235991][T24407] total_rss 0 [ 244.239266][T24407] total_shmem 0 [ 244.242706][T24407] total_mapped_file 0 [ 244.246658][T24407] total_dirty 0 [ 244.250144][T24407] total_writeback 8192 [ 244.254217][T24407] total_workingset_refault_anon 96 [ 244.259467][T24407] total_workingset_refault_file 455 [ 244.264637][T24407] total_swap 774144 [ 244.268449][T24407] total_swapcached 20480 [ 244.272769][T24407] total_pgpgin 281728 [ 244.276729][T24407] total_pgpgout 281720 [ 244.280809][T24407] total_pgfault 330449 [ 244.285028][T24407] total_pgmajfault 51 [ 244.288995][T24407] total_inactive_anon 20480 [ 244.293492][T24407] total_active_anon 0 [ 244.297530][T24407] total_inactive_file 12288 [ 244.302037][T24407] total_active_file 0 [ 244.306009][T24407] total_unevictable 0 [ 244.310024][T24407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8463,pid=24407,uid=0 [ 244.324933][T24407] Memory cgroup out of memory: Killed process 24407 (syz.4.8463) total-vm:95680kB, anon-rss:944kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 244.481161][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8493'. [ 244.511633][T24467] bridge0: entered promiscuous mode [ 244.517348][T24467] bridge0: port 1(macvlan4) entered blocking state [ 244.523958][T24467] bridge0: port 1(macvlan4) entered disabled state [ 244.565522][ T29] audit: type=1326 audit(756.608:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.1.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 244.609433][T24467] macvlan4: entered allmulticast mode [ 244.614960][T24467] bridge0: entered allmulticast mode [ 244.629453][ T29] audit: type=1326 audit(756.608:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.1.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 244.652377][ T29] audit: type=1326 audit(756.608:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.1.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 244.675261][ T29] audit: type=1326 audit(756.608:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.1.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 244.698248][ T29] audit: type=1326 audit(756.638:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.1.8496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 244.728872][T24467] macvlan4: left allmulticast mode [ 244.734119][T24467] bridge0: left allmulticast mode [ 244.757584][T24467] bridge0: left promiscuous mode [ 244.944472][T24506] netlink: 'syz.7.8509': attribute type 2 has an invalid length. [ 244.995151][ T29] audit: type=1326 audit(757.038:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.0.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 245.037719][ T29] audit: type=1326 audit(757.038:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.0.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 245.061140][ T29] audit: type=1326 audit(757.038:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.0.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 245.084161][ T29] audit: type=1326 audit(757.038:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24516 comm="syz.0.8510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b8c60ebe9 code=0x7ffc0000 [ 245.722131][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8533'. [ 245.741121][T24562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8533'. [ 245.888339][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8538'. [ 245.897508][T24576] netlink: 'syz.0.8538': attribute type 14 has an invalid length. [ 245.907218][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8538'. [ 245.916406][T24576] netlink: 'syz.0.8538': attribute type 14 has an invalid length. [ 246.049376][T24590] netlink: 'syz.0.8546': attribute type 1 has an invalid length. [ 246.057193][T24590] netlink: 'syz.0.8546': attribute type 4 has an invalid length. [ 246.065200][T24590] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8546'. [ 246.224752][T24598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.232805][T24598] team0: Port device bond0 added [ 246.881044][T24650] __nla_validate_parse: 2 callbacks suppressed [ 246.881065][T24650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8583'. [ 246.904972][T24648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24648 comm=syz.7.8573 [ 247.011098][T24658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8578'. [ 247.028600][T24658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8578'. [ 247.135969][T24674] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8586'. [ 247.181357][T24688] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 247.356308][T24711] netlink: 'syz.7.8601': attribute type 3 has an invalid length. [ 247.381907][T24716] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8603'. [ 247.696739][T24765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8620'. [ 247.710929][T24765] netem: change failed [ 248.522099][T24778] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 248.566124][T24781] netlink: 'syz.0.8637': attribute type 4 has an invalid length. [ 248.580996][T24781] netlink: 'syz.0.8637': attribute type 4 has an invalid length. [ 248.597350][T24784] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8630'. [ 248.616535][T24784] hsr_slave_0: left promiscuous mode [ 248.625383][T24784] hsr_slave_1: left promiscuous mode [ 248.765208][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 248.765224][ T29] audit: type=1326 audit(760.808:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.816182][ T29] audit: type=1326 audit(760.838:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.839380][ T29] audit: type=1326 audit(760.838:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.862683][ T29] audit: type=1326 audit(760.838:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.885893][ T29] audit: type=1326 audit(760.838:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.908820][ T29] audit: type=1326 audit(760.838:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.931856][ T29] audit: type=1326 audit(760.838:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.954749][ T29] audit: type=1326 audit(760.838:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 248.977884][ T29] audit: type=1326 audit(760.838:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 249.000783][ T29] audit: type=1326 audit(760.838:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24800 comm="syz.6.8640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53d9f4ebe9 code=0x7ffc0000 [ 249.024579][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8641'. [ 249.035042][T24808] netem: change failed [ 249.073992][T24810] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 249.261688][T24820] netlink: 268 bytes leftover after parsing attributes in process `syz.7.8648'. [ 249.556501][T24837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8654'. [ 249.574024][T24837] netem: change failed [ 249.585760][T24843] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 249.609588][T24845] netlink: 'syz.0.8662': attribute type 4 has an invalid length. [ 249.643965][T24845] netlink: 'syz.0.8662': attribute type 4 has an invalid length. [ 250.594991][T24892] netlink: 'syz.4.8676': attribute type 1 has an invalid length. [ 250.622325][T24898] pimreg: entered allmulticast mode [ 250.639155][T24900] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 250.654011][T24898] pimreg: left allmulticast mode [ 250.735346][T24920] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 251.565216][T24987] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 251.876634][T25025] atomic_op ffff888118e63d28 conn xmit_atomic 0000000000000000 [ 251.887875][T25027] netlink: 'syz.6.8741': attribute type 1 has an invalid length. [ 251.908139][T25027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.947442][T25027] bond1: (slave gretap0): making interface the new active one [ 251.956151][T25027] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 252.008055][T25043] veth0_vlan: left promiscuous mode [ 252.016129][T25043] veth0_vlan: entered promiscuous mode [ 252.055367][T25051] atomic_op ffff888118e61d28 conn xmit_atomic 0000000000000000 [ 252.312297][T25083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8768'. [ 252.423522][T25088] pim6reg: entered allmulticast mode [ 252.437699][T25088] pim6reg: left allmulticast mode [ 252.584117][T25116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8781'. [ 252.764696][T25142] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8795'. [ 253.123888][T25215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8827'. [ 253.677345][T25279] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8856'. [ 253.702181][T25282] netlink: 'syz.0.8855': attribute type 83 has an invalid length. [ 253.901343][T25299] atomic_op ffff88812959d528 conn xmit_atomic 0000000000000000 [ 254.261522][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 254.261542][ T29] audit: type=1326 audit(766.308:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.327451][ T29] audit: type=1326 audit(766.308:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.350933][ T29] audit: type=1326 audit(766.308:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.373915][ T29] audit: type=1326 audit(766.308:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.396823][ T29] audit: type=1326 audit(766.308:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.419909][ T29] audit: type=1326 audit(766.308:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.443071][ T29] audit: type=1326 audit(766.338:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.466048][ T29] audit: type=1326 audit(766.338:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.489001][ T29] audit: type=1326 audit(766.338:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.512166][ T29] audit: type=1326 audit(766.338:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25304 comm="syz.1.8877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c96aebe9 code=0x7ffc0000 [ 254.742001][T25334] lo speed is unknown, defaulting to 1000 [ 254.803463][T25347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8883'. [ 254.840779][T25347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8883'. [ 254.855793][T25352] vlan0: entered allmulticast mode [ 254.976466][T25373] bridge0: port 1(batadv1) entered blocking state [ 254.983035][T25373] bridge0: port 1(batadv1) entered disabled state [ 254.994430][T25373] batadv1: entered allmulticast mode [ 255.000428][T25373] batadv1: entered promiscuous mode [ 255.405231][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8917'. [ 255.417513][T25411] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8917'. [ 255.479623][ T6696] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 255.488893][ T6696] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 256.094929][T25511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25511 comm=syz.6.8942 [ 256.107632][T25511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25511 comm=syz.6.8942 [ 256.853378][T25586] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8955'. [ 257.005222][T25529] ================================================================== [ 257.013370][T25529] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 257.022074][T25529] [ 257.024415][T25529] write to 0xffff8881041bc2e8 of 8 bytes by task 25520 on cpu 0: [ 257.032139][T25529] shmem_file_splice_read+0x470/0x600 [ 257.037537][T25529] splice_direct_to_actor+0x26f/0x680 [ 257.043189][T25529] do_splice_direct+0xda/0x150 [ 257.047979][T25529] do_sendfile+0x380/0x650 [ 257.052509][T25529] __x64_sys_sendfile64+0x105/0x150 [ 257.057728][T25529] x64_sys_call+0x2bb0/0x2ff0 [ 257.062492][T25529] do_syscall_64+0xd2/0x200 [ 257.067001][T25529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.072899][T25529] [ 257.075222][T25529] write to 0xffff8881041bc2e8 of 8 bytes by task 25529 on cpu 1: [ 257.082937][T25529] shmem_file_splice_read+0x470/0x600 [ 257.088313][T25529] splice_direct_to_actor+0x26f/0x680 [ 257.093683][T25529] do_splice_direct+0xda/0x150 [ 257.098453][T25529] do_sendfile+0x380/0x650 [ 257.102872][T25529] __x64_sys_sendfile64+0x105/0x150 [ 257.108074][T25529] x64_sys_call+0x2bb0/0x2ff0 [ 257.112753][T25529] do_syscall_64+0xd2/0x200 [ 257.117348][T25529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.123245][T25529] [ 257.125571][T25529] value changed: 0x0000000000006837 -> 0x0000000000006839 [ 257.132669][T25529] [ 257.134987][T25529] Reported by Kernel Concurrency Sanitizer on: [ 257.141136][T25529] CPU: 1 UID: 0 PID: 25529 Comm: syz.4.8944 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.150943][T25529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.161003][T25529] ==================================================================