last executing test programs: 2m9.58824836s ago: executing program 3 (id=1008): unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0xeb51a8ffd4e6d429, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_clone(0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x47b, 0x7, 0x20000002, 0x6, 0x7]}, &(0x7f0000000000)=0x54) 2m9.445427419s ago: executing program 3 (id=1013): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m9.423902241s ago: executing program 3 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000001c0)={0x2b7f}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m9.387873912s ago: executing program 3 (id=1015): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000100)={[{@quota}, {@nodelalloc}]}, 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) io_setup(0x200, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x100) 2m9.144214377s ago: executing program 3 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(r2, 0x0) socket(0x1e, 0x805, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0x3a) socketpair(0x2c, 0x5, 0x2, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r3], 0x44}}, 0x8000) 2m8.884644762s ago: executing program 3 (id=1020): r0 = socket(0x10, 0x80003, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.884397062s ago: executing program 32 (id=1020): r0 = socket(0x10, 0x80003, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 4.690873067s ago: executing program 1 (id=2699): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r6, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 2.638410726s ago: executing program 1 (id=2745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000005c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) 2.638131717s ago: executing program 0 (id=2735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.522876193s ago: executing program 0 (id=2737): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x2b0, &(0x7f0000000280)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_dev$sg(0x0, 0x6, 0xc0040) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8f0, &(0x7f0000002400)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) 1.89619742s ago: executing program 0 (id=2742): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.661268443s ago: executing program 1 (id=2748): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x5, 0x3, 0x0, @remote, @mcast2={0xff, 0x3}, 0x20, 0x7, 0x2, 0x1}}) unshare(0x22020600) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x3, 0x0, &(0x7f0000000880), 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0xfffffffd) 1.508699482s ago: executing program 0 (id=2750): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r6, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 1.508478703s ago: executing program 2 (id=2751): sync() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c1, &(0x7f00000012c0)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0x124) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.477057334s ago: executing program 1 (id=2753): gettid() r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.440862977s ago: executing program 2 (id=2754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.250618087s ago: executing program 2 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 1.003570362s ago: executing program 2 (id=2766): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) epoll_create1(0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x3b00, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 552.004488ms ago: executing program 1 (id=2767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 551.335738ms ago: executing program 5 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 532.536809ms ago: executing program 5 (id=2769): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 257.044935ms ago: executing program 4 (id=2775): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x5, 0x3, 0x0, @remote, @mcast2={0xff, 0x3}, 0x20, 0x7, 0x2, 0x1}}) unshare(0x22020600) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x3, 0x0, &(0x7f0000000880), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0xfffffffd) 166.685421ms ago: executing program 5 (id=2776): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = open(0x0, 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 139.012132ms ago: executing program 5 (id=2777): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) epoll_create1(0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x3b00, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 92.427745ms ago: executing program 4 (id=2778): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'hsr0\x00', @local}) 86.699456ms ago: executing program 2 (id=2779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) 86.068666ms ago: executing program 1 (id=2780): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @broadcast}, &(0x7f0000001240)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00'}) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 56.619877ms ago: executing program 4 (id=2781): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x5, 0x3, 0x0, @remote, @mcast2={0xff, 0x3}, 0x20, 0x7, 0x2, 0x1}}) unshare(0x22020600) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x3, 0x0, &(0x7f0000000880), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0xfffffffd) 0s ago: executing program 2 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000) [ 161.559202][ T8459] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1652'. [ 161.568664][ T8459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.650813][ T8475] netlink: 'syz.5.1656': attribute type 1 has an invalid length. [ 161.698742][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 161.718916][ T8475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.745466][ T8475] bond2: (slave bond3): making interface the new active one [ 161.754779][ T8475] bond2: (slave bond3): Enslaving as an active interface with an up link [ 161.768397][ T8485] macvlan1 (unregistering): left promiscuous mode [ 161.799289][ T8475] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.812595][ T8475] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 161.894447][ T8496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8496 comm=syz.1.1665 [ 161.924672][ T8496] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 161.948617][ T8496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 162.036886][ T8496] bond6: (slave dummy0): Releasing active interface [ 162.208516][ T8496] dummy0: left promiscuous mode [ 162.250753][ T8496] bond11: (slave dummy0): making interface the new active one [ 162.371787][ T8496] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 162.850978][ T8524] netlink: 'syz.5.1674': attribute type 15 has an invalid length. [ 162.860006][ T8524] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1674'. [ 163.376619][ T8526] lo speed is unknown, defaulting to 1000 [ 163.452379][ T8541] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 163.506172][ T8541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.514584][ T8541] bond6: (slave bond7): making interface the new active one [ 163.522604][ T8541] bond6: (slave bond7): Enslaving as an active interface with an up link [ 163.538363][ T8541] bridge0: Device is already in use. [ 163.747121][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 163.849658][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 164.213054][ T8571] syz.5.1685 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 164.224494][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.5.1685 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.224544][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.224557][ T8571] Call Trace: [ 164.224563][ T8571] [ 164.224572][ T8571] __dump_stack+0x1d/0x30 [ 164.224601][ T8571] dump_stack_lvl+0x95/0xd0 [ 164.224619][ T8571] dump_stack+0x15/0x1b [ 164.224653][ T8571] dump_header+0x80/0x240 [ 164.224735][ T8571] oom_kill_process+0x295/0x350 [ 164.224757][ T8571] out_of_memory+0x97d/0xb80 [ 164.224774][ T8571] try_charge_memcg+0x62e/0xa10 [ 164.224868][ T8571] charge_memcg+0x51/0xc0 [ 164.224902][ T8571] __mem_cgroup_charge+0x28/0xb0 [ 164.224925][ T8571] handle_mm_fault+0x1140/0x3030 [ 164.224976][ T8571] ? vma_start_read+0x1c7/0x2c0 [ 164.225002][ T8571] do_user_addr_fault+0x62f/0x1050 [ 164.225026][ T8571] ? fpregs_restore_userregs+0xe1/0x1c0 [ 164.225115][ T8571] exc_page_fault+0x62/0xa0 [ 164.225135][ T8571] asm_exc_page_fault+0x26/0x30 [ 164.225155][ T8571] RIP: 0033:0x7f1bdf50929f [ 164.225172][ T8571] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 164.225227][ T8571] RSP: 002b:00007f1bddf63ff0 EFLAGS: 00010246 [ 164.225242][ T8571] RAX: 00007f1bddf640d0 RBX: 0000000000020000 RCX: 00007f1bddf63ff0 [ 164.225256][ T8571] RDX: 00007f1bdf608fef RSI: 0000000000000023 RDI: 00007f1bddf640d0 [ 164.225271][ T8571] RBP: 00007f1bddf45000 R08: 0000000000000000 R09: 00007fffb5ed1b87 [ 164.225353][ T8571] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f1bddf640d0 [ 164.225366][ T8571] R13: 000000000000006e R14: 00007fffb5ed1aa0 R15: 00007fffb5ed1b88 [ 164.225386][ T8571] [ 164.225393][ T8571] memory: usage 307200kB, limit 307200kB, failcnt 806 [ 164.431351][ T8571] memory+swap: usage 232832kB, limit 9007199254740988kB, failcnt 0 [ 164.440920][ T8571] kmem: usage 160564kB, limit 9007199254740988kB, failcnt 0 [ 164.449123][ T8571] Memory cgroup stats for /syz5: [ 164.464003][ T8571] cache 73523200 [ 164.467277][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1688'. [ 164.470064][ T8571] rss 483328 [ 164.489324][ T8571] shmem 73453568 [ 164.494684][ T8571] mapped_file 0 [ 164.498445][ T8571] dirty 0 [ 164.502397][ T8571] writeback 0 [ 164.506100][ T8571] workingset_refault_anon 0 [ 164.512088][ T8571] workingset_refault_file 0 [ 164.517691][ T8571] swap 0 [ 164.520867][ T8571] swapcached 0 [ 164.524321][ T8571] pgpgin 78458 [ 164.527957][ T8571] pgpgout 60390 [ 164.531414][ T8571] pgfault 68582 [ 164.534953][ T8571] pgmajfault 1 [ 164.538488][ T8571] inactive_anon 6303744 [ 164.543003][ T8571] active_anon 67579904 [ 164.547711][ T8571] inactive_file 0 [ 164.551868][ T8571] active_file 69632 [ 164.555826][ T8571] unevictable 0 [ 164.559311][ T8571] hierarchical_memory_limit 314572800 [ 164.564944][ T8571] hierarchical_memsw_limit 9223372036854771712 [ 164.571105][ T8571] total_cache 73523200 [ 164.576385][ T8571] total_rss 483328 [ 164.580127][ T8571] total_shmem 73453568 [ 164.584409][ T8571] total_mapped_file 0 [ 164.588820][ T8571] total_dirty 0 [ 164.592284][ T8571] total_writeback 0 [ 164.596543][ T8571] total_workingset_refault_anon 0 [ 164.601811][ T8571] total_workingset_refault_file 0 [ 164.607708][ T8571] total_swap 0 [ 164.611272][ T8571] total_swapcached 0 [ 164.615952][ T8571] total_pgpgin 78458 [ 164.620474][ T8571] total_pgpgout 60390 [ 164.625645][ T8571] total_pgfault 68582 [ 164.630276][ T8571] total_pgmajfault 1 [ 164.634992][ T8571] total_inactive_anon 6303744 [ 164.640535][ T8571] total_active_anon 67579904 [ 164.647312][ T8571] total_inactive_file 0 [ 164.651914][ T8571] total_active_file 69632 [ 164.657608][ T8571] total_unevictable 0 [ 164.662236][ T8571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1439,pid=7814,uid=0 [ 164.680474][ T8571] Memory cgroup out of memory: Killed process 7814 (syz.5.1439) total-vm:96048kB, anon-rss:1212kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 164.710099][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 164.710176][ T29] audit: type=1400 audit(1769065552.270:3593): avc: denied { create } for pid=8577 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 164.715260][ T8581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8581 comm=syz.2.1690 [ 164.764535][ T8579] netlink: 'syz.0.1689': attribute type 39 has an invalid length. [ 164.816822][ T8582] bond0: (slave team0): Releasing backup interface [ 164.825529][ T8582] team0: left promiscuous mode [ 164.830580][ T8582] team_slave_0: left promiscuous mode [ 164.837195][ T8582] team_slave_1: left promiscuous mode [ 164.856966][ T8582] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 164.918168][ T8586] netlink: 'syz.4.1691': attribute type 1 has an invalid length. [ 165.199942][ T8592] 8021q: adding VLAN 0 to HW filter on device bond11 [ 165.223422][ T29] audit: type=1400 audit(1769065552.780:3594): avc: denied { mounton } for pid=8598 comm="syz.0.1694" path="/bus" dev="rootfs" ino=25061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 165.265711][ T8592] bond10: (slave bond11): making interface the new active one [ 165.290875][ T8592] bond10: (slave bond11): Enslaving as an active interface with an up link [ 165.317927][ T8596] bridge0: Device is already in use. [ 165.487246][ T29] audit: type=1400 audit(1769065553.050:3595): avc: denied { ioctl } for pid=8616 comm="syz.1.1700" path="socket:[25102]" dev="sockfs" ino=25102 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.585045][ T8602] lo speed is unknown, defaulting to 1000 [ 165.819283][ T8628] lo speed is unknown, defaulting to 1000 [ 166.722333][ T29] audit: type=1326 audit(1769065554.280:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.788584][ T29] audit: type=1326 audit(1769065554.310:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.814043][ T29] audit: type=1326 audit(1769065554.310:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.839244][ T29] audit: type=1326 audit(1769065554.310:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.864082][ T29] audit: type=1326 audit(1769065554.310:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.889139][ T29] audit: type=1326 audit(1769065554.310:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 166.913625][ T29] audit: type=1326 audit(1769065554.310:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8647 comm="syz.5.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 167.321672][ T8628] netlink: 'syz.0.1703': attribute type 2 has an invalid length. [ 167.355851][ T53] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 167.375694][ T53] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 167.397616][ T53] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 167.420904][ T53] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 167.581507][ T8665] lo speed is unknown, defaulting to 1000 [ 168.073647][ T8628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1703'. [ 168.366102][ T8675] syz.5.1719 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 168.380559][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.5.1719 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.380588][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.380622][ T8675] Call Trace: [ 168.380628][ T8675] [ 168.380637][ T8675] __dump_stack+0x1d/0x30 [ 168.380670][ T8675] dump_stack_lvl+0x95/0xd0 [ 168.380694][ T8675] dump_stack+0x15/0x1b [ 168.380784][ T8675] dump_header+0x80/0x240 [ 168.380881][ T8675] oom_kill_process+0x295/0x350 [ 168.380907][ T8675] out_of_memory+0x97d/0xb80 [ 168.381005][ T8675] try_charge_memcg+0x62e/0xa10 [ 168.381045][ T8675] obj_cgroup_charge_pages+0xa6/0x150 [ 168.381142][ T8675] __memcg_kmem_charge_page+0x9e/0x170 [ 168.381175][ T8675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 168.381237][ T8675] alloc_pages_mpol+0xb3/0x260 [ 168.381332][ T8675] alloc_pages_noprof+0x8f/0x130 [ 168.381400][ T8675] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 168.381441][ T8675] __kvmalloc_node_noprof+0x471/0x680 [ 168.381476][ T8675] ? ip_set_alloc+0x24/0x30 [ 168.381532][ T8675] ? ip_set_alloc+0x24/0x30 [ 168.381558][ T8675] ip_set_alloc+0x24/0x30 [ 168.381584][ T8675] hash_netiface_create+0x282/0x740 [ 168.381618][ T8675] ? __pfx_hash_netiface_create+0x10/0x10 [ 168.381673][ T8675] ip_set_create+0x3cf/0x970 [ 168.381713][ T8675] nfnetlink_rcv_msg+0x509/0x5d0 [ 168.381802][ T8675] netlink_rcv_skb+0x123/0x220 [ 168.381828][ T8675] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 168.381859][ T8675] nfnetlink_rcv+0x167/0x1720 [ 168.381881][ T8675] ? prep_new_page+0x4f/0x1f0 [ 168.381966][ T8675] ? get_page_from_freelist+0x13a5/0x1400 [ 168.381996][ T8675] ? mas_ascend+0x1d7/0x540 [ 168.382045][ T8675] ? uprobe_mmap+0x60c/0xd20 [ 168.382081][ T8675] ? mas_prev_slot+0x661/0x6c0 [ 168.382106][ T8675] ? should_fail_ex+0x30/0x280 [ 168.382129][ T8675] ? try_charge_memcg+0x215/0xa10 [ 168.382216][ T8675] ? _raw_spin_lock_bh+0x56/0xb0 [ 168.382246][ T8675] ? should_fail_ex+0x30/0x280 [ 168.382332][ T8675] ? selinux_nlmsg_lookup+0x99/0x890 [ 168.382360][ T8675] ? __rcu_read_unlock+0x33/0x70 [ 168.382407][ T8675] ? __netlink_lookup+0x276/0x2b0 [ 168.382438][ T8675] netlink_unicast+0x5c0/0x690 [ 168.382466][ T8675] netlink_sendmsg+0x5c8/0x6f0 [ 168.382536][ T8675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.382566][ T8675] __sock_sendmsg+0x145/0x170 [ 168.382612][ T8675] ____sys_sendmsg+0x31e/0x4a0 [ 168.382718][ T8675] ___sys_sendmsg+0x195/0x1e0 [ 168.382751][ T8675] __x64_sys_sendmsg+0xd4/0x160 [ 168.382799][ T8675] x64_sys_call+0x17ba/0x3000 [ 168.382828][ T8675] do_syscall_64+0xc0/0x2a0 [ 168.382867][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.382891][ T8675] RIP: 0033:0x7f1bdf55acb9 [ 168.382907][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.382938][ T8675] RSP: 002b:00007f1bddfb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.383008][ T8675] RAX: ffffffffffffffda RBX: 00007f1bdf7d5fa0 RCX: 00007f1bdf55acb9 [ 168.383025][ T8675] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 168.383057][ T8675] RBP: 00007f1bdf5c8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 168.383070][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.383082][ T8675] R13: 00007f1bdf7d6038 R14: 00007f1bdf7d5fa0 R15: 00007fffb5ed1b88 [ 168.383179][ T8675] [ 168.383188][ T8675] memory: usage 306992kB, limit 307200kB, failcnt 1096 [ 168.751394][ T8675] memory+swap: usage 306992kB, limit 9007199254740988kB, failcnt 0 [ 168.759514][ T8675] kmem: usage 216400kB, limit 9007199254740988kB, failcnt 0 [ 168.768022][ T8675] Memory cgroup stats for /syz5: [ 168.787716][ T8675] cache 84160512 [ 168.796926][ T8675] rss 8605696 [ 168.800368][ T8675] shmem 84090880 [ 168.804492][ T8675] mapped_file 0 [ 168.808549][ T8675] dirty 0 [ 168.811959][ T8675] writeback 0 [ 168.816300][ T8675] workingset_refault_anon 0 [ 168.821281][ T8675] workingset_refault_file 0 [ 168.825959][ T8675] swap 0 [ 168.829412][ T8675] swapcached 0 [ 168.833516][ T8675] pgpgin 90125 [ 168.836891][ T8675] pgpgout 67477 [ 168.840449][ T8675] pgfault 82515 [ 168.845057][ T8675] pgmajfault 1 [ 168.848539][ T8675] inactive_anon 962560 [ 168.852896][ T8675] active_anon 91734016 [ 168.857045][ T8675] inactive_file 0 [ 168.860745][ T8675] active_file 69632 [ 168.864648][ T8675] unevictable 0 [ 168.868106][ T8675] hierarchical_memory_limit 314572800 [ 168.874350][ T8675] hierarchical_memsw_limit 9223372036854771712 [ 168.880642][ T8675] total_cache 84160512 [ 168.884763][ T8675] total_rss 8605696 [ 168.888855][ T8675] total_shmem 84090880 [ 168.893098][ T8675] total_mapped_file 0 [ 168.897198][ T8675] total_dirty 0 [ 168.900661][ T8675] total_writeback 0 [ 168.905622][ T8675] total_workingset_refault_anon 0 [ 168.910780][ T8675] total_workingset_refault_file 0 [ 168.916079][ T8675] total_swap 0 [ 168.919553][ T8675] total_swapcached 0 [ 168.923915][ T8675] total_pgpgin 90125 [ 168.928094][ T8675] total_pgpgout 67477 [ 168.932193][ T8675] total_pgfault 82515 [ 168.937773][ T8675] total_pgmajfault 1 [ 168.942944][ T8675] total_inactive_anon 962560 [ 168.949045][ T8675] total_active_anon 91734016 [ 168.954162][ T8675] total_inactive_file 0 [ 168.958808][ T8675] total_active_file 69632 [ 168.964604][ T8675] total_unevictable 0 [ 168.969543][ T8675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1719,pid=8674,uid=0 [ 168.985841][ T8675] Memory cgroup out of memory: Killed process 8674 (syz.5.1719) total-vm:100616kB, anon-rss:9524kB, file-rss:26284kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 169.305334][ T8717] vlan0: entered allmulticast mode [ 169.310503][ T8717] bond5: entered allmulticast mode [ 169.315704][ T8717] macvlan2: entered allmulticast mode [ 169.321819][ T8717] bond0: entered allmulticast mode [ 169.328386][ T8717] bond_slave_0: entered allmulticast mode [ 169.334632][ T8717] bond_slave_1: entered allmulticast mode [ 169.560346][ T8727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8727 comm=syz.0.1733 [ 169.599140][ T8729] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 169.623059][ T8729] bond12: entered promiscuous mode [ 169.629691][ T8729] 8021q: adding VLAN 0 to HW filter on device bond12 [ 169.643134][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'. [ 169.673001][ T8729] bond12: entered allmulticast mode [ 169.782095][ T8729] bond12: (slave bridge3): making interface the new active one [ 169.791094][ T8729] bridge3: entered promiscuous mode [ 169.799177][ T8729] bridge3: entered allmulticast mode [ 169.808472][ T8729] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 170.024699][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 170.024716][ T29] audit: type=1326 audit(1769065557.580:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.057164][ T29] audit: type=1326 audit(1769065557.580:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.082944][ T29] audit: type=1326 audit(1769065557.580:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.108949][ T29] audit: type=1326 audit(1769065557.580:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.132973][ T29] audit: type=1326 audit(1769065557.580:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.157131][ T29] audit: type=1326 audit(1769065557.580:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.182009][ T29] audit: type=1326 audit(1769065557.580:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.206375][ T29] audit: type=1326 audit(1769065557.580:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f180e5fb58e code=0x7ffc0000 [ 170.231820][ T29] audit: type=1326 audit(1769065557.580:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.257089][ T29] audit: type=1326 audit(1769065557.580:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.4.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 170.301348][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'. [ 170.585511][ T8778] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 170.635183][ T8778] 8021q: adding VLAN 0 to HW filter on device bond12 [ 170.669548][ T8784] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1754'. [ 170.783971][ T8772] 8021q: adding VLAN 0 to HW filter on device bond12 [ 170.815390][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 170.919854][ T8772] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 171.015622][ T8772] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 171.100404][ T8778] gretap1: entered promiscuous mode [ 171.127363][ T8778] bond12: (slave gretap1): making interface the new active one [ 171.138856][ T8778] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 171.148633][ T8789] tipc: Started in network mode [ 171.154435][ T8789] tipc: Node identity 1, cluster identity 4711 [ 171.160726][ T8789] tipc: Node number set to 1 [ 171.165566][ T8789] tipc: Cannot configure node identity twice [ 171.735240][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.966014][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 171.976792][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 171.981163][ T8828] macvlan0: entered promiscuous mode [ 171.993285][ T8828] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 172.036895][ T8835] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1770'. [ 172.047042][ T8835] 0ªî{X¹¦: renamed from gretap0 [ 172.054490][ T8835] 0ªî{X¹¦: entered allmulticast mode [ 172.061514][ T8835] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 172.164313][ T8846] netlink: 'syz.5.1774': attribute type 10 has an invalid length. [ 172.207005][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.223322][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1774'. [ 172.234942][ T8846] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 172.244308][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.268878][ T8847] bond0: (slave batadv0): Releasing backup interface [ 172.279808][ T8849] tipc: Enabling of bearer rejected, failed to enable media [ 172.367881][ T8859] vlan0: entered promiscuous mode [ 172.464467][ T8872] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 172.475162][ T8872] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.484652][ T8872] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.509251][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 172.526596][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 172.534639][ T36] IPVS: starting estimator thread 0... [ 172.564911][ T8882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8882 comm=syz.2.1787 [ 172.583267][ T8882] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 172.603484][ T8882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.644741][ T8878] IPVS: using max 2352 ests per chain, 117600 per kthread [ 172.656048][ T5935] IPVS: starting estimator thread 0... [ 172.774311][ T8890] IPVS: using max 2400 ests per chain, 120000 per kthread [ 173.232462][ T8902] netlink: 'syz.1.1793': attribute type 13 has an invalid length. [ 173.352269][ T8908] netlink: 'syz.4.1796': attribute type 10 has an invalid length. [ 174.118710][ T8939] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 174.127733][ T8939] 0ªî{X¹¦: entered allmulticast mode [ 174.134888][ T8939] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 174.277231][ T8945] tipc: Enabling of bearer rejected, failed to enable media [ 174.481269][ T8962] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 175.116141][ T8961] Set syz1 is full, maxelem 65536 reached [ 175.246167][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 175.246187][ T29] audit: type=1400 audit(1769065562.810:3981): avc: denied { cpu } for pid=8980 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.419944][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 175.489278][ T8990] macvlan0: entered allmulticast mode [ 175.754619][ T9002] __nla_validate_parse: 6 callbacks suppressed [ 175.754633][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 175.925515][ T29] audit: type=1400 audit(1769065563.490:3982): avc: denied { remount } for pid=9016 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 175.990342][ T9020] netlink: 'syz.5.1831': attribute type 39 has an invalid length. [ 176.041987][ T9022] bridge_slave_0: left allmulticast mode [ 176.048077][ T9022] bridge_slave_0: left promiscuous mode [ 176.055102][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.066521][ T9022] bridge_slave_1: left allmulticast mode [ 176.072857][ T9022] bridge_slave_1: left promiscuous mode [ 176.079261][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.089896][ T9022] bond0: (slave bond_slave_0): Releasing backup interface [ 176.100266][ T9022] bond0: (slave bond_slave_1): Releasing backup interface [ 176.111795][ T9022] team0: Port device team_slave_0 removed [ 176.119515][ T9022] team0: Port device team_slave_1 removed [ 176.126925][ T9022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 176.266117][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1833'. [ 176.326677][ T29] audit: type=1326 audit(1769065563.890:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.354271][ T29] audit: type=1326 audit(1769065563.890:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.378900][ T29] audit: type=1326 audit(1769065563.890:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.407495][ T29] audit: type=1326 audit(1769065563.890:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.435231][ T29] audit: type=1326 audit(1769065563.890:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.461846][ T29] audit: type=1326 audit(1769065563.890:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.505776][ T29] audit: type=1326 audit(1769065564.050:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.531467][ T29] audit: type=1326 audit(1769065564.050:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 176.641844][ T9041] tipc: Enabling of bearer rejected, failed to enable media [ 176.772973][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1839'. [ 176.928268][ T9065] lo speed is unknown, defaulting to 1000 [ 177.045983][ T9075] veth0_macvtap: Caught tx_queue_len zero misconfig [ 177.245575][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1849'. [ 177.255344][ T9083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1849'. [ 177.265495][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1849'. [ 177.277686][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1849'. [ 177.781359][ T9092] netlink: 'syz.2.1853': attribute type 4 has an invalid length. [ 177.790006][ T9092] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1853'. [ 177.808282][ T9092] .`: renamed from bond0 [ 178.201088][ T9112] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.416152][ T9114] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1862'. [ 178.468739][ T9121] netlink: 'syz.4.1865': attribute type 39 has an invalid length. [ 179.072525][ T9141] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 179.083083][ T9141] ip6tnl0: Caught tx_queue_len zero misconfig [ 179.236206][ T9143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9143 comm=syz.0.1873 [ 179.710881][ T9159] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 179.764860][ T9159] 8021q: adding VLAN 0 to HW filter on device bond13 [ 179.792427][ T9164] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 179.831386][ T9159] bond13: (slave gretap1): making interface the new active one [ 179.849307][ T9159] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 179.922712][ T9159] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9159 comm=syz.4.1878 [ 180.537184][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 180.537200][ T29] audit: type=1400 audit(1769065568.100:4024): avc: denied { ioctl } for pid=9182 comm="syz.5.1885" path="socket:[27942]" dev="sockfs" ino=27942 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.622705][ T9180] geneve4: entered promiscuous mode [ 180.629484][ T9180] geneve4: entered allmulticast mode [ 180.809044][ T9202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9202 comm=syz.1.1893 [ 180.838617][ T29] audit: type=1326 audit(1769065568.400:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.865997][ T29] audit: type=1326 audit(1769065568.400:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.890934][ T29] audit: type=1326 audit(1769065568.400:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.918299][ T29] audit: type=1326 audit(1769065568.400:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.948846][ T29] audit: type=1326 audit(1769065568.440:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.974426][ T29] audit: type=1326 audit(1769065568.450:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 180.999212][ T29] audit: type=1326 audit(1769065568.450:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9201 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd05c84acb9 code=0x7ffc0000 [ 181.028544][ T9209] tipc: Enabling of bearer rejected, failed to enable media [ 181.524167][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1906'. [ 181.557787][ T9241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9241 comm=syz.2.1906 [ 181.590572][ T9256] lo speed is unknown, defaulting to 1000 [ 181.684813][ T9271] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1912'. [ 181.696339][ T9272] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 181.709257][ T9272] netlink: 'syz.0.1910': attribute type 4 has an invalid length. [ 181.761432][ T9279] syz.1.1912 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 181.910647][ T9283] netlink: 'syz.4.1914': attribute type 39 has an invalid length. [ 181.954392][ T9283] bond0: (slave team0): Releasing backup interface [ 181.963697][ T9283] bond0: (slave bond_slave_0): Releasing backup interface [ 181.988180][ T9283] bond0: (slave bond_slave_1): Releasing backup interface [ 181.997309][ T9283] team0: Port device team_slave_0 removed [ 182.004702][ T9283] team0: Port device team_slave_1 removed [ 182.011851][ T9283] bond3: (slave wireguard0): Releasing backup interface [ 182.020360][ T9283] wireguard0: left promiscuous mode [ 182.034347][ T9285] syz.2.1913 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 182.044734][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.2.1913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.044767][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.044852][ T9285] Call Trace: [ 182.044862][ T9285] [ 182.044872][ T9285] __dump_stack+0x1d/0x30 [ 182.044918][ T9285] dump_stack_lvl+0x95/0xd0 [ 182.044941][ T9285] dump_stack+0x15/0x1b [ 182.044964][ T9285] dump_header+0x80/0x240 [ 182.044986][ T9285] oom_kill_process+0x295/0x350 [ 182.045029][ T9285] out_of_memory+0x97d/0xb80 [ 182.045049][ T9285] try_charge_memcg+0x62e/0xa10 [ 182.045168][ T9285] charge_memcg+0x51/0xc0 [ 182.045198][ T9285] __mem_cgroup_charge+0x28/0xb0 [ 182.045231][ T9285] do_wp_page+0xf8f/0x2560 [ 182.045267][ T9285] ? css_rstat_updated+0xbb/0x280 [ 182.045329][ T9285] ? __rcu_read_unlock+0x4e/0x70 [ 182.045348][ T9285] ? __rcu_read_lock+0x36/0x50 [ 182.045371][ T9285] handle_mm_fault+0x8c7/0x3030 [ 182.045479][ T9285] ? _raw_spin_lock+0x52/0xa0 [ 182.045507][ T9285] ? __pte_offset_map_lock+0x1d9/0x240 [ 182.045533][ T9285] __get_user_pages+0x1023/0x1ea0 [ 182.045580][ T9285] faultin_page_range+0x107/0x4d0 [ 182.045609][ T9285] madvise_do_behavior+0x19f/0xa10 [ 182.045688][ T9285] ? xfd_validate_state+0x45/0xf0 [ 182.045719][ T9285] do_madvise+0x10e/0x190 [ 182.045808][ T9285] __x64_sys_madvise+0x63/0x80 [ 182.045831][ T9285] x64_sys_call+0x1c6b/0x3000 [ 182.045854][ T9285] do_syscall_64+0xc0/0x2a0 [ 182.045886][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.045915][ T9285] RIP: 0033:0x7f8bcda5acb9 [ 182.045934][ T9285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.045954][ T9285] RSP: 002b:00007f8bcc464028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 182.045973][ T9285] RAX: ffffffffffffffda RBX: 00007f8bcdcd6180 RCX: 00007f8bcda5acb9 [ 182.045987][ T9285] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 182.046035][ T9285] RBP: 00007f8bcdac8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 182.046050][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.046152][ T9285] R13: 00007f8bcdcd6218 R14: 00007f8bcdcd6180 R15: 00007ffd907fd218 [ 182.046173][ T9285] [ 182.046179][ T9285] memory: usage 307200kB, limit 307200kB, failcnt 556 [ 182.296836][ T9285] memory+swap: usage 96616kB, limit 9007199254740988kB, failcnt 0 [ 182.305196][ T9285] kmem: usage 89128kB, limit 9007199254740988kB, failcnt 0 [ 182.312744][ T9285] Memory cgroup stats for /syz2: [ 182.314620][ T9283] bond4: (slave veth9): Releasing active interface [ 182.344723][ T9283] bond4: (slave veth11): Releasing active interface [ 182.361513][ T9285] cache 11456512 [ 182.361701][ T9283] bond5: (slave veth13): Releasing active interface [ 182.365419][ T9285] rss 1916928 [ 182.365432][ T9285] shmem 11382784 [ 182.365439][ T9285] mapped_file 4096 [ 182.365445][ T9285] dirty 0 [ 182.365452][ T9285] writeback 0 [ 182.365461][ T9285] workingset_refault_anon 894 [ 182.365543][ T9285] workingset_refault_file 872 [ 182.365552][ T9285] swap 0 [ 182.365559][ T9285] swapcached 0 [ 182.365567][ T9285] pgpgin 243257 [ 182.365575][ T9285] pgpgout 239992 [ 182.365583][ T9285] pgfault 239941 [ 182.365590][ T9285] pgmajfault 130 [ 182.365598][ T9285] inactive_anon 11956224 [ 182.365606][ T9285] active_anon 1343488 [ 182.365635][ T9285] inactive_file 69632 [ 182.365643][ T9285] active_file 0 [ 182.365651][ T9285] unevictable 0 [ 182.365659][ T9285] hierarchical_memory_limit 314572800 [ 182.365668][ T9285] hierarchical_memsw_limit 9223372036854771712 [ 182.365678][ T9285] total_cache 11456512 [ 182.365686][ T9285] total_rss 1916928 [ 182.365694][ T9285] total_shmem 11382784 [ 182.365703][ T9285] total_mapped_file 4096 [ 182.365711][ T9285] total_dirty 0 [ 182.365718][ T9285] total_writeback 0 [ 182.365764][ T9285] total_workingset_refault_anon 894 [ 182.365773][ T9285] total_workingset_refault_file 872 [ 182.365789][ T9285] total_swap 0 [ 182.365795][ T9285] total_swapcached 0 [ 182.365803][ T9285] total_pgpgin 243257 [ 182.365812][ T9285] total_pgpgout 239992 [ 182.365821][ T9285] total_pgfault 239941 [ 182.365829][ T9285] total_pgmajfault 130 [ 182.365836][ T9285] total_inactive_anon 11956224 [ 182.365843][ T9285] total_active_anon 1343488 [ 182.365851][ T9285] total_inactive_file 69632 [ 182.365933][ T9285] total_active_file 0 [ 182.365941][ T9285] total_unevictable 0 [ 182.365952][ T9285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.665,pid=5349,uid=0 [ 182.366035][ T9285] Memory cgroup out of memory: Killed process 5349 (syz.2.665) total-vm:96048kB, anon-rss:1380kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 182.589272][ T9283] bond6: (slave geneve2): Releasing active interface [ 182.610617][ T9283] bond7: (slave veth15): Releasing active interface [ 182.634774][ T9283] bond8: (slave bridge0): Releasing active interface [ 182.659244][ T9283] bond10: (slave bond11): Releasing backup interface [ 182.695580][ T9283] bond12: (slave bridge3): Releasing backup interface [ 182.702979][ T9283] bridge3: left promiscuous mode [ 182.709261][ T9283] bridge3: left allmulticast mode [ 182.739073][ T9283] bond13: (slave gretap1): Releasing active interface [ 182.777495][ T29] audit: type=1326 audit(1769065570.340:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 182.805375][ T572] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.805424][ T572] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.805500][ T572] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.805528][ T572] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.849871][ T29] audit: type=1326 audit(1769065570.340:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 183.649765][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'. [ 183.827354][ T9332] netlink: 'syz.5.1931': attribute type 39 has an invalid length. [ 183.838879][ T9332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.935618][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 184.271161][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 184.749138][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1944'. [ 185.020921][ T9371] netlink: 'syz.0.1945': attribute type 39 has an invalid length. [ 185.084142][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 185.466070][ T9404] tipc: Enabling of bearer rejected, failed to enable media [ 185.752109][ T9412] netlink: 'syz.0.1961': attribute type 39 has an invalid length. [ 185.927536][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'. [ 186.338846][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 186.366137][ T9431] netlink: 'syz.2.1967': attribute type 39 has an invalid length. [ 186.418552][ T9433] .`: (slave team0): Releasing backup interface [ 186.432202][ T9433] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 186.627872][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 186.660080][ T9443] netlink: 'syz.1.1971': attribute type 39 has an invalid length. [ 186.705500][ T9454] netlink: 'syz.2.1972': attribute type 39 has an invalid length. [ 186.720361][ T9456] bond11: (slave dummy0): Releasing active interface [ 186.729957][ T9456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.777903][ T9460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9460 comm=syz.0.1974 [ 186.810100][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 186.810114][ T29] audit: type=1326 audit(1769065574.370:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 186.812788][ T9463] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 186.823726][ T29] audit: type=1326 audit(1769065574.380:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 186.897698][ T29] audit: type=1326 audit(1769065574.380:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 186.924166][ T29] audit: type=1326 audit(1769065574.380:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 186.994173][ T29] audit: type=1326 audit(1769065574.490:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.024018][ T29] audit: type=1326 audit(1769065574.490:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.053235][ T29] audit: type=1326 audit(1769065574.490:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.083451][ T29] audit: type=1326 audit(1769065574.490:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.115672][ T29] audit: type=1326 audit(1769065574.490:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.148538][ T29] audit: type=1326 audit(1769065574.490:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9459 comm="syz.0.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad735cb58e code=0x7ffc0000 [ 187.238482][ T9482] netlink: 'syz.4.1979': attribute type 39 has an invalid length. [ 187.298427][ T9487] tipc: Enabling of bearer rejected, failed to enable media [ 187.462219][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 187.500143][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 187.692267][ T9517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9517 comm=syz.0.1992 [ 187.731794][ T9519] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 187.774762][ T9522] netlink: 'syz.5.1994': attribute type 39 has an invalid length. [ 187.811829][ T9519] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 187.824660][ T9522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.867488][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 187.896081][ T2225] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.909322][ T9519] 8021q: adding VLAN 0 to HW filter on device bond14 [ 187.937868][ T9519] veth19: entered promiscuous mode [ 187.953771][ T9519] bond14: (slave veth19): Enslaving as a backup interface with a down link [ 188.024093][ T7403] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.069091][ T9546] xt_connbytes: Forcing CT accounting to be enabled [ 188.130275][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 188.159237][ T9558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9558 comm=syz.4.2004 [ 188.285254][ T9565] netlink: 'syz.4.2006': attribute type 39 has an invalid length. [ 188.431154][ T9580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2011'. [ 188.544878][ T9593] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 188.762653][ T9598] 9p: Bad value for 'rfdno' [ 188.905002][ T9611] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 188.915015][ T9611] ref_ctr increment failed for inode: 0x3c2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 188.964457][ T9616] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 188.975774][ T9616] ref_ctr decrement failed for inode: 0x3c2 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 189.023571][ T9616] uprobe: syz.5.2022:9616 failed to unregister, leaking uprobe [ 189.108981][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 189.317882][ T9639] 9p: Bad value for 'rfdno' [ 189.703184][ T9666] lo speed is unknown, defaulting to 1000 [ 190.149878][ T9678] validate_nla: 1 callbacks suppressed [ 190.149894][ T9678] netlink: 'syz.0.2040': attribute type 21 has an invalid length. [ 190.176344][ T9678] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 190.184309][ T9678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2040'. [ 190.296900][ T9681] lo speed is unknown, defaulting to 1000 [ 190.416347][ T9690] netlink: 'syz.1.2044': attribute type 10 has an invalid length. [ 190.426220][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.434625][ T9690] team0: Port device bond0 added [ 190.446842][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 190.471377][ T9690] team0 (unregistering): Port device bond0 removed [ 190.482531][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 190.705775][ T9715] tipc: Enabled bearer , priority 10 [ 190.903842][ T9722] netlink: 'syz.1.2058': attribute type 39 has an invalid length. [ 190.914094][ T9722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.223356][ T9735] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 191.349238][ T9743] lo speed is unknown, defaulting to 1000 [ 191.480911][ T9743] netlink: zone id is out of range [ 191.487306][ T9743] netlink: zone id is out of range [ 191.493466][ T9743] netlink: zone id is out of range [ 191.510101][ T9743] netlink: set zone limit has 8 unknown bytes [ 192.167437][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 192.167455][ T29] audit: type=1326 audit(1769065579.730:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.1.2066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd05c84acb9 code=0x0 [ 192.335014][ T29] audit: type=1326 audit(1769065579.900:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.376076][ T29] audit: type=1326 audit(1769065579.900:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.400970][ T29] audit: type=1326 audit(1769065579.900:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.426008][ T29] audit: type=1326 audit(1769065579.900:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.452616][ T29] audit: type=1326 audit(1769065579.900:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.478589][ T29] audit: type=1326 audit(1769065579.900:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.504058][ T29] audit: type=1326 audit(1769065579.900:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.529932][ T29] audit: type=1326 audit(1769065579.900:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 192.558954][ T29] audit: type=1326 audit(1769065579.900:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9782 comm="syz.4.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f180e63acb9 code=0x7ffc0000 [ 193.039149][ T9823] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 193.164983][ T9830] team_slave_0: Caught tx_queue_len zero misconfig [ 193.172786][ T9831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9831 comm=syz.2.2095 [ 193.188241][ T9830] __nla_validate_parse: 2 callbacks suppressed [ 193.188258][ T9830] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2097'. [ 193.211143][ T9833] lo speed is unknown, defaulting to 1000 [ 193.349864][ T9847] netlink: 'syz.4.2102': attribute type 13 has an invalid length. [ 193.488868][ T9846] delete_channel: no stack [ 193.538341][ T9852] lo speed is unknown, defaulting to 1000 [ 193.627684][ T9855] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 193.704490][ T9855] bond6: (slave bridge4): making interface the new active one [ 193.723073][ T9855] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 193.879185][ T9855] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 194.887142][ T9879] lo speed is unknown, defaulting to 1000 [ 195.268300][ T9888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9888 comm=syz.4.2111 [ 198.129445][ T9917] 0ªî{X¹¦: left allmulticast mode [ 198.135009][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 198.135734][ T9918] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 198.335969][ T9925] netlink: 'syz.5.2123': attribute type 39 has an invalid length. [ 198.597752][ T9926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.670826][ T9935] lo speed is unknown, defaulting to 1000 [ 198.820857][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 198.820937][ T29] audit: type=1326 audit(1769065587.380:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 198.859201][ T29] audit: type=1326 audit(1769065587.380:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 198.916710][ T29] audit: type=1326 audit(1769065587.480:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 198.963486][ T29] audit: type=1326 audit(1769065587.480:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 199.119280][ T9969] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.2136'. [ 199.339408][ T9982] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 199.351750][ T9982] ref_ctr increment failed for inode: 0x976 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 199.473859][ T9989] lo speed is unknown, defaulting to 1000 [ 199.845988][ T9980] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 199.855785][ T9980] ref_ctr decrement failed for inode: 0x976 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 199.868265][ T9980] uprobe: syz.4.2143:9980 failed to unregister, leaking uprobe [ 199.899022][ T9997] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2145'. [ 199.959988][ T9999] bridge5: entered promiscuous mode [ 199.965968][ T9999] bridge5: entered allmulticast mode [ 200.206233][T10022] netlink: 'syz.1.2151': attribute type 11 has an invalid length. [ 200.274639][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2152'. [ 200.284456][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2152'. [ 200.296052][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2152'. [ 200.306450][T10025] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2152'. [ 200.398396][T10035] tipc: Enabling of bearer rejected, failed to enable media [ 200.941873][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2162'. [ 201.302134][T10068] xt_hashlimit: size too large, truncated to 1048576 [ 202.137487][T10082] syz.5.2170: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 202.157228][T10082] CPU: 0 UID: 0 PID: 10082 Comm: syz.5.2170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.157259][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.157273][T10082] Call Trace: [ 202.157282][T10082] [ 202.157292][T10082] __dump_stack+0x1d/0x30 [ 202.157332][T10082] dump_stack_lvl+0x95/0xd0 [ 202.157437][T10082] dump_stack+0x15/0x1b [ 202.157458][T10082] warn_alloc+0x145/0x1c0 [ 202.157490][T10082] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 202.157518][T10082] ? __futex_wait+0x1fd/0x260 [ 202.157603][T10082] ? __pfx_futex_wake_mark+0x10/0x10 [ 202.157634][T10082] ? __rcu_read_unlock+0x4e/0x70 [ 202.157654][T10082] ? avc_has_perm_noaudit+0xab/0x130 [ 202.157782][T10082] ? should_fail_ex+0x30/0x280 [ 202.157815][T10082] ? should_failslab+0x8c/0xb0 [ 202.157857][T10082] vmalloc_user_noprof+0x7d/0xb0 [ 202.157885][T10082] ? xskq_create+0x80/0xe0 [ 202.157913][T10082] xskq_create+0x80/0xe0 [ 202.157950][T10082] xsk_init_queue+0x91/0xe0 [ 202.158027][T10082] xsk_setsockopt+0x3f5/0x640 [ 202.158060][T10082] ? __pfx_xsk_setsockopt+0x10/0x10 [ 202.158105][T10082] __sys_setsockopt+0x184/0x200 [ 202.158133][T10082] __x64_sys_setsockopt+0x64/0x80 [ 202.158237][T10082] x64_sys_call+0x21d5/0x3000 [ 202.158359][T10082] do_syscall_64+0xc0/0x2a0 [ 202.158403][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.158427][T10082] RIP: 0033:0x7f1bdf55acb9 [ 202.158455][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.158481][T10082] RSP: 002b:00007f1bddfb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.158503][T10082] RAX: ffffffffffffffda RBX: 00007f1bdf7d5fa0 RCX: 00007f1bdf55acb9 [ 202.158520][T10082] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 202.158534][T10082] RBP: 00007f1bdf5c8bf7 R08: 0000000000000004 R09: 0000000000000000 [ 202.158609][T10082] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.158622][T10082] R13: 00007f1bdf7d6038 R14: 00007f1bdf7d5fa0 R15: 00007fffb5ed1b88 [ 202.158642][T10082] [ 202.158649][T10082] Mem-Info: [ 202.411920][T10082] active_anon:40824 inactive_anon:2682 isolated_anon:0 [ 202.411920][T10082] active_file:20100 inactive_file:4903 isolated_file:0 [ 202.411920][T10082] unevictable:10304 dirty:166 writeback:0 [ 202.411920][T10082] slab_reclaimable:3645 slab_unreclaimable:106705 [ 202.411920][T10082] mapped:48073 shmem:36673 pagetables:1603 [ 202.411920][T10082] sec_pagetables:0 bounce:0 [ 202.411920][T10082] kernel_misc_reclaimable:0 [ 202.411920][T10082] free:1705178 free_pcp:9075 free_cma:0 [ 202.462372][T10082] Node 0 active_anon:169908kB inactive_anon:10728kB active_file:80400kB inactive_file:19612kB unevictable:41216kB isolated(anon):0kB isolated(file):0kB mapped:198788kB dirty:664kB writeback:0kB shmem:153188kB kernel_stack:5024kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 202.494509][T10082] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.527058][T10082] lowmem_reserve[]: 0 2879 7858 7858 [ 202.533712][T10082] Node 0 DMA32 free:2945392kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 202.569858][T10082] lowmem_reserve[]: 0 0 4978 4978 [ 202.575752][T10082] Node 0 Normal free:3845112kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:182900kB inactive_anon:10728kB active_file:80400kB inactive_file:19612kB unevictable:41216kB writepending:664kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27880kB local_pcp:24664kB free_cma:0kB [ 202.614468][T10082] lowmem_reserve[]: 0 0 0 0 [ 202.619538][T10082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.634228][T10082] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945392kB [ 202.652685][T10082] Node 0 Normal: 168*4kB (UM) 108*8kB (UE) 318*16kB (UE) 362*32kB (U) 275*64kB (UME) 194*128kB (UE) 125*256kB (UME) 143*512kB (UME) 197*1024kB (UME) 120*2048kB (UME) 786*4096kB (UM) = 3832800kB [ 202.675996][T10082] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.686369][T10082] 80653 total pagecache pages [ 202.691232][T10082] 389 pages in swap cache [ 202.697836][T10082] Free swap = 72kB [ 202.702230][T10082] Total swap = 124996kB [ 202.706843][T10082] 2097051 pages RAM [ 202.711185][T10082] 0 pages HighMem/MovableOnly [ 202.717761][T10082] 81396 pages reserved [ 203.268677][T10089] netlink: 'syz.2.2172': attribute type 10 has an invalid length. [ 203.293892][ T29] audit: type=1400 audit(1769065591.860:4231): avc: denied { ioctl } for pid=10094 comm="syz.4.2174" path="socket:[30476]" dev="sockfs" ino=30476 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 203.538907][T10105] rdma_rxe: rxe_newlink: failed to add lo [ 203.542901][ T29] audit: type=1400 audit(1769065592.100:4232): avc: denied { write } for pid=10104 comm="syz.2.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.654070][ T29] audit: type=1326 audit(1769065592.220:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 203.691458][ T29] audit: type=1326 audit(1769065592.250:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 203.716021][ T29] audit: type=1326 audit(1769065592.250:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 203.744509][ T29] audit: type=1326 audit(1769065592.300:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 203.834470][T10117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10117 comm=syz.0.2180 [ 203.949933][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 203.949953][ T29] audit: type=1326 audit(1769065592.510:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 203.983584][ T29] audit: type=1326 audit(1769065592.510:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.010860][ T29] audit: type=1326 audit(1769065592.510:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.039533][ T29] audit: type=1326 audit(1769065592.510:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.065490][ T29] audit: type=1326 audit(1769065592.510:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.091787][ T29] audit: type=1326 audit(1769065592.510:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.122831][ T29] audit: type=1326 audit(1769065592.680:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 204.158672][T10120] bond0: Caught tx_queue_len zero misconfig [ 204.179823][ T29] audit: type=1326 audit(1769065592.740:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 204.205478][ T29] audit: type=1326 audit(1769065592.740:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 204.230199][ T29] audit: type=1326 audit(1769065592.740:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10119 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 204.422361][T10143] lo speed is unknown, defaulting to 1000 [ 204.545933][T10151] ªªªªªª: renamed from hsr0 [ 205.360111][T10171] lo speed is unknown, defaulting to 1000 [ 205.452358][T10170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.097823][T10186] vlan0: left promiscuous mode [ 206.103670][T10186] ip6gretap0: left allmulticast mode [ 206.109038][T10186] ip6gretap0: left promiscuous mode [ 206.114822][T10186] macsec1: left promiscuous mode [ 206.206622][T10190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.672792][T10209] futex_wake_op: syz.4.2207 tries to shift op by 32; fix this program [ 206.698688][T10175] syz.0.2197 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 206.709729][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.0.2197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.709756][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.709769][T10175] Call Trace: [ 206.709774][T10175] [ 206.709820][T10175] __dump_stack+0x1d/0x30 [ 206.709845][T10175] dump_stack_lvl+0x95/0xd0 [ 206.709870][T10175] dump_stack+0x15/0x1b [ 206.709940][T10175] dump_header+0x80/0x240 [ 206.709957][T10175] oom_kill_process+0x295/0x350 [ 206.709978][T10175] out_of_memory+0x97d/0xb80 [ 206.710000][T10175] try_charge_memcg+0x62e/0xa10 [ 206.710120][T10175] obj_cgroup_charge_pages+0xa6/0x150 [ 206.710148][T10175] __memcg_kmem_charge_page+0x9e/0x170 [ 206.710175][T10175] memcg_charge_kernel_stack+0xa5/0x200 [ 206.710281][T10175] dup_task_struct+0x1b1/0x940 [ 206.710296][T10175] ? copy_process+0x36d/0x1f10 [ 206.710311][T10175] copy_process+0x37e/0x1f10 [ 206.710329][T10175] ? copy_clone_args_from_user+0x43d/0x500 [ 206.710382][T10175] kernel_clone+0x16b/0x5b0 [ 206.710400][T10175] __se_sys_clone3+0x1f5/0x230 [ 206.710438][T10175] __x64_sys_clone3+0x31/0x40 [ 206.710456][T10175] x64_sys_call+0x2c0f/0x3000 [ 206.710532][T10175] do_syscall_64+0xc0/0x2a0 [ 206.710566][T10175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.710588][T10175] RIP: 0033:0x7fad7360bac9 [ 206.710605][T10175] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 206.710623][T10175] RSP: 002b:00007ffe78b975f8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 206.710713][T10175] RAX: ffffffffffffffda RBX: 00007fad735c70e0 RCX: 00007fad7360bac9 [ 206.710727][T10175] RDX: 00007fad735c70e0 RSI: 0000000000000058 RDI: 00007ffe78b97650 [ 206.710739][T10175] RBP: 00007fad717df6c0 R08: 00007fad717df6c0 R09: 00007ffe78b97737 [ 206.710769][T10175] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 206.710780][T10175] R13: 000000000000006e R14: 00007ffe78b97650 R15: 00007ffe78b97738 [ 206.710796][T10175] [ 206.710802][T10175] memory: usage 307200kB, limit 307200kB, failcnt 2300 [ 206.911591][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 206.914360][T10175] memory+swap: usage 4152kB, limit 9007199254740988kB, failcnt 0 [ 206.914377][T10175] kmem: usage 3176kB, limit 9007199254740988kB, failcnt 0 [ 206.914388][T10175] Memory cgroup stats for /syz0: [ 206.914888][T10175] cache 73728 [ 206.968274][T10175] rss 581632 [ 206.971561][T10175] shmem 73728 [ 206.974960][T10175] mapped_file 0 [ 206.978710][T10175] dirty 0 [ 206.981884][T10175] writeback 0 [ 206.986005][T10175] workingset_refault_anon 3331 [ 206.990768][T10175] workingset_refault_file 5907 [ 206.995664][T10175] swap 114688 [ 206.998950][T10175] swapcached 53248 [ 207.003544][T10175] pgpgin 340689 [ 207.007294][T10175] pgpgout 340516 [ 207.011462][T10175] pgfault 255505 [ 207.015137][T10175] pgmajfault 483 [ 207.018943][T10175] inactive_anon 57344 [ 207.023747][T10175] active_anon 651264 [ 207.027655][T10175] inactive_file 0 [ 207.031469][T10175] active_file 0 [ 207.035129][T10175] unevictable 0 [ 207.038661][T10175] hierarchical_memory_limit 314572800 [ 207.044203][T10175] hierarchical_memsw_limit 9223372036854771712 [ 207.051348][T10175] total_cache 73728 [ 207.055379][T10175] total_rss 581632 [ 207.059190][T10175] total_shmem 73728 [ 207.063846][T10175] total_mapped_file 0 [ 207.068935][T10175] total_dirty 0 [ 207.072590][T10175] total_writeback 0 [ 207.076387][T10175] total_workingset_refault_anon 3331 [ 207.081672][T10175] total_workingset_refault_file 5907 [ 207.088203][T10175] total_swap 114688 [ 207.092287][T10175] total_swapcached 53248 [ 207.097182][T10175] total_pgpgin 340689 [ 207.101244][T10175] total_pgpgout 340516 [ 207.106249][T10175] total_pgfault 255505 [ 207.110578][T10175] total_pgmajfault 483 [ 207.115017][T10175] total_inactive_anon 57344 [ 207.119782][T10175] total_active_anon 651264 [ 207.124900][T10175] total_inactive_file 0 [ 207.129762][T10175] total_active_file 0 [ 207.133860][T10175] total_unevictable 0 [ 207.139028][T10175] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2197,pid=10175,uid=0 [ 207.155182][T10175] Memory cgroup out of memory: Killed process 10175 (syz.0.2197) total-vm:102736kB, anon-rss:1304kB, file-rss:30348kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 207.222761][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2210'. [ 207.284749][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 207.449939][T10228] lo speed is unknown, defaulting to 1000 [ 207.589689][T10236] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 207.599149][T10236] ref_ctr increment failed for inode: 0x9cb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 207.612651][T10235] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 207.621986][T10235] ref_ctr decrement failed for inode: 0x9cb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 207.638615][T10235] uprobe: syz.4.2216:10235 failed to unregister, leaking uprobe [ 207.731527][T10246] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2220'. [ 207.747647][T10246] No such timeout policy "syz1" [ 208.109332][T10264] lo speed is unknown, defaulting to 1000 [ 208.485730][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2228'. [ 208.528549][T10276] netlink: 'syz.5.2229': attribute type 39 has an invalid length. [ 208.539112][T10276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.706275][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2234'. [ 208.717444][T10290] netlink: 'syz.5.2234': attribute type 10 has an invalid length. [ 208.729049][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.738218][T10290] team0: Device bond0 failed to register rx_handler [ 208.776925][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 208.864518][T10307] team_slave_1: Caught tx_queue_len zero misconfig [ 208.917158][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 209.048491][T10344] netlink: 'syz.5.2241': attribute type 39 has an invalid length. [ 209.057833][T10344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.277479][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 209.277496][ T29] audit: type=1326 audit(1769065597.841:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.0.2244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x0 [ 209.310450][ T29] audit: type=1326 audit(1769065597.871:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.338606][ T29] audit: type=1326 audit(1769065597.871:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.362924][ T29] audit: type=1326 audit(1769065597.871:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.386895][ T29] audit: type=1326 audit(1769065597.871:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.411811][ T29] audit: type=1326 audit(1769065597.871:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.436324][ T29] audit: type=1326 audit(1769065597.871:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.461409][ T29] audit: type=1326 audit(1769065597.871:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.485938][ T29] audit: type=1326 audit(1769065597.871:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.510516][ T29] audit: type=1326 audit(1769065597.871:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.5.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 209.706296][T10432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2249'. [ 209.716656][T10432] netlink: 'syz.0.2249': attribute type 7 has an invalid length. [ 209.724698][T10432] netlink: 'syz.0.2249': attribute type 8 has an invalid length. [ 209.733334][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 210.029794][T10463] 9p: Bad value for 'rfdno' [ 210.076907][T10465] netlink: 'syz.1.2263': attribute type 39 has an invalid length. [ 210.086316][T10465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.159205][T10472] netlink: 'syz.1.2266': attribute type 39 has an invalid length. [ 210.168344][T10472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.265257][T10488] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 210.272957][T10488] x_tables: duplicate underflow at hook 3 [ 210.361070][T10487] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 210.444667][T10500] netlink: 'syz.5.2276': attribute type 39 has an invalid length. [ 210.453985][T10500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.555267][T10510] netlink: 'syz.5.2280': attribute type 39 has an invalid length. [ 210.563941][T10510] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.584396][T10514] bridge0: entered allmulticast mode [ 210.653111][T10514] pim6reg: entered allmulticast mode [ 210.726172][T10535] lo speed is unknown, defaulting to 1000 [ 210.810347][T10541] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 210.916099][T10554] openvswitch: netlink: Missing key (keys=40, expected=80) [ 210.984992][T10557] bond14: (slave ip6gretap1): Removing an active aggregator [ 210.994217][T10557] bond14: (slave ip6gretap1): Releasing backup interface [ 211.001478][T10557] bond14: (slave ip6gretap1): the permanent HWaddr of slave - fa:4a:7f:a6:22:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 211.026656][T10557] bond14: (slave veth19): Releasing backup interface [ 211.259065][T10576] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 211.374021][T10584] macvlan1 (unregistering): left promiscuous mode [ 211.652350][T10599] lo speed is unknown, defaulting to 1000 [ 212.008859][T10595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 212.182353][T10616] __nla_validate_parse: 8 callbacks suppressed [ 212.182370][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2314'. [ 212.245893][T10618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.662089][T10631] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 213.141586][T10651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.166085][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 213.210042][T10653] bond0: (slave geneve3): making interface the new active one [ 213.224767][T10653] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 213.244397][ T7403] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.254644][ T7403] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.265175][ T7403] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.273929][ T7403] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.418111][T10659] capability: warning: `syz.1.2330' uses 32-bit capabilities (legacy support in use) [ 213.498545][T10661] lo speed is unknown, defaulting to 1000 [ 213.535291][T10666] validate_nla: 9 callbacks suppressed [ 213.535308][T10666] netlink: 'syz.4.2333': attribute type 39 has an invalid length. [ 213.548944][T10670] erspan0: entered promiscuous mode [ 213.555615][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 213.711219][T10688] netlink: 'syz.4.2341': attribute type 39 has an invalid length. [ 213.769699][T10696] netlink: 'syz.1.2344': attribute type 39 has an invalid length. [ 213.778947][T10696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.796693][T10699] netlink: 'syz.0.2345': attribute type 39 has an invalid length. [ 213.807423][T10699] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 213.857586][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 213.971196][T10716] dvmrp8: entered allmulticast mode [ 213.981644][T10720] netlink: 'syz.1.2354': attribute type 39 has an invalid length. [ 214.024233][T10725] netlink: 'syz.4.2356': attribute type 39 has an invalid length. [ 214.036460][T10729] netlink: 'syz.0.2357': attribute type 39 has an invalid length. [ 214.368369][T10750] netlink: 'syz.4.2366': attribute type 4 has an invalid length. [ 214.439948][T10756] netlink: 'syz.2.2369': attribute type 39 has an invalid length. [ 214.491106][T10761] netlink: 'syz.4.2370': attribute type 39 has an invalid length. [ 215.020603][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 215.020618][ T29] audit: type=1400 audit(1769065603.581:4855): avc: denied { bind } for pid=10803 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.233422][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 215.379966][ T29] audit: type=1400 audit(1769065603.941:4856): avc: denied { setopt } for pid=10818 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.523250][T10834] atomic_op ffff888185a14528 conn xmit_atomic 0000000000000000 [ 215.843405][ T29] audit: type=1326 audit(1769065604.411:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 215.872091][ T29] audit: type=1326 audit(1769065604.411:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 215.896763][ T29] audit: type=1326 audit(1769065604.431:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 215.921972][ T29] audit: type=1326 audit(1769065604.431:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 215.947949][T10854] net_ratelimit: 6 callbacks suppressed [ 215.947964][T10854] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 215.971576][ T29] audit: type=1326 audit(1769065604.441:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 215.996618][ T29] audit: type=1326 audit(1769065604.441:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 216.020454][ T29] audit: type=1326 audit(1769065604.441:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 216.044748][ T29] audit: type=1326 audit(1769065604.441:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10849 comm="syz.0.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fad7360acb9 code=0x7ffc0000 [ 216.148745][T10858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.219255][T10862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.283099][T10884] 9p: Bad value for 'rfdno' [ 216.567672][T10903] ªªªªªª: renamed from hsr0 [ 216.697858][T10905] lo speed is unknown, defaulting to 1000 [ 216.774754][T10909] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 216.876838][T10912] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 216.980828][T10920] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 217.127171][T10926] 9p: Bad value for 'rfdno' [ 217.173804][T10936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 217.230824][T10932] 9p: Bad value for 'wfdno' [ 217.419445][T10954] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.605197][T10957] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 217.868670][T10972] 9p: Bad value for 'rfdno' [ 217.900446][T10976] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 217.919333][T10979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.993902][T10987] ªªªªªª: renamed from hsr0 [ 217.993915][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2454'. [ 218.173538][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 218.192549][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 218.216155][T11000] 9p: Bad value for 'rfdno' [ 218.452861][T11022] tipc: Enabling of bearer rejected, already enabled [ 218.484201][T11022] tipc: Enabled bearer , priority 10 [ 218.484970][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2465'. [ 218.632810][T11033] 9p: Bad value for 'rfdno' [ 218.665080][T11035] validate_nla: 20 callbacks suppressed [ 218.665097][T11035] netlink: 'syz.0.2474': attribute type 39 has an invalid length. [ 218.714684][T11041] netlink: 'syz.0.2475': attribute type 39 has an invalid length. [ 218.815657][T11044] infiniband syz!: set down [ 218.820492][T11044] infiniband syz!: added team_slave_0 [ 218.845577][T11044] RDS/IB: syz!: added [ 218.850353][T11044] smc: adding ib device syz! with port count 1 [ 218.858002][T11044] smc: ib device syz! port 1 has no pnetid [ 219.293863][T11080] netlink: 'syz.0.2488': attribute type 39 has an invalid length. [ 219.401035][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 219.554574][T11098] bridge0: entered allmulticast mode [ 219.591341][T11098] pim6reg: entered allmulticast mode [ 219.617210][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2495'. [ 219.887316][T11113] netlink: 'syz.0.2500': attribute type 39 has an invalid length. [ 220.036866][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 220.037037][ T29] audit: type=1326 audit(1769065608.591:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.073897][ T29] audit: type=1326 audit(1769065608.591:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.102733][ T29] audit: type=1326 audit(1769065608.591:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.130611][ T29] audit: type=1326 audit(1769065608.591:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.156318][ T29] audit: type=1326 audit(1769065608.591:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.182727][ T29] audit: type=1326 audit(1769065608.591:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.207900][ T29] audit: type=1326 audit(1769065608.591:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.234043][ T29] audit: type=1326 audit(1769065608.591:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.261215][ T29] audit: type=1326 audit(1769065608.591:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.287638][ T29] audit: type=1326 audit(1769065608.591:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcda5acb9 code=0x7ffc0000 [ 220.352666][T11142] netlink: 'syz.2.2510': attribute type 10 has an invalid length. [ 220.375292][T11142] 8021q: adding VLAN 0 to HW filter on device .` [ 220.393396][T11142] team0: Port device .` added [ 220.401534][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 220.461304][T11142] team0 (unregistering): Port device .` removed [ 220.601447][T11159] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 220.679833][T11163] veth21: entered promiscuous mode [ 220.688628][T11163] bond15: (slave veth21): Enslaving as a backup interface with a down link [ 220.765468][T11167] netlink: 'syz.2.2518': attribute type 39 has an invalid length. [ 220.839022][T11178] netlink: 'syz.0.2523': attribute type 39 has an invalid length. [ 221.049402][T11197] unsupported nlmsg_type 40 [ 221.077718][T11199] netlink: 'syz.2.2532': attribute type 39 has an invalid length. [ 221.086433][T11199] net_ratelimit: 8 callbacks suppressed [ 221.086444][T11199] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 221.209479][T11210] veth0_macvtap: Caught tx_queue_len zero misconfig [ 221.424236][T11215] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 221.433086][T11215] ref_ctr increment failed for inode: 0x5a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 221.457659][T11214] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 221.466652][T11214] ref_ctr decrement failed for inode: 0x5a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 221.481061][T11214] uprobe: syz.5.2537:11214 failed to unregister, leaking uprobe [ 221.756856][T11229] netlink: 'syz.4.2544': attribute type 39 has an invalid length. [ 221.777203][T11229] bond15: (slave veth21): Releasing backup interface [ 221.818754][T11235] 9p: Bad value for 'rfdno' [ 221.858570][T11240] tipc: Cannot configure node identity twice [ 221.955823][T11244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2550'. [ 221.974611][T11248] 9p: Bad value for 'wfdno' [ 222.113791][T11260] lo speed is unknown, defaulting to 1000 [ 222.280326][T11260] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2549'. [ 222.290031][T11260] netlink: zone id is out of range [ 222.296123][T11260] netlink: zone id is out of range [ 222.301609][T11260] netlink: zone id is out of range [ 222.324461][T11260] netlink: set zone limit has 8 unknown bytes [ 222.524902][T11268] 9p: Bad value for 'rfdno' [ 222.562432][T11266] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 222.636357][T11277] bridge_slave_1: Caught tx_queue_len zero misconfig [ 222.779532][T11282] xt_hashlimit: size too large, truncated to 1048576 [ 222.873436][T11283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2556'. [ 223.002639][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'. [ 223.205773][T11284] bond4: (slave bridge0): Releasing active interface [ 223.259982][T11291] 9p: Bad value for 'wfdno' [ 223.926705][T11314] validate_nla: 1 callbacks suppressed [ 223.926727][T11314] netlink: 'syz.5.2572': attribute type 39 has an invalid length. [ 223.941129][T11314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.986352][T11317] netlink: 'syz.5.2573': attribute type 39 has an invalid length. [ 223.995823][T11317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.390507][T11328] netlink: 'syz.4.2576': attribute type 39 has an invalid length. [ 224.453947][T11335] 9p: Bad value for 'wfdno' [ 224.540768][T11338] ip6t_srh: unknown srh match flags 4000 [ 225.011871][T11346] uprobe: syz.4.2583:11346 failed to unregister, leaking uprobe [ 225.064041][T11350] netlink: 'syz.1.2585': attribute type 39 has an invalid length. [ 225.074666][T11350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.157776][T11357] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 225.168270][T11357] ref_ctr increment failed for inode: 0xbeb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 225.180583][T11357] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 225.191742][T11357] ref_ctr decrement failed for inode: 0xbeb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 225.203444][T11357] uprobe: syz.4.2588:11357 failed to unregister, leaking uprobe [ 225.279708][T11364] 9p: Bad value for 'rfdno' [ 225.307470][T11366] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 225.318075][T11366] ref_ctr increment failed for inode: 0xbf6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 225.333131][T11365] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 225.343589][T11365] ref_ctr decrement failed for inode: 0xbf6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 225.349775][T11360] netlink: 'syz.1.2589': attribute type 39 has an invalid length. [ 225.358049][T11365] uprobe: syz.4.2592:11365 failed to unregister, leaking uprobe [ 225.377573][T11360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.489819][T11373] netlink: 'syz.1.2595': attribute type 13 has an invalid length. [ 225.510021][T11372] delete_channel: no stack [ 225.547147][T11378] netlink: 'syz.4.2597': attribute type 39 has an invalid length. [ 225.580403][T11382] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 225.589731][T11382] ref_ctr increment failed for inode: 0x5fd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 225.602454][T11381] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 225.612488][T11381] ref_ctr decrement failed for inode: 0x5fd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 225.630352][T11381] uprobe: syz.5.2598:11381 failed to unregister, leaking uprobe [ 225.643750][T11387] netlink: 'syz.4.2600': attribute type 10 has an invalid length. [ 225.656750][T11387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.670242][T11387] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 225.681871][T11387] bond4: (slave macvlan3): Enslaving as a backup interface with a down link [ 225.712591][T11391] 9p: Bad value for 'rfdno' [ 225.743967][T11393] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 225.754674][T11393] ref_ctr increment failed for inode: 0xc10 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 225.774173][T11393] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 225.776767][T11395] netlink: 'syz.5.2604': attribute type 39 has an invalid length. [ 225.783754][T11393] ref_ctr decrement failed for inode: 0xc10 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 225.803819][T11393] uprobe: syz.4.2603:11393 failed to unregister, leaking uprobe [ 225.819872][T11389] infiniband !yz!: set down [ 225.824935][T11389] infiniband !yz!: added team_slave_0 [ 225.847442][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 225.857140][T11389] RDS/IB: !yz!: added [ 225.857217][T11389] smc: adding ib device !yz! with port count 1 [ 225.857231][T11389] smc: ib device !yz! port 1 has no pnetid [ 225.913854][T11410] netlink: 'syz.5.2609': attribute type 13 has an invalid length. [ 225.927385][T11409] delete_channel: no stack [ 225.949127][T11415] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2611'. [ 225.992507][T11412] bond4: (slave macvlan3): Releasing backup interface [ 226.007848][T11402] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 226.016687][T11402] ref_ctr increment failed for inode: 0xb19 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 226.029843][T11401] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 226.038866][T11401] ref_ctr decrement failed for inode: 0xb19 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 226.051313][T11401] uprobe: syz.2.2606:11401 failed to unregister, leaking uprobe [ 226.086240][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 226.086283][ T29] audit: type=1326 audit(1769065616.647:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.118108][ T29] audit: type=1326 audit(1769065616.647:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.142955][ T29] audit: type=1326 audit(1769065616.647:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.168377][ T29] audit: type=1326 audit(1769065616.647:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.173965][T11420] 9p: Bad value for 'rfdno' [ 226.192875][ T29] audit: type=1326 audit(1769065616.647:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.222986][ T29] audit: type=1326 audit(1769065616.647:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.247531][ T29] audit: type=1326 audit(1769065616.647:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.273096][ T29] audit: type=1326 audit(1769065616.647:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.297545][ T29] audit: type=1326 audit(1769065616.647:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.312655][T11425] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 226.323473][ T29] audit: type=1326 audit(1769065616.647:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11417 comm="syz.5.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1bdf55acb9 code=0x7ffc0000 [ 226.332461][T11425] ref_ctr increment failed for inode: 0x626 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 226.376890][T11421] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 226.386107][T11421] ref_ctr decrement failed for inode: 0x626 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 226.397189][T11421] uprobe: syz.5.2615:11421 failed to unregister, leaking uprobe [ 226.419493][T11428] net_ratelimit: 1 callbacks suppressed [ 226.419514][T11428] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 226.475241][T11433] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 226.512260][T11436] lo speed is unknown, defaulting to 1000 [ 226.646382][T11444] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 226.656826][T11444] ref_ctr increment failed for inode: 0xb2e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 226.670768][T11444] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 226.680992][T11444] ref_ctr decrement failed for inode: 0xb2e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 226.693877][T11444] uprobe: syz.2.2621:11444 failed to unregister, leaking uprobe [ 226.871990][T11453] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 226.881204][T11453] ref_ctr increment failed for inode: 0x63b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bbcc0 [ 226.966304][ T7400] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.975143][ T7400] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.984449][T11451] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 226.994196][T11451] ref_ctr decrement failed for inode: 0x63b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bbcc0 [ 227.006418][ T7400] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.016213][T11451] uprobe: syz.5.2625:11451 failed to unregister, leaking uprobe [ 227.025246][ T7400] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.035334][T11446] delete_channel: no stack [ 227.088606][T11459] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 227.098176][T11459] ref_ctr increment failed for inode: 0xb3e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2ba880 [ 227.119255][T11458] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 227.128508][T11458] ref_ctr decrement failed for inode: 0xb3e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2ba880 [ 227.140857][T11458] uprobe: syz.2.2628:11458 failed to unregister, leaking uprobe [ 227.288918][ T36] IPVS: starting estimator thread 0... [ 227.343132][T11477] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 227.353093][T11477] ref_ctr increment failed for inode: 0xab1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bb600 [ 227.374782][T11477] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 227.384443][T11477] ref_ctr decrement failed for inode: 0xab1 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bb600 [ 227.396715][T11477] uprobe: syz.0.2634:11477 failed to unregister, leaking uprobe [ 227.412261][T11472] IPVS: using max 2496 ests per chain, 124800 per kthread [ 227.434800][T11483] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2637'. [ 227.575442][T11492] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 227.585760][T11492] ref_ctr increment failed for inode: 0x651 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 227.598255][T11492] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 227.607274][T11492] ref_ctr decrement failed for inode: 0x651 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 227.618810][T11492] uprobe: syz.5.2640:11492 failed to unregister, leaking uprobe [ 227.677862][T11487] bond0: left allmulticast mode [ 227.683633][T11487] bond_slave_0: left allmulticast mode [ 227.689360][T11487] bond_slave_1: left allmulticast mode [ 227.762186][T11482] lo speed is unknown, defaulting to 1000 [ 227.805893][T11500] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 227.808695][T11486] delete_channel: no stack [ 227.816172][T11500] ref_ctr increment failed for inode: 0x65c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bb600 [ 227.846091][T11500] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 227.856127][T11500] ref_ctr decrement failed for inode: 0x65c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bb600 [ 227.868325][T11500] uprobe: syz.5.2643:11500 failed to unregister, leaking uprobe [ 227.871392][T11496] Process accounting resumed [ 227.919466][T11504] 9p: Bad value for 'rfdno' [ 227.940150][T11506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.031645][T11511] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2647'. [ 228.330773][T11520] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 228.339731][T11520] ref_ctr increment failed for inode: 0xc36 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 228.352311][T11520] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 228.361551][T11520] ref_ctr decrement failed for inode: 0xc36 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 228.373483][T11520] uprobe: syz.4.2651:11520 failed to unregister, leaking uprobe [ 228.414297][T11524] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 228.424303][T11524] ref_ctr increment failed for inode: 0x672 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a79b00 [ 228.437969][T11524] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 228.447068][T11524] ref_ctr decrement failed for inode: 0x672 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a79b00 [ 228.459432][T11524] uprobe: syz.5.2652:11524 failed to unregister, leaking uprobe [ 228.541076][T11528] 8021q: adding VLAN 0 to HW filter on device .` [ 228.554167][T11528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.577013][T11530] delete_channel: no stack [ 228.615254][T11538] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 228.624165][T11538] ref_ctr increment failed for inode: 0xb53 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7f2c0 [ 228.642082][T11538] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 228.651344][T11538] ref_ctr decrement failed for inode: 0xb53 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7f2c0 [ 228.663963][T11538] uprobe: syz.2.2657:11538 failed to unregister, leaking uprobe [ 228.776750][T11543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.872285][T11548] lo speed is unknown, defaulting to 1000 [ 228.928085][T11551] syz!: rxe_newlink: already configured on team_slave_0 [ 229.027955][T11555] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 229.037685][T11555] ref_ctr increment failed for inode: 0xacd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 229.050188][T11555] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 229.059277][T11555] ref_ctr decrement failed for inode: 0xacd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 229.075238][T11555] uprobe: syz.0.2664:11555 failed to unregister, leaking uprobe [ 229.229849][T11559] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 229.239905][T11559] ref_ctr increment failed for inode: 0xb5e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2b86c0 [ 229.260030][T11557] lo speed is unknown, defaulting to 1000 [ 229.268174][T11559] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 229.278045][T11559] ref_ctr decrement failed for inode: 0xb5e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2b86c0 [ 229.291921][T11559] uprobe: syz.2.2666:11559 failed to unregister, leaking uprobe [ 229.455443][T11567] validate_nla: 9 callbacks suppressed [ 229.455462][T11567] netlink: 'syz.4.2669': attribute type 13 has an invalid length. [ 229.490225][T11566] delete_channel: no stack [ 229.516423][T11569] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 229.525405][T11569] ref_ctr increment failed for inode: 0xad8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 229.553375][T11573] netlink: 'syz.4.2672': attribute type 39 has an invalid length. [ 229.573462][T11569] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 229.582661][T11569] ref_ctr decrement failed for inode: 0xad8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 229.612339][T11569] uprobe: syz.0.2671:11569 failed to unregister, leaking uprobe [ 229.628955][T11577] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 229.640769][T11577] C: renamed from team_slave_0 [ 229.649194][T11577] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2673'. [ 229.769170][T11588] tipc: Resetting bearer [ 229.804415][T11590] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 229.813536][T11590] ref_ctr increment failed for inode: 0x68d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 229.826490][T11590] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 229.835667][T11590] ref_ctr decrement failed for inode: 0x68d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 229.849160][T11590] uprobe: syz.5.2678:11590 failed to unregister, leaking uprobe [ 229.866978][T11592] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 229.867343][T11581] SELinux: Context @ is not valid (left unmapped). [ 229.875839][T11592] ref_ctr increment failed for inode: 0xaee offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 229.931903][T11592] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 229.941065][T11592] ref_ctr decrement failed for inode: 0xaee offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 229.953883][T11592] uprobe: syz.0.2679:11592 failed to unregister, leaking uprobe [ 230.106769][T11613] netlink: 'syz.5.2689': attribute type 39 has an invalid length. [ 230.115145][T11613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.199514][T11622] netlink: 4412 bytes leftover after parsing attributes in process `syz.1.2692'. [ 230.234679][T11625] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 230.243513][T11625] ref_ctr increment failed for inode: 0xb00 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 230.255898][T11625] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 230.265801][T11625] ref_ctr decrement failed for inode: 0xb00 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 230.279202][T11625] uprobe: syz.1.2694:11625 failed to unregister, leaking uprobe [ 230.295897][T11628] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 230.305030][T11628] ref_ctr increment failed for inode: 0xb80 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bd100 [ 230.318740][T11628] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 230.318802][T11630] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 230.328277][T11628] ref_ctr decrement failed for inode: 0xb80 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bd100 [ 230.349320][T11630] ref_ctr increment failed for inode: 0xb09 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 230.368821][T11628] uprobe: syz.2.2695:11628 failed to unregister, leaking uprobe [ 230.377286][T11630] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 230.386211][T11630] ref_ctr decrement failed for inode: 0xb09 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 230.397918][T11630] uprobe: syz.0.2696:11630 failed to unregister, leaking uprobe [ 230.748370][T11661] netlink: 'syz.2.2707': attribute type 39 has an invalid length. [ 230.759666][T11664] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 230.770474][T11664] ref_ctr increment failed for inode: 0xc66 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 230.791462][T11664] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 230.803058][T11664] ref_ctr decrement failed for inode: 0xc66 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 230.816587][T11664] uprobe: syz.4.2708:11664 failed to unregister, leaking uprobe [ 230.817429][T11661] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 230.967244][T11672] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 230.976916][T11672] ref_ctr increment failed for inode: 0x6a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7af40 [ 230.993888][T11672] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 231.003387][T11672] ref_ctr decrement failed for inode: 0x6a8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7af40 [ 231.017682][T11672] uprobe: syz.5.2711:11672 failed to unregister, leaking uprobe [ 231.018035][T11674] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 231.035487][T11674] ref_ctr increment failed for inode: 0xc71 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 231.050296][T11674] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 231.059422][T11674] ref_ctr decrement failed for inode: 0xc71 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7b600 [ 231.072109][T11674] uprobe: syz.4.2710:11674 failed to unregister, leaking uprobe [ 231.212469][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 231.329495][T11699] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 231.337818][T11683] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2716'. [ 231.339360][T11699] ref_ctr increment failed for inode: 0xc8d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 231.382494][T11705] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 231.389969][T11701] bridge2: entered promiscuous mode [ 231.392551][T11705] ref_ctr decrement failed for inode: 0xc8d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7e540 [ 231.397671][T11701] bridge2: entered allmulticast mode [ 231.451794][T11705] uprobe: syz.4.2721:11705 failed to unregister, leaking uprobe [ 231.501664][T11708] netlink: 'syz.5.2723': attribute type 39 has an invalid length. [ 231.510529][T11708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.608778][T11717] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 231.618626][T11717] ref_ctr increment failed for inode: 0xc98 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 231.632032][T11717] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 231.643386][T11717] ref_ctr decrement failed for inode: 0xc98 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 231.658270][T11717] uprobe: syz.4.2725:11717 failed to unregister, leaking uprobe [ 231.980122][T11724] netlink: 'syz.4.2728': attribute type 11 has an invalid length. [ 232.090775][T11726] tipc: Enabling of bearer rejected, failed to enable media [ 232.193593][T11735] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 232.203287][T11735] ref_ctr increment failed for inode: 0xcad offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bca40 [ 232.214889][T11735] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 232.224841][T11735] ref_ctr decrement failed for inode: 0xcad offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bca40 [ 232.237204][T11735] uprobe: syz.4.2730:11735 failed to unregister, leaking uprobe [ 232.277906][T11730] netlink: 'syz.2.2739': attribute type 39 has an invalid length. [ 232.315899][T11730] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 232.491818][T11749] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 232.500828][T11749] ref_ctr increment failed for inode: 0xb25 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 232.514079][T11749] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 232.524300][T11749] ref_ctr decrement failed for inode: 0xb25 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bec00 [ 232.542523][T11749] uprobe: syz.0.2735:11749 failed to unregister, leaking uprobe [ 232.605170][T11755] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 232.614513][T11755] ref_ctr increment failed for inode: 0x6df offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 232.626927][T11755] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 232.637019][T11755] ref_ctr decrement failed for inode: 0x6df offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78000 [ 232.648985][T11755] uprobe: syz.5.2738:11755 failed to unregister, leaking uprobe [ 232.836988][T11760] lo speed is unknown, defaulting to 1000 [ 233.011967][ T5935] page_pool_release_retry() stalled pool shutdown: id 82, 1 inflight 60 sec [ 233.229017][T11767] netlink: 'syz.5.2744': attribute type 39 has an invalid length. [ 233.239528][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 233.249363][T11767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.411793][ T4078] IPVS: ip_vs_send_async error -101 [ 233.469055][T11778] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 233.479471][T11778] ref_ctr increment failed for inode: 0xb3b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 233.493348][T11778] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 233.502418][T11778] ref_ctr decrement failed for inode: 0xb3b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a78d80 [ 233.514672][T11778] uprobe: syz.0.2747:11778 failed to unregister, leaking uprobe [ 233.531946][T11781] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 233.542667][T11781] ref_ctr increment failed for inode: 0xcbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 233.557560][T11781] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 233.568802][T11781] ref_ctr decrement failed for inode: 0xcbd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 233.583694][T11781] uprobe: syz.4.2749:11781 failed to unregister, leaking uprobe [ 233.645689][T11788] netlink: 'syz.4.2752': attribute type 39 has an invalid length. [ 233.678507][T11794] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 233.689940][T11794] ref_ctr increment failed for inode: 0xbb0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 233.703972][T11794] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 233.713638][T11794] ref_ctr decrement failed for inode: 0xbb0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2bf2c0 [ 233.726534][T11794] uprobe: syz.2.2754:11794 failed to unregister, leaking uprobe [ 234.130548][T11807] netlink: 'syz.2.2766': attribute type 39 has an invalid length. [ 234.166583][T11807] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 234.269123][T11821] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 234.279174][T11821] ref_ctr increment failed for inode: 0x70b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7af40 [ 234.294367][T11821] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 234.304606][T11821] ref_ctr decrement failed for inode: 0x70b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7af40 [ 234.317740][T11821] uprobe: syz.5.2762:11821 failed to unregister, leaking uprobe [ 234.374714][T11823] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 234.387585][T11823] ref_ctr increment failed for inode: 0x711 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2b9b00 [ 234.405335][T11823] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 234.418508][T11823] ref_ctr decrement failed for inode: 0x711 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a2b9b00 [ 234.433507][T11823] uprobe: syz.5.2763:11823 failed to unregister, leaking uprobe [ 234.591272][T11834] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 234.607490][T11834] ref_ctr increment failed for inode: 0xb20 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 234.623253][T11834] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 234.635777][T11834] ref_ctr decrement failed for inode: 0xb20 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7de80 [ 234.650623][T11834] uprobe: syz.1.2767:11834 failed to unregister, leaking uprobe [ 234.690711][T11837] tipc: Resetting bearer [ 234.702815][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 234.715911][T11837] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 234.774357][T11845] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 234.784218][T11845] ref_ctr increment failed for inode: 0xcd8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 234.796423][T11845] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 234.805529][T11845] ref_ctr decrement failed for inode: 0xcd8 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888132a7a1c0 [ 234.818545][T11845] uprobe: syz.4.2774:11845 failed to unregister, leaking uprobe [ 234.979545][T11852] netlink: 'syz.5.2777': attribute type 39 has an invalid length. [ 234.989264][T11852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.076215][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 235.076232][ T29] audit: type=1400 audit(1769065625.638:5233): avc: denied { bind } for pid=11860 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 235.219886][T11869] ================================================================== [ 235.228557][T11869] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 235.237733][T11869] [ 235.240145][T11869] write to 0xffff8881427b9168 of 8 bytes by task 11861 on cpu 0: [ 235.247943][T11869] shmem_file_splice_read+0x470/0x600 [ 235.253332][T11869] splice_direct_to_actor+0x26e/0x670 [ 235.258894][T11869] do_splice_direct+0x119/0x1a0 [ 235.263987][T11869] do_sendfile+0x380/0x650 [ 235.268512][T11869] __x64_sys_sendfile64+0x105/0x150 [ 235.273829][T11869] x64_sys_call+0x2db1/0x3000 [ 235.278523][T11869] do_syscall_64+0xc0/0x2a0 [ 235.283406][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.289309][T11869] [ 235.291823][T11869] write to 0xffff8881427b9168 of 8 bytes by task 11869 on cpu 1: [ 235.299840][T11869] shmem_file_splice_read+0x470/0x600 [ 235.305524][T11869] splice_direct_to_actor+0x26e/0x670 [ 235.311338][T11869] do_splice_direct+0x119/0x1a0 [ 235.316647][T11869] do_sendfile+0x380/0x650 [ 235.321454][T11869] __x64_sys_sendfile64+0x105/0x150 [ 235.327913][T11869] x64_sys_call+0x2db1/0x3000 [ 235.333138][T11869] do_syscall_64+0xc0/0x2a0 [ 235.338096][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.344360][T11869] [ 235.346767][T11869] value changed: 0x000000000001e68f -> 0x000000000001e6a0 [ 235.354047][T11869] [ 235.357509][T11869] Reported by Kernel Concurrency Sanitizer on: [ 235.363672][T11869] CPU: 1 UID: 0 PID: 11869 Comm: syz.1.2780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.373498][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.383639][T11869] ==================================================================