last executing test programs: 3m27.26853282s ago: executing program 2 (id=2619): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) 3m27.159157595s ago: executing program 2 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 3m27.075170898s ago: executing program 2 (id=2627): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x118800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3m27.055476639s ago: executing program 2 (id=2630): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) 3m26.985056982s ago: executing program 2 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 3m26.956878994s ago: executing program 2 (id=2636): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60f71c87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 3m26.894986736s ago: executing program 32 (id=2636): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60f71c87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 2.711938253s ago: executing program 5 (id=7281): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.141432451s ago: executing program 5 (id=7308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x2000000000000146, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000004100)='encrypted\x00', &(0x7f0000004140)={'syz', 0x1}, &(0x7f0000004180), 0x0, 0xffffffffffffffff) 1.104140723s ago: executing program 5 (id=7309): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.090709413s ago: executing program 3 (id=7310): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 941.41449ms ago: executing program 5 (id=7314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffbfffffc}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 904.807681ms ago: executing program 3 (id=7316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x89) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 868.513033ms ago: executing program 3 (id=7320): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 763.177157ms ago: executing program 5 (id=7323): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 726.874219ms ago: executing program 5 (id=7326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x88a4) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r2, 0x0, 0x0) readv(r2, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 517.083148ms ago: executing program 4 (id=7330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 506.167508ms ago: executing program 3 (id=7331): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 474.73797ms ago: executing program 4 (id=7333): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 466.20077ms ago: executing program 0 (id=7334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) close_range(r2, r2, 0x0) shutdown(r0, 0x0) 344.438946ms ago: executing program 0 (id=7335): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x8200, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b00000000", 0x23) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000000)=0x9, 0x4) 305.863107ms ago: executing program 4 (id=7337): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa9}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93210c9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) ioperm(0x4, 0x1, 0x6) 271.369958ms ago: executing program 3 (id=7339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x74c, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x2a6}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 233.0875ms ago: executing program 1 (id=7340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 225.755731ms ago: executing program 4 (id=7341): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) 206.762981ms ago: executing program 3 (id=7342): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 206.115551ms ago: executing program 0 (id=7343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=ANY=[@ANYBLOB="60000000180001000000000000000000020000000000ff"], 0x60}}, 0x0) 184.867072ms ago: executing program 1 (id=7344): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="09b79e15264e", @local, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x2, 0x20, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x4}, @end, @ra={0x94, 0x4, 0x1}]}}}}}}, 0x0) eventfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) bpf$MAP_CREATE(0x0, 0x0, 0x48) poll(0x0, 0x0, 0x9) 142.788444ms ago: executing program 0 (id=7345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x200204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 100.524426ms ago: executing program 1 (id=7346): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 99.543446ms ago: executing program 1 (id=7347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 95.990756ms ago: executing program 0 (id=7348): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r4, r3) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r0, 0xffffffffffffffff, 0x0) 36.954599ms ago: executing program 1 (id=7349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syncfs(r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) 36.504559ms ago: executing program 4 (id=7350): pipe2(0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x0) 36.199189ms ago: executing program 1 (id=7351): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\t\x00\n\x00', @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.115109ms ago: executing program 4 (id=7352): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 0s ago: executing program 0 (id=7353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) kernel console output (not intermixed with test programs): 47.871246][T18178] uprobe: syz.1.5514:18178 failed to unregister, leaking uprobe [ 247.962434][T18186] : renamed from veth0_to_bond [ 247.989782][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 247.998877][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 248.012115][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 248.021150][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 248.107995][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5525'. [ 248.157098][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5525'. [ 248.408665][T18215] uprobe: syz.4.5532:18215 failed to unregister, leaking uprobe [ 248.883205][T18255] loop5: detected capacity change from 0 to 2048 [ 248.898304][T18255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.932722][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.958893][T18262] loop5: detected capacity change from 0 to 128 [ 248.969423][T18262] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 248.972554][T18264] syzkaller0: entered allmulticast mode [ 248.977355][T18262] FAT-fs (loop5): Filesystem has been set read-only [ 248.987782][T18264] syzkaller0: entered promiscuous mode [ 248.990039][T18262] bio_check_eod: 101 callbacks suppressed [ 248.990051][T18262] syz.5.5549: attempt to access beyond end of device [ 248.990051][T18262] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 249.014927][T18262] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 249.015218][T18264] syzkaller0 (unregistering): left allmulticast mode [ 249.022839][T18262] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 249.029633][T18264] syzkaller0 (unregistering): left promiscuous mode [ 249.044470][T18262] syz.5.5549: attempt to access beyond end of device [ 249.044470][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.057882][T18262] syz.5.5549: attempt to access beyond end of device [ 249.057882][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.071200][T18262] syz.5.5549: attempt to access beyond end of device [ 249.071200][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.084657][T18262] syz.5.5549: attempt to access beyond end of device [ 249.084657][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.098000][T18262] syz.5.5549: attempt to access beyond end of device [ 249.098000][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.111392][T18262] syz.5.5549: attempt to access beyond end of device [ 249.111392][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.124717][T18262] syz.5.5549: attempt to access beyond end of device [ 249.124717][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.138046][T18262] syz.5.5549: attempt to access beyond end of device [ 249.138046][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.151344][T18262] syz.5.5549: attempt to access beyond end of device [ 249.151344][T18262] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 249.514389][T18280] syzkaller0: entered allmulticast mode [ 249.527164][T18280] syzkaller0: entered promiscuous mode [ 249.539352][T18280] syzkaller0 (unregistering): left allmulticast mode [ 249.546070][T18280] syzkaller0 (unregistering): left promiscuous mode [ 249.642804][T18286] bond3: left allmulticast mode [ 249.648480][T18286] team1: left promiscuous mode [ 249.653360][T18286] team1: left allmulticast mode [ 249.935800][T18306] tipc: Enabling of bearer rejected, failed to enable media [ 250.662911][T18385] netlink: 'syz.1.5607': attribute type 3 has an invalid length. [ 250.856170][T18391] loop5: detected capacity change from 0 to 512 [ 250.900326][T18391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.932681][T18391] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.975428][ T29] kauditd_printk_skb: 884 callbacks suppressed [ 250.975448][ T29] audit: type=1400 audit(1764632542.742:19202): avc: denied { read append } for pid=18390 comm="syz.5.5610" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.004882][ T29] audit: type=1400 audit(1764632542.742:19203): avc: denied { open } for pid=18390 comm="syz.5.5610" path="/515/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.036070][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.041527][ T29] audit: type=1400 audit(1764632542.742:19204): avc: denied { write } for pid=18390 comm="syz.5.5610" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.067780][ T29] audit: type=1400 audit(1764632542.752:19205): avc: denied { ioctl } for pid=18390 comm="syz.5.5610" path="/515/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.121573][T18399] loop5: detected capacity change from 0 to 128 [ 251.163845][T18395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18395 comm=syz.3.5611 [ 251.266116][T18407] tipc: Enabling of bearer rejected, failed to enable media [ 251.269358][ T29] audit: type=1326 audit(1764632543.032:19206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.315153][ T29] audit: type=1326 audit(1764632543.042:19207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.339146][ T29] audit: type=1326 audit(1764632543.042:19208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.362770][ T29] audit: type=1326 audit(1764632543.042:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.368203][T18415] __nla_validate_parse: 11 callbacks suppressed [ 251.368222][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5620'. [ 251.386563][ T29] audit: type=1326 audit(1764632543.082:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.425493][ T29] audit: type=1326 audit(1764632543.082:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18409 comm="syz.1.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 251.699452][T18442] syzkaller0: entered promiscuous mode [ 251.704993][T18442] syzkaller0: entered allmulticast mode [ 251.836250][ T4670] hid_parser_main: 22 callbacks suppressed [ 251.836272][ T4670] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.876963][ T4670] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.278732][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 252.431533][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 252.442511][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 252.442598][ T3321] Tainted: [W]=WARN [ 252.442606][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.442620][ T3321] Call Trace: [ 252.442628][ T3321] [ 252.442638][ T3321] __dump_stack+0x1d/0x30 [ 252.442663][ T3321] dump_stack_lvl+0xe8/0x140 [ 252.442682][ T3321] dump_stack+0x15/0x1b [ 252.442775][ T3321] dump_header+0x81/0x220 [ 252.442795][ T3321] oom_kill_process+0x342/0x400 [ 252.442824][ T3321] out_of_memory+0x979/0xb80 [ 252.442860][ T3321] try_charge_memcg+0x610/0xa10 [ 252.442942][ T3321] charge_memcg+0x51/0xc0 [ 252.442964][ T3321] __mem_cgroup_charge+0x28/0xb0 [ 252.442995][ T3321] filemap_add_folio+0x111/0x360 [ 252.443049][ T3321] __filemap_get_folio+0x31e/0x650 [ 252.443069][ T3321] filemap_fault+0x447/0xb60 [ 252.443091][ T3321] __do_fault+0xbc/0x200 [ 252.443116][ T3321] handle_mm_fault+0xf78/0x2be0 [ 252.443186][ T3321] ? vma_start_read+0x141/0x1f0 [ 252.443277][ T3321] do_user_addr_fault+0x630/0x1080 [ 252.443304][ T3321] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.443377][ T3321] exc_page_fault+0x62/0xa0 [ 252.443399][ T3321] asm_exc_page_fault+0x26/0x30 [ 252.443546][ T3321] RIP: 0033:0x7f6459bd5fd4 [ 252.443564][ T3321] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 252.443581][ T3321] RSP: 002b:00007ffdfaa62bc0 EFLAGS: 00010206 [ 252.443601][ T3321] RAX: 0000001b33a24000 RBX: 0000000000000a8c RCX: 000000000003d860 [ 252.443679][ T3321] RDX: 0000000005fa58a5 RSI: 00007ffdfaa62c50 RDI: 0000000000000001 [ 252.443691][ T3321] RBP: 00007ffdfaa62bfc R08: 0000000016cdcec7 R09: 7fffffffffffffff [ 252.443704][ T3321] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 252.443718][ T3321] R13: 00000000000927c0 R14: 000000000003d6c4 R15: 00007ffdfaa62c50 [ 252.443736][ T3321] [ 252.443743][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 1158 [ 252.648828][ T3321] memory+swap: usage 307272kB, limit 9007199254740988kB, failcnt 0 [ 252.656815][ T3321] kmem: usage 302232kB, limit 9007199254740988kB, failcnt 0 [ 252.664129][ T3321] Memory cgroup stats for /syz4: [ 252.666072][ T3321] cache 65536 [ 252.674358][ T3321] rss 5009408 [ 252.677815][ T3321] shmem 65536 [ 252.681263][ T3321] mapped_file 0 [ 252.684839][ T3321] dirty 0 [ 252.687889][ T3321] writeback 0 [ 252.691296][ T3321] workingset_refault_anon 2849 [ 252.696252][ T3321] workingset_refault_file 2571 [ 252.701193][ T3321] swap 73728 [ 252.704411][ T3321] swapcached 0 [ 252.707887][ T3321] pgpgin 292501 [ 252.711358][ T3321] pgpgout 291259 [ 252.714994][ T3321] pgfault 348828 [ 252.718727][ T3321] pgmajfault 441 [ 252.722280][ T3321] inactive_anon 4317184 [ 252.726497][ T3321] active_anon 761856 [ 252.730440][ T3321] inactive_file 0 [ 252.734063][ T3321] active_file 8192 [ 252.737915][ T3321] unevictable 0 [ 252.741369][ T3321] hierarchical_memory_limit 314572800 [ 252.746892][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 252.753075][ T3321] total_cache 65536 [ 252.757136][ T3321] total_rss 5009408 [ 252.760936][ T3321] total_shmem 65536 [ 252.764773][ T3321] total_mapped_file 0 [ 252.767767][T18484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5646'. [ 252.768917][ T3321] total_dirty 0 [ 252.777814][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5646'. [ 252.787261][T18484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.790434][ T3321] total_writeback 0 [ 252.799019][T18484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5646'. [ 252.800905][ T3321] total_workingset_refault_anon 2849 [ 252.800917][ T3321] total_workingset_refault_file 2571 [ 252.800927][ T3321] total_swap 73728 [ 252.809888][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5646'. [ 252.833318][ T3321] total_swapcached 0 [ 252.837328][ T3321] total_pgpgin 292501 [ 252.841310][ T3321] total_pgpgout 291259 [ 252.845383][ T3321] total_pgfault 348828 [ 252.849451][ T3321] total_pgmajfault 441 [ 252.853506][ T3321] total_inactive_anon 4317184 [ 252.858254][ T3321] total_active_anon 761856 [ 252.862760][ T3321] total_inactive_file 0 [ 252.866921][ T3321] total_active_file 8192 [ 252.871202][ T3321] total_unevictable 0 [ 252.875260][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5622,pid=18420,uid=0 [ 252.890450][ T3321] Memory cgroup out of memory: Killed process 18420 (syz.4.5622) total-vm:96016kB, anon-rss:5488kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 252.917917][T18484] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.096058][T18499] ip6gre1: entered allmulticast mode [ 253.458032][T18537] tipc: Enabling of bearer rejected, failed to enable media [ 253.517012][T18524] netlink: 87 bytes leftover after parsing attributes in process `syz.5.5662'. [ 253.722290][T18558] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.816621][T18575] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 253.835901][T18575] lo speed is unknown, defaulting to 1000 [ 253.896586][T18580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5685'. [ 253.969746][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5687'. [ 253.982305][T18585] ip6gre2: entered allmulticast mode [ 254.441728][T18625] syz_tun: entered allmulticast mode [ 254.447554][T18623] syz_tun: left allmulticast mode [ 254.513146][T18631] serio: Serial port ttyS3 [ 254.583029][T18634] loop5: detected capacity change from 0 to 128 [ 254.656728][T18637] bio_check_eod: 19759 callbacks suppressed [ 254.656748][T18637] syz.5.5709: attempt to access beyond end of device [ 254.656748][T18637] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 254.706405][T18637] syz.5.5709: attempt to access beyond end of device [ 254.706405][T18637] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 254.736430][T18637] syz.5.5709: attempt to access beyond end of device [ 254.736430][T18637] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 254.760945][T18637] syz.5.5709: attempt to access beyond end of device [ 254.760945][T18637] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 254.792912][T18637] syz.5.5709: attempt to access beyond end of device [ 254.792912][T18637] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 254.815669][T18637] syz.5.5709: attempt to access beyond end of device [ 254.815669][T18637] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 254.843658][T18637] syz.5.5709: attempt to access beyond end of device [ 254.843658][T18637] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 254.858897][T18637] syz.5.5709: attempt to access beyond end of device [ 254.858897][T18637] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 254.873125][T18637] syz.5.5709: attempt to access beyond end of device [ 254.873125][T18637] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 254.887094][T18637] syz.5.5709: attempt to access beyond end of device [ 254.887094][T18637] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 256.350305][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 256.350324][ T29] audit: type=1326 audit(1764632548.122:19550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.436529][ T29] audit: type=1326 audit(1764632548.162:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.460243][ T29] audit: type=1326 audit(1764632548.162:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.484049][ T29] audit: type=1326 audit(1764632548.162:19553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.507896][ T29] audit: type=1326 audit(1764632548.162:19554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.531838][ T29] audit: type=1326 audit(1764632548.162:19555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.556053][ T29] audit: type=1326 audit(1764632548.162:19556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.580039][ T29] audit: type=1326 audit(1764632548.162:19557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.603664][ T29] audit: type=1326 audit(1764632548.162:19558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.627543][ T29] audit: type=1326 audit(1764632548.162:19559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.5.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 256.698989][T18716] __nla_validate_parse: 4 callbacks suppressed [ 256.699008][T18716] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5744'. [ 257.309263][T18750] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.319232][T18750] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.398950][T18750] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.408811][T18750] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.470626][T18750] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.476276][T18760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5762'. [ 257.480615][T18750] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.529301][T18750] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.539309][T18750] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.581490][T18760] IPVS: Error connecting to the multicast addr [ 257.636296][T18765] veth22: entered promiscuous mode [ 257.641608][T18765] veth22: entered allmulticast mode [ 257.665384][ T3598] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.673883][ T3598] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.733394][ T3598] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.741733][ T3598] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.779250][T18771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5768'. [ 257.806573][ T3598] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.815090][ T3598] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.826128][T18771] gtp0: entered promiscuous mode [ 257.873234][ T3598] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.881767][ T3598] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.582390][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5777'. [ 258.779361][T18811] lo speed is unknown, defaulting to 1000 [ 258.926226][T18825] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 259.291604][T18837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5795'. [ 259.805610][T18849] veth10: entered promiscuous mode [ 259.810871][T18849] veth10: entered allmulticast mode [ 260.256446][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5813'. [ 260.273051][T18878] IPVS: Unknown mcast interface: ipvlan1 [ 260.300174][T18890] loop5: detected capacity change from 0 to 128 [ 260.314853][T18890] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5819'. [ 260.323962][T18890] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5819'. [ 260.333147][T18890] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5819'. [ 260.352461][T18890] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5819'. [ 260.505672][T18909] netlink: 'syz.0.5825': attribute type 1 has an invalid length. [ 260.542714][T18909] bond8: entered promiscuous mode [ 260.547862][T18909] bond8: entered allmulticast mode [ 260.573827][T18909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.596689][T18911] bond8: (slave gretap1): making interface the new active one [ 260.604305][T18911] gretap1: entered promiscuous mode [ 260.609790][T18911] gretap1: entered allmulticast mode [ 260.618285][T18911] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 260.640166][T18909] vlan0: entered allmulticast mode [ 260.657640][T18909] bond8: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 261.364684][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 261.364702][ T29] audit: type=1326 audit(1764632553.132:20344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d77b265e7 code=0x7ffc0000 [ 261.426375][ T29] audit: type=1326 audit(1764632553.182:20345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d77acb829 code=0x7ffc0000 [ 261.450245][ T29] audit: type=1326 audit(1764632553.182:20346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d77b265e7 code=0x7ffc0000 [ 261.473964][ T29] audit: type=1326 audit(1764632553.182:20347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d77acb829 code=0x7ffc0000 [ 261.497670][ T29] audit: type=1326 audit(1764632553.182:20348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 261.521522][ T29] audit: type=1326 audit(1764632553.182:20349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d77b265e7 code=0x7ffc0000 [ 261.545243][ T29] audit: type=1326 audit(1764632553.182:20350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d77acb829 code=0x7ffc0000 [ 261.569071][ T29] audit: type=1326 audit(1764632553.182:20351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 261.592749][ T29] audit: type=1326 audit(1764632553.192:20352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0d77b265e7 code=0x7ffc0000 [ 261.616533][ T29] audit: type=1326 audit(1764632553.192:20353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz.5.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0d77acb829 code=0x7ffc0000 [ 261.735190][T18936] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.745282][T18936] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.828031][T18936] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.837893][T18936] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.908346][T18936] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.918337][T18936] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.967000][T18943] __nla_validate_parse: 8 callbacks suppressed [ 261.967019][T18943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5836'. [ 261.987768][T18936] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.997877][T18936] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.012536][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 262.017817][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5836'. [ 262.049669][T18944] vlan0: entered allmulticast mode [ 262.136997][ T3596] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.145549][ T3596] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.154210][T18949] lo speed is unknown, defaulting to 1000 [ 262.193638][ T3596] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.202043][ T3596] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.232739][ T3596] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.241282][ T3596] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.287555][ T3596] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.295865][ T3596] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.507758][T18971] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 262.636748][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5850'. [ 262.713131][T18978] tipc: Enabling of bearer rejected, failed to enable media [ 262.842562][T18985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5855'. [ 263.474671][T18997] lo speed is unknown, defaulting to 1000 [ 263.521292][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5861'. [ 263.569174][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5861'. [ 263.588350][T19004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5871'. [ 263.656386][T19005] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 264.346742][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 264.361857][T19045] team1: entered promiscuous mode [ 264.367072][T19045] team1: entered allmulticast mode [ 264.384102][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5882'. [ 264.532958][T19057] lo speed is unknown, defaulting to 1000 [ 265.644683][T19086] netlink: 'syz.0.5895': attribute type 4 has an invalid length. [ 266.370001][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 266.370019][ T29] audit: type=1326 audit(1764632558.142:20701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6459cf65e7 code=0x7ffc0000 [ 266.431764][ T29] audit: type=1326 audit(1764632558.172:20702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6459c9b829 code=0x7ffc0000 [ 266.455461][ T29] audit: type=1326 audit(1764632558.172:20703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 266.479169][ T29] audit: type=1326 audit(1764632558.172:20704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6459cf65e7 code=0x7ffc0000 [ 266.502703][ T29] audit: type=1326 audit(1764632558.172:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6459c9b829 code=0x7ffc0000 [ 266.526398][ T29] audit: type=1326 audit(1764632558.172:20706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 266.550019][ T29] audit: type=1326 audit(1764632558.182:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6459cf65e7 code=0x7ffc0000 [ 266.574102][ T29] audit: type=1326 audit(1764632558.182:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6459c9b829 code=0x7ffc0000 [ 266.597888][ T29] audit: type=1326 audit(1764632558.182:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 266.621535][ T29] audit: type=1326 audit(1764632558.192:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19087 comm="syz.4.5896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6459cf65e7 code=0x7ffc0000 [ 266.847301][T19150] geneve2: entered promiscuous mode [ 266.852590][T19150] geneve2: entered allmulticast mode [ 267.060377][T19167] __nla_validate_parse: 2 callbacks suppressed [ 267.060396][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 267.125204][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5932'. [ 267.155898][T19175] bond5: entered promiscuous mode [ 267.170540][T19175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.252477][T19177] bridge6: entered promiscuous mode [ 267.307190][T19177] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 267.716564][ T10] page_pool_release_retry() stalled pool shutdown: id 51, 50 inflight 181 sec [ 267.790042][T19211] netlink: 'syz.5.5948': attribute type 1 has an invalid length. [ 267.818809][T19211] bond3: entered promiscuous mode [ 267.824089][T19211] bond3: entered allmulticast mode [ 267.829725][T19211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.863907][T19211] bond3: (slave gretap1): making interface the new active one [ 267.871565][T19211] gretap1: entered promiscuous mode [ 267.877340][T19211] gretap1: entered allmulticast mode [ 267.885393][T19211] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 267.909092][T19211] vlan2: entered allmulticast mode [ 267.915138][T19211] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 268.016591][T19216] loop5: detected capacity change from 0 to 2048 [ 268.028289][T19216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.062765][T10072] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 268.078889][T10072] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 268.093533][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.127263][T19230] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 268.171683][T19230] team0: entered promiscuous mode [ 268.176864][T19230] team0: entered allmulticast mode [ 268.292268][T19241] netlink: 'syz.3.5960': attribute type 1 has an invalid length. [ 268.332277][T19241] bond6: entered promiscuous mode [ 268.337469][T19241] bond6: entered allmulticast mode [ 268.343056][T19241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.373045][T19249] bond6: (slave gretap1): making interface the new active one [ 268.380682][T19249] gretap1: entered promiscuous mode [ 268.386026][T19249] gretap1: entered allmulticast mode [ 268.392342][T19249] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 268.419753][T19241] vlan2: entered allmulticast mode [ 268.425896][T19241] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 268.660714][T19278] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5973'. [ 268.991141][T19294] netlink: 'syz.4.5980': attribute type 1 has an invalid length. [ 269.021393][T19282] xt_hashlimit: max too large, truncated to 1048576 [ 269.027921][T19294] bond9: entered promiscuous mode [ 269.033199][T19294] bond9: entered allmulticast mode [ 269.066448][T19294] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.080188][T19297] bond9: (slave gretap1): making interface the new active one [ 269.087809][T19297] gretap1: entered promiscuous mode [ 269.093273][T19297] gretap1: entered allmulticast mode [ 269.120181][T19297] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 269.135743][T19294] vlan1: entered allmulticast mode [ 269.147978][T19294] bond9: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 269.214255][T19306] geneve0: entered promiscuous mode [ 269.219706][T19306] geneve0: entered allmulticast mode [ 269.250865][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5997'. [ 269.267272][T19311] bond9: entered promiscuous mode [ 269.272685][T19311] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.299251][T19311] bridge12: entered promiscuous mode [ 270.139249][T19345] netlink: 'syz.1.5998': attribute type 1 has an invalid length. [ 270.177568][T19345] bond4: entered promiscuous mode [ 270.182696][T19345] bond4: entered allmulticast mode [ 270.206483][T19345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.265006][T19352] bond4: (slave gretap1): making interface the new active one [ 270.272670][T19352] gretap1: entered promiscuous mode [ 270.278099][T19352] gretap1: entered allmulticast mode [ 270.328297][T19352] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 270.341856][T19345] vlan1: entered allmulticast mode [ 270.368181][T19345] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.657879][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6007'. [ 271.548721][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 271.548738][ T29] audit: type=1400 audit(1764632563.322:20845): avc: denied { setopt } for pid=19386 comm="syz.4.6015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.622098][T19392] netlink: 'syz.3.6016': attribute type 1 has an invalid length. [ 271.680115][T19392] bond7: entered promiscuous mode [ 271.685385][T19392] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.746273][T19398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.753601][T19398] IPv6: NLM_F_CREATE should be set when creating new route [ 271.760953][T19398] IPv6: NLM_F_CREATE should be set when creating new route [ 271.788938][T19394] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.796083][T19394] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 271.806764][T19394] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 271.842615][T19394] bond7: (slave wireguard0): making interface the new active one [ 271.850514][T19394] wireguard0: entered promiscuous mode [ 271.869006][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6019'. [ 271.878048][T19402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6019'. [ 271.880788][T19398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.895553][T19394] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 271.959749][T19404] ip6gre2: entered allmulticast mode [ 271.979117][T19398] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 272.047767][T19398] bond7: (slave wireguard1): Enslaving as a backup interface with an up link [ 272.194884][ T29] audit: type=1326 audit(1764632563.962:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.265093][ T29] audit: type=1326 audit(1764632563.992:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.289084][ T29] audit: type=1326 audit(1764632563.992:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.312821][ T29] audit: type=1326 audit(1764632564.002:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.336625][ T29] audit: type=1326 audit(1764632564.002:20850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.360386][ T29] audit: type=1326 audit(1764632564.002:20851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.384126][ T29] audit: type=1326 audit(1764632564.002:20852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.408028][ T29] audit: type=1326 audit(1764632564.002:20853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 272.431686][ T29] audit: type=1326 audit(1764632564.002:20854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19413 comm="syz.1.6024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 274.299540][T19491] geneve0: entered promiscuous mode [ 274.309438][ T3578] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.318086][T19492] netlink: 'syz.0.6054': attribute type 4 has an invalid length. [ 274.336702][ T3578] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.349220][T19492] netlink: 'syz.0.6054': attribute type 4 has an invalid length. [ 274.357743][ T3578] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.365967][ T3578] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.498278][T19501] veth0: entered promiscuous mode [ 274.521314][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6060'. [ 274.545558][T19501] veth0 (unregistering): left promiscuous mode [ 274.717069][T19519] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6067'. [ 274.826967][T19527] IPv6: sit2: Disabled Multicast RS [ 274.851330][T19527] sit2: entered allmulticast mode [ 275.190707][T19562] 9pnet: Unknown protocol version 9p20\++} [ 275.236224][T19560] loop5: detected capacity change from 0 to 4096 [ 275.279467][T19560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.546011][T19576] veth20: entered promiscuous mode [ 275.551348][T19576] veth20: entered allmulticast mode [ 276.120378][T10072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.169416][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6101'. [ 276.197912][T19601] netlink: 'syz.4.6101': attribute type 5 has an invalid length. [ 276.205704][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6101'. [ 276.251925][T19605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6102'. [ 276.254147][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6103'. [ 276.288949][T19609] bond10: entered promiscuous mode [ 276.294579][T19609] 8021q: adding VLAN 0 to HW filter on device bond10 [ 276.346168][T19609] bridge15: entered promiscuous mode [ 276.555194][T19618] IPv6: sit2: Disabled Multicast RS [ 276.568784][T19618] sit2: entered allmulticast mode [ 276.736616][T19627] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 276.767167][T19629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6111'. [ 276.973032][T19642] blktrace: Concurrent blktraces are not allowed on loop8 [ 277.192013][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 277.192093][ T29] audit: type=1326 audit(1764632568.962:20902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.222364][ T29] audit: type=1326 audit(1764632568.962:20903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.259411][ T29] audit: type=1326 audit(1764632569.022:20904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.283275][ T29] audit: type=1326 audit(1764632569.022:20905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.307252][ T29] audit: type=1326 audit(1764632569.022:20906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.331128][ T29] audit: type=1326 audit(1764632569.022:20907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.354874][ T29] audit: type=1326 audit(1764632569.022:20908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.378590][ T29] audit: type=1326 audit(1764632569.022:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.402488][ T29] audit: type=1326 audit(1764632569.022:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 277.426182][ T29] audit: type=1326 audit(1764632569.022:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19653 comm="syz.4.6121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 278.031201][T19685] netlink: 'syz.1.6134': attribute type 4 has an invalid length. [ 278.057816][T19685] netlink: 'syz.1.6134': attribute type 4 has an invalid length. [ 278.125510][T19689] tipc: Enabling of bearer rejected, already enabled [ 278.181888][T19693] loop5: detected capacity change from 0 to 512 [ 278.209895][T19693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.6138: iget: bad extra_isize 90 (inode size 256) [ 278.238111][T19704] $Hÿ: renamed from bond0 [ 278.247660][T19693] EXT4-fs (loop5): Remounting filesystem read-only [ 278.263109][T19693] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 278.273666][T19693] EXT4-fs (loop5): 1 orphan inode deleted [ 278.278605][T19711] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 278.280087][T19693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.302817][T19693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.372156][T19722] netlink: 'syz.4.6148': attribute type 1 has an invalid length. [ 278.399631][T19722] bond0: entered promiscuous mode [ 278.404742][T19722] bond0: entered allmulticast mode [ 278.419281][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6148'. [ 278.433390][T19722] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 278.445237][T19722] bond0: (slave bridge15): making interface the new active one [ 278.453005][T19722] bridge15: entered promiscuous mode [ 278.458476][T19722] bridge15: entered allmulticast mode [ 278.464759][T19722] bond0: (slave bridge15): Enslaving as an active interface with an up link [ 278.496192][T19722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6148'. [ 278.506023][T19722] bond0: left promiscuous mode [ 278.510981][T19722] bridge15: left promiscuous mode [ 278.516209][T19722] bond0: left allmulticast mode [ 278.521171][T19722] bridge15: left allmulticast mode [ 278.528770][T19722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.737891][T19765] loop5: detected capacity change from 0 to 128 [ 278.760789][T19765] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 278.796833][T19765] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 278.818187][T19761] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.6168: checksumming directory block 0 [ 278.875188][T10072] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.067567][T19779] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.077861][T19779] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.178719][T19779] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.188854][T19779] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.278113][T19779] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.288032][T19779] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.388195][T19779] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.398178][T19779] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.523121][ T138] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.531562][ T138] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.593590][ T138] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.601908][ T138] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.647101][ T138] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.655333][ T138] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.818138][T19814] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6184'. [ 280.962012][T19876] nfs4: Bad value for 'source' [ 280.963108][T19877] netlink: 'syz.1.6208': attribute type 2 has an invalid length. [ 280.974745][T19877] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 280.982851][T19877] netlink: 'syz.1.6208': attribute type 1 has an invalid length. [ 280.999866][T19877] veth14: entered promiscuous mode [ 281.005089][T19877] veth14: entered allmulticast mode [ 281.090255][T19782] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.100591][T19782] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.178826][T19782] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.189005][T19782] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.278376][T19782] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.288200][T19782] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.427592][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'. [ 282.635378][T19930] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6233'. [ 282.679179][T19932] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6234'. [ 282.947162][T19939] netlink: 'syz.1.6237': attribute type 7 has an invalid length. [ 282.954937][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6237'. [ 283.183578][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6241'. [ 283.259492][T19952] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 283.272946][ T138] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.281322][ T138] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.300328][T19952] dummy0: left allmulticast mode [ 283.305311][T19952] dummy0: left promiscuous mode [ 283.310421][T19952] bridge0: port 3(dummy0) entered disabled state [ 283.325310][T19954] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 283.334790][ T138] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.343101][ T138] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.356180][T19954] dummy0: entered promiscuous mode [ 283.374922][T19954] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 283.383873][ T138] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.392131][ T138] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.400709][T19956] bridge: RTM_NEWNEIGH with invalid ether address [ 283.429930][ T138] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.438272][ T138] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.481657][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 283.481675][ T29] audit: type=1326 audit(1764632575.252:20919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.511505][ T29] audit: type=1326 audit(1764632575.252:20920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.535229][ T29] audit: type=1326 audit(1764632575.252:20921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.559266][ T29] audit: type=1326 audit(1764632575.252:20922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.582984][ T29] audit: type=1326 audit(1764632575.252:20923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.606635][ T29] audit: type=1326 audit(1764632575.252:20924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.676414][ T29] audit: type=1326 audit(1764632575.252:20925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.700370][ T29] audit: type=1326 audit(1764632575.252:20926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.728036][ T29] audit: type=1326 audit(1764632575.252:20927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.752097][ T29] audit: type=1326 audit(1764632575.252:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.4.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6459cff749 code=0x7ffc0000 [ 283.858576][T19969] loop5: detected capacity change from 0 to 128 [ 284.402893][T20008] veth22: entered promiscuous mode [ 284.408107][T20008] veth22: entered allmulticast mode [ 284.441601][T20012] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 284.450396][T20012] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 284.636473][T20028] syzkaller0: entered allmulticast mode [ 284.655604][T20028] syzkaller0: entered promiscuous mode [ 284.872031][T20048] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.042733][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6293'. [ 285.391987][T20028] syzkaller0 (unregistering): left allmulticast mode [ 285.399256][T20028] syzkaller0 (unregistering): left promiscuous mode [ 285.471747][T20048] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.484279][T20083] lo speed is unknown, defaulting to 1000 [ 285.563089][T20048] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.617330][T20094] netlink: 'syz.1.6302': attribute type 1 has an invalid length. [ 285.628091][T20048] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.651667][T20094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.670654][T20094] veth17: entered promiscuous mode [ 285.678604][T20094] bond5: (slave veth17): Enslaving as an active interface with a down link [ 285.707722][T20094] bond5: entered allmulticast mode [ 285.736377][ T138] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.762085][ T138] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.782829][ T138] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.793941][ T138] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.919257][T20116] 9pnet_fd: Insufficient options for proto=fd [ 286.390082][T20143] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.489559][T20143] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.564392][T20160] bridge: RTM_NEWNEIGH with invalid ether address [ 286.662381][T20167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6330'. [ 286.690421][T20143] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.791972][T20143] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.235812][ T3576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.273530][ T3576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.324315][ T3576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.369603][ T3576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.394186][T20189] lo: left promiscuous mode [ 287.475960][T20189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.532486][T20189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.358697][T20224] tipc: New replicast peer: 255.255.255.255 [ 288.364917][T20224] tipc: Enabled bearer , priority 10 [ 288.384099][T20226] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.6353'. [ 288.429034][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6352'. [ 288.438266][T20224] tipc: Disabling bearer [ 288.438428][T20226] netlink: zone id is out of range [ 288.448779][T20226] netlink: zone id is out of range [ 288.480508][T20226] netlink: zone id is out of range [ 288.513638][T20226] netlink: zone id is out of range [ 288.550487][T20226] netlink: zone id is out of range [ 288.572754][T20226] netlink: zone id is out of range [ 288.596240][T20226] netlink: zone id is out of range [ 288.626456][T20226] netlink: del zone limit has 8 unknown bytes [ 288.873578][T20243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6361'. [ 289.017176][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6364'. [ 289.102031][T20254] pim6reg: entered allmulticast mode [ 289.141268][T20251] pim6reg: left allmulticast mode [ 289.799456][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 289.799473][ T29] audit: type=1326 audit(1764632581.572:21029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.829644][ T29] audit: type=1326 audit(1764632581.572:21030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.853397][ T29] audit: type=1326 audit(1764632581.572:21031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.877400][ T29] audit: type=1326 audit(1764632581.572:21032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.901049][ T29] audit: type=1326 audit(1764632581.572:21033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.925986][ T29] audit: type=1326 audit(1764632581.692:21034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.949720][ T29] audit: type=1326 audit(1764632581.692:21035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.973588][ T29] audit: type=1326 audit(1764632581.692:21036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 289.998250][ T29] audit: type=1326 audit(1764632581.692:21037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 290.021906][ T29] audit: type=1326 audit(1764632581.692:21038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20270 comm="syz.3.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 290.087903][T20260] sch_fq: defrate 6 ignored. [ 290.260982][T20278] vlan2: entered allmulticast mode [ 290.299338][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6376'. [ 290.303179][T20289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6379'. [ 290.312213][T20283] lo speed is unknown, defaulting to 1000 [ 290.345510][T20290] hsr_slave_1 (unregistering): left promiscuous mode [ 290.562107][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6387'. [ 290.750478][T20323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6392'. [ 290.833718][T20330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 290.870562][T20333] netlink: 'syz.5.6396': attribute type 12 has an invalid length. [ 290.924925][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6400'. [ 291.215035][T20358] netlink: 'syz.0.6408': attribute type 12 has an invalid length. [ 291.388271][T20376] syz_tun: entered allmulticast mode [ 291.394247][T20376] syz_tun: left allmulticast mode [ 291.603419][T20382] IPv6: sit1: Disabled Multicast RS [ 291.672210][T20392] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6423'. [ 292.030113][T20411] netlink: 'syz.5.6431': attribute type 12 has an invalid length. [ 292.052997][T20413] netlink: 'syz.5.6432': attribute type 1 has an invalid length. [ 292.066568][T20413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.076231][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6432'. [ 292.091304][T20413] bond4 (unregistering): Released all slaves [ 292.217917][T20431] bridge: RTM_NEWNEIGH with invalid ether address [ 292.253056][T20434] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 293.120481][T20434] lo speed is unknown, defaulting to 1000 [ 293.181494][T20444] bridge: RTM_NEWNEIGH with invalid ether address [ 293.424009][T20476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.431289][T20476] IPv6: NLM_F_CREATE should be set when creating new route [ 293.438544][T20476] IPv6: NLM_F_CREATE should be set when creating new route [ 293.463537][T20476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.506913][T20485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6457'. [ 293.747322][T20504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20504 comm=syz.4.6466 [ 293.979433][T20510] netlink: 'syz.5.6469': attribute type 1 has an invalid length. [ 294.035046][T20510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 294.094350][T20513] bond4: (slave ip6gretap1): making interface the new active one [ 294.139907][T20510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20510 comm=syz.5.6469 [ 294.154748][T20513] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 295.018590][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 295.018607][ T29] audit: type=1326 audit(1764632586.792:21171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 295.051487][ T29] audit: type=1326 audit(1764632586.822:21172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 295.075169][ T29] audit: type=1326 audit(1764632586.822:21173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 295.098887][ T29] audit: type=1326 audit(1764632586.822:21174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 295.122954][ T29] audit: type=1326 audit(1764632586.832:21175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 295.146599][ T29] audit: type=1326 audit(1764632586.842:21176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f44f4f783 code=0x7ffc0000 [ 295.170314][ T29] audit: type=1326 audit(1764632586.842:21177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f44f4e1ff code=0x7ffc0000 [ 295.170931][T20595] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 295.170931][T20595] The task syz.4.6502 (20595) triggered the difference, watch for misbehavior. [ 295.193876][ T29] audit: type=1326 audit(1764632586.842:21178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9f44f4f7d7 code=0x7ffc0000 [ 295.234931][ T29] audit: type=1326 audit(1764632586.842:21179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f44f4df90 code=0x7ffc0000 [ 295.258620][ T29] audit: type=1326 audit(1764632586.842:21180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20585 comm="syz.1.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f44f4e3aa code=0x7ffc0000 [ 295.388624][T20599] netlink: 'syz.3.6504': attribute type 12 has an invalid length. [ 295.456848][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6511'. [ 295.465848][T20614] netlink: 'syz.5.6511': attribute type 30 has an invalid length. [ 295.840044][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6520'. [ 296.592176][T20757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6538'. [ 296.710763][T20773] syz_tun: entered allmulticast mode [ 296.727116][T20773] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 296.735745][T20773] mroute: pending queue full, dropping entries [ 296.778316][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6541'. [ 296.805370][T20773] syz_tun (unregistering): left allmulticast mode [ 296.927095][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6547'. [ 297.561844][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6562'. [ 297.579627][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6562'. [ 297.664322][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6563'. [ 297.674056][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6563'. [ 298.153410][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6574'. [ 298.216778][T20887] lo speed is unknown, defaulting to 1000 [ 298.348148][T20896] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.364785][T20896] bond6 (unregistering): Released all slaves [ 298.850830][T20927] veth8: entered promiscuous mode [ 298.856064][T20927] veth8: entered allmulticast mode [ 298.947475][T20937] bridge: RTM_NEWNEIGH with invalid ether address [ 300.075266][T21012] blktrace: Concurrent blktraces are not allowed on loop10 [ 300.248870][T21026] xt_connbytes: Forcing CT accounting to be enabled [ 300.276205][T21026] Cannot find set identified by id 0 to match [ 300.478853][T21046] bridge: RTM_NEWNEIGH with invalid ether address [ 300.524989][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 300.525004][ T29] audit: type=1326 audit(1764632592.292:21272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.554882][ T29] audit: type=1326 audit(1764632592.292:21273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.578622][ T29] audit: type=1326 audit(1764632592.292:21274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.602522][ T29] audit: type=1326 audit(1764632592.292:21275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.674091][T21057] netlink: 'syz.3.6647': attribute type 1 has an invalid length. [ 300.692633][ T29] audit: type=1326 audit(1764632592.292:21276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.716357][ T29] audit: type=1326 audit(1764632592.292:21277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.720777][T21057] bond8: entered promiscuous mode [ 300.743031][ T29] audit: type=1326 audit(1764632592.292:21278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.771871][ T29] audit: type=1326 audit(1764632592.292:21279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.795498][ T29] audit: type=1326 audit(1764632592.292:21280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.819198][ T29] audit: type=1326 audit(1764632592.322:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21052 comm="syz.3.6646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 300.856427][T21057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.884876][T21061] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.892495][T21061] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 300.902761][T21061] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 300.929470][T21061] bond8: (slave gre1): making interface the new active one [ 300.936786][T21061] gre1: entered promiscuous mode [ 300.971701][T21061] bond8: (slave gre1): Enslaving as an active interface with an up link [ 300.980095][T21074] netlink: 'syz.0.6656': attribute type 1 has an invalid length. [ 301.000897][T21074] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.072328][T21074] macvlan0: entered promiscuous mode [ 301.077862][T21074] macvlan0: entered allmulticast mode [ 301.173090][T21090] netlink: 'syz.0.6661': attribute type 1 has an invalid length. [ 301.219063][T21090] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 301.233127][T21090] __nla_validate_parse: 4 callbacks suppressed [ 301.233147][T21090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6661'. [ 301.251574][T21090] bond11 (unregistering): (slave ip6gretap1): Releasing backup interface [ 301.273874][T21090] bond11 (unregistering): Released all slaves [ 301.311702][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6665'. [ 301.320676][T21099] netlink: 'syz.1.6665': attribute type 30 has an invalid length. [ 301.341003][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6667'. [ 301.358118][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6668'. [ 301.384518][ T3591] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.393814][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6668'. [ 301.396350][ T3591] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.441484][ T3591] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.450424][ T3591] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.544585][T21117] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.6673'. [ 301.602576][T21117] netlink: zone id is out of range [ 301.607796][T21117] netlink: zone id is out of range [ 301.614223][T21117] netlink: zone id is out of range [ 301.619636][T21117] netlink: del zone limit has 8 unknown bytes [ 301.769831][T21152] sch_tbf: burst 274 is lower than device lo mtu (1550) ! [ 301.785107][T21151] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6688'. [ 301.830675][T21151] veth18: left promiscuous mode [ 301.835606][T21151] veth18: left allmulticast mode [ 301.840921][T21151] ip6gre2: left allmulticast mode [ 301.846083][T21151] veth22: left promiscuous mode [ 301.850998][T21151] veth22: left allmulticast mode [ 301.856147][T21151] gtp0: left promiscuous mode [ 301.861057][T21151] team1: left promiscuous mode [ 301.865848][T21151] team1: left allmulticast mode [ 301.914503][T21151] bond9: left promiscuous mode [ 301.919373][T21151] gretap1: left promiscuous mode [ 301.947591][T21151] bond10: left promiscuous mode [ 301.965825][T21151] sit2: left allmulticast mode [ 302.688143][T21194] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 302.729490][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'. [ 302.781000][T21211] nfs4: Bad value for 'source' [ 302.791414][T21212] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6712'. [ 302.824740][T21212] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 302.844676][T21212] veth12: left promiscuous mode [ 302.849950][T21212] veth12: left allmulticast mode [ 302.866741][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6719'. [ 302.882196][T21212] bond5: left promiscuous mode [ 302.887083][T21212] bridge6: left promiscuous mode [ 302.894422][T21212] bond6: left promiscuous mode [ 302.899238][T21212] gretap1: left promiscuous mode [ 302.913938][T21212] bond7: left promiscuous mode [ 302.918881][T21212] wireguard0: left promiscuous mode [ 302.939564][T21212] geneve0: left promiscuous mode [ 302.948060][T21212] veth20: left promiscuous mode [ 302.952981][T21212] veth20: left allmulticast mode [ 302.958146][T21212] veth22: left promiscuous mode [ 302.963016][T21212] veth22: left allmulticast mode [ 302.978748][T21212] bond8: left promiscuous mode [ 302.983580][T21212] gre1: left promiscuous mode [ 303.018798][ T3591] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.050877][ T3591] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.078606][ T3591] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.096407][ T3591] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.127562][T21238] netlink: 'syz.0.6725': attribute type 2 has an invalid length. [ 303.135416][T21238] netlink: 'syz.0.6725': attribute type 1 has an invalid length. [ 303.151584][T21238] netlink: 'syz.0.6725': attribute type 1 has an invalid length. [ 303.186849][T21238] veth0: entered promiscuous mode [ 303.192004][T21238] veth0: entered allmulticast mode [ 303.607345][T21261] ip6tnl0: entered promiscuous mode [ 303.612696][T21261] ip6tnl0: entered allmulticast mode [ 303.819166][T21269] netlink: 'syz.0.6739': attribute type 7 has an invalid length. [ 303.892787][T21273] sch_fq: defrate 8 ignored. [ 304.017342][T21274] syz.1.6740 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 304.026999][T21274] CPU: 0 UID: 0 PID: 21274 Comm: syz.1.6740 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.027073][T21274] Tainted: [W]=WARN [ 304.027134][T21274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.027216][T21274] Call Trace: [ 304.027303][T21274] [ 304.027312][T21274] __dump_stack+0x1d/0x30 [ 304.027354][T21274] dump_stack_lvl+0xe8/0x140 [ 304.027375][T21274] dump_stack+0x15/0x1b [ 304.027392][T21274] dump_header+0x81/0x220 [ 304.027470][T21274] oom_kill_process+0x342/0x400 [ 304.027501][T21274] out_of_memory+0x979/0xb80 [ 304.027537][T21274] try_charge_memcg+0x610/0xa10 [ 304.027612][T21274] charge_memcg+0x51/0xc0 [ 304.027639][T21274] __mem_cgroup_charge+0x28/0xb0 [ 304.027674][T21274] shmem_get_folio_gfp+0x470/0xd60 [ 304.027776][T21274] shmem_fault+0xf6/0x250 [ 304.027804][T21274] __do_fault+0xbc/0x200 [ 304.027833][T21274] handle_mm_fault+0xf78/0x2be0 [ 304.027897][T21274] ? __rcu_read_lock+0x37/0x50 [ 304.027961][T21274] ? __pte_offset_map_lock+0x1d4/0x230 [ 304.028041][T21274] __get_user_pages+0x102a/0x1ed0 [ 304.028081][T21274] __mm_populate+0x243/0x3a0 [ 304.028188][T21274] vm_mmap_pgoff+0x232/0x2e0 [ 304.028219][T21274] ksys_mmap_pgoff+0xc2/0x310 [ 304.028241][T21274] ? __x64_sys_mmap+0x49/0x70 [ 304.028268][T21274] x64_sys_call+0x16bb/0x3000 [ 304.028319][T21274] do_syscall_64+0xd2/0x200 [ 304.028346][T21274] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 304.028388][T21274] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 304.028450][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.028528][T21274] RIP: 0033:0x7f9f44f4f749 [ 304.028547][T21274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.028566][T21274] RSP: 002b:00007f9f4398e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 304.028629][T21274] RAX: ffffffffffffffda RBX: 00007f9f451a6090 RCX: 00007f9f44f4f749 [ 304.028652][T21274] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 304.028666][T21274] RBP: 00007f9f44fd3f91 R08: ffffffffffffffff R09: 0000000028f43000 [ 304.028678][T21274] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 304.028692][T21274] R13: 00007f9f451a6128 R14: 00007f9f451a6090 R15: 00007ffce1f76388 [ 304.028714][T21274] [ 304.028721][T21274] memory: usage 305120kB, limit 307200kB, failcnt 550 [ 304.265194][T21274] memory+swap: usage 205888kB, limit 9007199254740988kB, failcnt 0 [ 304.273134][T21274] kmem: usage 70852kB, limit 9007199254740988kB, failcnt 0 [ 304.280388][T21274] Memory cgroup stats for /syz1: [ 304.294934][T21274] cache 69943296 [ 304.303741][T21274] rss 393216 [ 304.307033][T21274] shmem 696320 [ 304.310421][T21274] mapped_file 204800 [ 304.314337][T21274] dirty 4096 [ 304.317574][T21274] writeback 0 [ 304.320877][T21274] workingset_refault_anon 142 [ 304.325584][T21274] workingset_refault_file 3029 [ 304.331002][T21274] swap 69312512 [ 304.334489][T21274] swapcached 94208 [ 304.338249][T21274] pgpgin 465186 [ 304.341738][T21274] pgpgout 447991 [ 304.345368][T21274] pgfault 404335 [ 304.349040][T21274] pgmajfault 49 [ 304.352563][T21274] inactive_anon 516096 [ 304.356760][T21274] active_anon 667648 [ 304.360682][T21274] inactive_file 0 [ 304.364328][T21274] active_file 4096 [ 304.368092][T21274] unevictable 69242880 [ 304.372187][T21274] hierarchical_memory_limit 314572800 [ 304.377660][T21274] hierarchical_memsw_limit 9223372036854771712 [ 304.383832][T21274] total_cache 69943296 [ 304.386555][T21285] netlink: 'syz.0.6746': attribute type 10 has an invalid length. [ 304.387951][T21274] total_rss 393216 [ 304.399542][T21274] total_shmem 696320 [ 304.403474][T21274] total_mapped_file 204800 [ 304.407979][T21274] total_dirty 4096 [ 304.411712][T21274] total_writeback 0 [ 304.415525][T21274] total_workingset_refault_anon 142 [ 304.420847][T21274] total_workingset_refault_file 3029 [ 304.426149][T21274] total_swap 69312512 [ 304.430193][T21274] total_swapcached 94208 [ 304.434618][T21274] total_pgpgin 465186 [ 304.438362][T21285] netlink: 'syz.0.6746': attribute type 10 has an invalid length. [ 304.438753][T21274] total_pgpgout 447991 [ 304.450697][T21274] total_pgfault 404335 [ 304.454819][T21274] total_pgmajfault 49 [ 304.458844][T21274] total_inactive_anon 516096 [ 304.463722][T21274] total_active_anon 667648 [ 304.468192][T21274] total_inactive_file 0 [ 304.472395][T21274] total_active_file 4096 [ 304.473970][T21285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 304.476794][T21274] total_unevictable 69242880 [ 304.489943][T21274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6740,pid=21270,uid=0 [ 304.504707][T21274] Memory cgroup out of memory: Killed process 21270 (syz.1.6740) total-vm:96148kB, anon-rss:1264kB, file-rss:22308kB, shmem-rss:128kB, UID:0 pgtables:124kB oom_score_adj:0 [ 304.577626][T21290] bridge: RTM_NEWNEIGH with invalid ether address [ 304.651408][T21304] tipc: Enabling of bearer rejected, failed to enable media [ 305.111616][T21324] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.267631][T21341] blktrace: Concurrent blktraces are not allowed on loop8 [ 306.082391][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 306.082410][ T29] audit: type=1326 audit(1764632597.852:21411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.112349][ T29] audit: type=1326 audit(1764632597.852:21412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.136052][ T29] audit: type=1326 audit(1764632597.852:21413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.159716][ T29] audit: type=1326 audit(1764632597.852:21414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.183672][ T29] audit: type=1326 audit(1764632597.852:21415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.207934][ T29] audit: type=1326 audit(1764632597.852:21416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.231926][ T29] audit: type=1326 audit(1764632597.852:21417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.255739][ T29] audit: type=1326 audit(1764632597.852:21418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.279732][ T29] audit: type=1326 audit(1764632597.852:21419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.304714][ T29] audit: type=1326 audit(1764632597.852:21420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.3.6791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 306.391726][T21408] __nla_validate_parse: 15 callbacks suppressed [ 306.391744][T21408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6795'. [ 306.523738][T21425] veth26: entered promiscuous mode [ 306.528996][T21425] veth26: entered allmulticast mode [ 306.566975][T21432] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 306.576262][T21432] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 306.610307][T21434] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6807'. [ 306.625820][T21434] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6807'. [ 306.651595][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6808'. [ 307.368681][T21487] syzkaller0: entered allmulticast mode [ 307.375022][T21487] syzkaller0: entered promiscuous mode [ 307.383833][T21487] syzkaller0 (unregistering): left allmulticast mode [ 307.390584][T21487] syzkaller0 (unregistering): left promiscuous mode [ 307.404504][T21490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6832'. [ 307.734877][T21513] tipc: Started in network mode [ 307.739832][T21513] tipc: Node identity ac14140f, cluster identity 4711 [ 307.766478][T21513] tipc: New replicast peer: 255.255.255.255 [ 307.772696][T21513] tipc: Enabled bearer , priority 10 [ 307.791016][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6842'. [ 307.800041][T21513] tipc: Disabling bearer [ 308.036502][T21522] validate_nla: 1 callbacks suppressed [ 308.036523][T21522] netlink: 'syz.1.6856': attribute type 10 has an invalid length. [ 308.051335][T21522] bond0: (slave dummy0): Releasing backup interface [ 308.062254][T21522] team0: Port device dummy0 added [ 308.075242][T21522] netlink: 'syz.1.6856': attribute type 10 has an invalid length. [ 308.112746][T21522] team0: Port device dummy0 removed [ 308.124220][T21522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.198387][T21533] netlink: 'syz.3.6861': attribute type 10 has an invalid length. [ 308.217239][T21533] netlink: 'syz.3.6861': attribute type 10 has an invalid length. [ 308.234563][T21533] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.432653][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6855'. [ 308.444873][T21549] pim6reg: entered allmulticast mode [ 308.452884][T21549] pim6reg: left allmulticast mode [ 308.710989][T21573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6868'. [ 308.807491][T21581] vlan2: entered allmulticast mode [ 309.085174][T21588] lo speed is unknown, defaulting to 1000 [ 309.178469][T21592] hsr_slave_1 (unregistering): left promiscuous mode [ 309.287282][T21600] IPv6: sit2: Disabled Multicast RS [ 309.973851][T21648] sch_tbf: burst 88 is lower than device veth29 mtu (1514) ! [ 310.077236][T21641] sch_fq: defrate 6 ignored. [ 310.169636][T21663] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.179783][T21663] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.241865][T21663] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.251740][T21663] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.290698][T21663] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.300702][T21663] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.373460][T21663] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.383406][T21663] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.415407][T21684] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 310.426923][T21685] netlink: 'syz.3.6910': attribute type 12 has an invalid length. [ 310.485554][T21684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.516987][T21689] bond6 (unregistering): Released all slaves [ 310.592282][ T3591] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.600837][ T3591] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.624921][ T3591] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.633309][ T3591] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.642136][ T3591] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.650424][ T3591] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.697437][ T3591] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.705704][ T3591] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.872366][T21722] netlink: 'syz.1.6929': attribute type 1 has an invalid length. [ 310.903071][T21722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.968797][T21722] bond6: (slave ip6gretap0): making interface the new active one [ 310.978159][T21722] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 310.988914][T21725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21725 comm=syz.5.6930 [ 311.029057][T21722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21722 comm=syz.1.6929 [ 311.045095][T21737] 9pnet_fd: Insufficient options for proto=fd [ 311.092705][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 311.092720][ T29] audit: type=1326 audit(1764632602.862:21578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.147512][ T29] audit: type=1326 audit(1764632602.892:21579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.171395][ T29] audit: type=1326 audit(1764632602.902:21580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.195088][ T29] audit: type=1326 audit(1764632602.912:21581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.296352][ T29] audit: type=1326 audit(1764632602.992:21582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.320096][ T29] audit: type=1326 audit(1764632603.012:21583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.343764][ T29] audit: type=1326 audit(1764632603.032:21584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.367688][ T29] audit: type=1326 audit(1764632603.042:21585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.391420][ T29] audit: type=1326 audit(1764632603.052:21586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.415218][ T29] audit: type=1326 audit(1764632603.062:21587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.3.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f449655f749 code=0x7ffc0000 [ 311.618351][T21746] __nla_validate_parse: 14 callbacks suppressed [ 311.618370][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6938'. [ 311.711775][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6940'. [ 311.870985][T21772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.878295][T21772] IPv6: NLM_F_CREATE should be set when creating new route [ 311.885532][T21772] IPv6: NLM_F_CREATE should be set when creating new route [ 311.915018][T21772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.930358][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'. [ 311.932436][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'. [ 311.962047][T21774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6951'. [ 311.983148][T21782] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.059143][T21782] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.135635][T21782] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.209172][T21782] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.277580][ T3588] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.304644][ T3588] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.315948][ T3588] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.337541][ T3588] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.519606][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6970'. [ 312.575632][T21824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.594859][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6970'. [ 312.615503][T21828] bond5 (unregistering): Released all slaves [ 312.625769][T21823] netlink: 'syz.1.6981': attribute type 12 has an invalid length. [ 312.680511][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6975'. [ 312.698782][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6975'. [ 312.721739][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6975'. [ 313.702151][T21889] syz_tun: entered allmulticast mode [ 313.710620][T21889] syz_tun (unregistering): left allmulticast mode [ 314.227338][T21908] ÿÿÿÿÿÿ: renamed from vlan1 [ 314.730234][T21935] lo speed is unknown, defaulting to 1000 [ 315.122883][T21945] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.168499][T21945] bond9 (unregistering): Released all slaves [ 315.506114][T21954] lo speed is unknown, defaulting to 1000 [ 316.849878][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 316.849898][ T29] audit: type=1326 audit(1764632608.622:21697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 316.978361][ T29] audit: type=1326 audit(1764632608.622:21698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.002378][ T29] audit: type=1326 audit(1764632608.652:21699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.026353][ T29] audit: type=1326 audit(1764632608.652:21700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f44f4f783 code=0x7ffc0000 [ 317.050318][ T29] audit: type=1326 audit(1764632608.652:21701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9f44f4f783 code=0x7ffc0000 [ 317.073763][ T29] audit: type=1326 audit(1764632608.652:21702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.097508][ T29] audit: type=1326 audit(1764632608.652:21703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.121324][ T29] audit: type=1326 audit(1764632608.662:21704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.145652][ T29] audit: type=1326 audit(1764632608.662:21705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.169869][ T29] audit: type=1326 audit(1764632608.662:21706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21973 comm="syz.1.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 317.537656][T22006] ÿÿÿÿÿÿ: renamed from vlan1 [ 317.718358][T22018] bridge: RTM_NEWNEIGH with invalid ether address [ 318.571684][T22050] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 318.622286][T22050] lo speed is unknown, defaulting to 1000 [ 318.894009][T22059] __nla_validate_parse: 7 callbacks suppressed [ 318.894028][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7061'. [ 318.963798][T22067] pim6reg: entered allmulticast mode [ 318.983819][T22067] pim6reg: left allmulticast mode [ 319.477838][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7070'. [ 319.492421][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7070'. [ 319.595406][T22084] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.619551][T22084] lo speed is unknown, defaulting to 1000 [ 320.341087][T22107] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 320.460032][T22114] netlink: 'syz.3.7084': attribute type 2 has an invalid length. [ 320.467879][T22114] netlink: 'syz.3.7084': attribute type 1 has an invalid length. [ 320.503877][T22114] netlink: 'syz.3.7084': attribute type 1 has an invalid length. [ 320.532596][T22114] veth30: entered promiscuous mode [ 320.538094][T22114] veth30: entered allmulticast mode [ 320.712322][T22121] ip6tnl0: entered promiscuous mode [ 320.717786][T22121] ip6tnl0: entered allmulticast mode [ 321.859513][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 321.892605][T22144] 8021q: adding VLAN 0 to HW filter on device bond11 [ 321.927928][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7096'. [ 321.947438][T22144] bond11 (unregistering): Released all slaves [ 322.019961][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7111'. [ 322.161665][T22160] block device autoloading is deprecated and will be removed. [ 322.278974][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 322.278993][ T29] audit: type=1326 audit(1764632614.052:21901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.309158][ T29] audit: type=1326 audit(1764632614.052:21902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.426749][ T29] audit: type=1326 audit(1764632614.052:21903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.450822][ T29] audit: type=1326 audit(1764632614.052:21904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d77b2f783 code=0x7ffc0000 [ 322.474556][ T29] audit: type=1326 audit(1764632614.052:21905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d77b2f783 code=0x7ffc0000 [ 322.498173][ T29] audit: type=1326 audit(1764632614.052:21906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.522100][ T29] audit: type=1326 audit(1764632614.052:21907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.545870][ T29] audit: type=1326 audit(1764632614.112:21908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.562050][T22177] nfs4: Bad value for 'source' [ 322.569717][ T29] audit: type=1326 audit(1764632614.112:21909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.569753][ T29] audit: type=1326 audit(1764632614.132:21910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22165 comm="syz.5.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 322.805515][T22190] lo speed is unknown, defaulting to 1000 [ 323.034048][T22198] netlink: 'syz.3.7120': attribute type 1 has an invalid length. [ 323.058976][T22198] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 323.072711][T22198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7120'. [ 323.085748][T22198] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 323.709458][T22198] bond9 (unregistering): Released all slaves [ 323.771700][T22220] nfs4: Bad value for 'source' [ 324.416559][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.426735][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.436410][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.457013][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.480709][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.501024][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7138'. [ 324.513097][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7135'. [ 324.872584][T22283] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.882581][T22283] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.949458][T22283] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.959365][T22283] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.068501][T22283] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.078360][T22283] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.177866][T22283] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.188434][T22283] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.289889][ T3591] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.298213][ T3591] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.315442][ T3591] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.323781][ T3591] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.358124][ T3591] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.366511][ T3591] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.415455][ T3591] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.423832][ T3591] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.443670][T22295] netlink: 'syz.3.7159': attribute type 1 has an invalid length. [ 325.476258][T22295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.598213][T22306] macvlan2: entered promiscuous mode [ 325.603624][T22306] macvlan2: entered allmulticast mode [ 325.703758][T22313] tipc: Enabling of bearer rejected, already enabled [ 325.729941][T22313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7165'. [ 325.739082][T22313] tipc: Disabling bearer [ 326.515950][T22349] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7190'. [ 326.532904][T22349] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7190'. [ 326.611038][T22358] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.618396][T22358] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.652838][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.664117][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.692481][T22358] ip6gre1: left allmulticast mode [ 326.701325][T22358] veth4: left promiscuous mode [ 326.706202][T22358] veth4: left allmulticast mode [ 326.712642][T22358] veth6: left promiscuous mode [ 326.717543][T22358] veth6: left allmulticast mode [ 326.724300][T22358] bond3: left promiscuous mode [ 326.729242][T22358] gretap1: left promiscuous mode [ 326.739245][T22358] veth8: left promiscuous mode [ 326.744052][T22358] veth8: left allmulticast mode [ 326.751667][ T138] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.760263][ T138] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.773141][ T138] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.781599][ T138] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.799808][ T138] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.808314][ T138] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.818902][ T138] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.827676][ T138] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.998663][T22374] veth24: entered promiscuous mode [ 327.003945][T22374] veth24: entered allmulticast mode [ 327.240376][T22395] veth10: left promiscuous mode [ 327.245320][T22395] veth10: left allmulticast mode [ 327.257986][T22395] bond4: left promiscuous mode [ 327.262869][T22395] gretap1: left promiscuous mode [ 327.289165][T22395] ip6gre2: left allmulticast mode [ 327.296206][T22395] veth14: left promiscuous mode [ 327.301180][T22395] veth14: left allmulticast mode [ 327.323590][T22395] bond5: left allmulticast mode [ 327.338128][T22395] veth17: left promiscuous mode [ 327.394640][ T3591] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.410775][ T3591] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.437278][ T3591] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.465201][ T3591] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.585979][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 327.585995][ T29] audit: type=1326 audit(1764632619.352:22355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.654441][ T29] audit: type=1326 audit(1764632619.352:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.678396][ T29] audit: type=1326 audit(1764632619.352:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.702353][ T29] audit: type=1326 audit(1764632619.352:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.726160][ T29] audit: type=1326 audit(1764632619.352:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.750042][ T29] audit: type=1326 audit(1764632619.352:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.773951][ T29] audit: type=1326 audit(1764632619.362:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.797677][ T29] audit: type=1326 audit(1764632619.402:22362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.821288][ T29] audit: type=1326 audit(1764632619.402:22363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.862243][T22439] veth18: entered promiscuous mode [ 327.867505][T22439] veth18: entered allmulticast mode [ 327.873086][ T29] audit: type=1326 audit(1764632619.452:22364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22426 comm="syz.1.7205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f44f4f749 code=0x7ffc0000 [ 327.906531][ T3420] page_pool_release_retry() stalled pool shutdown: id 51, 50 inflight 241 sec [ 330.258501][T22698] __nla_validate_parse: 14 callbacks suppressed [ 330.258520][T22698] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7234'. [ 330.356602][T22698] ip6gre1: left allmulticast mode [ 330.366904][T22698] bond8: left promiscuous mode [ 330.371719][T22698] gretap1: left promiscuous mode [ 330.436781][T22698] vlan0: left allmulticast mode [ 330.466899][T22698] bond9: left promiscuous mode [ 330.489542][T22698] sit2: left allmulticast mode [ 330.577193][T22698] macvlan0: left promiscuous mode [ 330.582297][T22698] macvlan0: left allmulticast mode [ 330.587724][T22698] veth0: left promiscuous mode [ 330.592710][T22698] veth0: left allmulticast mode [ 331.426799][T22751] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7257'. [ 332.015547][T22737] syz.1.7248 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 332.029579][T22737] CPU: 1 UID: 0 PID: 22737 Comm: syz.1.7248 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 332.029604][T22737] Tainted: [W]=WARN [ 332.029609][T22737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.029616][T22737] Call Trace: [ 332.029621][T22737] [ 332.029628][T22737] __dump_stack+0x1d/0x30 [ 332.029664][T22737] dump_stack_lvl+0xe8/0x140 [ 332.029679][T22737] dump_stack+0x15/0x1b [ 332.029691][T22737] dump_header+0x81/0x220 [ 332.029727][T22737] oom_kill_process+0x342/0x400 [ 332.029749][T22737] out_of_memory+0x979/0xb80 [ 332.029784][T22737] try_charge_memcg+0x610/0xa10 [ 332.029808][T22737] obj_cgroup_charge_pages+0xa6/0x150 [ 332.029824][T22737] __memcg_kmem_charge_page+0x9f/0x170 [ 332.029843][T22737] __alloc_frozen_pages_noprof+0x188/0x360 [ 332.029860][T22737] alloc_pages_mpol+0xb3/0x260 [ 332.029947][T22737] ? alloc_pages_noprof+0x61/0x130 [ 332.030027][T22737] alloc_pages_noprof+0x90/0x130 [ 332.030042][T22737] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 332.030063][T22737] ? format_decode+0xaf/0x580 [ 332.030088][T22737] __kvmalloc_node_noprof+0x483/0x670 [ 332.030102][T22737] ? ip_set_alloc+0x24/0x30 [ 332.030114][T22737] ? ip_set_alloc+0x24/0x30 [ 332.030125][T22737] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 332.030158][T22737] ip_set_alloc+0x24/0x30 [ 332.030177][T22737] hash_netiface_create+0x282/0x740 [ 332.030201][T22737] ? __pfx_hash_netiface_create+0x10/0x10 [ 332.030226][T22737] ip_set_create+0x3cc/0x970 [ 332.030266][T22737] ? __nla_parse+0x40/0x60 [ 332.030283][T22737] nfnetlink_rcv_msg+0x4c6/0x590 [ 332.030316][T22737] netlink_rcv_skb+0x123/0x220 [ 332.030330][T22737] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 332.030377][T22737] nfnetlink_rcv+0x167/0x16c0 [ 332.030416][T22737] ? bpf_perf_event_read+0xdf/0x150 [ 332.030511][T22737] ? perf_event_read_local+0x4af/0x4f0 [ 332.030650][T22737] ? __list_add_valid_or_report+0x38/0xe0 [ 332.030669][T22737] ? merge_sched_in+0x605/0xa30 [ 332.030683][T22737] ? rb_next+0x5c/0x80 [ 332.030743][T22737] ? visit_groups_merge+0xf7e/0xfd0 [ 332.030757][T22737] ? should_fail_ex+0x30/0x280 [ 332.030771][T22737] ? selinux_nlmsg_lookup+0x99/0x890 [ 332.030789][T22737] ? __rcu_read_unlock+0x34/0x70 [ 332.030807][T22737] ? __netlink_lookup+0x266/0x2a0 [ 332.030845][T22737] netlink_unicast+0x5c0/0x690 [ 332.030911][T22737] netlink_sendmsg+0x58b/0x6b0 [ 332.030927][T22737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.030943][T22737] __sock_sendmsg+0x145/0x180 [ 332.030961][T22737] ____sys_sendmsg+0x31e/0x4e0 [ 332.031016][T22737] ___sys_sendmsg+0x17b/0x1d0 [ 332.031040][T22737] __x64_sys_sendmsg+0xd4/0x160 [ 332.031119][T22737] x64_sys_call+0x17ba/0x3000 [ 332.031133][T22737] do_syscall_64+0xd2/0x200 [ 332.031151][T22737] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 332.031171][T22737] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 332.031185][T22737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.031241][T22737] RIP: 0033:0x7f9f44f4f749 [ 332.031319][T22737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.031340][T22737] RSP: 002b:00007f9f439af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.031356][T22737] RAX: ffffffffffffffda RBX: 00007f9f451a5fa0 RCX: 00007f9f44f4f749 [ 332.031365][T22737] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 332.031374][T22737] RBP: 00007f9f44fd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 332.031436][T22737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.031444][T22737] R13: 00007f9f451a6038 R14: 00007f9f451a5fa0 R15: 00007ffce1f76388 [ 332.031458][T22737] [ 332.031463][T22737] memory: usage 307200kB, limit 307200kB, failcnt 646 [ 332.398111][T22737] memory+swap: usage 374888kB, limit 9007199254740988kB, failcnt 0 [ 332.406115][T22737] kmem: usage 238932kB, limit 9007199254740988kB, failcnt 0 [ 332.413472][T22737] Memory cgroup stats for /syz1: [ 332.413732][T22737] cache 69246976 [ 332.422288][T22737] rss 565248 [ 332.425561][T22737] shmem 4096 [ 332.428771][T22737] mapped_file 0 [ 332.432216][T22737] dirty 0 [ 332.435139][T22737] writeback 0 [ 332.438436][T22737] workingset_refault_anon 142 [ 332.443191][T22737] workingset_refault_file 5481 [ 332.448043][T22737] swap 69312512 [ 332.451493][T22737] swapcached 94208 [ 332.455197][T22737] pgpgin 520154 [ 332.458715][T22737] pgpgout 503087 [ 332.462248][T22737] pgfault 454394 [ 332.465783][T22737] pgmajfault 55 [ 332.469284][T22737] inactive_anon 659456 [ 332.473449][T22737] active_anon 4096 [ 332.477337][T22737] inactive_file 0 [ 332.480959][T22737] active_file 0 [ 332.484463][T22737] unevictable 69242880 [ 332.488569][T22737] hierarchical_memory_limit 314572800 [ 332.493948][T22737] hierarchical_memsw_limit 9223372036854771712 [ 332.500118][T22737] total_cache 69246976 [ 332.504181][T22737] total_rss 565248 [ 332.507902][T22737] total_shmem 4096 [ 332.511612][T22737] total_mapped_file 0 [ 332.515583][T22737] total_dirty 0 [ 332.519056][T22737] total_writeback 0 [ 332.522848][T22737] total_workingset_refault_anon 142 [ 332.528045][T22737] total_workingset_refault_file 5481 [ 332.533321][T22737] total_swap 69312512 [ 332.537304][T22737] total_swapcached 94208 [ 332.541532][T22737] total_pgpgin 520154 [ 332.545501][T22737] total_pgpgout 503087 [ 332.549753][T22737] total_pgfault 454394 [ 332.553854][T22737] total_pgmajfault 55 [ 332.557838][T22737] total_inactive_anon 659456 [ 332.562456][T22737] total_active_anon 4096 [ 332.566769][T22737] total_inactive_file 0 [ 332.570948][T22737] total_active_file 0 [ 332.574914][T22737] total_unevictable 69242880 [ 332.579519][T22737] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7248,pid=22734,uid=0 [ 332.594266][T22737] Memory cgroup out of memory: Killed process 22734 (syz.1.7248) total-vm:96016kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 332.896728][T22760] geneve2: entered promiscuous mode [ 332.902538][T22760] geneve2: entered allmulticast mode [ 332.913517][ T3518] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.935969][ T3518] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.945337][ T3518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.954230][ T3518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 332.976119][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 332.993237][T22769] bridge: RTM_NEWNEIGH with invalid ether address [ 332.994522][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 333.034091][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 333.058353][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 333.098939][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 333.152874][T22775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7259'. [ 333.239559][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7272'. [ 333.293221][T22799] lo speed is unknown, defaulting to 1000 [ 333.307515][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 333.307551][ T29] audit: type=1326 audit(1764632625.072:22475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.337443][ T29] audit: type=1326 audit(1764632625.072:22476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.361052][ T29] audit: type=1326 audit(1764632625.072:22477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.384920][ T29] audit: type=1326 audit(1764632625.072:22478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.408938][ T29] audit: type=1326 audit(1764632625.072:22479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.432721][ T29] audit: type=1326 audit(1764632625.072:22480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.456466][ T29] audit: type=1326 audit(1764632625.072:22481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.480371][ T29] audit: type=1326 audit(1764632625.072:22482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.504309][ T29] audit: type=1326 audit(1764632625.072:22483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.527813][ T29] audit: type=1326 audit(1764632625.072:22484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22800 comm="syz.5.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d77b2f749 code=0x7ffc0000 [ 333.570745][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7280'. [ 333.601615][T22807] bridge: RTM_NEWNEIGH with invalid ether address [ 333.705711][T22822] netlink: 'syz.3.7284': attribute type 12 has an invalid length. [ 333.717632][T22824] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.793975][T22824] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.867995][T22824] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.947696][T22824] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 334.015877][T22839] lo speed is unknown, defaulting to 1000 [ 334.028995][ T3518] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.071335][ T3578] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.092409][ T3518] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.124438][T22846] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 334.133453][ T3518] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 334.371858][T22862] lo speed is unknown, defaulting to 1000 [ 335.203377][T22890] netlink: 'syz.5.7309': attribute type 20 has an invalid length. [ 335.226977][T22890] netlink: 'syz.5.7309': attribute type 20 has an invalid length. [ 335.528730][T22922] __nla_validate_parse: 13 callbacks suppressed [ 335.528751][T22922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7324'. [ 335.597291][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7325'. [ 335.606197][T22926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7325'. [ 335.615228][T22926] netlink: 'syz.0.7325': attribute type 20 has an invalid length. [ 335.652193][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7325'. [ 335.661259][T22926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7325'. [ 335.670259][T22926] netlink: 'syz.0.7325': attribute type 20 has an invalid length. [ 335.783732][T22939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7331'. [ 335.846988][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7331'. [ 336.107221][T22964] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7343'. [ 336.229345][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7351'. [ 336.269257][T22983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.290178][T22990] netlink: 'syz.1.7351': attribute type 10 has an invalid length. [ 336.298132][T22990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7351'. [ 336.332121][T22990] ipvlan0: entered promiscuous mode [ 336.347431][T22990] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 336.367412][T22990] bridge0: port 1(ipvlan0) entered blocking state [ 336.373920][T22990] bridge0: port 1(ipvlan0) entered disabled state [ 336.380471][T22925] ================================================================== [ 336.388599][T22925] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 336.395371][T22990] ipvlan0: entered allmulticast mode [ 336.398456][T22925] [ 336.398464][T22925] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 1: [ 336.398486][T22925] tick_do_update_jiffies64+0x113/0x1c0 [ 336.403807][T22990] bond7: entered allmulticast mode [ 336.406114][T22925] tick_nohz_handler+0x7f/0x2d0 [ 336.429766][T22925] __hrtimer_run_queues+0x20f/0x5a0 [ 336.434935][T22990] ipvlan0: left allmulticast mode [ 336.434998][T22925] hrtimer_interrupt+0x21a/0x460 [ 336.440192][T22990] bond7: left allmulticast mode [ 336.444956][T22925] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 336.455708][T22925] sysvec_apic_timer_interrupt+0x6f/0x80 [ 336.461399][T22925] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.467414][T22925] console_flush_all+0x51b/0x6a0 [ 336.472375][T22925] console_unlock+0xa1/0x2e0 [ 336.476985][T22925] vprintk_emit+0x3b5/0x580 [ 336.481501][T22925] vprintk_default+0x26/0x30 [ 336.486124][T22925] vprintk+0x1d/0x30 [ 336.490223][T22925] _printk+0x79/0xa0 [ 336.494405][T22925] br_set_state+0x28c/0x390 [ 336.498919][T22925] new_nbp+0x235/0x300 [ 336.503003][T22925] br_add_if+0x1e7/0xa60 [ 336.507261][T22925] br_add_slave+0x2c/0x40 [ 336.511594][T22925] do_set_master+0x390/0x460 [ 336.516719][T22925] rtnl_newlink_create+0x426/0x620 [ 336.521855][T22925] rtnl_newlink+0xf5b/0x1360 [ 336.526450][T22925] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 336.531406][T22925] netlink_rcv_skb+0x123/0x220 [ 336.536179][T22925] rtnetlink_rcv+0x1c/0x30 [ 336.540612][T22925] netlink_unicast+0x5c0/0x690 [ 336.545411][T22925] netlink_sendmsg+0x58b/0x6b0 [ 336.550188][T22925] __sock_sendmsg+0x145/0x180 [ 336.554879][T22925] ____sys_sendmsg+0x345/0x4e0 [ 336.559659][T22925] ___sys_sendmsg+0x17b/0x1d0 [ 336.564366][T22925] __sys_sendmmsg+0x178/0x300 [ 336.569047][T22925] __x64_sys_sendmmsg+0x57/0x70 [ 336.573900][T22925] x64_sys_call+0x1e28/0x3000 [ 336.578583][T22925] do_syscall_64+0xd2/0x200 [ 336.583613][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.589507][T22925] [ 336.591834][T22925] read to 0xffffffff86809a00 of 8 bytes by task 22925 on cpu 0: [ 336.599464][T22925] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 336.605729][T22925] count_shadow_nodes+0x6a/0x230 [ 336.610722][T22925] do_shrink_slab+0x63/0x680 [ 336.615338][T22925] shrink_slab+0x448/0x760 [ 336.620290][T22925] shrink_node+0x6c3/0x2120 [ 336.624813][T22925] do_try_to_free_pages+0x3f6/0xcd0 [ 336.630018][T22925] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 336.635916][T22925] try_charge_memcg+0x383/0xa10 [ 336.640801][T22925] obj_cgroup_charge_pages+0xa6/0x150 [ 336.646231][T22925] __memcg_kmem_charge_page+0x9f/0x170 [ 336.652319][T22925] __alloc_frozen_pages_noprof+0x188/0x360 [ 336.658137][T22925] alloc_pages_mpol+0xb3/0x260 [ 336.662923][T22925] alloc_pages_noprof+0x90/0x130 [ 336.667887][T22925] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 336.673721][T22925] __kvmalloc_node_noprof+0x483/0x670 [ 336.679112][T22925] ip_set_alloc+0x24/0x30 [ 336.683466][T22925] hash_netiface_create+0x282/0x740 [ 336.688696][T22925] ip_set_create+0x3cc/0x970 [ 336.693323][T22925] nfnetlink_rcv_msg+0x4c6/0x590 [ 336.698275][T22925] netlink_rcv_skb+0x123/0x220 [ 336.703048][T22925] nfnetlink_rcv+0x167/0x16c0 [ 336.707823][T22925] netlink_unicast+0x5c0/0x690 [ 336.712610][T22925] netlink_sendmsg+0x58b/0x6b0 [ 336.717382][T22925] __sock_sendmsg+0x145/0x180 [ 336.722069][T22925] ____sys_sendmsg+0x31e/0x4e0 [ 336.726921][T22925] ___sys_sendmsg+0x17b/0x1d0 [ 336.731603][T22925] __x64_sys_sendmsg+0xd4/0x160 [ 336.736469][T22925] x64_sys_call+0x17ba/0x3000 [ 336.741150][T22925] do_syscall_64+0xd2/0x200 [ 336.745657][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.751555][T22925] [ 336.753890][T22925] value changed: 0x0000000100000df9 -> 0x0000000100000dfa [ 336.761012][T22925] [ 336.763423][T22925] Reported by Kernel Concurrency Sanitizer on: [ 336.769759][T22925] CPU: 0 UID: 0 PID: 22925 Comm: syz.5.7326 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.781153][T22925] Tainted: [W]=WARN [ 336.785050][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.795280][T22925] ================================================================== [ 336.879149][T22925] syz.5.7326 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 336.893166][T22925] CPU: 1 UID: 0 PID: 22925 Comm: syz.5.7326 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.893274][T22925] Tainted: [W]=WARN [ 336.893282][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.893295][T22925] Call Trace: [ 336.893303][T22925] [ 336.893312][T22925] __dump_stack+0x1d/0x30 [ 336.893339][T22925] dump_stack_lvl+0xe8/0x140 [ 336.893361][T22925] dump_stack+0x15/0x1b [ 336.893380][T22925] dump_header+0x81/0x220 [ 336.893407][T22925] oom_kill_process+0x342/0x400 [ 336.893442][T22925] out_of_memory+0x979/0xb80 [ 336.893473][T22925] try_charge_memcg+0x610/0xa10 [ 336.893595][T22925] obj_cgroup_charge_pages+0xa6/0x150 [ 336.893666][T22925] __memcg_kmem_charge_page+0x9f/0x170 [ 336.893692][T22925] __alloc_frozen_pages_noprof+0x188/0x360 [ 336.893721][T22925] alloc_pages_mpol+0xb3/0x260 [ 336.893824][T22925] alloc_pages_noprof+0x90/0x130 [ 336.893922][T22925] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 336.893958][T22925] __kvmalloc_node_noprof+0x483/0x670 [ 336.894053][T22925] ? ip_set_alloc+0x24/0x30 [ 336.894148][T22925] ? ip_set_alloc+0x24/0x30 [ 336.894168][T22925] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 336.894274][T22925] ip_set_alloc+0x24/0x30 [ 336.894293][T22925] hash_netiface_create+0x282/0x740 [ 336.894365][T22925] ? __pfx_hash_netiface_create+0x10/0x10 [ 336.894467][T22925] ip_set_create+0x3cc/0x970 [ 336.894504][T22925] ? __nla_parse+0x40/0x60 [ 336.894529][T22925] nfnetlink_rcv_msg+0x4c6/0x590 [ 336.894659][T22925] netlink_rcv_skb+0x123/0x220 [ 336.894723][T22925] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 336.894762][T22925] nfnetlink_rcv+0x167/0x16c0 [ 336.894789][T22925] ? __rcu_read_unlock+0x34/0x70 [ 336.894821][T22925] ? is_bpf_text_address+0x141/0x160 [ 336.894866][T22925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.894944][T22925] ? kernel_text_address+0x94/0xb0 [ 336.895025][T22925] ? __kernel_text_address+0xd/0x40 [ 336.895054][T22925] ? unwind_get_return_address+0x16/0x40 [ 336.895080][T22925] ? perf_callchain_kernel+0x2e9/0x350 [ 336.895123][T22925] ? get_perf_callchain+0x452/0x530 [ 336.895218][T22925] ? __bpf_get_stack+0x5fa/0x630 [ 336.895249][T22925] ? should_fail_ex+0x30/0x280 [ 336.895274][T22925] ? selinux_nlmsg_lookup+0x99/0x890 [ 336.895340][T22925] ? __rcu_read_unlock+0x34/0x70 [ 336.895436][T22925] ? __netlink_lookup+0x266/0x2a0 [ 336.895466][T22925] netlink_unicast+0x5c0/0x690 [ 336.895642][T22925] netlink_sendmsg+0x58b/0x6b0 [ 336.895667][T22925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.895688][T22925] __sock_sendmsg+0x145/0x180 [ 336.895718][T22925] ____sys_sendmsg+0x31e/0x4e0 [ 336.895768][T22925] ___sys_sendmsg+0x17b/0x1d0 [ 336.895800][T22925] __x64_sys_sendmsg+0xd4/0x160 [ 336.895826][T22925] x64_sys_call+0x17ba/0x3000 [ 336.895922][T22925] do_syscall_64+0xd2/0x200 [ 336.895950][T22925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 336.895979][T22925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 336.896070][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.896091][T22925] RIP: 0033:0x7f0d77b2f749 [ 336.896111][T22925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.896132][T22925] RSP: 002b:00007f0d7658f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.896207][T22925] RAX: ffffffffffffffda RBX: 00007f0d77d85fa0 RCX: 00007f0d77b2f749 [ 336.896254][T22925] RDX: 00000000000088a4 RSI: 00002000000008c0 RDI: 0000000000000003 [ 336.896317][T22925] RBP: 00007f0d77bb3f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.896332][T22925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.896347][T22925] R13: 00007f0d77d86038 R14: 00007f0d77d85fa0 R15: 00007ffc5f3bfb08 [ 336.896366][T22925] [ 337.261467][T22925] memory: usage 307200kB, limit 307200kB, failcnt 737 [ 337.268276][T22925] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 337.276221][T22925] kmem: usage 222476kB, limit 9007199254740988kB, failcnt 0 [ 337.283537][T22925] Memory cgroup stats for /syz5: [ 337.303347][T22925] cache 86093824 [ 337.311997][T22925] rss 585728 [ 337.315246][T22925] shmem 86093824 [ 337.319243][T22925] mapped_file 0 [ 337.323155][T22925] dirty 0 [ 337.326126][T22925] writeback 0 [ 337.329471][T22925] workingset_refault_anon 170 [ 337.334134][T22925] workingset_refault_file 2177 [ 337.338933][T22925] swap 0 [ 337.341936][T22925] swapcached 0 [ 337.345315][T22925] pgpgin 295258 [ 337.348818][T22925] pgpgout 274090 [ 337.352368][T22925] pgfault 288390 [ 337.355905][T22925] pgmajfault 113 [ 337.359475][T22925] inactive_anon 70238208 [ 337.363721][T22925] active_anon 16441344 [ 337.367823][T22925] inactive_file 0 [ 337.371503][T22925] active_file 24576 [ 337.375297][T22925] unevictable 0 [ 337.379288][T22925] hierarchical_memory_limit 314572800 [ 337.384735][T22925] hierarchical_memsw_limit 9223372036854771712 [ 337.391048][T22925] total_cache 86093824 [ 337.395102][T22925] total_rss 585728 [ 337.398967][T22925] total_shmem 86093824 [ 337.403086][T22925] total_mapped_file 0 [ 337.407206][T22925] total_dirty 0 [ 337.410670][T22925] total_writeback 0 [ 337.414471][T22925] total_workingset_refault_anon 170 [ 337.419795][T22925] total_workingset_refault_file 2177 [ 337.425159][T22925] total_swap 0 [ 337.428571][T22925] total_swapcached 0 [ 337.432468][T22925] total_pgpgin 295258 [ 337.436458][T22925] total_pgpgout 274090 [ 337.440538][T22925] total_pgfault 288390 [ 337.444594][T22925] total_pgmajfault 113 [ 337.448670][T22925] total_inactive_anon 70238208 [ 337.453417][T22925] total_active_anon 16441344 [ 337.458050][T22925] total_inactive_file 0 [ 337.462211][T22925] total_active_file 24576 [ 337.466614][T22925] total_unevictable 0 [ 337.470707][T22925] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5906,pid=19111,uid=0 [ 337.485590][T22925] Memory cgroup out of memory: Killed process 19111 (syz.5.5906) total-vm:95884kB, anon-rss:1308kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000