last executing test programs: 2.945677506s ago: executing program 1 (id=1957): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) nanosleep(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x40) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x230, &(0x7f0000000380)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.823451977s ago: executing program 4 (id=1958): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2000, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xd4d}, 0x18) close(0xffffffffffffffff) 2.774522691s ago: executing program 4 (id=1959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) fstatfs(0xffffffffffffffff, 0x0) 2.735946915s ago: executing program 4 (id=1960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x22e6, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00000000000000000000000000001800028014000180080001803e0000000800010000000000040003"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 2.719075566s ago: executing program 4 (id=1961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0xffffffffffffffff, 0x43) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r2 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000140)=""/177, 0xb1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) rmdir(&(0x7f0000000200)='./file0\x00') 2.613508745s ago: executing program 4 (id=1963): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001ac0), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) 2.33947488s ago: executing program 3 (id=1969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.324993502s ago: executing program 3 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="993b972bf7e4b64b3e102589970b43b82e2e15d1fcf90548751106d02393741f13ebef9c8fcdce6b8653bab9c3cebbd444d50177c886cd421d72b64c63c3e1af4ac299b450a5954b5538f88897e1b008024954a7865926eb620a3f7318a314fc7912d5cb5486d920ccb8e5592b80ae916eb16aff373c097df7037f54d6b1760b6dee1a725129bb2e89cc804b3d864e11a0ab2a6169431b5234cf52dfcfb487d04e734a7470eddda688fddb84d2b0ab99c1731da488b2a1a3e2243cdf683ad4c0aba9f146d53560fa708ab11f2df7e8f0226b6527efe780a399b0686175", @ANYRES16=r1, @ANYBLOB="00022abd7000fedbdf250600000006001a004e2400000c001000000000000000000014001f00fe8000000000000000000000000000bb08000b000200000006001b004e2400000c000f000600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8064}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa1, 0xa8, @random="c6e23c65e696ebe27508605d8ed7e6faf112121b5d1b11dbaa544c4b63e0ada669539e51e5ee0bb8955ea5668e8f06090ec0dab5d81264cff6220139c7490fc179a31c313998cd7c6918a48ea25f41d180d345605db6e6e53959bf01c04d69cee09ed694ab80e52caa8cd1904d1b1b99056918749c085ebd3e72b692db4413d14c9cb979ea84ca64fb6e9501993a1249a07cc443d297e1e3f645d26e05"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008014) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x80, 0xb0, 0xffe00000, 0x4, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x66, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c00)={0x1ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@fallback, r0, 0x28, 0x2020, 0x0, @void, @void, @value=r7}, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket(0x10, 0x3, 0x0) connect$netlink(r12, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r11, 0x0, 0x343}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x18603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000ac0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x32c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r5}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r14}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4d0d0000}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x8, 0x9, 0x20002}, {0x7, 0xf7, 0x3, 0xa}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40084}, 0xc040) 1.89902086s ago: executing program 3 (id=1973): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0), &(0x7f0000000240)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0xd2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x7, 0x4, 0x401}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.843675105s ago: executing program 3 (id=1974): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {0x1}, 0xfff9}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, &(0x7f00000003c0)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.705676077s ago: executing program 4 (id=1976): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) nanosleep(&(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x40) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x230, &(0x7f0000000380)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r5 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.568398629s ago: executing program 0 (id=1978): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008815}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.537466082s ago: executing program 1 (id=1979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0xd2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x7, 0x4, 0x401}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.458145079s ago: executing program 0 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x2a020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) 1.365732987s ago: executing program 0 (id=1981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.363020828s ago: executing program 0 (id=1982): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2000, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xd4d}, 0x18) close(0xffffffffffffffff) 1.315917142s ago: executing program 1 (id=1984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0xfb, 0x3, 0x38, 0x820005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)={0x94, [0x1, 0x3], 0x7}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000d0002000000000000000600000010020100", @ANYRES32=0x1, @ANYBLOB='S\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000040000000e00"/24, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32, @ANYBLOB="0000000000000000003f3c67755d4bea9a00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000000c1b8162a18a5360bd764e9395000000000000007172b269c9afa60b9403bd1227ef9c"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYBLOB="92e31e3bf60c8009d581a6314490c95d07c211a13504824901aed36975f2a1241eae5ccfd9a18ffcad2380a64f64ec5beb2e4e25e512ab38d7fa6e35e9e3b4ab2821d545cd1f41295323f2e7c3d33afce25f102161be2eb72d366fac2e92d837b6cef900c3ff7ca48d8ea6d5c6dc86c1a2463273038cd053a3631147460447afb88ce98e6bc3a47bad4ba425d734a1b5a408f49f452601e45c2cf56f65b9bc8440cfc73dd222789a484c3111df747fb50a6089fa940ea42f00150903f8b9eab403a006e14a41dec3b2efa77e39cdfe74b18efabc37bf6f2fd75bb8bf7ddd53beca000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) request_key(&(0x7f0000000640)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000740)='R\x10r\x94\x00\x00\x00\x00\x12eF?\x12\xf0\xce\xd0\x98\x93\x1a\x94\x86\xd6/Z\x8d`\xad\x83\xac}\xd1\xd47\x17Y\x90\xf53\xd6\x03\xd9s\xa3\xc9\x1c#\xd7\x1a#\x11\x1f\xa2\x05x\x1f\x13Fl\x0e\xc6w\x11J\xc6\xeb\x1fAa\x9e\xc7\x9e\xde\x15\xa4H\xa7T\xf9\xa9\n\xb6\x86\xce8>\f\x1av\xfd@\\\xe44+?\a\a\xb9\x1d_x\x04\xb6\x95\xb9&\xe3\xdf\xa1\x93\xf0Q\xfe\xa75\xa6\x92\xb9\ru\xf0\xee\x0f\x05\xbam\xf6T%\xa8h!\xb6y\x12e\xdf\xf0\x01\xf2\xcc\x84\x1f-\xe4qO\x18\x866\x99w\xc8\xa2r\xaey\x00\xd5\xa7DS\x83\xc4\xa5\xc0\xd6\xa6|=r1\xe4?\xa4\xdb\x054\xb0\x9b\xbf\xcc\xa82\x04\xf6\b\xa1\x97b\xd5\xbe(f\xd5:\x80\xb4\r\x92\x9d5%?\x10\xa3,b\x9d8\xb6\x86i\x9e\x84\xa9\xd6\xd4\x05\xe4\xf0\x80\xf0\xa2+\xefT\xbc\x93\x1c\xc5', 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r8, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e2f, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) setpriority(0x2, 0x0, 0x9) unlinkat(0xffffffffffffffff, 0x0, 0x200) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x4, 0xfffffffd, 0x0, 'queue1\x00', 0xfffffffa}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) 1.251774218s ago: executing program 0 (id=1985): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) nanosleep(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x40) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp(0x2, 0x3, 0x2) r0 = syz_io_uring_setup(0x230, &(0x7f0000000380)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "3f6906003d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) r5 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.234155619s ago: executing program 1 (id=1986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2d, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a00000409000100"], 0x64}, 0x1, 0x0, 0x0, 0x4094}, 0x24000004) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.197785133s ago: executing program 2 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x3, 0x4, 0x4, 0x6, 0x7, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.174567015s ago: executing program 1 (id=1988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x60, &(0x7f00000029c0)=ANY=[], 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 979.088062ms ago: executing program 1 (id=1989): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) nanosleep(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x40) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4a604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc162, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x230, &(0x7f0000000380)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r3 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 403.839554ms ago: executing program 3 (id=1990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x2a020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) 345.635259ms ago: executing program 2 (id=1991): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) unshare(0x2a020400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, 0x0) 294.818954ms ago: executing program 2 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) fstatfs(0xffffffffffffffff, 0x0) 294.391293ms ago: executing program 3 (id=1993): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000300), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, 0x0) read$watch_queue(r2, &(0x7f0000000240)=""/173, 0xad) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000001640)=ANY=[@ANYBLOB="a021d79500"/16, @ANYRES16, @ANYBLOB="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"], 0x3a0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x8, "aa32223986bbee6b92313b4cbfa0b740261a13"}) 225.61176ms ago: executing program 2 (id=1994): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) close_range(r2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x163}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100"], 0x16c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0xd2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x7, 0x4, 0x401}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 182.224794ms ago: executing program 0 (id=1995): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001ac0), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x4}, 0x1023e8, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) 93.598682ms ago: executing program 2 (id=1996): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0xfb, 0x3, 0x38, 0x820005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x8, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)={0x94, [0x1, 0x3], 0x7}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000d0002000000000000000600000010020100", @ANYRES32=0x1, @ANYBLOB='S\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000040000000e00"/24, @ANYRES32, @ANYBLOB], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32, @ANYBLOB="0000000000000000003f3c67755d4bea9a00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000001000000850000003300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000000c1b8162a18a5360bd764e9395000000000000007172b269c9afa60b9403bd1227ef9c"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYBLOB="92e31e3bf60c8009d581a6314490c95d07c211a13504824901aed36975f2a1241eae5ccfd9a18ffcad2380a64f64ec5beb2e4e25e512ab38d7fa6e35e9e3b4ab2821d545cd1f41295323f2e7c3d33afce25f102161be2eb72d366fac2e92d837b6cef900c3ff7ca48d8ea6d5c6dc86c1a2463273038cd053a3631147460447afb88ce98e6bc3a47bad4ba425d734a1b5a408f49f452601e45c2cf56f65b9bc8440cfc73dd222789a484c3111df747fb50a6089fa940ea42f00150903f8b9eab403a006e14a41dec3b2efa77e39cdfe74b18efabc37bf6f2fd75bb8bf7ddd53beca000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) request_key(&(0x7f0000000640)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000740)='R\x10r\x94\x00\x00\x00\x00\x12eF?\x12\xf0\xce\xd0\x98\x93\x1a\x94\x86\xd6/Z\x8d`\xad\x83\xac}\xd1\xd47\x17Y\x90\xf53\xd6\x03\xd9s\xa3\xc9\x1c#\xd7\x1a#\x11\x1f\xa2\x05x\x1f\x13Fl\x0e\xc6w\x11J\xc6\xeb\x1fAa\x9e\xc7\x9e\xde\x15\xa4H\xa7T\xf9\xa9\n\xb6\x86\xce8>\f\x1av\xfd@\\\xe44+?\a\a\xb9\x1d_x\x04\xb6\x95\xb9&\xe3\xdf\xa1\x93\xf0Q\xfe\xa75\xa6\x92\xb9\ru\xf0\xee\x0f\x05\xbam\xf6T%\xa8h!\xb6y\x12e\xdf\xf0\x01\xf2\xcc\x84\x1f-\xe4qO\x18\x866\x99w\xc8\xa2r\xaey\x00\xd5\xa7DS\x83\xc4\xa5\xc0\xd6\xa6|=r1\xe4?\xa4\xdb\x054\xb0\x9b\xbf\xcc\xa82\x04\xf6\b\xa1\x97b\xd5\xbe(f\xd5:\x80\xb4\r\x92\x9d5%?\x10\xa3,b\x9d8\xb6\x86i\x9e\x84\xa9\xd6\xd4\x05\xe4\xf0\x80\xf0\xa2+\xefT\xbc\x93\x1c\xc5', 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r8, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e2f, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) setpriority(0x2, 0x0, 0x9) unlinkat(0xffffffffffffffff, 0x0, 0x200) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x4, 0xfffffffd, 0x0, 'queue1\x00', 0xfffffffa}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) 0s ago: executing program 2 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pselect6(0x40, &(0x7f0000000040)={0x8, 0x3, 0x4, 0x4, 0x6, 0x7, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, 0x0, 0x91, 0x20008800, 0x0, 0x0) kernel console output (not intermixed with test programs): tocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6746 comm=syz.0.1157 [ 116.065958][ T2570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098476][ T125] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.125391][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.366397][ T6776] loop1: detected capacity change from 0 to 512 [ 116.398972][ T6776] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.409362][ T6776] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.416002][ T6776] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 116.430626][ T6776] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 116.437208][ T6776] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1168: bad orphan inode 768 [ 116.448642][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.493046][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.132668][ T6792] loop2: detected capacity change from 0 to 512 [ 117.149732][ T6792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.169292][ T6792] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.183866][ T6792] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 117.198437][ T6792] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 117.205048][ T6792] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1174: bad orphan inode 768 [ 117.250944][ T6792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.315568][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.410534][ T6801] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 117.425670][ T6801] rdma_rxe: rxe_newlink: failed to add syz_tun [ 117.439550][ T6801] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.492072][ T6803] loop2: detected capacity change from 0 to 2048 [ 117.539977][ T6803] loop2: p1 p2 p3 [ 117.739929][ T6811] loop2: detected capacity change from 0 to 512 [ 117.747059][ T6811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.757273][ T6811] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.763689][ T6811] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 117.778441][ T6811] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 117.785047][ T6811] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1182: bad orphan inode 768 [ 117.796119][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.820293][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.866186][ T6818] loop2: detected capacity change from 0 to 1024 [ 117.873139][ T6818] EXT4-fs: inline encryption not supported [ 117.879612][ T6818] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 117.891091][ T6818] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.899209][ T6818] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.906123][ T6818] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1185: Invalid inode table block 0 in block_group 0 [ 117.919270][ T6818] EXT4-fs (loop2): Remounting filesystem read-only [ 117.925817][ T6818] EXT4-fs (loop2): 1 truncate cleaned up [ 117.931995][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.955487][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.179757][ T6840] __nla_validate_parse: 10 callbacks suppressed [ 118.179770][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1192'. [ 118.337988][ T6850] loop1: detected capacity change from 0 to 512 [ 118.348463][ T6850] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.366849][ T6855] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1198'. [ 118.381073][ T6850] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.382012][ T6857] EXT4-fs: inline encryption not supported [ 118.393795][ T6850] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 118.408348][ T6850] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 118.414953][ T6850] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1194: bad orphan inode 768 [ 118.425628][ T6850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.434486][ T6857] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 118.459622][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.474834][ T6857] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.484947][ T6857] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.496649][ T6857] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.1197: Invalid inode table block 0 in block_group 0 [ 118.511702][ T6857] EXT4-fs (loop4): Remounting filesystem read-only [ 118.522880][ T6857] EXT4-fs (loop4): 1 truncate cleaned up [ 118.533870][ T6857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.562133][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.635327][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1203'. [ 118.736557][ T6880] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 118.749448][ T6880] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.770596][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.891743][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 118.891758][ T29] audit: type=1326 audit(1767907541.672:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 118.921403][ T29] audit: type=1326 audit(1767907541.672:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 118.994718][ T29] audit: type=1326 audit(1767907541.672:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.001197][ T6896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.018205][ T29] audit: type=1326 audit(1767907541.672:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.050341][ T29] audit: type=1326 audit(1767907541.672:19181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.073858][ T29] audit: type=1326 audit(1767907541.672:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.097424][ T29] audit: type=1326 audit(1767907541.672:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.104913][ T6899] EXT4-fs: inline encryption not supported [ 119.120915][ T29] audit: type=1326 audit(1767907541.672:19184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.127238][ T6899] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 119.150226][ T29] audit: type=1326 audit(1767907541.672:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.161028][ T6896] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.183604][ T29] audit: type=1326 audit(1767907541.672:19186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.3.1209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 119.213782][ T6896] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 119.228396][ T6896] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 119.228905][ T6899] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 119.235024][ T6896] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1210: bad orphan inode 768 [ 119.253538][ T6899] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.256993][ T6896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.273749][ T6899] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1211: Invalid inode table block 0 in block_group 0 [ 119.286593][ T6899] EXT4-fs (loop1): Remounting filesystem read-only [ 119.293228][ T6899] EXT4-fs (loop1): 1 truncate cleaned up [ 119.311039][ T6899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.340987][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.423114][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.450223][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'. [ 119.472725][ T6911] loop4: p1 p2 p3 [ 119.964041][ T6943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.976654][ T6943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.979006][ T6946] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 119.983141][ T6943] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 119.992700][ T6946] rdma_rxe: rxe_newlink: failed to add syz_tun [ 120.005329][ T6943] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 120.016310][ T6946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.018057][ T6943] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1225: bad orphan inode 768 [ 120.036458][ T6943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.063323][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.781146][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 120.896462][ T6968] set_capacity_and_notify: 6 callbacks suppressed [ 120.896477][ T6968] loop1: detected capacity change from 0 to 164 [ 120.912393][ T6974] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1235'. [ 120.930009][ T6968] syz.1.1234: attempt to access beyond end of device [ 120.930009][ T6968] loop1: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 120.968872][ T6968] syz.1.1234: attempt to access beyond end of device [ 120.968872][ T6968] loop1: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 121.155388][ T6981] netlink: 'syz.0.1238': attribute type 10 has an invalid length. [ 121.201169][ T6981] rdma_rxe: rxe_newlink: failed to add syz_tun [ 121.245161][ T6981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.408833][ T6989] random: crng reseeded on system resumption [ 121.430654][ T6989] Restarting kernel threads ... [ 121.443345][ T6989] Done restarting kernel threads. [ 123.122194][ T7008] loop2: detected capacity change from 0 to 1024 [ 123.148943][ T7008] EXT4-fs: inline encryption not supported [ 123.158947][ T7008] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 123.180349][ T7008] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 123.188331][ T7008] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.209243][ T7008] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1246: Invalid inode table block 0 in block_group 0 [ 123.238797][ T7008] EXT4-fs (loop2): Remounting filesystem read-only [ 123.248693][ T7008] EXT4-fs (loop2): 1 truncate cleaned up [ 123.259019][ T7008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.319088][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.539246][ T7022] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 123.576855][ T7022] rdma_rxe: rxe_newlink: failed to add syz_tun [ 123.599963][ T7022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.823671][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 123.881327][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1254'. [ 124.080549][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 124.080562][ T29] audit: type=1326 audit(1767907546.862:19470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.110747][ T29] audit: type=1326 audit(1767907546.892:19471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.134183][ T29] audit: type=1326 audit(1767907546.892:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.157652][ T29] audit: type=1326 audit(1767907546.892:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.181604][ T29] audit: type=1326 audit(1767907546.892:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.205052][ T29] audit: type=1326 audit(1767907546.892:19475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.228674][ T29] audit: type=1326 audit(1767907546.892:19476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.252184][ T29] audit: type=1326 audit(1767907546.892:19477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.275790][ T29] audit: type=1326 audit(1767907546.892:19478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 124.299289][ T29] audit: type=1326 audit(1767907546.892:19479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.4.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 125.929763][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1281'. [ 126.035972][ T7122] netlink: 'syz.4.1283': attribute type 10 has an invalid length. [ 126.053059][ T7122] syz1: rxe_newlink: already configured on syz_tun [ 126.093740][ T7122] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.195483][ T7138] loop2: detected capacity change from 0 to 512 [ 126.202914][ T7138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.212438][ T7138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.218917][ T7138] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 126.233497][ T7138] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 126.240133][ T7138] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1290: bad orphan inode 768 [ 126.251160][ T7138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.264501][ T7138] selinux_netlink_send: 38 callbacks suppressed [ 126.264585][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.283505][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.296114][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.308700][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.321299][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.333895][ T7138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7138 comm=syz.2.1290 [ 126.357229][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.507426][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1291'. [ 126.541229][ T7143] xt_hashlimit: max too large, truncated to 1048576 [ 126.700653][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1297'. [ 126.842528][ T7165] loop2: detected capacity change from 0 to 1024 [ 126.849262][ T7165] EXT4-fs: inline encryption not supported [ 126.856452][ T7165] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (4096), stripe is disabled [ 126.867361][ T7165] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 126.882225][ T7165] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.900425][ T7165] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.1301: Invalid inode table block 0 in block_group 0 [ 126.995612][ T7165] EXT4-fs (loop2): Remounting filesystem read-only [ 127.105520][ T7165] EXT4-fs (loop2): 1 truncate cleaned up [ 128.262269][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 128.651701][ T7232] loop2: detected capacity change from 0 to 2048 [ 128.721997][ T7232] loop2: p1 p2 p3 [ 129.364273][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 129.364289][ T29] audit: type=1326 audit(1767907552.142:20000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.393997][ T29] audit: type=1326 audit(1767907552.142:20001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.429028][ T29] audit: type=1326 audit(1767907552.182:20002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.452437][ T29] audit: type=1326 audit(1767907552.182:20003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.475972][ T29] audit: type=1326 audit(1767907552.182:20004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.499491][ T29] audit: type=1326 audit(1767907552.192:20005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.522923][ T29] audit: type=1326 audit(1767907552.192:20006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.546470][ T29] audit: type=1326 audit(1767907552.192:20007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.570035][ T29] audit: type=1326 audit(1767907552.192:20008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.593546][ T29] audit: type=1326 audit(1767907552.202:20009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 129.921552][ T7274] xt_hashlimit: max too large, truncated to 1048576 [ 129.930891][ T7276] loop4: detected capacity change from 0 to 128 [ 129.939298][ T7276] EXT4-fs mount: 2 callbacks suppressed [ 129.939308][ T7276] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.957815][ T7276] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.079509][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.354255][ T7291] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.421729][ T7291] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.451344][ T7292] bond_slave_0: entered promiscuous mode [ 130.457085][ T7292] bond_slave_1: entered promiscuous mode [ 130.474014][ T7292] macvtap1: entered allmulticast mode [ 130.479489][ T7292] bond0: entered allmulticast mode [ 130.484607][ T7292] bond_slave_0: entered allmulticast mode [ 130.490409][ T7292] bond_slave_1: entered allmulticast mode [ 130.496126][ T7292] bridge0: entered allmulticast mode [ 130.564541][ T7292] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.602120][ T7292] bond0: left allmulticast mode [ 130.607042][ T7292] bond_slave_0: left allmulticast mode [ 130.612541][ T7292] bond_slave_1: left allmulticast mode [ 130.617989][ T7292] bridge0: left allmulticast mode [ 130.623037][ T7292] bond_slave_0: left promiscuous mode [ 130.628418][ T7292] bond_slave_1: left promiscuous mode [ 130.721576][ T7291] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.790519][ T7291] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.849883][ T7297] loop2: detected capacity change from 0 to 512 [ 130.864728][ T7297] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 130.882374][ T125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.906683][ T125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.923344][ T7297] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.931315][ T125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.947973][ T125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.963057][ T7297] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 130.977652][ T7297] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 130.984281][ T7297] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1346: bad orphan inode 768 [ 131.063478][ T7297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.076930][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7297 comm=syz.2.1346 [ 131.089560][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7297 comm=syz.2.1346 [ 131.102167][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7297 comm=syz.2.1346 [ 131.114840][ T7297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7297 comm=syz.2.1346 [ 131.155612][ T7310] loop4: detected capacity change from 0 to 128 [ 131.162381][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.172973][ T7310] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.185975][ T7310] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.216936][ T7315] netlink: 'syz.1.1352': attribute type 16 has an invalid length. [ 131.224806][ T7315] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 131.232667][ T7315] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1352'. [ 131.242599][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.526387][ T7323] loop3: detected capacity change from 0 to 1024 [ 131.540498][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.594290][ T7324] loop1: detected capacity change from 0 to 512 [ 131.608189][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.630182][ T7324] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.655274][ T7336] xt_hashlimit: max too large, truncated to 1048576 [ 131.670665][ T7324] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.677041][ T7324] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 131.691638][ T7324] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 131.698277][ T7324] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1355: bad orphan inode 768 [ 131.757815][ T7324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.798918][ T7324] selinux_netlink_send: 2 callbacks suppressed [ 131.798978][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 131.817792][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 131.830418][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 131.843032][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 131.855638][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 131.868311][ T7324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7324 comm=syz.1.1355 [ 132.030009][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.097514][ T7354] netlink: 'syz.4.1365': attribute type 16 has an invalid length. [ 132.105514][ T7354] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 132.113308][ T7354] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.1365'. [ 132.278734][ T7375] loop0: detected capacity change from 0 to 512 [ 132.291682][ T7375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.314693][ T7377] loop3: detected capacity change from 0 to 128 [ 132.331518][ T7375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.337875][ T7375] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 132.352551][ T7375] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 132.359216][ T7375] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1371: bad orphan inode 768 [ 132.386563][ T7377] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.419013][ T7377] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.430011][ T7375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.468735][ T7375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7375 comm=syz.0.1371 [ 132.481384][ T7375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=7375 comm=syz.0.1371 [ 132.494010][ T7375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7375 comm=syz.0.1371 [ 132.506633][ T7375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7375 comm=syz.0.1371 [ 132.529289][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.570169][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.664308][ T7408] netlink: 'syz.1.1383': attribute type 16 has an invalid length. [ 132.672184][ T7408] netlink: 'syz.1.1383': attribute type 3 has an invalid length. [ 132.679973][ T7408] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1383'. [ 132.697352][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1384'. [ 133.097684][ T7444] loop3: detected capacity change from 0 to 2048 [ 133.112886][ T7446] loop1: detected capacity change from 0 to 512 [ 133.119883][ T7446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.129426][ T7446] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.135847][ T7446] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 133.139687][ T7444] loop3: p1 p2 p3 [ 133.150436][ T7446] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 133.160735][ T7446] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1395: bad orphan inode 768 [ 133.171629][ T7446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.194342][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.329038][ T7459] xt_hashlimit: max too large, truncated to 1048576 [ 133.374148][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 133.655987][ T7483] loop4: detected capacity change from 0 to 512 [ 133.663125][ T7483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.676837][ T7483] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.686756][ T7483] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 133.701311][ T7483] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 133.707896][ T7483] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1407: bad orphan inode 768 [ 133.719417][ T7483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.732068][ T7486] loop3: detected capacity change from 0 to 2048 [ 133.747659][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.780092][ T7486] loop3: p1 p2 p3 [ 133.858277][ T7498] xt_hashlimit: max too large, truncated to 1048576 [ 133.888154][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 133.936969][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 134.183559][ T7522] loop1: detected capacity change from 0 to 2048 [ 134.219959][ T7522] loop1: p1 p2 p3 [ 134.380594][ T7526] IPv6: Can't replace route, no match found [ 134.752075][ T7532] xt_hashlimit: max too large, truncated to 1048576 [ 134.791652][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 134.819058][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 134.819073][ T29] audit: type=1326 audit(1767907557.602:20678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.848963][ T29] audit: type=1326 audit(1767907557.602:20679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.872404][ T29] audit: type=1326 audit(1767907557.602:20680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.895873][ T29] audit: type=1326 audit(1767907557.602:20681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.919415][ T29] audit: type=1326 audit(1767907557.602:20682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.942904][ T29] audit: type=1326 audit(1767907557.602:20683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.948187][ T7541] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 134.966486][ T29] audit: type=1326 audit(1767907557.602:20684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 134.998266][ T29] audit: type=1326 audit(1767907557.602:20685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 135.021840][ T29] audit: type=1326 audit(1767907557.602:20686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 135.045306][ T29] audit: type=1326 audit(1767907557.602:20687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7537 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 135.050572][ T7541] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 135.121254][ T7552] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.175051][ T7552] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.195457][ T7559] FAULT_INJECTION: forcing a failure. [ 135.195457][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 135.208238][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.0.1437 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.208267][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.208284][ T7559] Call Trace: [ 135.208305][ T7559] [ 135.208314][ T7559] __dump_stack+0x1d/0x30 [ 135.208340][ T7559] dump_stack_lvl+0x95/0xd0 [ 135.208358][ T7559] dump_stack+0x15/0x1b [ 135.208391][ T7559] should_fail_ex+0x265/0x280 [ 135.208469][ T7559] should_failslab+0x8c/0xb0 [ 135.208487][ T7559] __kvmalloc_node_noprof+0x149/0x6b0 [ 135.208508][ T7559] ? xt_alloc_entry_offsets+0x4d/0x60 [ 135.208549][ T7559] ? refill_obj_stock+0x254/0x2e0 [ 135.208600][ T7559] xt_alloc_entry_offsets+0x4d/0x60 [ 135.208629][ T7559] translate_table+0xa9/0x1070 [ 135.208658][ T7559] ? __rcu_read_unlock+0x4f/0x70 [ 135.208677][ T7559] ? should_fail_ex+0xdb/0x280 [ 135.208697][ T7559] ? _copy_from_user+0x89/0xb0 [ 135.208725][ T7559] do_ip6t_set_ctl+0x678/0x840 [ 135.208743][ T7559] ? kstrtoull+0x111/0x140 [ 135.208859][ T7559] ? __rcu_read_unlock+0x4f/0x70 [ 135.208883][ T7559] nf_setsockopt+0x199/0x1b0 [ 135.208907][ T7559] ipv6_setsockopt+0x11a/0x130 [ 135.208937][ T7559] tcp_setsockopt+0x98/0xb0 [ 135.208994][ T7559] sock_common_setsockopt+0x69/0x80 [ 135.209015][ T7559] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.209037][ T7559] __sys_setsockopt+0x184/0x200 [ 135.209111][ T7559] __x64_sys_setsockopt+0x64/0x80 [ 135.209135][ T7559] x64_sys_call+0x21d5/0x3000 [ 135.209213][ T7559] do_syscall_64+0xca/0x2b0 [ 135.209245][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.209343][ T7559] RIP: 0033:0x7f10daacf749 [ 135.209360][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.209382][ T7559] RSP: 002b:00007f10d9537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.209402][ T7559] RAX: ffffffffffffffda RBX: 00007f10dad25fa0 RCX: 00007f10daacf749 [ 135.209413][ T7559] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 135.209424][ T7559] RBP: 00007f10d9537090 R08: 0000000000000580 R09: 0000000000000000 [ 135.209435][ T7559] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 135.209505][ T7559] R13: 00007f10dad26038 R14: 00007f10dad25fa0 R15: 00007ffdc4e9bc08 [ 135.209588][ T7559] [ 135.449298][ T7557] bond_slave_0: entered promiscuous mode [ 135.454964][ T7557] bond_slave_1: entered promiscuous mode [ 135.467197][ T7557] macvtap1: entered allmulticast mode [ 135.472639][ T7557] bond0: entered allmulticast mode [ 135.477754][ T7557] bond_slave_0: entered allmulticast mode [ 135.483478][ T7557] bond_slave_1: entered allmulticast mode [ 135.489198][ T7557] bridge0: entered allmulticast mode [ 135.519895][ T7557] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 135.529281][ T7557] bond0: left allmulticast mode [ 135.534239][ T7557] bond_slave_0: left allmulticast mode [ 135.539769][ T7557] bond_slave_1: left allmulticast mode [ 135.545282][ T7557] bridge0: left allmulticast mode [ 135.550362][ T7557] bond_slave_0: left promiscuous mode [ 135.555796][ T7557] bond_slave_1: left promiscuous mode [ 135.565361][ T7568] Driver unsupported XDP return value 0 on prog (id 869) dev N/A, expect packet loss! [ 135.576998][ T7552] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.620728][ T7552] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.678916][ T7586] pim6reg: entered allmulticast mode [ 135.709266][ T125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.722190][ T125] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.722724][ T7586] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 135.746751][ T125] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.749036][ T7586] SELinux: failed to load policy [ 135.763017][ T125] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.875362][ T7587] pim6reg: left allmulticast mode [ 136.051681][ T7610] capability: warning: `syz.4.1447' uses 32-bit capabilities (legacy support in use) [ 136.094092][ T7615] loop1: detected capacity change from 0 to 128 [ 136.100924][ T7615] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.113917][ T7615] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.137413][ T7617] FAULT_INJECTION: forcing a failure. [ 136.137413][ T7617] name failslab, interval 1, probability 0, space 0, times 0 [ 136.150098][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.0.1455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.150123][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.150134][ T7617] Call Trace: [ 136.150140][ T7617] [ 136.150147][ T7617] __dump_stack+0x1d/0x30 [ 136.150170][ T7617] dump_stack_lvl+0x95/0xd0 [ 136.150261][ T7617] dump_stack+0x15/0x1b [ 136.150279][ T7617] should_fail_ex+0x265/0x280 [ 136.150302][ T7617] should_failslab+0x8c/0xb0 [ 136.150323][ T7617] kmem_cache_alloc_noprof+0x69/0x4b0 [ 136.150345][ T7617] ? skb_clone+0x151/0x1f0 [ 136.150420][ T7617] skb_clone+0x151/0x1f0 [ 136.150435][ T7617] __netlink_deliver_tap+0x2c9/0x500 [ 136.150528][ T7617] netlink_unicast+0x66b/0x690 [ 136.150544][ T7617] netlink_sendmsg+0x58b/0x6b0 [ 136.150642][ T7617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.150659][ T7617] __sock_sendmsg+0x145/0x180 [ 136.150669][ T7617] ____sys_sendmsg+0x31e/0x4a0 [ 136.150724][ T7617] ___sys_sendmsg+0x17b/0x1d0 [ 136.150749][ T7617] ? __bpf_get_stackid+0x6f6/0x7d0 [ 136.150773][ T7617] __x64_sys_sendmsg+0xd4/0x160 [ 136.150855][ T7617] x64_sys_call+0x17ba/0x3000 [ 136.150869][ T7617] do_syscall_64+0xca/0x2b0 [ 136.150955][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.151028][ T7617] RIP: 0033:0x7f10daacf749 [ 136.151052][ T7617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.151069][ T7617] RSP: 002b:00007f10d9537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.151144][ T7617] RAX: ffffffffffffffda RBX: 00007f10dad25fa0 RCX: 00007f10daacf749 [ 136.151152][ T7617] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 136.151159][ T7617] RBP: 00007f10d9537090 R08: 0000000000000000 R09: 0000000000000000 [ 136.151166][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.151173][ T7617] R13: 00007f10dad26038 R14: 00007f10dad25fa0 R15: 00007ffdc4e9bc08 [ 136.151184][ T7617] [ 136.151276][ T53] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.823900][ T7652] __nla_validate_parse: 1 callbacks suppressed [ 136.823921][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 136.825490][ T7654] set_capacity_and_notify: 1 callbacks suppressed [ 136.825504][ T7654] loop4: detected capacity change from 0 to 4096 [ 136.855728][ T7654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.955372][ T7663] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.009389][ T7665] bond_slave_0: entered promiscuous mode [ 137.015150][ T7665] bond_slave_1: entered promiscuous mode [ 137.031317][ T7665] macvtap1: entered allmulticast mode [ 137.036724][ T7665] bond0: entered allmulticast mode [ 137.041946][ T7665] bond_slave_0: entered allmulticast mode [ 137.047664][ T7665] bond_slave_1: entered allmulticast mode [ 137.053400][ T7665] bridge0: entered allmulticast mode [ 137.067677][ T7665] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 137.090581][ T7665] bond0: left allmulticast mode [ 137.095469][ T7665] bond_slave_0: left allmulticast mode [ 137.101051][ T7665] bond_slave_1: left allmulticast mode [ 137.106510][ T7665] bridge0: left allmulticast mode [ 137.111656][ T7665] bond_slave_0: left promiscuous mode [ 137.117048][ T7665] bond_slave_1: left promiscuous mode [ 137.128446][ T7663] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.250984][ T7663] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.332840][ T7663] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.340063][ T2570] kworker/u8:10 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 137.356288][ T2570] CPU: 1 UID: 0 PID: 2570 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.356312][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.356324][ T2570] Workqueue: loop4 loop_rootcg_workfn [ 137.356353][ T2570] Call Trace: [ 137.356361][ T2570] [ 137.356427][ T2570] __dump_stack+0x1d/0x30 [ 137.356448][ T2570] dump_stack_lvl+0x95/0xd0 [ 137.356466][ T2570] dump_stack+0x15/0x1b [ 137.356499][ T2570] dump_header+0x81/0x240 [ 137.356515][ T2570] oom_kill_process+0x295/0x350 [ 137.356535][ T2570] out_of_memory+0x97b/0xb80 [ 137.356555][ T2570] try_charge_memcg+0x610/0xa10 [ 137.356594][ T2570] charge_memcg+0x51/0xc0 [ 137.356639][ T2570] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 137.356747][ T2570] __read_swap_cache_async+0x17b/0x2d0 [ 137.356812][ T2570] swap_cluster_readahead+0x362/0x3c0 [ 137.356845][ T2570] shmem_swapin_folio+0x8b4/0x11e0 [ 137.356911][ T2570] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 137.356931][ T2570] ? xas_load+0x413/0x430 [ 137.356956][ T2570] ? filemap_get_entry+0x34b/0x390 [ 137.356976][ T2570] shmem_get_folio_gfp+0x26c/0xd50 [ 137.356997][ T2570] ? __rb_insert_augmented+0x76/0x2c0 [ 137.357045][ T2570] shmem_write_begin+0xfc/0x1f0 [ 137.357073][ T2570] generic_perform_write+0x184/0x490 [ 137.357102][ T2570] shmem_file_write_iter+0xc5/0xf0 [ 137.357194][ T2570] lo_rw_aio+0x673/0x720 [ 137.357217][ T2570] loop_process_work+0x56d/0xaa0 [ 137.357311][ T2570] ? _raw_spin_unlock_irq+0x26/0x50 [ 137.357333][ T2570] ? wb_workfn+0x821/0x910 [ 137.357373][ T2570] ? pwq_dec_nr_in_flight+0x65c/0x760 [ 137.357400][ T2570] loop_rootcg_workfn+0x22/0x30 [ 137.357499][ T2570] process_scheduled_works+0x4ce/0x9d0 [ 137.357569][ T2570] worker_thread+0x582/0x770 [ 137.357593][ T2570] kthread+0x489/0x510 [ 137.357653][ T2570] ? __pfx_worker_thread+0x10/0x10 [ 137.357678][ T2570] ? __pfx_kthread+0x10/0x10 [ 137.357744][ T2570] ret_from_fork+0x149/0x290 [ 137.357765][ T2570] ? __pfx_kthread+0x10/0x10 [ 137.357791][ T2570] ret_from_fork_asm+0x1a/0x30 [ 137.357851][ T2570] [ 137.357935][ T2570] memory: usage 307200kB, limit 307200kB, failcnt 479 [ 137.394068][ T7670] loop1: detected capacity change from 0 to 2048 [ 137.398333][ T2570] memory+swap: usage 309480kB, limit 9007199254740988kB, failcnt 0 [ 137.429203][ T7673] selinux_netlink_send: 14 callbacks suppressed [ 137.429217][ T7673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7673 comm=syz.2.1476 [ 137.431431][ T2570] kmem: usage 306700kB, limit 9007199254740988kB, failcnt 0 [ 137.604553][ T2570] Memory cgroup stats for /syz4: [ 137.604715][ T2570] cache 512000 [ 137.612998][ T2570] rss 0 [ 137.615732][ T2570] shmem 0 [ 137.618683][ T2570] mapped_file 0 [ 137.622115][ T2570] dirty 4096 [ 137.625294][ T2570] writeback 475136 [ 137.628996][ T2570] workingset_refault_anon 238 [ 137.633651][ T2570] workingset_refault_file 263 [ 137.638386][ T2570] swap 2334720 [ 137.641751][ T2570] swapcached 0 [ 137.645098][ T2570] pgpgin 63734 [ 137.648442][ T2570] pgpgout 63609 [ 137.651890][ T2570] pgfault 79776 [ 137.655374][ T2570] pgmajfault 44 [ 137.658842][ T2570] inactive_anon 0 [ 137.662453][ T2570] active_anon 0 [ 137.665887][ T2570] inactive_file 512000 [ 137.669954][ T2570] active_file 0 [ 137.673386][ T2570] unevictable 0 [ 137.676823][ T2570] hierarchical_memory_limit 314572800 [ 137.682244][ T2570] hierarchical_memsw_limit 9223372036854771712 [ 137.688422][ T2570] total_cache 512000 [ 137.692306][ T2570] total_rss 0 [ 137.695567][ T2570] total_shmem 0 [ 137.699067][ T2570] total_mapped_file 0 [ 137.703104][ T2570] total_dirty 4096 [ 137.706806][ T2570] total_writeback 475136 [ 137.711103][ T2570] total_workingset_refault_anon 238 [ 137.716286][ T2570] total_workingset_refault_file 263 [ 137.721478][ T2570] total_swap 2334720 [ 137.725412][ T2570] total_swapcached 0 [ 137.729289][ T2570] total_pgpgin 63734 [ 137.733154][ T2570] total_pgpgout 63609 [ 137.737107][ T2570] total_pgfault 79776 [ 137.741125][ T2570] total_pgmajfault 44 [ 137.745081][ T2570] total_inactive_anon 0 [ 137.749218][ T2570] total_active_anon 0 [ 137.753171][ T2570] total_inactive_file 512000 [ 137.757759][ T2570] total_active_file 0 [ 137.761783][ T2570] total_unevictable 0 [ 137.765737][ T2570] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1470,pid=7653,uid=0 [ 137.780362][ T2570] Memory cgroup out of memory: Killed process 7653 (syz.4.1470) total-vm:94100kB, anon-rss:1264kB, file-rss:22692kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 137.834425][ T7670] loop1: p1 p2 p3 [ 137.854693][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.882794][ T2570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.895500][ T2570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.907350][ T2570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.986509][ T7654] syz.4.1470 (7654) used greatest stack depth: 6216 bytes left [ 138.000219][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.015772][ T7682] loop0: detected capacity change from 0 to 2048 [ 138.060147][ T7682] loop0: p1 p2 p3 [ 138.125064][ T7696] loop1: detected capacity change from 0 to 2048 [ 138.170156][ T7696] loop1: p1 p2 p3 [ 138.195505][ T7703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.228954][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1489'. [ 138.250507][ T7706] bond_slave_0: entered promiscuous mode [ 138.256230][ T7706] bond_slave_1: entered promiscuous mode [ 138.262257][ T7706] macvtap1: entered allmulticast mode [ 138.267634][ T7706] bond0: entered allmulticast mode [ 138.272955][ T7706] bond_slave_0: entered allmulticast mode [ 138.278794][ T7706] bond_slave_1: entered allmulticast mode [ 138.284572][ T7706] bridge0: entered allmulticast mode [ 138.291257][ T7706] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.299956][ T7706] bond0: left allmulticast mode [ 138.304839][ T7706] bond_slave_0: left allmulticast mode [ 138.310354][ T7706] bond_slave_1: left allmulticast mode [ 138.315817][ T7706] bridge0: left allmulticast mode [ 138.320853][ T7706] bond_slave_0: left promiscuous mode [ 138.326243][ T7706] bond_slave_1: left promiscuous mode [ 138.336153][ T7703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.428133][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1492'. [ 138.439108][ T7703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.490805][ T7703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.574106][ T125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.586467][ T125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.603813][ T125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.612456][ T125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.632145][ T7729] FAULT_INJECTION: forcing a failure. [ 138.632145][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 138.644886][ T7729] CPU: 0 UID: 0 PID: 7729 Comm: syz.4.1499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.644911][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.644922][ T7729] Call Trace: [ 138.644928][ T7729] [ 138.644935][ T7729] __dump_stack+0x1d/0x30 [ 138.645016][ T7729] dump_stack_lvl+0x95/0xd0 [ 138.645035][ T7729] dump_stack+0x15/0x1b [ 138.645153][ T7729] should_fail_ex+0x265/0x280 [ 138.645180][ T7729] should_failslab+0x8c/0xb0 [ 138.645193][ T7729] kmem_cache_alloc_noprof+0x69/0x4b0 [ 138.645205][ T7729] ? getname_flags+0x80/0x3b0 [ 138.645219][ T7729] getname_flags+0x80/0x3b0 [ 138.645232][ T7729] getname_uflags+0x21/0x30 [ 138.645311][ T7729] io_linkat_prep+0x105/0x1b0 [ 138.645329][ T7729] io_submit_sqes+0x70f/0x11b0 [ 138.645441][ T7729] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 138.645459][ T7729] ? 0xffffffff81000000 [ 138.645467][ T7729] ? __rcu_read_unlock+0x4f/0x70 [ 138.645479][ T7729] ? proc_fail_nth_write+0x13b/0x160 [ 138.645548][ T7729] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 138.645563][ T7729] ? vfs_write+0x7e8/0x960 [ 138.645573][ T7729] ? __rcu_read_unlock+0x4f/0x70 [ 138.645584][ T7729] ? __fget_files+0x184/0x1c0 [ 138.645597][ T7729] ? mutex_unlock+0x4f/0x90 [ 138.645670][ T7729] ? fput+0x8f/0xc0 [ 138.645780][ T7729] __x64_sys_io_uring_enter+0x78/0x90 [ 138.645799][ T7729] x64_sys_call+0x27e4/0x3000 [ 138.645812][ T7729] do_syscall_64+0xca/0x2b0 [ 138.645832][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.645894][ T7729] RIP: 0033:0x7fa43e2bf749 [ 138.645908][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.645949][ T7729] RSP: 002b:00007fa43cd1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 138.645962][ T7729] RAX: ffffffffffffffda RBX: 00007fa43e515fa0 RCX: 00007fa43e2bf749 [ 138.645969][ T7729] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000006 [ 138.645976][ T7729] RBP: 00007fa43cd1f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.645983][ T7729] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 138.645995][ T7729] R13: 00007fa43e516038 R14: 00007fa43e515fa0 R15: 00007ffe987a35b8 [ 138.646054][ T7729] [ 138.992591][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 139.001784][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 139.021075][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 139.064935][ T7745] loop0: detected capacity change from 0 to 164 [ 139.113169][ T7755] loop2: detected capacity change from 0 to 512 [ 139.128339][ T7755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.154737][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.167315][ T7755] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.323166][ T7770] loop3: detected capacity change from 0 to 2048 [ 139.391395][ T7770] loop3: p1 p2 p3 [ 139.928184][ T7755] syz.2.1510 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 139.942346][ T7755] CPU: 0 UID: 0 PID: 7755 Comm: syz.2.1510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.942379][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.942393][ T7755] Call Trace: [ 139.942401][ T7755] [ 139.942410][ T7755] __dump_stack+0x1d/0x30 [ 139.942436][ T7755] dump_stack_lvl+0x95/0xd0 [ 139.942530][ T7755] dump_stack+0x15/0x1b [ 139.942551][ T7755] dump_header+0x81/0x240 [ 139.942571][ T7755] oom_kill_process+0x295/0x350 [ 139.942639][ T7755] out_of_memory+0x97b/0xb80 [ 139.942664][ T7755] try_charge_memcg+0x610/0xa10 [ 139.942700][ T7755] obj_cgroup_charge_pages+0xa6/0x150 [ 139.942727][ T7755] __memcg_kmem_charge_page+0x9f/0x170 [ 139.942824][ T7755] __alloc_frozen_pages_noprof+0x18f/0x360 [ 139.942861][ T7755] alloc_pages_mpol+0xb3/0x260 [ 139.942891][ T7755] alloc_pages_noprof+0x90/0x130 [ 139.943042][ T7755] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 139.943076][ T7755] __kvmalloc_node_noprof+0x492/0x6b0 [ 139.943098][ T7755] ? ip_set_alloc+0x24/0x30 [ 139.943136][ T7755] ? ip_set_alloc+0x24/0x30 [ 139.943162][ T7755] ip_set_alloc+0x24/0x30 [ 139.943199][ T7755] hash_netiface_create+0x282/0x740 [ 139.943233][ T7755] ? __pfx_hash_netiface_create+0x10/0x10 [ 139.943321][ T7755] ip_set_create+0x3cc/0x970 [ 139.943357][ T7755] ? __nla_parse+0x40/0x60 [ 139.943456][ T7755] nfnetlink_rcv_msg+0x4c6/0x590 [ 139.943497][ T7755] netlink_rcv_skb+0x123/0x220 [ 139.943526][ T7755] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 139.943623][ T7755] nfnetlink_rcv+0x167/0x16c0 [ 139.943648][ T7755] ? kmem_cache_free+0xe3/0x3a0 [ 139.943674][ T7755] ? __kfree_skb+0x109/0x150 [ 139.943697][ T7755] ? nlmon_xmit+0x4f/0x60 [ 139.943754][ T7755] ? consume_skb+0x49/0x150 [ 139.943823][ T7755] ? nlmon_xmit+0x4f/0x60 [ 139.943846][ T7755] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 139.943964][ T7755] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 139.943993][ T7755] ? __dev_queue_xmit+0x148/0x1ee0 [ 139.944026][ T7755] ? ref_tracker_free+0x37d/0x3e0 [ 139.944058][ T7755] ? __netlink_deliver_tap+0x4dc/0x500 [ 139.944171][ T7755] netlink_unicast+0x5c0/0x690 [ 139.944201][ T7755] netlink_sendmsg+0x58b/0x6b0 [ 139.944229][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.944295][ T7755] __sock_sendmsg+0x145/0x180 [ 139.944317][ T7755] ____sys_sendmsg+0x31e/0x4a0 [ 139.944418][ T7755] ___sys_sendmsg+0x17b/0x1d0 [ 139.944538][ T7755] __x64_sys_sendmsg+0xd4/0x160 [ 139.944621][ T7755] x64_sys_call+0x17ba/0x3000 [ 139.944706][ T7755] do_syscall_64+0xca/0x2b0 [ 139.944737][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.944760][ T7755] RIP: 0033:0x7fc24bedf749 [ 139.944775][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.944795][ T7755] RSP: 002b:00007fc24a93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.944816][ T7755] RAX: ffffffffffffffda RBX: 00007fc24c135fa0 RCX: 00007fc24bedf749 [ 139.944902][ T7755] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 139.944917][ T7755] RBP: 00007fc24bf63f91 R08: 0000000000000000 R09: 0000000000000000 [ 139.944931][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.944945][ T7755] R13: 00007fc24c136038 R14: 00007fc24c135fa0 R15: 00007ffe3b4ed078 [ 139.944980][ T7755] [ 139.944986][ T7755] memory: usage 307200kB, limit 307200kB, failcnt 1636 [ 140.072634][ T7778] loop4: detected capacity change from 0 to 164 [ 140.073822][ T7755] memory+swap: usage 335860kB, limit 9007199254740988kB, failcnt 0 [ 140.088965][ T7755] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 140.103032][ T7755] Memory cgroup stats for [ 140.107349][ T7778] RRIP_1991A [ 140.118482][ T7778] Unsupported NM flag settings (240) [ 140.121773][ T7755] /syz2 [ 140.166967][ T29] kauditd_printk_skb: 1145 callbacks suppressed [ 140.167047][ T29] audit: type=1400 audit(1767907562.912:21833): avc: denied { connect } for pid=7777 comm="syz.4.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.171244][ T7755] : [ 140.337120][ T7755] cache 32768 [ 140.342823][ T7755] rss 4096 [ 140.345832][ T7755] shmem 0 [ 140.348826][ T7755] mapped_file 4096 [ 140.352562][ T7755] dirty 0 [ 140.355483][ T7755] writeback 0 [ 140.358766][ T7755] workingset_refault_anon 161 [ 140.363429][ T7755] workingset_refault_file 989 [ 140.368082][ T7755] swap 29351936 [ 140.371549][ T7755] swapcached 4096 [ 140.375234][ T7755] pgpgin 156481 [ 140.378701][ T7755] pgpgout 156472 [ 140.382231][ T7755] pgfault 141443 [ 140.385891][ T7755] pgmajfault 126 [ 140.389563][ T7755] inactive_anon 4096 [ 140.393442][ T7755] active_anon 0 [ 140.396966][ T7755] inactive_file 28672 [ 140.401181][ T7755] active_file 4096 [ 140.404915][ T7755] unevictable 0 [ 140.408359][ T7755] hierarchical_memory_limit 314572800 [ 140.413736][ T7755] hierarchical_memsw_limit 9223372036854771712 [ 140.419891][ T7755] total_cache 32768 [ 140.423683][ T7755] total_rss 4096 [ 140.427209][ T7755] total_shmem 0 [ 140.430748][ T7755] total_mapped_file 4096 [ 140.434993][ T7755] total_dirty 0 [ 140.438429][ T7755] total_writeback 0 [ 140.442237][ T7755] total_workingset_refault_anon 161 [ 140.447476][ T7755] total_workingset_refault_file 989 [ 140.452705][ T7755] total_swap 29351936 [ 140.456665][ T7755] total_swapcached 4096 [ 140.460844][ T7755] total_pgpgin 156481 [ 140.464817][ T7755] total_pgpgout 156472 [ 140.468894][ T7755] total_pgfault 141443 [ 140.473021][ T7755] total_pgmajfault 126 [ 140.477073][ T7755] total_inactive_anon 4096 [ 140.481490][ T7755] total_active_anon 0 [ 140.485454][ T7755] total_inactive_file 28672 [ 140.489953][ T7755] total_active_file 4096 [ 140.494179][ T7755] total_unevictable 0 [ 140.498188][ T7755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1510,pid=7754,uid=0 [ 140.512850][ T7755] Memory cgroup out of memory: Killed process 7754 (syz.2.1510) total-vm:94100kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 140.534154][ T7781] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.572743][ T7784] bond_slave_0: entered promiscuous mode [ 140.578497][ T7784] bond_slave_1: entered promiscuous mode [ 140.609525][ T7784] macvtap1: entered allmulticast mode [ 140.614964][ T7784] bond0: entered allmulticast mode [ 140.620166][ T7784] bond_slave_0: entered allmulticast mode [ 140.625945][ T7784] bond_slave_1: entered allmulticast mode [ 140.631721][ T7784] bridge0: entered allmulticast mode [ 140.656871][ T29] audit: type=1400 audit(1767907563.432:21834): avc: denied { watch_reads } for pid=7786 comm="syz.3.1519" path="/318" dev="tmpfs" ino=1666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.680594][ T7784] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.690254][ T7784] bond0: left allmulticast mode [ 140.695108][ T7784] bond_slave_0: left allmulticast mode [ 140.700599][ T7784] bond_slave_1: left allmulticast mode [ 140.706049][ T7784] bridge0: left allmulticast mode [ 140.711186][ T7784] bond_slave_0: left promiscuous mode [ 140.716560][ T7784] bond_slave_1: left promiscuous mode [ 140.739659][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.750177][ T7783] bond_slave_0: entered promiscuous mode [ 140.755880][ T7783] bond_slave_1: entered promiscuous mode [ 140.766256][ T7783] macvtap1: entered allmulticast mode [ 140.771689][ T7783] bond0: entered allmulticast mode [ 140.776798][ T7783] bond_slave_0: entered allmulticast mode [ 140.782835][ T7783] bond_slave_1: entered allmulticast mode [ 140.788710][ T7783] bridge0: entered allmulticast mode [ 140.818298][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 140.829630][ T7783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.847839][ T7783] bond0: left allmulticast mode [ 140.852745][ T7783] bond_slave_0: left allmulticast mode [ 140.858199][ T7783] bond_slave_1: left allmulticast mode [ 140.863685][ T7783] bridge0: left allmulticast mode [ 140.868766][ T7783] bond_slave_0: left promiscuous mode [ 140.874135][ T7783] bond_slave_1: left promiscuous mode [ 140.888229][ T7785] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.901794][ T7781] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.961051][ T7785] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.971099][ T29] audit: type=1326 audit(1767907563.742:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 140.994626][ T29] audit: type=1326 audit(1767907563.742:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.018330][ T29] audit: type=1326 audit(1767907563.782:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.041809][ T29] audit: type=1326 audit(1767907563.792:21838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.065310][ T29] audit: type=1326 audit(1767907563.792:21839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.088863][ T29] audit: type=1326 audit(1767907563.792:21840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.112367][ T29] audit: type=1326 audit(1767907563.792:21841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.135834][ T29] audit: type=1326 audit(1767907563.792:21842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 141.162090][ T7781] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.275415][ T7785] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.287935][ T7781] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.320600][ T7785] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.387616][ T3477] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.400016][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.412030][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.423745][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.985905][ T7832] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.031297][ T7832] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.065810][ T7833] bond_slave_1: entered promiscuous mode [ 142.071912][ T7833] macvtap2: entered allmulticast mode [ 142.077355][ T7833] bond0: entered allmulticast mode [ 142.082517][ T7833] bond_slave_1: entered allmulticast mode [ 142.088255][ T7833] bridge0: entered allmulticast mode [ 142.094666][ T7833] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 142.104241][ T7833] bond0: left allmulticast mode [ 142.109192][ T7833] bond_slave_1: left allmulticast mode [ 142.114700][ T7833] bridge0: left allmulticast mode [ 142.119797][ T7833] bond_slave_1: left promiscuous mode [ 142.132727][ T7832] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.186720][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 142.196129][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 142.221313][ T7832] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.278247][ T7838] lo speed is unknown, defaulting to 1000 [ 142.288762][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.304580][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.321993][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.340718][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.565744][ T7862] loop3: detected capacity change from 0 to 512 [ 142.572903][ T7862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.582659][ T7862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 142.592889][ T7862] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 142.607456][ T7862] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 142.614054][ T7862] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1541: bad orphan inode 768 [ 142.625393][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.655435][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.695418][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 142.742670][ T7871] loop0: detected capacity change from 0 to 164 [ 143.104752][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.171221][ T7781] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.324596][ T7885] lo speed is unknown, defaulting to 1000 [ 143.747344][ T7896] loop4: detected capacity change from 0 to 2048 [ 143.812339][ T7896] loop4: p1 p2 p3 [ 143.839282][ T7904] xt_hashlimit: max too large, truncated to 1048576 [ 143.877772][ T7906] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.895027][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'. [ 143.930478][ T7906] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.947981][ T7911] bond_slave_0: entered promiscuous mode [ 143.953766][ T7911] bond_slave_1: entered promiscuous mode [ 143.959952][ T7911] macvtap1: entered allmulticast mode [ 143.965401][ T7911] bond0: entered allmulticast mode [ 143.970564][ T7911] bond_slave_0: entered allmulticast mode [ 143.976281][ T7911] bond_slave_1: entered allmulticast mode [ 143.982053][ T7911] bridge0: entered allmulticast mode [ 143.988492][ T7911] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 143.998781][ T7911] bond0: left allmulticast mode [ 144.003706][ T7911] bond_slave_0: left allmulticast mode [ 144.009186][ T7911] bond_slave_1: left allmulticast mode [ 144.014634][ T7911] bridge0: left allmulticast mode [ 144.019764][ T7911] bond_slave_0: left promiscuous mode [ 144.025199][ T7911] bond_slave_1: left promiscuous mode [ 144.035108][ T7906] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.081929][ T7906] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.127801][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.139976][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.151395][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.163653][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.812822][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1563'. [ 144.839966][ T7927] loop4: detected capacity change from 0 to 164 [ 144.847951][ T7927] syz.4.1563: attempt to access beyond end of device [ 144.847951][ T7927] loop4: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 144.862424][ T7927] syz.4.1563: attempt to access beyond end of device [ 144.862424][ T7927] loop4: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 145.210714][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 145.210728][ T29] audit: type=1326 audit(1767907567.992:22003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.243506][ T29] audit: type=1326 audit(1767907568.022:22004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.267094][ T29] audit: type=1326 audit(1767907568.022:22005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.290522][ T29] audit: type=1326 audit(1767907568.022:22006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.313988][ T29] audit: type=1326 audit(1767907568.022:22007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.337596][ T29] audit: type=1326 audit(1767907568.022:22008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.360978][ T29] audit: type=1326 audit(1767907568.022:22009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.384461][ T29] audit: type=1326 audit(1767907568.022:22010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.408038][ T29] audit: type=1326 audit(1767907568.022:22011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.431563][ T29] audit: type=1326 audit(1767907568.022:22012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791071f749 code=0x7ffc0000 [ 145.474565][ T7936] loop0: detected capacity change from 0 to 2048 [ 145.530690][ T7936] loop0: p1 p2 p3 [ 145.656864][ T7947] loop0: detected capacity change from 0 to 2048 [ 145.667843][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'. [ 145.675846][ T7957] loop3: detected capacity change from 0 to 164 [ 145.709660][ T7947] loop0: p1 p2 p3 [ 145.881569][ T7980] loop3: detected capacity change from 0 to 164 [ 145.889680][ T7980] Unsupported NM flag settings (240) [ 145.920083][ T7982] loop3: detected capacity change from 0 to 164 [ 145.927801][ T7982] Unsupported NM flag settings (240) [ 145.958382][ T7986] netlink: 'syz.3.1586': attribute type 16 has an invalid length. [ 145.966317][ T7986] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1586'. [ 146.320596][ T8009] loop2: detected capacity change from 0 to 164 [ 146.328648][ T8009] Unsupported NM flag settings (240) [ 146.350738][ T8011] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 146.366872][ T8011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.399101][ T8011] macvlan2: entered promiscuous mode [ 146.404513][ T8011] macvlan2: entered allmulticast mode [ 146.422130][ T8011] bond1: entered promiscuous mode [ 146.432808][ T8011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.450169][ T8011] team0: Port device macvlan2 added [ 146.490363][ T8015] bond1: (slave ip6gretap1): making interface the new active one [ 146.498116][ T8015] ip6gretap1: entered promiscuous mode [ 146.511238][ T8015] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 146.515633][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1597'. [ 146.549904][ T8019] Unsupported NM flag settings (240) [ 146.565376][ T8019] Unsupported NM flag settings (240) [ 146.656978][ T8028] netlink: 'syz.2.1602': attribute type 16 has an invalid length. [ 146.664842][ T8028] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1602'. [ 146.892791][ T8040] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.931527][ T8040] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.949790][ T8042] loop0: p1 p2 p3 [ 146.965470][ T8040] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 146.980116][ T8040] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 146.986765][ T8040] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1606: bad orphan inode 768 [ 147.106504][ T8040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.210423][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.247608][ T8046] Unsupported NM flag settings (240) [ 147.455711][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 147.500910][ T8057] Unsupported NM flag settings (240) [ 147.506410][ T8057] Unsupported NM flag settings (240) [ 147.771903][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 147.781506][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 147.867441][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.884506][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.897554][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.910534][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.925767][ T8071] bond_slave_0: entered promiscuous mode [ 147.931440][ T8071] bond_slave_1: entered promiscuous mode [ 147.937246][ T8071] macvtap1: entered allmulticast mode [ 147.942634][ T8071] bond0: entered allmulticast mode [ 147.947751][ T8071] bond_slave_0: entered allmulticast mode [ 147.953486][ T8071] bond_slave_1: entered allmulticast mode [ 147.959212][ T8071] bridge0: entered allmulticast mode [ 147.966173][ T8071] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.975526][ T8071] bond0: left allmulticast mode [ 147.980396][ T8071] bond_slave_0: left allmulticast mode [ 147.985871][ T8071] bond_slave_1: left allmulticast mode [ 147.991404][ T8071] bridge0: left allmulticast mode [ 147.996520][ T8071] bond_slave_0: left promiscuous mode [ 148.001906][ T8071] bond_slave_1: left promiscuous mode [ 148.134689][ T8078] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.156531][ T8081] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.176073][ T8078] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.195052][ T8084] bond_slave_0: entered promiscuous mode [ 148.200814][ T8084] bond_slave_1: entered promiscuous mode [ 148.220250][ T8084] macvtap1: entered allmulticast mode [ 148.225707][ T8084] bond0: entered allmulticast mode [ 148.230935][ T8084] bond_slave_0: entered allmulticast mode [ 148.236668][ T8084] bond_slave_1: entered allmulticast mode [ 148.242459][ T8084] bridge0: entered allmulticast mode [ 148.249028][ T8084] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.257607][ T8084] bond0: left allmulticast mode [ 148.262598][ T8084] bond_slave_0: left allmulticast mode [ 148.268081][ T8084] bond_slave_1: left allmulticast mode [ 148.273682][ T8084] bridge0: left allmulticast mode [ 148.278820][ T8084] bond_slave_0: left promiscuous mode [ 148.284218][ T8084] bond_slave_1: left promiscuous mode [ 148.295661][ T8078] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.314896][ T8081] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.323516][ T8095] set_capacity_and_notify: 5 callbacks suppressed [ 148.323531][ T8095] loop4: detected capacity change from 0 to 164 [ 148.341177][ T8095] Unsupported NM flag settings (240) [ 148.341200][ T8088] bond_slave_0: entered promiscuous mode [ 148.351957][ T8095] Unsupported NM flag settings (240) [ 148.352148][ T8088] bond_slave_1: entered promiscuous mode [ 148.353374][ T8088] macvtap2: entered allmulticast mode [ 148.368487][ T8088] bond0: entered allmulticast mode [ 148.373664][ T8088] bond_slave_0: entered allmulticast mode [ 148.379594][ T8088] bond_slave_1: entered allmulticast mode [ 148.385436][ T8088] bridge0: entered allmulticast mode [ 148.392873][ T8088] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 148.444800][ T8088] bond0: left allmulticast mode [ 148.449769][ T8088] bond_slave_0: left allmulticast mode [ 148.455218][ T8088] bond_slave_1: left allmulticast mode [ 148.460694][ T8088] bridge0: left allmulticast mode [ 148.465743][ T8088] bond_slave_0: left promiscuous mode [ 148.471132][ T8088] bond_slave_1: left promiscuous mode [ 148.489145][ T8078] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.501388][ T8081] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.544513][ T8108] xt_hashlimit: max too large, truncated to 1048576 [ 148.561291][ T8081] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.585507][ T8110] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.625761][ T7900] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.637446][ T7900] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.651702][ T8112] bond_slave_0: entered promiscuous mode [ 148.657419][ T8112] bond_slave_1: entered promiscuous mode [ 148.663238][ T8112] macvtap1: entered allmulticast mode [ 148.668661][ T8112] bond0: entered allmulticast mode [ 148.673808][ T8112] bond_slave_0: entered allmulticast mode [ 148.679580][ T8112] bond_slave_1: entered allmulticast mode [ 148.685299][ T8112] bridge0: entered allmulticast mode [ 148.691560][ T8112] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.700558][ T8112] bond0: left allmulticast mode [ 148.705432][ T8112] bond_slave_0: left allmulticast mode [ 148.711010][ T8112] bond_slave_1: left allmulticast mode [ 148.716482][ T8112] bridge0: left allmulticast mode [ 148.721747][ T8112] bond_slave_0: left promiscuous mode [ 148.727186][ T8112] bond_slave_1: left promiscuous mode [ 148.736190][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.745901][ T8110] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.759726][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.810495][ T8110] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.860475][ T8110] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.914532][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.929751][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.941846][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.950824][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.001108][ T8125] loop2: detected capacity change from 0 to 512 [ 149.017064][ T8125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.034672][ T8127] netlink: 'syz.3.1641': attribute type 16 has an invalid length. [ 149.042554][ T8127] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1641'. [ 149.058071][ T8125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.070975][ T8125] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.094204][ T8125] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1640: iget: bad i_size value: 2533274857506816 [ 150.059702][ T8164] loop0: detected capacity change from 0 to 2048 [ 150.089810][ T8164] loop0: p1 p2 p3 [ 150.103292][ T8166] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.132874][ T8168] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 150.141825][ T8166] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.157657][ T8168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.168313][ T8169] bond_slave_0: entered promiscuous mode [ 150.174032][ T8169] bond_slave_1: entered promiscuous mode [ 150.179979][ T8169] macvtap1: entered allmulticast mode [ 150.185377][ T8169] bond0: entered allmulticast mode [ 150.190515][ T8169] bond_slave_0: entered allmulticast mode [ 150.196227][ T8169] bond_slave_1: entered allmulticast mode [ 150.201941][ T8169] bridge0: entered allmulticast mode [ 150.208202][ T8169] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 150.217090][ T8169] bond0: left allmulticast mode [ 150.221990][ T8169] bond_slave_0: left allmulticast mode [ 150.227446][ T8169] bond_slave_1: left allmulticast mode [ 150.232935][ T8169] bridge0: left allmulticast mode [ 150.237962][ T8169] bond_slave_0: left promiscuous mode [ 150.243367][ T8169] bond_slave_1: left promiscuous mode [ 150.255189][ T8168] macvlan2: entered promiscuous mode [ 150.260521][ T8168] macvlan2: entered allmulticast mode [ 150.262907][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1656'. [ 150.266218][ T8168] bond1: entered promiscuous mode [ 150.280454][ T8168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.289127][ T8168] team0: Port device macvlan2 added [ 150.297629][ T8166] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.316039][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 150.316051][ T29] audit: type=1326 audit(1767907573.092:22665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.346411][ T29] audit: type=1326 audit(1767907573.132:22666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.370020][ T29] audit: type=1326 audit(1767907573.132:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.403691][ T29] audit: type=1326 audit(1767907573.182:22668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.427226][ T29] audit: type=1326 audit(1767907573.182:22669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.450673][ T29] audit: type=1326 audit(1767907573.182:22670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.474175][ T29] audit: type=1326 audit(1767907573.182:22671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.497623][ T29] audit: type=1326 audit(1767907573.182:22672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.521230][ T29] audit: type=1326 audit(1767907573.182:22673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.544708][ T29] audit: type=1326 audit(1767907573.182:22674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8177 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 150.569350][ T8166] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.883085][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.894036][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.910283][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.921505][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.008414][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1666'. [ 152.177933][ T8219] loop1: detected capacity change from 0 to 164 [ 152.186464][ T8219] Unsupported NM flag settings (240) [ 152.234174][ T8222] loop1: detected capacity change from 0 to 164 [ 152.243423][ T8222] Unsupported NM flag settings (240) [ 152.368086][ T8232] netlink: 'syz.1.1678': attribute type 16 has an invalid length. [ 152.375968][ T8232] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1678'. [ 152.773525][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.790626][ T1726] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.808795][ T1726] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.821676][ T1726] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.872925][ T8254] loop1: detected capacity change from 0 to 164 [ 152.887394][ T8254] Unsupported NM flag settings (240) [ 153.019437][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.197840][ T8276] loop3: detected capacity change from 0 to 164 [ 153.211124][ T8276] Unsupported NM flag settings (240) [ 153.328795][ T8283] loop4: detected capacity change from 0 to 164 [ 153.336546][ T8283] Unsupported NM flag settings (240) [ 153.454110][ T8289] netlink: 'syz.4.1699': attribute type 16 has an invalid length. [ 153.462068][ T8289] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1699'. [ 153.571433][ T8292] loop4: detected capacity change from 0 to 2048 [ 153.610054][ T8292] loop4: p1 p2 p3 [ 153.732261][ T8297] loop2: detected capacity change from 0 to 2048 [ 153.770251][ T8297] loop2: p1 p2 p3 [ 153.798935][ T8300] FAULT_INJECTION: forcing a failure. [ 153.798935][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 153.811731][ T8300] CPU: 1 UID: 0 PID: 8300 Comm: syz.2.1703 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.811755][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.811811][ T8300] Call Trace: [ 153.811817][ T8300] [ 153.811824][ T8300] __dump_stack+0x1d/0x30 [ 153.811895][ T8300] dump_stack_lvl+0x95/0xd0 [ 153.811913][ T8300] dump_stack+0x15/0x1b [ 153.811930][ T8300] should_fail_ex+0x265/0x280 [ 153.811958][ T8300] should_failslab+0x8c/0xb0 [ 153.811977][ T8300] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 153.811997][ T8300] ? __alloc_skb+0x2ff/0x4b0 [ 153.812022][ T8300] __alloc_skb+0x2ff/0x4b0 [ 153.812171][ T8300] ? __alloc_skb+0x228/0x4b0 [ 153.812192][ T8300] netlink_alloc_large_skb+0xbf/0xf0 [ 153.812215][ T8300] netlink_sendmsg+0x3cf/0x6b0 [ 153.812246][ T8300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.812275][ T8300] __sock_sendmsg+0x145/0x180 [ 153.812295][ T8300] ____sys_sendmsg+0x31e/0x4a0 [ 153.812325][ T8300] ___sys_sendmsg+0x17b/0x1d0 [ 153.812359][ T8300] __x64_sys_sendmsg+0xd4/0x160 [ 153.812393][ T8300] x64_sys_call+0x17ba/0x3000 [ 153.812413][ T8300] do_syscall_64+0xca/0x2b0 [ 153.812500][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.812520][ T8300] RIP: 0033:0x7fc24bedf749 [ 153.812536][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.812555][ T8300] RSP: 002b:00007fc24a93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.812593][ T8300] RAX: ffffffffffffffda RBX: 00007fc24c135fa0 RCX: 00007fc24bedf749 [ 153.812607][ T8300] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 153.812621][ T8300] RBP: 00007fc24a93f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.812634][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.812648][ T8300] R13: 00007fc24c136038 R14: 00007fc24c135fa0 R15: 00007ffe3b4ed078 [ 153.812740][ T8300] [ 154.058189][ T8312] loop0: detected capacity change from 0 to 164 [ 154.065888][ T8312] Unsupported NM flag settings (240) [ 154.100488][ T8314] loop2: detected capacity change from 0 to 164 [ 154.113960][ T8317] loop0: detected capacity change from 0 to 164 [ 154.123626][ T8314] Unsupported NM flag settings (240) [ 154.148314][ T8317] Unsupported NM flag settings (240) [ 154.188290][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1713'. [ 154.217663][ T8327] loop2: detected capacity change from 0 to 164 [ 154.228292][ T8327] Unsupported NM flag settings (240) [ 154.310047][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1718'. [ 154.361456][ T8340] loop2: detected capacity change from 0 to 164 [ 154.369310][ T8340] Unsupported NM flag settings (240) [ 155.357918][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 155.357964][ T29] audit: type=1326 audit(1767907578.132:23025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.391936][ T29] audit: type=1326 audit(1767907578.132:23026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.415743][ T29] audit: type=1326 audit(1767907578.152:23027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.439304][ T29] audit: type=1326 audit(1767907578.152:23028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.462910][ T29] audit: type=1326 audit(1767907578.152:23029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.486342][ T29] audit: type=1326 audit(1767907578.152:23030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.509843][ T29] audit: type=1326 audit(1767907578.152:23031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.533220][ T29] audit: type=1326 audit(1767907578.152:23032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.556729][ T29] audit: type=1326 audit(1767907578.152:23033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.580114][ T29] audit: type=1326 audit(1767907578.152:23034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8364 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43e2bf749 code=0x7ffc0000 [ 155.669531][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1730'. [ 155.712349][ T8371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'. [ 155.850108][ T8381] loop3: detected capacity change from 0 to 2048 [ 155.899886][ T8381] loop3: p1 p2 p3 [ 156.197854][ T8405] xt_hashlimit: max too large, truncated to 1048576 [ 156.204672][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1743'. [ 156.240732][ T8412] loop3: detected capacity change from 0 to 2048 [ 156.270025][ T8412] loop3: p1 p2 p3 [ 157.125743][ T8451] xt_hashlimit: max too large, truncated to 1048576 [ 157.364091][ T8464] netlink: 'syz.3.1765': attribute type 16 has an invalid length. [ 157.371950][ T8464] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1765'. [ 157.493141][ T8480] xt_hashlimit: max too large, truncated to 1048576 [ 157.558421][ T8486] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.569060][ T8486] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.575544][ T8486] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 157.590133][ T8486] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 157.596732][ T8486] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1774: bad orphan inode 768 [ 157.611077][ T8486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 157.624481][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.637178][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.649771][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.662427][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.675058][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.687640][ T8486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8486 comm=syz.2.1774 [ 157.709050][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.006073][ T8499] Unsupported NM flag settings (240) [ 158.093970][ T8507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 158.104175][ T8508] netlink: 'syz.4.1781': attribute type 16 has an invalid length. [ 158.112145][ T8508] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1781'. [ 158.377170][ T8532] set_capacity_and_notify: 2 callbacks suppressed [ 158.377184][ T8532] loop3: detected capacity change from 0 to 164 [ 158.392881][ T8534] loop2: detected capacity change from 0 to 164 [ 158.392998][ T8532] Unsupported NM flag settings (240) [ 158.406329][ T8534] Unsupported NM flag settings (240) [ 158.440164][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1794'. [ 159.297278][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1803'. [ 159.321462][ T8565] loop3: detected capacity change from 0 to 164 [ 159.330327][ T8565] syz.3.1803: attempt to access beyond end of device [ 159.330327][ T8565] loop3: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 159.344449][ T8565] syz.3.1803: attempt to access beyond end of device [ 159.344449][ T8565] loop3: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 159.927833][ T8569] loop1: detected capacity change from 0 to 164 [ 159.940372][ T8569] Unsupported NM flag settings (240) [ 159.999787][ T8571] loop2: detected capacity change from 0 to 512 [ 160.007548][ T8571] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.055353][ T8571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.063802][ T8573] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.067294][ T8571] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 160.088277][ T8571] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 160.094936][ T8571] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1805: bad orphan inode 768 [ 160.110033][ T8571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.134559][ T8575] bond_slave_1: entered promiscuous mode [ 160.141287][ T8575] macvtap2: entered allmulticast mode [ 160.146735][ T8575] bond0: entered allmulticast mode [ 160.151957][ T8575] bond_slave_1: entered allmulticast mode [ 160.157669][ T8575] bridge0: entered allmulticast mode [ 160.166243][ T8571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8571 comm=syz.2.1805 [ 160.178935][ T8571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8571 comm=syz.2.1805 [ 160.191584][ T8571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8571 comm=syz.2.1805 [ 160.204276][ T8571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8571 comm=syz.2.1805 [ 160.218043][ T8575] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 160.233212][ T8575] bond0: left allmulticast mode [ 160.238145][ T8575] bond_slave_1: left allmulticast mode [ 160.243635][ T8575] bridge0: left allmulticast mode [ 160.248741][ T8575] bond_slave_1: left promiscuous mode [ 160.261909][ T8573] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.274358][ T8583] netlink: 'syz.1.1808': attribute type 16 has an invalid length. [ 160.282230][ T8583] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1808'. [ 160.302673][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.329356][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1809'. [ 160.340437][ T8573] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.383420][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 160.383468][ T29] audit: type=1326 audit(1767907583.162:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.415203][ T8573] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.425191][ T29] audit: type=1326 audit(1767907583.162:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.428458][ T8597] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 160.448832][ T29] audit: type=1326 audit(1767907583.162:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.479926][ T29] audit: type=1326 audit(1767907583.162:23507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.503402][ T29] audit: type=1326 audit(1767907583.162:23508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.526894][ T29] audit: type=1326 audit(1767907583.162:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.550364][ T29] audit: type=1326 audit(1767907583.162:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.573831][ T29] audit: type=1326 audit(1767907583.162:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.573892][ T29] audit: type=1326 audit(1767907583.162:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.573918][ T29] audit: type=1326 audit(1767907583.162:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.2.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24bedf749 code=0x7ffc0000 [ 160.580532][ T8597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.658625][ T8598] bond1: (slave ip6gretap1): making interface the new active one [ 160.667329][ T8598] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 160.742744][ T1726] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.751528][ T1726] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.759856][ T1726] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.768155][ T1726] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.824986][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1823'. [ 160.829056][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 160.872808][ T8626] loop3: detected capacity change from 0 to 164 [ 160.881438][ T8626] Unsupported NM flag settings (240) [ 160.954020][ T8631] loop3: detected capacity change from 0 to 164 [ 160.962290][ T8631] Unsupported NM flag settings (240) [ 161.269643][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1837'. [ 161.348730][ T8661] loop2: detected capacity change from 0 to 164 [ 161.356072][ T8661] Unsupported NM flag settings (240) [ 161.883394][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 161.985361][ T8701] loop0: detected capacity change from 0 to 2048 [ 162.040502][ T8701] loop0: p1 p2 p3 [ 162.074898][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 162.327147][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1861'. [ 162.363705][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 162.401224][ T8724] loop2: detected capacity change from 0 to 512 [ 162.408471][ T8724] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.418215][ T8724] EXT4-fs (loop2): orphan cleanup on readonly fs [ 162.430800][ T8724] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 162.445455][ T8724] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 162.452181][ T8724] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1863: bad orphan inode 768 [ 162.463107][ T8724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.483597][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.555170][ T8734] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 162.569027][ T8734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.582354][ T8734] macvlan3: entered promiscuous mode [ 162.587753][ T8734] macvlan3: entered allmulticast mode [ 162.753949][ T8748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.763934][ T8748] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.771963][ T8748] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 162.786552][ T8748] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 162.793213][ T8748] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1871: bad orphan inode 768 [ 162.805020][ T8748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.820120][ T8748] selinux_netlink_send: 8 callbacks suppressed [ 162.820164][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.838968][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.851573][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.864188][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.876783][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.889426][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8748 comm=syz.0.1871 [ 162.913967][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.977153][ T8764] Unsupported NM flag settings (240) [ 163.008023][ T8767] Unsupported NM flag settings (240) [ 163.452509][ T8783] set_capacity_and_notify: 3 callbacks suppressed [ 163.452530][ T8783] loop2: detected capacity change from 0 to 164 [ 163.466499][ T8783] Unsupported NM flag settings (240) [ 163.833557][ T8789] loop0: detected capacity change from 0 to 512 [ 163.841047][ T8789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.899389][ T8789] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.906502][ T8789] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 163.921178][ T8789] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 163.927758][ T8789] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1886: bad orphan inode 768 [ 163.975507][ T8789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.990211][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8789 comm=syz.0.1886 [ 164.002920][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8789 comm=syz.0.1886 [ 164.015559][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8789 comm=syz.0.1886 [ 164.028442][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8789 comm=syz.0.1886 [ 164.061519][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.087074][ T8800] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 164.104674][ T8800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.127484][ T8800] macvlan2: entered promiscuous mode [ 164.132843][ T8800] macvlan2: entered allmulticast mode [ 164.360273][ T8824] loop2: detected capacity change from 0 to 164 [ 164.367945][ T8824] Unsupported NM flag settings (240) [ 164.757628][ T8829] loop1: detected capacity change from 0 to 512 [ 164.764488][ T8829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.774102][ T8829] EXT4-fs (loop1): orphan cleanup on readonly fs [ 164.780567][ T8829] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 164.795096][ T8829] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 164.801787][ T8829] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1901: bad orphan inode 768 [ 164.812512][ T8829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.836341][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.850121][ T8832] xt_hashlimit: max too large, truncated to 1048576 [ 164.877468][ T8836] __nla_validate_parse: 5 callbacks suppressed [ 164.877537][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1904'. [ 164.922498][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1906'. [ 165.135134][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 165.263153][ T8879] loop2: detected capacity change from 0 to 164 [ 165.271613][ T8879] Unsupported NM flag settings (240) [ 165.306502][ T8884] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 165.328827][ T8884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.342147][ T8884] macvlan4: entered promiscuous mode [ 165.347505][ T8884] macvlan4: entered allmulticast mode [ 165.365472][ T8884] bond3: entered promiscuous mode [ 165.372632][ T8889] loop2: detected capacity change from 0 to 164 [ 165.379210][ T8884] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 165.387287][ T8884] team0: Port device macvlan4 added [ 165.394016][ T8889] Unsupported NM flag settings (240) [ 165.499248][ T29] kauditd_printk_skb: 945 callbacks suppressed [ 165.499262][ T29] audit: type=1326 audit(1767907588.282:24459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.529781][ T29] audit: type=1326 audit(1767907588.312:24460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.555031][ T29] audit: type=1326 audit(1767907588.342:24461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.578534][ T29] audit: type=1326 audit(1767907588.342:24462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.602126][ T29] audit: type=1326 audit(1767907588.342:24463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.625910][ T29] audit: type=1326 audit(1767907588.342:24464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.649500][ T29] audit: type=1326 audit(1767907588.342:24465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.672996][ T29] audit: type=1326 audit(1767907588.342:24466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.696463][ T29] audit: type=1326 audit(1767907588.342:24467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.720071][ T29] audit: type=1326 audit(1767907588.342:24468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.0.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10daacf749 code=0x7ffc0000 [ 165.961672][ T8916] loop0: detected capacity change from 0 to 164 [ 165.969793][ T8916] Unsupported NM flag settings (240) [ 166.010136][ T8918] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 166.038127][ T8918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.061004][ T8918] macvlan3: entered promiscuous mode [ 166.066343][ T8918] macvlan3: entered allmulticast mode [ 166.072220][ T8918] bond3: entered promiscuous mode [ 166.077584][ T8918] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.086091][ T8918] team0: Port device macvlan3 added [ 166.980260][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1953'. [ 167.599180][ T8972] loop4: detected capacity change from 0 to 164 [ 167.607090][ T8972] Unsupported NM flag settings (240) [ 167.711942][ T8978] loop4: detected capacity change from 0 to 2048 [ 167.760630][ T8978] loop4: p1 p2 p3 [ 167.854445][ T8985] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 167.868661][ T8985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.881500][ T8985] macvlan4: entered promiscuous mode [ 167.886827][ T8985] macvlan4: entered allmulticast mode [ 167.991818][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1967'. [ 168.040642][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 168.097486][ T9000] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.130305][ T9002] loop2: detected capacity change from 0 to 164 [ 168.138372][ T9002] Unsupported NM flag settings (240) [ 168.169965][ T9003] bond_slave_0: entered promiscuous mode [ 168.175686][ T9003] bond_slave_1: entered promiscuous mode [ 168.186889][ T9003] macvtap1: entered allmulticast mode [ 168.192344][ T9003] bond0: entered allmulticast mode [ 168.197460][ T9003] bond_slave_0: entered allmulticast mode [ 168.203275][ T9003] bond_slave_1: entered allmulticast mode [ 168.209050][ T9003] bridge0: entered allmulticast mode [ 168.217090][ T9003] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 168.225690][ T9003] bond0: left allmulticast mode [ 168.230594][ T9003] bond_slave_0: left allmulticast mode [ 168.236046][ T9003] bond_slave_1: left allmulticast mode [ 168.241510][ T9003] bridge0: left allmulticast mode [ 168.246561][ T9003] bond_slave_0: left promiscuous mode [ 168.251956][ T9003] bond_slave_1: left promiscuous mode [ 168.285086][ T9000] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.340303][ T9000] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.400281][ T9000] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.464384][ T7900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.475068][ T42] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.486114][ T42] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.496935][ T1726] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.543955][ T9014] loop3: detected capacity change from 0 to 4096 [ 168.552500][ T9014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.745079][ T9023] loop0: detected capacity change from 0 to 164 [ 168.777558][ T9023] Unsupported NM flag settings (240) [ 168.888251][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 169.069383][ T9034] loop0: detected capacity change from 0 to 164 [ 169.097543][ T9034] Unsupported NM flag settings (240) [ 169.109013][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 169.187873][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'. [ 169.261342][ T9047] netlink: 'syz.1.1988': attribute type 1 has an invalid length. [ 169.311471][ T9047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.332606][ T9049] macvlan2: entered promiscuous mode [ 169.337939][ T9049] macvlan2: entered allmulticast mode [ 169.437043][ T9013] syz.3.1974 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 169.448091][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.3.1974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.448117][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.448150][ T9013] Call Trace: [ 169.448156][ T9013] [ 169.448163][ T9013] __dump_stack+0x1d/0x30 [ 169.448222][ T9013] dump_stack_lvl+0x95/0xd0 [ 169.448239][ T9013] dump_stack+0x15/0x1b [ 169.448287][ T9013] dump_header+0x81/0x240 [ 169.448308][ T9013] oom_kill_process+0x295/0x350 [ 169.448326][ T9013] out_of_memory+0x97b/0xb80 [ 169.448379][ T9013] try_charge_memcg+0x610/0xa10 [ 169.448423][ T9013] charge_memcg+0x51/0xc0 [ 169.448446][ T9013] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 169.448515][ T9013] __read_swap_cache_async+0x17b/0x2d0 [ 169.448544][ T9013] swap_cluster_readahead+0x262/0x3c0 [ 169.448571][ T9013] swapin_readahead+0xde/0x820 [ 169.448622][ T9013] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 169.448648][ T9013] ? lruvec_stat_mod_folio+0xd6/0x120 [ 169.448673][ T9013] ? __rcu_read_unlock+0x4f/0x70 [ 169.448689][ T9013] ? swap_cache_get_folio+0x277/0x280 [ 169.448713][ T9013] do_swap_page+0x2b4/0x21e0 [ 169.448743][ T9013] ? __pfx_default_wake_function+0x10/0x10 [ 169.448772][ T9013] handle_mm_fault+0x9d8/0x2c60 [ 169.448837][ T9013] do_user_addr_fault+0x630/0x1080 [ 169.448866][ T9013] exc_page_fault+0x62/0xa0 [ 169.448894][ T9013] asm_exc_page_fault+0x26/0x30 [ 169.448992][ T9013] RIP: 0033:0x7f7910751fb3 [ 169.449005][ T9013] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 169.449020][ T9013] RSP: 002b:00007ffd57169838 EFLAGS: 00010293 [ 169.449034][ T9013] RAX: 00000000fffffffa RBX: 00007f7910975fa0 RCX: 0000000000000000 [ 169.449049][ T9013] RDX: 00007ffd57169850 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.449061][ T9013] RBP: 00007f7910977da0 R08: 00000000148132be R09: 7fffffffffffffff [ 169.449131][ T9013] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002958c [ 169.449141][ T9013] R13: 00007ffd57169970 R14: ffffffffffffffff R15: 00007ffd57169990 [ 169.449160][ T9013] [ 169.655793][ T9013] memory: usage 307196kB, limit 307200kB, failcnt 798 [ 169.662599][ T9013] memory+swap: usage 309440kB, limit 9007199254740988kB, failcnt 0 [ 169.670502][ T9013] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 169.677766][ T9013] Memory cgroup stats for /syz3: [ 169.708928][ T9013] cache 12288 [ 169.717221][ T9013] rss 0 [ 169.720041][ T9013] shmem 0 [ 169.722961][ T9013] mapped_file 0 [ 169.726400][ T9013] dirty 0 [ 169.729348][ T9013] writeback 8192 [ 169.732924][ T9013] workingset_refault_anon 426 [ 169.737609][ T9013] workingset_refault_file 391 [ 169.742284][ T9013] swap 2293760 [ 169.745635][ T9013] swapcached 8192 [ 169.749310][ T9013] pgpgin 172928 [ 169.752756][ T9013] pgpgout 172923 [ 169.756289][ T9013] pgfault 172361 [ 169.759843][ T9013] pgmajfault 7 [ 169.763198][ T9013] inactive_anon 8192 [ 169.767074][ T9013] active_anon 0 [ 169.770538][ T9013] inactive_file 12288 [ 169.774557][ T9013] active_file 0 [ 169.777999][ T9013] unevictable 0 [ 169.781551][ T9013] hierarchical_memory_limit 314572800 [ 169.786913][ T9013] hierarchical_memsw_limit 9223372036854771712 [ 169.793083][ T9013] total_cache 12288 [ 169.796928][ T9013] total_rss 0 [ 169.800339][ T9013] total_shmem 0 [ 169.803782][ T9013] total_mapped_file 0 [ 169.807764][ T9013] total_dirty 0 [ 169.811298][ T9013] total_writeback 8192 [ 169.815413][ T9013] total_workingset_refault_anon 426 [ 169.820661][ T9013] total_workingset_refault_file 391 [ 169.825844][ T9013] total_swap 2293760 [ 169.829742][ T9013] total_swapcached 8192 [ 169.833897][ T9013] total_pgpgin 172928 [ 169.837865][ T9013] total_pgpgout 172923 [ 169.841941][ T9013] total_pgfault 172361 [ 169.846067][ T9013] total_pgmajfault 7 [ 169.849959][ T9013] total_inactive_anon 8192 [ 169.854401][ T9013] total_active_anon 0 [ 169.858363][ T9013] total_inactive_file 12288 [ 169.862876][ T9013] total_active_file 0 [ 169.866961][ T9013] total_unevictable 0 [ 169.870963][ T9013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1974,pid=9013,uid=0 [ 169.885583][ T9013] Memory cgroup out of memory: Killed process 9013 (syz.3.1974) total-vm:93968kB, anon-rss:1264kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 170.011605][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.343655][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 170.951200][ T9075] ================================================================== [ 170.959299][ T9075] BUG: KCSAN: data-race in __perf_event_read_value / perf_event_set_state [ 170.967781][ T9075] [ 170.970083][ T9075] write to 0xffff888122c6fa70 of 8 bytes by task 9051 on cpu 1: [ 170.977685][ T9075] perf_event_set_state+0x195/0x440 [ 170.982867][ T9075] event_sched_out+0x2d4/0x4d0 [ 170.987864][ T9075] __pmu_ctx_sched_out+0x3e7/0x530 [ 170.992953][ T9075] ctx_sched_out+0x273/0x2d0 [ 170.997517][ T9075] task_ctx_sched_out+0x4d/0x70 [ 171.002344][ T9075] __perf_event_task_sched_out+0x286/0x370 [ 171.008125][ T9075] __schedule+0xbf0/0xcd0 [ 171.012431][ T9075] schedule+0x5f/0xd0 [ 171.016392][ T9075] __futex_wait+0x117/0x260 [ 171.020873][ T9075] futex_wait+0x9d/0x1d0 [ 171.025089][ T9075] do_futex+0x2bf/0x380 [ 171.029224][ T9075] __se_sys_futex+0x2ed/0x360 [ 171.033885][ T9075] __x64_sys_futex+0x78/0x90 [ 171.038455][ T9075] x64_sys_call+0x2bc2/0x3000 [ 171.043113][ T9075] do_syscall_64+0xca/0x2b0 [ 171.047607][ T9075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.053488][ T9075] [ 171.055788][ T9075] read to 0xffff888122c6fa70 of 8 bytes by task 9075 on cpu 0: [ 171.063307][ T9075] __perf_event_read_value+0x82/0x1d0 [ 171.068659][ T9075] perf_read+0x173/0x4d0 [ 171.072888][ T9075] loop_rw_iter+0x2c6/0x3f0 [ 171.077372][ T9075] __io_read+0xbd5/0xc30 [ 171.081605][ T9075] io_read+0x4a/0x190 [ 171.085571][ T9075] __io_issue_sqe+0xfe/0x2e0 [ 171.090140][ T9075] io_issue_sqe+0x56/0xa80 [ 171.094536][ T9075] io_wq_submit_work+0x3f7/0x5f0 [ 171.099456][ T9075] io_worker_handle_work+0x44e/0x9b0 [ 171.104726][ T9075] io_wq_worker+0x22e/0x860 [ 171.109216][ T9075] ret_from_fork+0x149/0x290 [ 171.113787][ T9075] ret_from_fork_asm+0x1a/0x30 [ 171.118530][ T9075] [ 171.120830][ T9075] value changed: 0x000000002dad6d38 -> 0x000000002dad7d31 [ 171.127907][ T9075] [ 171.130205][ T9075] Reported by Kernel Concurrency Sanitizer on: [ 171.136329][ T9075] CPU: 0 UID: 0 PID: 9075 Comm: iou-wrk-9051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.146192][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.156222][ T9075] ==================================================================