last executing test programs: 2m50.076456521s ago: executing program 2 (id=79): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x44}}, 0x8000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000100)="a2013f389951cb09f7c9d966c8562e236625106abce585b7fca1169351d035db1b8df769cebef20d985c677628d19ac8105772aaa998ecc725f81eebe300f4050912d8ddb58b1464e6d541d870c4c7f2714253eda5b6bdd77df533c84fb257fcd92c2ccadbc7ef877776a1e16d5dc4062e52967c74ebe6264dabb0ed35d3296b02f058690b06b3dc06a96d80970163656cc66f1be0a46b8621efc657d4b9d5ed8cae7c0cf3b48114", 0xa8, 0x4000800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x10, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000280), 0x8) 2m49.713012132s ago: executing program 2 (id=82): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') 2m49.513983464s ago: executing program 2 (id=84): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r2, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000120001d6040254197bfcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="00140000bcb5f31a1400030064756d6d79300000000000000000000008002e"], 0x9f}, 0x1, 0x0, 0x0, 0x14044000}, 0x4080) 2m49.171909254s ago: executing program 2 (id=90): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x152) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") socket$kcm(0x10, 0x400000002, 0x0) io_setup(0x10000, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) 2m47.500342271s ago: executing program 2 (id=98): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbfe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m47.146156512s ago: executing program 2 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0xc00, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m47.145958042s ago: executing program 32 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0xc00, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m33.523325877s ago: executing program 5 (id=280): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[]) 2m33.209326605s ago: executing program 5 (id=283): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) 2m32.781855s ago: executing program 5 (id=285): r0 = creat(0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/22, 0x16, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2m32.334659336s ago: executing program 5 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m32.289860819s ago: executing program 5 (id=290): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x8, 0x9, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000000)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @b={0x5, 0x3, 0x0, 0x1, 0x7, 0x81, 0x2, {}, 0x0, 0x68, 0x2, 0x5, 0x51, "6b6bbba8c95deb2efa816a20486c50aef70236f4900b01eef2e7b7ad69bd6408320497e3e1ee8f7c6444ee677790b75f81e28b4fad82c0fd185097eeb03315476505a44ebcb297a9dba181aa9d8ca3839a"}}, 0x61) 2m32.178077635s ago: executing program 5 (id=293): syz_io_uring_complete(0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m31.960434718s ago: executing program 33 (id=293): syz_io_uring_complete(0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.757407438s ago: executing program 6 (id=1941): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x0) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) close(r0) r5 = socket$rxrpc(0x21, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r6, 0x0, 0xee01) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x4004) 1.492771653s ago: executing program 6 (id=1947): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = memfd_secret(0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=[{0x10, 0x119, 0xf205}, {0x10, 0x1, 0xe742}], 0x20}, 0x40) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x1aa) fcntl$notify(r2, 0x402, 0x8000003d) r3 = openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800004, 0x10010, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed", 0xb4}], 0x2}, 0x0) recvmmsg(r4, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 1.225237278s ago: executing program 0 (id=1951): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x4754) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0x2e0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'sit0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x5, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.224157199s ago: executing program 6 (id=1952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2d, "49720705000000004709b89e6fb2c55c00a79e082584e55fee49e00255020f1f55001d00"/45}}) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000240)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.128816694s ago: executing program 6 (id=1954): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, 0x0, 0x190) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x800, 0x160, 0xf}, 0x18) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x80000) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000003c0)={0x66, 0x6, 0x7, 0x7, 0x4c}) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0) symlinkat(0x0, r2, &(0x7f0000000340)='./file0\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 981.959823ms ago: executing program 3 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x5, 0x1, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 937.302126ms ago: executing program 3 (id=1958): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 913.346807ms ago: executing program 3 (id=1959): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) inotify_init1(0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c050) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) 817.996783ms ago: executing program 3 (id=1960): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4005) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_clone(0x88a23180, 0x0, 0x0, 0x0, 0x0, 0x0) 809.188503ms ago: executing program 3 (id=1961): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000370402000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001007369740014000280080001002c3d43", @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000980)}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) 754.870936ms ago: executing program 3 (id=1962): syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x2, 0x8000016f}, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xc, 0x40008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800001, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc4, 0x1, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008084) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 713.871939ms ago: executing program 1 (id=1963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0xffe0}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 521.94461ms ago: executing program 1 (id=1964): io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) close(r5) sendmsg$NFT_MSG_GETSET(r5, 0x0, 0x20004000) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x1}}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 457.100494ms ago: executing program 1 (id=1965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) capset(&(0x7f0000000740)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x800, 0xffffffff, 0x7}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) 402.437737ms ago: executing program 1 (id=1966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 326.501991ms ago: executing program 0 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x1000) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff8b0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf25}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x410}, 0x40844) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x583, &(0x7f0000000800)="$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") copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x9, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xe) 325.758621ms ago: executing program 4 (id=1968): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 324.573771ms ago: executing program 0 (id=1969): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 307.556962ms ago: executing program 1 (id=1970): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 306.288102ms ago: executing program 4 (id=1971): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000640)={0x0, 0x8b7c, 0x10, 0x1, 0x80022, 0x0, r1}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x14, 0x0, 0x0) 258.916445ms ago: executing program 4 (id=1972): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000980)}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) 257.987185ms ago: executing program 4 (id=1973): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000004c0012800b00010069703667726500003c00028008000100"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000f80)={0x0, 0x2, 0xb, 0x2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x4000080) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 215.569658ms ago: executing program 6 (id=1974): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r1 = msgget$private(0x0, 0x790) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000003c0)=0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280), 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x56, 0x20, 0x6}}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44004}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x900) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) 138.034982ms ago: executing program 0 (id=1975): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x512, &(0x7f0000000640)={0x0, 0xdda8, 0x800, 0x503fc, 0x2e0}) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x9}}}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "75ee1a594da87ca75ed8e76a3468"}}]}, 0x30}}, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x4800) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xc, 0x4002) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000002c0)=0x3) 128.549493ms ago: executing program 6 (id=1976): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(0x0, 0x840, 0x191) r0 = syz_io_uring_setup(0x680c, &(0x7f0000000540)={0x0, 0xd7e9, 0x10100, 0x0, 0x2db}, 0x0, &(0x7f00000001c0)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x2, 0x349}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) 115.088973ms ago: executing program 0 (id=1977): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 49.517367ms ago: executing program 4 (id=1978): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x10000500) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000180)=0x6, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 48.394287ms ago: executing program 0 (id=1979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008e26609d7bac9164dc4f46c521d9cbe3391996ac71ca2107923970e21b2619c52c7c39dc2f5db3305e6fa176f70a7166df47e446dd41a0140a21b6516a7950cef35727108ecba94c04558255b692d48a63a625dc49cc17c50135442250777295203659a8ca36748cbb9f3a78632e615231d079c34417c923bdb02f8703a2e77d13b28da04a651f55335b1b4f1aa2dc7d21a5559a5c3709", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@deltaction={0xdc, 0x31, 0xb2656d4239724923, 0x703d26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40001d4}, 0xb5bd9e254ab2d846) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000020e4e26997d5800000000000000004d4d9bb24c6aa77f0009a94f8a733de301720f18006ee28af30b37b0cffe944a79bf14f67c7d111829e34449774ddc5302772afb6957ec1bc2526def403087aa21cb89f00c235573a3a667e6e4cbab2778a4fb", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r6, 0x8000, 0x7800, 0xffff, 0x3, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @local}}}}) 47.281137ms ago: executing program 1 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 0s ago: executing program 4 (id=1981): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xee00) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) fchdir(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) io_submit(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): omm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 140.754188][ T29] audit: type=1326 audit(1769738631.629:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 140.777586][ T29] audit: type=1326 audit(1769738631.629:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 140.801079][ T29] audit: type=1326 audit(1769738631.629:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.0.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 140.954746][ T7225] netlink: 'syz.6.1196': attribute type 1 has an invalid length. [ 140.978836][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 141.000984][ T7225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.034297][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1196'. [ 141.057174][ T7225] bond2: entered allmulticast mode [ 141.131329][ T7238] loop4: detected capacity change from 0 to 512 [ 141.149799][ T7238] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.188787][ T7238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.217735][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.264880][ T7225] bond2: (slave ip6gretap1): making interface the new active one [ 141.272876][ T7225] ip6gretap1: entered allmulticast mode [ 141.287174][ T7225] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.316814][ T7248] syz_tun: entered allmulticast mode [ 141.968221][ T7269] netlink: 'syz.4.1211': attribute type 39 has an invalid length. [ 141.989795][ T7269] syz_tun (unregistering): left promiscuous mode [ 142.080710][ T7277] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 142.112399][ T7064] lo speed is unknown, defaulting to 1000 [ 142.118448][ T7064] syz: Port: 1 Link DOWN [ 142.126635][ T7277] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 142.154542][ T7064] lo speed is unknown, defaulting to 1000 [ 142.160361][ T7064] syz: Port: 1 Link ACTIVE [ 142.336764][ T7289] loop4: detected capacity change from 0 to 512 [ 142.349864][ T7289] ------------[ cut here ]------------ [ 142.355380][ T7289] EA inode 11 i_nlink=2 [ 142.355407][ T7289] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.1217/7289 [ 142.370605][ T7289] Modules linked in: [ 142.374564][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.4.1217 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.384397][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.394545][ T7289] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 142.401300][ T7289] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 142.421129][ T7289] RSP: 0018:ffffc90010ad3778 EFLAGS: 00010246 [ 142.427363][ T7289] RAX: ffff88811b931b10 RBX: ffff888100615c18 RCX: ffffffff81be1958 [ 142.435382][ T7289] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 142.443470][ T7289] RBP: 000000000000000b R08: 0001888100615bcb R09: 0000000000000000 [ 142.451517][ T7289] R10: ffffc90010ad36a8 R11: 0001c90010ad36a8 R12: ffff888100615bc8 [ 142.459649][ T7289] R13: ffffffff86fc3b10 R14: ffff888100615b80 R15: 0000000000000001 [ 142.467710][ T7289] FS: 00007ff3079076c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 142.476727][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.483350][ T7289] CR2: 0000001b33020ff8 CR3: 0000000132b90000 CR4: 00000000003506f0 [ 142.491558][ T7289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.499591][ T7289] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 142.507985][ T7289] Call Trace: [ 142.511299][ T7289] [ 142.514268][ T7289] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 142.520447][ T7289] ? errseq_check+0x2c/0x50 [ 142.525002][ T7289] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 142.530546][ T7289] ? ext4_truncate+0x92b/0xad0 [ 142.535364][ T7289] ext4_evict_inode+0xa1f/0xd40 [ 142.540320][ T7289] ? __pfx_ext4_evict_inode+0x10/0x10 [ 142.545851][ T7289] evict+0x2af/0x510 [ 142.549846][ T7289] ? __dquot_initialize+0x146/0x7c0 [ 142.555168][ T7289] iput+0x4b9/0x650 [ 142.559158][ T7289] ext4_process_orphan+0x1a9/0x1c0 [ 142.564311][ T7289] ext4_orphan_cleanup+0x6a8/0xa00 [ 142.569509][ T7289] ext4_fill_super+0x3476/0x3800 [ 142.574500][ T7289] ? set_blocksize+0x1a3/0x310 [ 142.579505][ T7289] ? setup_bdev_super+0x30e/0x370 [ 142.584562][ T7289] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.589963][ T7289] get_tree_bdev_flags+0x291/0x300 [ 142.595116][ T7289] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.600534][ T7289] get_tree_bdev+0x1f/0x30 [ 142.605052][ T7289] ext4_get_tree+0x1c/0x30 [ 142.609611][ T7289] vfs_get_tree+0x57/0x1d0 [ 142.614056][ T7289] do_new_mount+0x288/0x700 [ 142.618686][ T7289] path_mount+0x4d0/0xbc0 [ 142.623139][ T7289] ? user_path_at+0xbf/0x130 [ 142.627848][ T7289] __se_sys_mount+0x28c/0x2e0 [ 142.632585][ T7289] __x64_sys_mount+0x67/0x80 [ 142.637313][ T7289] x64_sys_call+0x2cca/0x3000 [ 142.642037][ T7289] do_syscall_64+0xc0/0x2a0 [ 142.646803][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.652793][ T7289] RIP: 0033:0x7ff308eac14a [ 142.657303][ T7289] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.677078][ T7289] RSP: 002b:00007ff307906e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.685555][ T7289] RAX: ffffffffffffffda RBX: 00007ff307906ee0 RCX: 00007ff308eac14a [ 142.693641][ T7289] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007ff307906ea0 [ 142.701722][ T7289] RBP: 0000200000000180 R08: 00007ff307906ee0 R09: 0000000000800718 [ 142.709766][ T7289] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 142.717843][ T7289] R13: 00007ff307906ea0 R14: 000000000000047f R15: 0000200000000200 [ 142.725955][ T7289] [ 142.729088][ T7289] ---[ end trace 0000000000000000 ]--- [ 142.749630][ T7292] wireguard0: entered promiscuous mode [ 142.755817][ T7292] wireguard0: entered allmulticast mode [ 142.810874][ T7288] can: request_module (can-proto-0) failed. [ 142.912457][ T7300] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1220'. [ 143.075760][ T7289] EXT4-fs (loop4): 1 orphan inode deleted [ 143.084647][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.231662][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.379473][ T7318] loop4: detected capacity change from 0 to 128 [ 143.407124][ T7318] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.419584][ T7318] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.484467][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.658676][ T7323] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1231'. [ 143.782217][ T7335] tipc: Failed to remove unknown binding: 66,0,0/0:63354843/63354844 [ 143.790884][ T7335] tipc: Failed to remove unknown binding: 66,0,0/0:63354843/63354844 [ 143.806853][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 143.806872][ T29] audit: type=1326 audit(1769738890.794:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.867676][ T29] audit: type=1326 audit(1769738890.794:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.891315][ T29] audit: type=1326 audit(1769738890.794:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.915589][ T29] audit: type=1326 audit(1769738890.794:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.939854][ T29] audit: type=1326 audit(1769738890.794:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.963335][ T29] audit: type=1326 audit(1769738890.794:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 143.988074][ T29] audit: type=1326 audit(1769738890.794:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 144.011608][ T29] audit: type=1326 audit(1769738890.794:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 144.035836][ T29] audit: type=1326 audit(1769738890.804:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 144.060226][ T29] audit: type=1326 audit(1769738890.804:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.6.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9122a6b78e code=0x7ffc0000 [ 144.185441][ T7345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.204205][ T7342] lo speed is unknown, defaulting to 1000 [ 144.210623][ T7342] lo speed is unknown, defaulting to 1000 [ 144.248731][ T7345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.331394][ T7345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.401539][ T7345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.523079][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.557807][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.566103][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.604521][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.628927][ T7360] lo speed is unknown, defaulting to 1000 [ 144.660786][ T7360] lo speed is unknown, defaulting to 1000 [ 144.704904][ T7367] lo speed is unknown, defaulting to 1000 [ 144.721333][ T7367] lo speed is unknown, defaulting to 1000 [ 144.747606][ T7369] lo speed is unknown, defaulting to 1000 [ 144.769737][ T7369] lo speed is unknown, defaulting to 1000 [ 145.214106][ T7360] netlink: 'syz.1.1244': attribute type 2 has an invalid length. [ 145.479481][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'. [ 145.730953][ T7398] batman_adv: batadv0: Adding interface: ipvlan2 [ 145.737404][ T7398] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.763714][ T7398] batman_adv: batadv0: Interface activated: ipvlan2 [ 145.822905][ T7398] loop4: detected capacity change from 0 to 512 [ 146.705268][ T7422] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 146.869107][ T7426] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 147.035195][ T7426] syz_tun: left allmulticast mode [ 147.057393][ T7426] syz_tun: entered allmulticast mode [ 147.063262][ T7426] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.152832][ T7429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.358236][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 147.722517][ T7428] syz.3.1267 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 147.736501][ T7428] CPU: 1 UID: 0 PID: 7428 Comm: syz.3.1267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.736541][ T7428] Tainted: [W]=WARN [ 147.736548][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.736580][ T7428] Call Trace: [ 147.736587][ T7428] [ 147.736596][ T7428] __dump_stack+0x1d/0x30 [ 147.736630][ T7428] dump_stack_lvl+0x95/0xd0 [ 147.736711][ T7428] dump_stack+0x15/0x1b [ 147.736816][ T7428] dump_header+0x80/0x240 [ 147.736846][ T7428] oom_kill_process+0x295/0x350 [ 147.736884][ T7428] out_of_memory+0x97d/0xb80 [ 147.736994][ T7428] try_charge_memcg+0x62e/0xa10 [ 147.737086][ T7428] obj_cgroup_charge_pages+0x23/0xc0 [ 147.737129][ T7428] __memcg_kmem_charge_page+0x9e/0x170 [ 147.737167][ T7428] __alloc_frozen_pages_noprof+0x18a/0x350 [ 147.737235][ T7428] alloc_pages_mpol+0xb3/0x260 [ 147.737280][ T7428] alloc_pages_noprof+0x8f/0x130 [ 147.737322][ T7428] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 147.737391][ T7428] __kvmalloc_node_noprof+0x471/0x680 [ 147.737429][ T7428] ? ip_set_alloc+0x24/0x30 [ 147.737505][ T7428] ? ip_set_alloc+0x24/0x30 [ 147.737546][ T7428] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 147.737577][ T7428] ip_set_alloc+0x24/0x30 [ 147.737648][ T7428] hash_netiface_create+0x282/0x740 [ 147.737694][ T7428] ? __pfx_hash_netiface_create+0x10/0x10 [ 147.737733][ T7428] ip_set_create+0x3cf/0x970 [ 147.737855][ T7428] ? __nla_parse+0x40/0x60 [ 147.737877][ T7428] nfnetlink_rcv_msg+0x509/0x5d0 [ 147.737936][ T7428] netlink_rcv_skb+0x123/0x220 [ 147.737993][ T7428] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 147.738031][ T7428] nfnetlink_rcv+0x167/0x1720 [ 147.738110][ T7428] ? __kfree_skb+0x109/0x150 [ 147.738155][ T7428] ? nlmon_xmit+0x4f/0x60 [ 147.738198][ T7428] ? consume_skb+0x49/0x140 [ 147.738322][ T7428] ? nlmon_xmit+0x4f/0x60 [ 147.738368][ T7428] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 147.738410][ T7428] ? __dev_queue_xmit+0x139a/0x1f20 [ 147.738491][ T7428] ? __dev_queue_xmit+0x148/0x1f20 [ 147.738530][ T7428] ? ref_tracker_free+0x37d/0x3e0 [ 147.738629][ T7428] ? __netlink_deliver_tap+0x4dc/0x500 [ 147.738718][ T7428] netlink_unicast+0x5c0/0x690 [ 147.738771][ T7428] netlink_sendmsg+0x5c8/0x6f0 [ 147.738800][ T7428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.738852][ T7428] ____sys_sendmsg+0x5af/0x600 [ 147.738876][ T7428] ___sys_sendmsg+0x195/0x1e0 [ 147.738990][ T7428] __x64_sys_sendmsg+0xd4/0x160 [ 147.739023][ T7428] x64_sys_call+0x17ba/0x3000 [ 147.739056][ T7428] do_syscall_64+0xc0/0x2a0 [ 147.739095][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.739185][ T7428] RIP: 0033:0x7f875fb3aeb9 [ 147.739207][ T7428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.739305][ T7428] RSP: 002b:00007f875e597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.739334][ T7428] RAX: ffffffffffffffda RBX: 00007f875fdb5fa0 RCX: 00007f875fb3aeb9 [ 147.739406][ T7428] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 147.739459][ T7428] RBP: 00007f875fba8c1f R08: 0000000000000000 R09: 0000000000000000 [ 147.739477][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.739494][ T7428] R13: 00007f875fdb6038 R14: 00007f875fdb5fa0 R15: 00007ffd14976ed8 [ 147.739521][ T7428] [ 147.739635][ T7428] memory: usage 307180kB, limit 307200kB, failcnt 281 [ 148.081969][ T7428] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 148.089929][ T7428] kmem: usage 239496kB, limit 9007199254740988kB, failcnt 0 [ 148.097266][ T7428] Memory cgroup stats for /syz3: [ 148.106826][ T7428] cache 69308416 [ 148.115435][ T7428] rss 0 [ 148.118304][ T7428] shmem 0 [ 148.121294][ T7428] mapped_file 0 [ 148.124784][ T7428] dirty 0 [ 148.127793][ T7428] writeback 0 [ 148.131143][ T7428] workingset_refault_anon 65 [ 148.135776][ T7428] workingset_refault_file 84 [ 148.140440][ T7428] swap 532480 [ 148.143756][ T7428] swapcached 20480 [ 148.147539][ T7428] pgpgin 181349 [ 148.151058][ T7428] pgpgout 164423 [ 148.154659][ T7428] pgfault 155145 [ 148.158363][ T7428] pgmajfault 36 [ 148.161920][ T7428] inactive_anon 4096 [ 148.165844][ T7428] active_anon 16384 [ 148.169712][ T7428] inactive_file 0 [ 148.173420][ T7428] active_file 16384 [ 148.177334][ T7428] unevictable 69292032 [ 148.181433][ T7428] hierarchical_memory_limit 314572800 [ 148.186890][ T7428] hierarchical_memsw_limit 9223372036854771712 [ 148.193134][ T7428] total_cache 69308416 [ 148.197271][ T7428] total_rss 0 [ 148.200615][ T7428] total_shmem 0 [ 148.204095][ T7428] total_mapped_file 0 [ 148.208174][ T7428] total_dirty 0 [ 148.211657][ T7428] total_writeback 0 [ 148.215504][ T7428] total_workingset_refault_anon 65 [ 148.220676][ T7428] total_workingset_refault_file 84 [ 148.225941][ T7428] total_swap 532480 [ 148.229837][ T7428] total_swapcached 20480 [ 148.234099][ T7428] total_pgpgin 181349 [ 148.238152][ T7428] total_pgpgout 164423 [ 148.242237][ T7428] total_pgfault 155145 [ 148.246382][ T7428] total_pgmajfault 36 [ 148.250384][ T7428] total_inactive_anon 4096 [ 148.254856][ T7428] total_active_anon 16384 [ 148.259294][ T7428] total_inactive_file 0 [ 148.263472][ T7428] total_active_file 16384 [ 148.267990][ T7428] total_unevictable 69292032 [ 148.272611][ T7428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.418,pid=4898,uid=0 [ 148.287223][ T7428] Memory cgroup out of memory: Killed process 4898 (syz.3.418) total-vm:96048kB, anon-rss:1212kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 148.325818][ T7450] bridge0: port 3(macvtap1) entered blocking state [ 148.332529][ T7450] bridge0: port 3(macvtap1) entered disabled state [ 148.351058][ T7450] macvtap1: entered allmulticast mode [ 148.357162][ T7450] macvtap1: left allmulticast mode [ 148.425382][ T7427] syz.3.1267 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 148.436474][ T7427] CPU: 1 UID: 0 PID: 7427 Comm: syz.3.1267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.436517][ T7427] Tainted: [W]=WARN [ 148.436526][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.436544][ T7427] Call Trace: [ 148.436553][ T7427] [ 148.436563][ T7427] __dump_stack+0x1d/0x30 [ 148.436709][ T7427] dump_stack_lvl+0x95/0xd0 [ 148.436737][ T7427] dump_stack+0x15/0x1b [ 148.436763][ T7427] dump_header+0x80/0x240 [ 148.436825][ T7427] oom_kill_process+0x295/0x350 [ 148.436872][ T7427] out_of_memory+0x97d/0xb80 [ 148.436902][ T7427] try_charge_memcg+0x62e/0xa10 [ 148.437064][ T7427] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 148.437182][ T7427] __read_swap_cache_async+0x17b/0x2d0 [ 148.437231][ T7427] swap_cluster_readahead+0x262/0x3c0 [ 148.437354][ T7427] swapin_readahead+0xde/0x840 [ 148.437389][ T7427] ? __rcu_read_unlock+0x33/0x70 [ 148.437429][ T7427] ? __rcu_read_unlock+0x4e/0x70 [ 148.437524][ T7427] ? swap_cache_get_folio+0x26f/0x280 [ 148.437589][ T7427] do_swap_page+0x59b/0x2a50 [ 148.437638][ T7427] ? __rcu_read_lock+0x36/0x50 [ 148.437669][ T7427] ? __pfx_default_wake_function+0x10/0x10 [ 148.437761][ T7427] handle_mm_fault+0xb40/0x3030 [ 148.437797][ T7427] ? vma_start_read+0x1c7/0x2c0 [ 148.437832][ T7427] do_user_addr_fault+0x62f/0x1050 [ 148.437938][ T7427] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 148.438079][ T7427] ? irqentry_exit+0x3c/0x510 [ 148.438115][ T7427] exc_page_fault+0x62/0xa0 [ 148.438265][ T7427] asm_exc_page_fault+0x26/0x30 [ 148.438286][ T7427] RIP: 0033:0x7f875fa0f670 [ 148.438307][ T7427] Code: 83 f8 04 75 ec 31 f6 80 7c 24 0e 00 74 70 40 88 74 24 0e 8b 7c 24 08 48 89 de e8 bb 00 fe ff 84 c0 75 5b 80 7c 24 0f 00 75 0d <80> 3d 11 2a 3a 00 00 0f 85 a3 01 00 00 49 83 7f 68 07 77 08 49 c7 [ 148.438330][ T7427] RSP: 002b:00007ffd14976f70 EFLAGS: 00010246 [ 148.438352][ T7427] RAX: 0000000000000000 RBX: ffffffff819a86f6 RCX: ffffffff819a86f6 [ 148.438370][ T7427] RDX: 00000000000006f6 RSI: ffffffff819a86f6 RDI: 000000000000000d [ 148.438474][ T7427] RBP: 0000000000000000 R08: 00007f875fda0000 R09: 00007f875fda2000 [ 148.438494][ T7427] R10: 00000000819a86fa R11: 000000000000000d R12: 00007f875fdb6038 [ 148.438513][ T7427] R13: 0000000000000002 R14: ffffffff819a82dd R15: 00007f87608e5720 [ 148.438532][ T7427] ? __fget_files+0x1d/0x1c0 [ 148.438573][ T7427] ? __fget_files_rcu+0x6/0x1b0 [ 148.438606][ T7427] ? __fget_files_rcu+0x6/0x1b0 [ 148.438692][ T7427] ? __fget_files_rcu+0x6/0x1b0 [ 148.438720][ T7427] [ 148.438730][ T7427] memory: usage 307200kB, limit 307200kB, failcnt 527 [ 148.696853][ T7427] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 148.704764][ T7427] kmem: usage 239436kB, limit 9007199254740988kB, failcnt 0 [ 148.712169][ T7427] Memory cgroup stats for /syz3: [ 148.715750][ T7427] cache 69292032 [ 148.725004][ T7427] rss 0 [ 148.727822][ T7427] shmem 0 [ 148.730790][ T7427] mapped_file 0 [ 148.734270][ T7427] dirty 0 [ 148.737249][ T7427] writeback 8192 [ 148.740843][ T7427] workingset_refault_anon 90 [ 148.745452][ T7427] workingset_refault_file 111 [ 148.750926][ T7427] swap 438272 [ 148.754323][ T7427] swapcached 12288 [ 148.758084][ T7427] pgpgin 181401 [ 148.761574][ T7427] pgpgout 164481 [ 148.765141][ T7427] pgfault 155174 [ 148.768781][ T7427] pgmajfault 63 [ 148.774052][ T7427] inactive_anon 12288 [ 148.779023][ T7427] active_anon 0 [ 148.782583][ T7427] inactive_file 0 [ 148.786239][ T7427] active_file 0 [ 148.789750][ T7427] unevictable 69292032 [ 148.793855][ T7427] hierarchical_memory_limit 314572800 [ 148.799284][ T7427] hierarchical_memsw_limit 9223372036854771712 [ 148.805567][ T7427] total_cache 69292032 [ 148.810520][ T7427] total_rss 0 [ 148.813946][ T7427] total_shmem 0 [ 148.817526][ T7427] total_mapped_file 0 [ 148.821610][ T7427] total_dirty 0 [ 148.825094][ T7427] total_writeback 8192 [ 148.829451][ T7427] total_workingset_refault_anon 90 [ 148.834652][ T7427] total_workingset_refault_file 111 [ 148.840642][ T7427] total_swap 438272 [ 148.844478][ T7427] total_swapcached 12288 [ 148.848800][ T7427] total_pgpgin 181401 [ 148.852881][ T7427] total_pgpgout 164481 [ 148.857006][ T7427] total_pgfault 155174 [ 148.861094][ T7427] total_pgmajfault 63 [ 148.865116][ T7427] total_inactive_anon 12288 [ 148.870385][ T7427] total_active_anon 0 [ 148.874558][ T7427] total_inactive_file 0 [ 148.878795][ T7427] total_active_file 0 [ 148.882870][ T7427] total_unevictable 69292032 [ 148.887541][ T7427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1267,pid=7427,uid=0 [ 148.902820][ T7427] Memory cgroup out of memory: Killed process 7427 (syz.3.1267) total-vm:96048kB, anon-rss:1204kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 149.017035][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 149.017055][ T29] audit: type=1326 audit(1769738896.004:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.089882][ T29] audit: type=1326 audit(1769738896.054:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.113391][ T29] audit: type=1326 audit(1769738896.054:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.136935][ T29] audit: type=1326 audit(1769738896.054:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.160575][ T29] audit: type=1326 audit(1769738896.054:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.184157][ T29] audit: type=1326 audit(1769738896.054:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.207522][ T29] audit: type=1326 audit(1769738896.054:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.231057][ T29] audit: type=1326 audit(1769738896.054:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.254541][ T29] audit: type=1326 audit(1769738896.054:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.278059][ T29] audit: type=1326 audit(1769738896.054:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 149.416155][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 149.416796][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 149.434138][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 149.443163][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 149.489005][ T7499] cgroup: noprefix used incorrectly [ 149.498748][ T7497] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1288'. [ 149.705290][ T7513] bridge_slave_1: left promiscuous mode [ 149.711894][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.719779][ T7513] bridge_slave_0: left promiscuous mode [ 149.725554][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.317961][ T7534] syzkaller0: entered promiscuous mode [ 150.323519][ T7534] syzkaller0: entered allmulticast mode [ 150.673099][ T7539] loop4: detected capacity change from 0 to 2048 [ 150.739556][ T3306] Alternate GPT is invalid, using primary GPT. [ 150.745865][ T3306] loop4: p1 p2 p3 [ 150.750348][ T3306] loop4: partition table partially beyond EOD, truncated [ 150.829029][ T7539] Alternate GPT is invalid, using primary GPT. [ 150.835368][ T7539] loop4: p1 p2 p3 [ 150.839207][ T7539] loop4: partition table partially beyond EOD, truncated [ 150.886225][ T7541] netlink: 'syz.3.1305': attribute type 27 has an invalid length. [ 151.064806][ T7541] bridge0: port 3(team0) entered disabled state [ 151.071234][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.078437][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.103001][ T7544] futex_wake_op: syz.4.1306 tries to shift op by -1; fix this program [ 151.274918][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.293164][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.375780][ T7541] bond1: left promiscuous mode [ 151.380666][ T7541] wireguard0: left promiscuous mode [ 151.389710][ T7541] gre2: left promiscuous mode [ 151.394495][ T7541] gre2: left allmulticast mode [ 151.434032][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.446729][ T7542] bridge0: port 3(team0) entered blocking state [ 151.453154][ T7542] bridge0: port 3(team0) entered forwarding state [ 151.459769][ T7542] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.479898][ T7542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.496844][ T37] bridge0: port 3(team0) entered disabled state [ 151.508006][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.518072][ T7062] lo speed is unknown, defaulting to 1000 [ 151.523840][ T7062] syz2: Port: 1 Link ACTIVE [ 151.531164][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.540431][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.549839][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.706964][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1321'. [ 152.903935][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 153.106680][ T7609] syz_tun: entered allmulticast mode [ 153.116893][ T7608] syz_tun: left allmulticast mode [ 153.316898][ T7619] ref_ctr increment failed for inode: 0x4f0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810d522f40 [ 153.602781][ T7629] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1336'. [ 153.611825][ T7629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.077263][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 154.077282][ T29] audit: type=1326 audit(1769738902.064:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.107664][ T29] audit: type=1326 audit(1769738902.094:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.131223][ T29] audit: type=1326 audit(1769738902.094:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.1.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.260251][ T7663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.289115][ T7663] rdma_rxe: rxe_newlink: failed to add bond0 [ 154.291289][ T7666] netlink: 'syz.1.1349': attribute type 27 has an invalid length. [ 154.328669][ T7660] can: request_module (can-proto-0) failed. [ 154.380021][ T7657] wireguard0: entered promiscuous mode [ 154.386064][ T7657] wireguard0: entered allmulticast mode [ 154.517764][ T29] audit: type=1400 audit(1769738902.504:2639): avc: denied { append } for pid=7671 comm="syz.4.1351" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.554066][ T7666] erspan0: left promiscuous mode [ 154.569829][ T7666] bond1: left promiscuous mode [ 154.574693][ T7666] wireguard0: left promiscuous mode [ 154.580198][ T7666] bond2: left promiscuous mode [ 154.584988][ T7666] bridge1: left promiscuous mode [ 154.590255][ T7666] bond2: left allmulticast mode [ 154.595277][ T7666] bridge1: left allmulticast mode [ 154.600491][ T7666] bond3: left promiscuous mode [ 154.605294][ T7666] bridge2: left promiscuous mode [ 154.610439][ T7666] bond3: left allmulticast mode [ 154.615319][ T7666] bridge2: left allmulticast mode [ 154.621576][ T7666] veth7: left promiscuous mode [ 154.696200][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.717106][ T7670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.870046][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 154.872891][ T29] audit: type=1326 audit(1769738902.854:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.902508][ T29] audit: type=1326 audit(1769738902.854:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.926034][ T29] audit: type=1326 audit(1769738902.854:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.949499][ T29] audit: type=1326 audit(1769738902.854:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.972959][ T29] audit: type=1326 audit(1769738902.854:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 154.996454][ T29] audit: type=1326 audit(1769738902.854:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7691 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 155.050827][ T7693] hsr_slave_1 (unregistering): left promiscuous mode [ 156.356125][ T7744] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 156.371032][ T7744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.394210][ T7744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.401746][ T7744] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 156.453204][ T7744] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 156.484764][ T7750] veth15: entered promiscuous mode [ 156.494690][ T7750] bond6: (slave veth15): Enslaving as an active interface with a down link [ 156.521655][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 156.533901][ T7752] hsr_slave_1 (unregistering): left promiscuous mode [ 156.545390][ T7744] macvlan3: entered promiscuous mode [ 156.550867][ T7744] macvlan3: entered allmulticast mode [ 156.557110][ T7744] bond6: entered promiscuous mode [ 156.562379][ T7744] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 156.571052][ T7744] bond6: left promiscuous mode [ 156.627849][ T7759] xt_hashlimit: size too large, truncated to 1048576 [ 157.072714][ T7790] tipc: Started in network mode [ 157.077695][ T7790] tipc: Node identity ac14140f, cluster identity 4711 [ 157.117863][ T7790] tipc: New replicast peer: 255.255.255.255 [ 157.124194][ T7790] tipc: Enabled bearer , priority 10 [ 157.484262][ T7799] : renamed from bond_slave_0 [ 157.536681][ T7795] lo speed is unknown, defaulting to 1000 [ 157.555487][ T7795] lo speed is unknown, defaulting to 1000 [ 158.279776][ T7066] tipc: Node number set to 2886997007 [ 158.640723][ T7819] syzkaller0: entered promiscuous mode [ 158.646327][ T7819] syzkaller0: entered allmulticast mode [ 158.779519][ T7814] Set syz1 is full, maxelem 65536 reached [ 158.943823][ T7832] lo speed is unknown, defaulting to 1000 [ 158.967881][ T7832] lo speed is unknown, defaulting to 1000 [ 159.167514][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 159.167533][ T29] audit: type=1400 audit(1769738907.154:2831): avc: denied { bind } for pid=7838 comm="syz.6.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.252231][ T7832] 9pnet_fd: Insufficient options for proto=fd [ 159.343643][ T7848] loop4: detected capacity change from 0 to 1024 [ 159.368562][ T7848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 159.383478][ T7848] System zones: 0-1, 3-36 [ 159.388941][ T7848] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1409: bad orphan inode 134217728 [ 159.401525][ T7848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.640810][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.679426][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 159.690727][ T29] audit: type=1400 audit(1769738907.674:2832): avc: denied { lock } for pid=7856 comm="syz.4.1412" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.691337][ T7857] bridge0: port 1(geneve0) entered blocking state [ 159.722508][ T7857] bridge0: port 1(geneve0) entered disabled state [ 159.731762][ T7857] geneve0: entered allmulticast mode [ 159.737939][ T7857] geneve0: entered promiscuous mode [ 160.440083][ T7876] lo speed is unknown, defaulting to 1000 [ 160.448626][ T7876] lo speed is unknown, defaulting to 1000 [ 160.718705][ T7876] Cannot find del_set index 0 as target [ 162.018094][ T7889] lo speed is unknown, defaulting to 1000 [ 162.117492][ T7889] lo speed is unknown, defaulting to 1000 [ 162.298759][ T29] audit: type=1326 audit(1769738910.284:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.327515][ T29] audit: type=1326 audit(1769738910.314:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.351294][ T29] audit: type=1326 audit(1769738910.314:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.375028][ T29] audit: type=1326 audit(1769738910.314:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.398481][ T29] audit: type=1326 audit(1769738910.314:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.421989][ T29] audit: type=1326 audit(1769738910.314:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.445432][ T29] audit: type=1326 audit(1769738910.314:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.468918][ T29] audit: type=1326 audit(1769738910.314:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7913 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 162.662723][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 162.671795][ T7921] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1432'. [ 162.680940][ T7921] netlink: 'syz.1.1432': attribute type 3 has an invalid length. [ 162.688833][ T7921] netlink: 'syz.1.1432': attribute type 2 has an invalid length. [ 162.696812][ T7921] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1432'. [ 162.759525][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 162.826277][ T7929] lo speed is unknown, defaulting to 1000 [ 162.832683][ T7929] lo speed is unknown, defaulting to 1000 [ 163.018919][ T7938] : renamed from bond0 [ 163.275513][ T7941] lo speed is unknown, defaulting to 1000 [ 163.308494][ T7941] lo speed is unknown, defaulting to 1000 [ 164.051968][ T3400] lo speed is unknown, defaulting to 1000 [ 164.058007][ T3400] syz2: Port: 1 Link DOWN [ 164.063240][ T7971] netlink: 'syz.3.1445': attribute type 13 has an invalid length. [ 164.092840][ T7971] gretap0: refused to change device tx_queue_len [ 164.100459][ T7971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.116171][ T3400] lo speed is unknown, defaulting to 1000 [ 164.121987][ T3400] syz2: Port: 1 Link ACTIVE [ 164.132480][ T7971] netlink: 'syz.3.1445': attribute type 4 has an invalid length. [ 164.149514][ T3400] lo speed is unknown, defaulting to 1000 [ 164.155350][ T3400] syz2: Port: 1 Link DOWN [ 164.207368][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 164.207432][ T29] audit: type=1400 audit(1769738912.194:2869): avc: denied { name_bind } for pid=7978 comm="syz.0.1458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 164.240735][ T7981] syzkaller0: entered promiscuous mode [ 164.246253][ T7981] syzkaller0: entered allmulticast mode [ 164.728371][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 164.737382][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 164.791630][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.923924][ T8002] 8021q: adding VLAN 0 to HW filter on device 76 [ 164.936707][ T8002] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.948634][ T8002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.965122][ T8002] : (slave bond_slave_0): Releasing backup interface [ 164.975566][ T8002] : (slave bond_slave_1): Releasing backup interface [ 164.991762][ T8002] team0: Port device team_slave_0 removed [ 165.021770][ T8002] team0: Port device team_slave_1 removed [ 165.031090][ T8002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.038612][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.046032][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.061538][ T8002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 165.120541][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 165.138719][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 165.279370][ T29] audit: type=1326 audit(1769738913.254:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.302901][ T29] audit: type=1326 audit(1769738913.254:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.326418][ T29] audit: type=1326 audit(1769738913.264:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.349961][ T29] audit: type=1326 audit(1769738913.264:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.373353][ T29] audit: type=1326 audit(1769738913.264:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.379170][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1459'. [ 165.396989][ T29] audit: type=1326 audit(1769738913.264:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.397029][ T29] audit: type=1326 audit(1769738913.264:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.405980][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1459'. [ 165.429540][ T29] audit: type=1326 audit(1769738913.264:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.452800][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1459'. [ 165.461785][ T29] audit: type=1326 audit(1769738913.264:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.6.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 165.518375][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1459'. [ 165.558505][ T8029] syz.1.1465: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 165.573258][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.1.1465 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.573359][ T8029] Tainted: [W]=WARN [ 165.573368][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.573390][ T8029] Call Trace: [ 165.573398][ T8029] [ 165.573408][ T8029] __dump_stack+0x1d/0x30 [ 165.573440][ T8029] dump_stack_lvl+0x95/0xd0 [ 165.573541][ T8029] dump_stack+0x15/0x1b [ 165.573565][ T8029] warn_alloc+0x145/0x1c0 [ 165.573661][ T8029] ? __cgroup_account_cputime+0x81/0xa0 [ 165.573704][ T8029] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 165.573750][ T8029] ? update_curr+0x9c/0x150 [ 165.573774][ T8029] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 165.573866][ T8029] ? probe_sched_wakeup+0x84/0xa0 [ 165.573901][ T8029] ? __rcu_read_unlock+0x4e/0x70 [ 165.573992][ T8029] ? avc_has_perm_noaudit+0xab/0x130 [ 165.574053][ T8029] vmalloc_user_noprof+0x7d/0xb0 [ 165.574087][ T8029] ? xskq_create+0x80/0xe0 [ 165.574129][ T8029] xskq_create+0x80/0xe0 [ 165.574203][ T8029] xsk_init_queue+0x91/0xe0 [ 165.574247][ T8029] xsk_setsockopt+0x477/0x640 [ 165.574279][ T8029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.574354][ T8029] __sys_setsockopt+0x184/0x200 [ 165.574390][ T8029] __x64_sys_setsockopt+0x64/0x80 [ 165.574437][ T8029] x64_sys_call+0x21d5/0x3000 [ 165.574549][ T8029] do_syscall_64+0xc0/0x2a0 [ 165.574583][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.574610][ T8029] RIP: 0033:0x7f16ec87aeb9 [ 165.574686][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.574711][ T8029] RSP: 002b:00007f16eb2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.574736][ T8029] RAX: ffffffffffffffda RBX: 00007f16ecaf5fa0 RCX: 00007f16ec87aeb9 [ 165.574755][ T8029] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 165.574773][ T8029] RBP: 00007f16ec8e8c1f R08: 0000000000000004 R09: 0000000000000000 [ 165.574856][ T8029] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 165.574875][ T8029] R13: 00007f16ecaf6038 R14: 00007f16ecaf5fa0 R15: 00007fffe5545d78 [ 165.574903][ T8029] [ 165.574911][ T8029] Mem-Info: [ 165.699118][ T8031] ALSA: seq fatal error: cannot create timer (-22) [ 165.700288][ T8029] active_anon:46088 inactive_anon:9987 isolated_anon:0 [ 165.700288][ T8029] active_file:25186 inactive_file:2352 isolated_file:0 [ 165.700288][ T8029] unevictable:16434 dirty:272 writeback:0 [ 165.700288][ T8029] slab_reclaimable:3746 slab_unreclaimable:48409 [ 165.700288][ T8029] mapped:29298 shmem:47001 pagetables:1652 [ 165.700288][ T8029] sec_pagetables:0 bounce:0 [ 165.700288][ T8029] kernel_misc_reclaimable:0 [ 165.700288][ T8029] free:1765300 free_pcp:19955 free_cma:0 [ 165.847813][ T8029] Node 0 active_anon:184352kB inactive_anon:39948kB active_file:100744kB inactive_file:9408kB unevictable:65736kB isolated(anon):0kB isolated(file):0kB mapped:117192kB dirty:1088kB writeback:0kB shmem:188004kB kernel_stack:4304kB pagetables:6724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 165.876263][ T8029] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.906152][ T8029] lowmem_reserve[]: 0 2879 7858 7858 [ 165.911774][ T8029] Node 0 DMA32 free:2944852kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 165.942944][ T8029] lowmem_reserve[]: 0 0 4978 4978 [ 165.948131][ T8029] Node 0 Normal free:4100988kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:184352kB inactive_anon:39948kB active_file:100744kB inactive_file:9408kB unevictable:65736kB writepending:1088kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:76364kB local_pcp:37564kB free_cma:0kB [ 165.982081][ T8029] lowmem_reserve[]: 0 0 0 0 [ 165.986858][ T8029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.999718][ T8029] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944852kB [ 166.015976][ T8029] Node 0 Normal: 893*4kB (UE) 455*8kB (UE) 89*16kB (U) 50*32kB (U) 357*64kB (UME) 328*128kB (UME) 194*256kB (UME) 158*512kB (UM) 102*1024kB (UM) 81*2048kB (UM) 885*4096kB (UM) = 4100924kB [ 166.034888][ T8029] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 166.044276][ T8029] 90988 total pagecache pages [ 166.049172][ T8029] 26 pages in swap cache [ 166.053551][ T8029] Free swap = 96896kB [ 166.057684][ T8029] Total swap = 124996kB [ 166.061899][ T8029] 2097051 pages RAM [ 166.065725][ T8029] 0 pages HighMem/MovableOnly [ 166.070462][ T8029] 81556 pages reserved [ 166.159824][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1471'. [ 166.168902][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1471'. [ 167.000130][ T8064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.007430][ T8064] IPv6: NLM_F_CREATE should be set when creating new route [ 167.015963][ T8064] lo: entered allmulticast mode [ 167.023472][ T8064] tunl0: entered allmulticast mode [ 167.030766][ T8064] gre0: entered allmulticast mode [ 167.045562][ T8064] gretap0: entered allmulticast mode [ 167.056604][ T8064] erspan0: entered allmulticast mode [ 167.064295][ T8064] ip_vti0: entered allmulticast mode [ 167.078637][ T8064] ip6_vti0: entered allmulticast mode [ 167.086812][ T8064] sit0: entered allmulticast mode [ 167.095248][ T8064] ip6tnl0: entered allmulticast mode [ 167.102894][ T8064] ip6gre0: entered allmulticast mode [ 167.110507][ T8064] ip6gretap0: entered allmulticast mode [ 167.119262][ T8064] bridge0: entered allmulticast mode [ 167.152122][ T8064] vcan0: entered allmulticast mode [ 167.168022][ T8064] bond0: entered allmulticast mode [ 167.186040][ T8064] team0: entered allmulticast mode [ 167.198571][ T8064] nlmon0: entered allmulticast mode [ 167.208513][ T8064] caif0: entered allmulticast mode [ 167.216413][ T8064] batadv0: entered allmulticast mode [ 167.224527][ T8064] veth0: entered allmulticast mode [ 167.235265][ T8064] veth1: entered allmulticast mode [ 167.246744][ T8064] wg1: entered allmulticast mode [ 167.264588][ T8064] wg2: entered allmulticast mode [ 167.273781][ T8064] veth0_to_bridge: entered allmulticast mode [ 167.292340][ T8064] bridge_slave_0: entered allmulticast mode [ 167.316520][ T8064] veth1_to_bridge: entered allmulticast mode [ 167.338500][ T8064] bridge_slave_1: entered allmulticast mode [ 167.358384][ T8064] veth0_to_bond: entered allmulticast mode [ 167.375165][ T8064] : entered allmulticast mode [ 167.380453][ T8064] veth1_to_bond: entered allmulticast mode [ 167.388992][ T8064] bond_slave_1: entered allmulticast mode [ 167.395273][ T8064] veth0_to_team: entered allmulticast mode [ 167.403537][ T8064] team_slave_0: entered allmulticast mode [ 167.410320][ T8064] veth1_to_team: entered allmulticast mode [ 167.418225][ T8064] team_slave_1: entered allmulticast mode [ 167.424380][ T8064] veth0_to_batadv: entered allmulticast mode [ 167.433208][ T8064] batadv_slave_0: entered allmulticast mode [ 167.441436][ T8064] veth1_to_batadv: entered allmulticast mode [ 167.449936][ T8064] batadv_slave_1: entered allmulticast mode [ 167.458540][ T8064] xfrm0: entered allmulticast mode [ 167.466253][ T8064] veth0_to_hsr: entered allmulticast mode [ 167.474767][ T8064] hsr_slave_0: entered allmulticast mode [ 167.482958][ T8064] hsr0: entered allmulticast mode [ 167.496048][ T8064] veth1_virt_wifi: entered allmulticast mode [ 167.504396][ T8064] veth0_virt_wifi: entered allmulticast mode [ 167.512867][ T8064] veth1_vlan: entered allmulticast mode [ 167.520408][ T8064] veth0_vlan: entered allmulticast mode [ 167.534386][ T8064] vlan0: entered allmulticast mode [ 167.539795][ T8064] vlan1: entered allmulticast mode [ 167.545391][ T8064] macvlan0: entered allmulticast mode [ 167.553538][ T8064] macvlan1: entered allmulticast mode [ 167.561405][ T8064] ipvlan0: entered allmulticast mode [ 167.566966][ T8064] ipvlan1: entered allmulticast mode [ 167.574934][ T8064] veth1_macvtap: entered allmulticast mode [ 167.582518][ T8064] veth0_macvtap: entered allmulticast mode [ 167.590023][ T8064] macvtap0: entered allmulticast mode [ 167.597094][ T8064] macsec0: entered allmulticast mode [ 167.605973][ T8064] geneve1: entered allmulticast mode [ 167.612831][ T8064] veth2: left promiscuous mode [ 167.617825][ T8064] veth3: entered allmulticast mode [ 167.623098][ T8064] team1: left promiscuous mode [ 167.628281][ T8064] gre1: entered allmulticast mode [ 167.646087][ T8064] bridge0.257: entered allmulticast mode [ 167.651915][ T8064] veth4: entered allmulticast mode [ 167.657287][ T8064] veth5: entered allmulticast mode [ 167.663893][ T8064] bond2: entered allmulticast mode [ 167.669712][ T8064] bond3: entered allmulticast mode [ 167.675019][ T8064] veth6: entered allmulticast mode [ 167.680566][ T8064] veth7: entered allmulticast mode [ 167.690368][ T8064] veth8: entered allmulticast mode [ 167.695927][ T8064] veth9: entered allmulticast mode [ 167.701846][ T8064] syztnl0: entered allmulticast mode [ 167.707433][ T8064] veth10: entered allmulticast mode [ 167.712739][ T8064] veth11: entered allmulticast mode [ 167.718434][ T8064] hsr1: entered allmulticast mode [ 167.725277][ T8064] GPL: entered allmulticast mode [ 167.730434][ T8064] veth12: entered allmulticast mode [ 167.735773][ T8064] veth13: entered allmulticast mode [ 167.741374][ T8064] netdevsim netdevsim4 eth0: entered allmulticast mode [ 167.749929][ T8064] netdevsim netdevsim4 eth1: entered allmulticast mode [ 167.757200][ T8064] netdevsim netdevsim4 eth2: entered allmulticast mode [ 167.764328][ T8064] netdevsim netdevsim4 eth3: entered allmulticast mode [ 167.771743][ T8064] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 167.778905][ T8064] ipvlan2: entered allmulticast mode [ 167.788577][ T8064] bond5: entered allmulticast mode [ 167.794575][ T8064] macvlan2: entered allmulticast mode [ 167.800087][ T8064] bond6: entered allmulticast mode [ 167.805311][ T8064] veth14: entered allmulticast mode [ 167.811480][ T8064] veth15: left promiscuous mode [ 167.816439][ T8064] veth15: entered allmulticast mode [ 167.822413][ T8064] gre2: entered allmulticast mode [ 167.827597][ T8064] ip6tnl1: entered allmulticast mode [ 167.833063][ T7062] lo speed is unknown, defaulting to 1000 [ 167.838918][ T7062] syz: Port: 1 Link DOWN [ 167.934967][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.953662][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.970827][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.229500][ T8078] lo speed is unknown, defaulting to 1000 [ 168.296541][ T8099] netlink: 'syz.6.1499': attribute type 1 has an invalid length. [ 168.308059][ T8078] lo speed is unknown, defaulting to 1000 [ 168.386115][ T8099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.439244][ T8100] lo speed is unknown, defaulting to 1000 [ 168.489841][ T8102] bond3: (slave gretap1): making interface the new active one [ 168.557253][ T8099] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8099 comm=syz.6.1499 [ 168.574288][ T8102] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 168.583499][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.591978][ T8100] lo speed is unknown, defaulting to 1000 [ 168.698763][ T8110] netlink: 'syz.0.1490': attribute type 3 has an invalid length. [ 168.817737][ T8117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8117 comm=syz.3.1493 [ 168.832078][ T8117] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 168.850077][ T8117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.882416][ T8117] bond7: (slave dummy0): making interface the new active one [ 168.891489][ T8117] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 168.940788][ T8128] : renamed from bond0 (while UP) [ 168.963823][ T8130] lo speed is unknown, defaulting to 1000 [ 168.970449][ T8130] lo speed is unknown, defaulting to 1000 [ 169.290377][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 169.290396][ T29] audit: type=1400 audit(1769738917.274:2954): avc: denied { ioctl } for pid=8145 comm="syz.0.1505" path="socket:[23924]" dev="sockfs" ino=23924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.393358][ T8151] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 169.410669][ T8151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.490621][ T8154] xt_hashlimit: size too large, truncated to 1048576 [ 169.670811][ T8155] bond7: option ad_user_port_key: invalid value (1136) [ 169.677763][ T8155] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 169.705538][ T8161] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8161 comm=syz.0.1507 [ 169.747997][ T8155] bond7 (unregistering): Released all slaves [ 169.865861][ T8151] bond4: (slave gretap1): making interface the new active one [ 170.000825][ T8151] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 170.257409][ T29] audit: type=1326 audit(1769738918.214:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.281099][ T29] audit: type=1326 audit(1769738918.214:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.304601][ T29] audit: type=1326 audit(1769738918.224:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.327964][ T29] audit: type=1326 audit(1769738918.224:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.351603][ T29] audit: type=1326 audit(1769738918.224:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.375126][ T29] audit: type=1326 audit(1769738918.224:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.398546][ T29] audit: type=1326 audit(1769738918.224:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.422045][ T29] audit: type=1326 audit(1769738918.224:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.445459][ T29] audit: type=1326 audit(1769738918.224:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.0.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 170.726497][ T8181] : renamed from bond0 (while UP) [ 171.612394][ T8201] lo speed is unknown, defaulting to 1000 [ 171.631610][ T8201] lo speed is unknown, defaulting to 1000 [ 173.419800][ T8254] netlink: 'syz.3.1534': attribute type 13 has an invalid length. [ 174.132527][ T8272] syzkaller0: entered promiscuous mode [ 174.138223][ T8272] syzkaller0: entered allmulticast mode [ 174.346984][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 174.347071][ T29] audit: type=1326 audit(1769738922.334:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.389387][ T29] audit: type=1326 audit(1769738922.374:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.420792][ T29] audit: type=1326 audit(1769738922.404:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.444343][ T29] audit: type=1326 audit(1769738922.404:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.474628][ T29] audit: type=1326 audit(1769738922.434:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.498320][ T29] audit: type=1326 audit(1769738922.444:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.521866][ T29] audit: type=1326 audit(1769738922.444:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.545338][ T29] audit: type=1326 audit(1769738922.444:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.565214][ T8282] netlink: 'syz.6.1546': attribute type 4 has an invalid length. [ 174.568918][ T29] audit: type=1326 audit(1769738922.444:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.600168][ T29] audit: type=1326 audit(1769738922.444:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8277 comm="syz.4.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff308eaaeb9 code=0x7ffc0000 [ 174.616857][ T8292] netlink: 'syz.6.1546': attribute type 4 has an invalid length. [ 174.694524][ T8296] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 174.909076][ T8306] vlan2: entered promiscuous mode [ 174.914269][ T8306] bond0: entered promiscuous mode [ 175.537190][ T8320] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 175.636880][ T8335] netlink: 'syz.4.1562': attribute type 4 has an invalid length. [ 175.743295][ T8338] netlink: 'syz.4.1562': attribute type 4 has an invalid length. [ 175.752258][ T7064] lo speed is unknown, defaulting to 1000 [ 175.758098][ T7064] syz: Port: 1 Link ACTIVE [ 175.777254][ T7066] lo speed is unknown, defaulting to 1000 [ 175.783081][ T7066] syz: Port: 1 Link DOWN [ 176.049064][ T8360] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 176.103453][ T8360] bond7: entered promiscuous mode [ 176.108606][ T8360] bond7: entered allmulticast mode [ 176.114772][ T8360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.154195][ T8360] erspan1: entered allmulticast mode [ 176.207367][ T8365] __nla_validate_parse: 3 callbacks suppressed [ 176.207390][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'. [ 176.285193][ T8360] bond7: (slave erspan1): making interface the new active one [ 176.292777][ T8360] erspan1: entered promiscuous mode [ 176.407574][ T8360] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 176.447120][ T8365] bond7 (unregistering): (slave erspan1): Releasing active interface [ 176.467633][ T8365] erspan1: left promiscuous mode [ 176.543172][ T8365] bond7 (unregistering): Released all slaves [ 176.579117][ T8376] netlink: 'syz.6.1576': attribute type 1 has an invalid length. [ 176.599852][ T8376] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.610196][ T8376] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 176.621201][ T8376] bond4: (slave vxcan3): making interface the new active one [ 176.629329][ T8376] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 176.640060][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1576'. [ 176.654727][ T8376] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 176.667900][ T8376] bond4 (unregistering): Released all slaves [ 176.786854][ T8390] netlink: 'syz.3.1578': attribute type 4 has an invalid length. [ 176.795756][ T8390] netlink: 'syz.3.1578': attribute type 4 has an invalid length. [ 176.806893][ T7062] lo speed is unknown, defaulting to 1000 [ 176.812760][ T7062] syz2: Port: 1 Link ACTIVE [ 176.863408][ T8396] netlink: 'syz.0.1584': attribute type 1 has an invalid length. [ 176.998167][ T8405] macvtap1: entered promiscuous mode [ 177.003583][ T8405] batadv0: entered promiscuous mode [ 177.053319][ T8405] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 177.075507][ T8405] batadv0: left promiscuous mode [ 177.180933][ T8412] tipc: Enabling of bearer rejected, failed to enable media [ 177.875614][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1593'. [ 178.293913][ T8434] bond0: entered promiscuous mode [ 178.306507][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.338697][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1596'. [ 178.348748][ T8434] bond0: entered allmulticast mode [ 178.362545][ T8434] bond0: (slave bridge3): making interface the new active one [ 178.370151][ T8434] bridge3: entered promiscuous mode [ 178.375518][ T8434] bridge3: entered allmulticast mode [ 178.382563][ T8434] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 178.441451][ T8437] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 178.481938][ T8437] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 178.556252][ T8447] loop4: detected capacity change from 0 to 8192 [ 178.574158][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 178.612527][ T8445] bond4: (slave gretap2): making interface the new active one [ 178.648074][ T8445] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 178.678793][ T8452] macvlan3: entered promiscuous mode [ 178.684337][ T8452] macvlan3: entered allmulticast mode [ 178.691598][ T8452] bond4: entered promiscuous mode [ 178.696787][ T8452] gretap2: entered promiscuous mode [ 178.705150][ T8452] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 178.721894][ T8452] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 178.733988][ T8452] bond4: left promiscuous mode [ 178.738892][ T8452] gretap2: left promiscuous mode [ 178.771403][ T8456] : renamed from team_slave_1 [ 179.045465][ T8467] lo speed is unknown, defaulting to 1000 [ 179.062892][ T8467] lo speed is unknown, defaulting to 1000 [ 179.757282][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 179.757301][ T29] audit: type=1400 audit(1769738927.744:3070): avc: denied { bind } for pid=8474 comm="syz.6.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.824960][ T29] audit: type=1400 audit(1769738927.744:3071): avc: denied { node_bind } for pid=8474 comm="syz.6.1608" saddr=::8000:0:20:0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.861295][ T8480] xt_hashlimit: size too large, truncated to 1048576 [ 179.998487][ T8481] bond5: option ad_user_port_key: invalid value (1136) [ 180.005445][ T8481] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 180.016730][ T8481] bond5 (unregistering): Released all slaves [ 180.912752][ T8490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1611'. [ 181.032981][ T8494] loop4: detected capacity change from 0 to 1024 [ 181.060333][ T8494] ext4: Unknown parameter 'nojournal' [ 181.225317][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 181.451791][ T29] audit: type=1400 audit(1769738929.434:3072): avc: denied { write } for pid=8507 comm="syz.1.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 182.622092][ T29] audit: type=1400 audit(1769738930.594:3073): avc: denied { audit_read } for pid=8537 comm="syz.1.1628" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.768848][ T8541] validate_nla: 2 callbacks suppressed [ 182.768910][ T8541] netlink: 'syz.6.1629': attribute type 15 has an invalid length. [ 182.782303][ T8541] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1629'. [ 182.822692][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1631'. [ 182.834958][ T8545] macvlan4: entered promiscuous mode [ 182.841688][ T8545] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 183.104263][ T8552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8552 comm=syz.1.1632 [ 183.949986][ T29] audit: type=1326 audit(1769738931.934:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 183.973654][ T29] audit: type=1326 audit(1769738931.934:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 183.997181][ T29] audit: type=1326 audit(1769738931.934:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16ec83b78e code=0x7ffc0000 [ 184.020675][ T29] audit: type=1326 audit(1769738931.934:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 184.044237][ T29] audit: type=1326 audit(1769738931.934:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 184.067857][ T29] audit: type=1326 audit(1769738931.934:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8559 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 184.203215][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 184.276198][ T8587] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1645'. [ 184.302051][ T8587] 0{X: renamed from gretap0 (while UP) [ 184.315075][ T8587] 0{X: entered allmulticast mode [ 184.331895][ T8587] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 184.356130][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 184.697906][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 184.731772][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 184.886011][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 184.886030][ T29] audit: type=1326 audit(1769738932.864:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 184.959104][ T29] audit: type=1326 audit(1769738932.904:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 184.982587][ T29] audit: type=1326 audit(1769738932.914:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74c747b78e code=0x7ffc0000 [ 185.006225][ T29] audit: type=1326 audit(1769738932.914:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f74c74bc1d7 code=0x7ffc0000 [ 185.029980][ T29] audit: type=1326 audit(1769738932.914:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 185.053519][ T29] audit: type=1326 audit(1769738932.914:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f74c74bc1d7 code=0x7ffc0000 [ 185.077374][ T29] audit: type=1326 audit(1769738932.914:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74c747b78e code=0x7ffc0000 [ 185.100677][ T29] audit: type=1326 audit(1769738932.914:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 185.124245][ T29] audit: type=1326 audit(1769738932.914:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 185.147803][ T29] audit: type=1326 audit(1769738932.914:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.0.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 186.178814][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.189319][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.246864][ T8643] lo speed is unknown, defaulting to 1000 [ 186.260747][ T8643] lo speed is unknown, defaulting to 1000 [ 186.663791][ T8655] tipc: Enabling of bearer rejected, failed to enable media [ 187.058858][ T8670] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1673'. [ 187.163636][ T8670] lo: Caught tx_queue_len zero misconfig [ 187.353797][ T8687] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1679'. [ 187.366796][ T8687] 0{X: renamed from gretap0 (while UP) [ 187.376598][ T8687] 0{X: entered allmulticast mode [ 187.382446][ T8687] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 187.556360][ T8689] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 188.817084][ T8714] tipc: Enabling of bearer rejected, failed to enable media [ 188.919997][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.948703][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.011877][ T8718] lo speed is unknown, defaulting to 1000 [ 189.023942][ T8718] lo speed is unknown, defaulting to 1000 [ 189.078011][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 189.087053][ T8730] netlink: 'syz.4.1692': attribute type 30 has an invalid length. [ 189.132216][ T57] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.151383][ T57] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.166527][ T57] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.176139][ T57] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.276038][ T8739] loop4: detected capacity change from 0 to 512 [ 189.297265][ T8739] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1695: inode has both inline data and extents flags [ 189.325946][ T8739] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1695: couldn't read orphan inode 15 (err -117) [ 189.341903][ T8739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.523271][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 189.534269][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 189.544180][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 189.553447][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 189.563221][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 189.572442][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 190.337213][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 190.337234][ T29] audit: type=1326 audit(1769739194.321:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.383017][ T29] audit: type=1326 audit(1769739194.351:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.406632][ T29] audit: type=1326 audit(1769739194.351:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.430157][ T29] audit: type=1326 audit(1769739194.351:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.453721][ T29] audit: type=1326 audit(1769739194.351:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.477314][ T29] audit: type=1326 audit(1769739194.351:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.501076][ T29] audit: type=1326 audit(1769739194.351:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.524567][ T29] audit: type=1326 audit(1769739194.351:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.548388][ T29] audit: type=1326 audit(1769739194.351:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.571827][ T29] audit: type=1326 audit(1769739194.351:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8767 comm="syz.1.1705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f16ec87aeb9 code=0x7ffc0000 [ 190.652878][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.668586][ T8778] netlink: 'syz.3.1710': attribute type 4 has an invalid length. [ 190.676460][ T8778] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1710'. [ 190.704633][ T8781] netlink: 'syz.6.1712': attribute type 1 has an invalid length. [ 190.721188][ T8778] .`: renamed from 76 (while UP) [ 190.762840][ T8781] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.777769][ T8790] netlink: 'syz.0.1713': attribute type 39 has an invalid length. [ 190.792148][ T8781] macvlan3: entered promiscuous mode [ 190.797546][ T8781] macvlan3: entered allmulticast mode [ 190.803257][ T8781] bond5: entered allmulticast mode [ 190.808523][ T8781] bond5: entered promiscuous mode [ 190.814468][ T8781] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 190.825513][ T8781] team0: Port device macvlan3 added [ 190.876800][ T8781] bond5: (slave ip6gretap2): making interface the new active one [ 190.884629][ T8781] ip6gretap2: entered promiscuous mode [ 190.890339][ T8781] ip6gretap2: entered allmulticast mode [ 190.900944][ T8781] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 191.551659][ T8810] bond8: option ad_user_port_key: invalid value (1136) [ 191.558612][ T8810] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 191.566887][ T8810] bond8 (unregistering): Released all slaves [ 191.887384][ T8815] ------------[ cut here ]------------ [ 191.892926][ T8815] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 191.918036][ T8815] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.6.1716/8815 [ 191.929141][ T8815] Modules linked in: [ 191.933072][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.6.1716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.944445][ T8815] Tainted: [W]=WARN [ 191.948389][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.958491][ T8815] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 191.964938][ T8815] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 191.984621][ T8815] RSP: 0018:ffffc90001877388 EFLAGS: 00010246 [ 191.990836][ T8815] RAX: ffff88811b63dd10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 191.998915][ T8815] RDX: ffffffff867f0723 RSI: ffffffff866bb4e7 RDI: ffffffff86fb97b0 [ 192.006938][ T8815] RBP: ffff88811a242a70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 192.014982][ T8815] R10: ffffffff89153968 R11: ffffffffffffdfcc R12: ffff88811a242a30 [ 192.023115][ T8815] R13: 00000000ffffdfcc R14: ffff88811a242a7c R15: ffff88811a242a68 [ 192.031158][ T8815] FS: 00007f91214e66c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 192.040234][ T8815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.046890][ T8815] CR2: 0000200000b2d000 CR3: 000000014dac4000 CR4: 00000000003506f0 [ 192.054899][ T8815] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 192.063045][ T8815] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 192.071089][ T8815] Call Trace: [ 192.074390][ T8815] [ 192.077390][ T8815] reg_set_min_max+0x1c8/0x260 [ 192.082289][ T8815] check_cond_jmp_op+0x13bd/0x1a80 [ 192.087474][ T8815] do_check+0x440c/0x9060 [ 192.091893][ T8815] do_check_common+0xd0f/0x1630 [ 192.096838][ T8815] bpf_check+0x2f6d/0xc7e0 [ 192.101330][ T8815] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 192.107426][ T8815] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 192.113116][ T8815] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 192.119112][ T8815] ? pcpu_block_update+0x232/0x3b0 [ 192.124317][ T8815] ? _find_next_zero_bit+0x64/0xa0 [ 192.129481][ T8815] ? pcpu_block_update+0x377/0x3b0 [ 192.134819][ T8815] ? pcpu_block_refresh_hint+0x157/0x170 [ 192.140541][ T8815] ? _find_next_zero_bit+0x64/0xa0 [ 192.145810][ T8815] ? pcpu_block_refresh_hint+0x157/0x170 [ 192.152542][ T8815] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 192.158695][ T8815] ? css_rstat_updated+0xbb/0x280 [ 192.163820][ T8815] ? mod_memcg_state+0x182/0x260 [ 192.168941][ T8815] ? __rcu_read_unlock+0x4e/0x70 [ 192.173928][ T8815] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 192.179848][ T8815] ? pcpu_alloc_noprof+0xb08/0x1010 [ 192.185256][ T8815] ? __kmalloc_noprof+0x4a3/0x580 [ 192.190352][ T8815] ? security_bpf_prog_load+0x60/0x140 [ 192.195856][ T8815] ? selinux_bpf_prog_load+0xac/0xd0 [ 192.201260][ T8815] ? security_bpf_prog_load+0x9e/0x140 [ 192.206833][ T8815] bpf_prog_load+0xf76/0x1140 [ 192.211665][ T8815] ? security_bpf+0x2b/0x90 [ 192.216207][ T8815] __sys_bpf+0x469/0x7b0 [ 192.220555][ T8815] __x64_sys_bpf+0x41/0x50 [ 192.225057][ T8815] x64_sys_call+0x28e1/0x3000 [ 192.229944][ T8815] do_syscall_64+0xc0/0x2a0 [ 192.234595][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.240588][ T8815] RIP: 0033:0x7f9122aaaeb9 [ 192.245045][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.264801][ T8815] RSP: 002b:00007f91214e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.273379][ T8815] RAX: ffffffffffffffda RBX: 00007f9122d26090 RCX: 00007f9122aaaeb9 [ 192.281446][ T8815] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 192.289640][ T8815] RBP: 00007f9122b18c1f R08: 0000000000000000 R09: 0000000000000000 [ 192.297787][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.305790][ T8815] R13: 00007f9122d26128 R14: 00007f9122d26090 R15: 00007fffc94626f8 [ 192.314296][ T8815] [ 192.317482][ T8815] ---[ end trace 0000000000000000 ]--- [ 192.347468][ T8807] xt_hashlimit: size too large, truncated to 1048576 [ 193.381113][ T8837] tipc: Started in network mode [ 193.386126][ T8837] tipc: Node identity 3e4c40777995, cluster identity 4711 [ 193.393537][ T8837] tipc: Enabled bearer , priority 0 [ 193.647662][ T8837] syzkaller0: entered promiscuous mode [ 193.653215][ T8837] syzkaller0: entered allmulticast mode [ 193.671003][ T8846] tipc: Resetting bearer [ 193.781673][ T8836] tipc: Resetting bearer [ 193.794665][ T8836] tipc: Disabling bearer [ 195.885476][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 195.885494][ T29] audit: type=1326 audit(1769739199.861:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 195.966439][ T29] audit: type=1326 audit(1769739199.861:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 195.990086][ T29] audit: type=1326 audit(1769739199.911:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.013662][ T29] audit: type=1326 audit(1769739199.911:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.037262][ T29] audit: type=1326 audit(1769739199.911:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.060731][ T29] audit: type=1326 audit(1769739199.911:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.084205][ T29] audit: type=1326 audit(1769739199.911:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.107948][ T29] audit: type=1326 audit(1769739199.911:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.131333][ T29] audit: type=1326 audit(1769739199.911:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.154820][ T29] audit: type=1326 audit(1769739199.911:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8909 comm="syz.0.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 196.331417][ T8915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8915 comm=syz.0.1754 [ 196.365161][ T8915] __nla_validate_parse: 3 callbacks suppressed [ 196.365177][ T8915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1754'. [ 196.371255][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 196.389907][ T8918] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 196.405219][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.424913][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.451236][ T8915] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 196.459961][ T8915] syz_tun: left allmulticast mode [ 196.478074][ T8915] bond0 (unregistering): Released all slaves [ 197.350476][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1760'. [ 197.481249][ T8933] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 197.722750][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1762'. [ 197.758208][ T8949] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 197.926079][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 198.120519][ T8966] tipc: Enabled bearer , priority 0 [ 198.137554][ T8966] syzkaller0: entered promiscuous mode [ 198.143260][ T8966] syzkaller0: entered allmulticast mode [ 198.170057][ T8966] tipc: Resetting bearer [ 198.180781][ T8965] tipc: Resetting bearer [ 198.198384][ T8965] tipc: Disabling bearer [ 198.372805][ T8977] tipc: Enabling of bearer rejected, failed to enable media [ 199.232112][ T8993] loop4: detected capacity change from 0 to 128 [ 199.264860][ T8993] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.349609][ T8993] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.473259][ T9006] syzkaller0: entered promiscuous mode [ 199.475442][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.478882][ T9006] syzkaller0: entered allmulticast mode [ 199.564057][ T9009] lo speed is unknown, defaulting to 1000 [ 199.570475][ T9009] lo speed is unknown, defaulting to 1000 [ 200.014535][ T9015] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 200.022887][ T9015] netlink: 11930 bytes leftover after parsing attributes in process `syz.0.1797'. [ 200.332648][ T9029] netlink: 'syz.3.1791': attribute type 13 has an invalid length. [ 200.340639][ T9029] netlink: 'syz.3.1791': attribute type 17 has an invalid length. [ 200.354345][ T9029] 0{X: left allmulticast mode [ 200.400266][ T9029] 8021q: adding VLAN 0 to HW filter on device .` [ 200.413806][ T9029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.805622][ T9037] loop4: detected capacity change from 0 to 256 [ 201.041761][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.061275][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.138093][ T9039] lo speed is unknown, defaulting to 1000 [ 201.299428][ T9039] lo speed is unknown, defaulting to 1000 [ 201.813060][ T9037] FAT-fs (loop4): Directory bread(block 64) failed [ 201.836346][ T9037] FAT-fs (loop4): Directory bread(block 65) failed [ 201.872467][ T9037] FAT-fs (loop4): Directory bread(block 66) failed [ 201.879211][ T9037] FAT-fs (loop4): Directory bread(block 67) failed [ 201.885881][ T9037] FAT-fs (loop4): Directory bread(block 68) failed [ 201.897903][ T9037] FAT-fs (loop4): Directory bread(block 69) failed [ 201.913883][ T9037] FAT-fs (loop4): Directory bread(block 70) failed [ 201.939381][ T9037] FAT-fs (loop4): Directory bread(block 71) failed [ 201.958240][ T9037] FAT-fs (loop4): Directory bread(block 72) failed [ 202.076342][ T9037] FAT-fs (loop4): Directory bread(block 73) failed [ 202.296939][ T9037] Cannot find set identified by id 0 to match [ 203.001801][ T9075] vlan4: entered promiscuous mode [ 203.007111][ T9075] .`: entered promiscuous mode [ 203.011919][ T9075] bond_slave_0: entered promiscuous mode [ 203.017686][ T9075] bond_slave_1: entered promiscuous mode [ 203.495490][ T9089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1810'. [ 203.539765][ T9089] tipc: Started in network mode [ 203.544783][ T9089] tipc: Node identity , cluster identity 4711 [ 203.551048][ T9089] tipc: Failed to obtain node identity [ 203.556737][ T9089] tipc: Enabling of bearer rejected, failed to enable media [ 203.926976][ T9098] loop4: detected capacity change from 0 to 512 [ 203.949601][ T9098] EXT4-fs: Ignoring removed orlov option [ 203.972302][ T9098] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 203.989031][ T9098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 204.011858][ T9098] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1813: corrupted in-inode xattr: e_value size too large [ 204.031636][ T9098] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1813: couldn't read orphan inode 15 (err -117) [ 204.098042][ T9105] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 204.116559][ T9098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.153645][ T9105] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 204.166097][ T3445] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.177729][ T9105] 8021q: adding VLAN 0 to HW filter on device bond8 [ 204.195020][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.204419][ T9105] veth13: entered promiscuous mode [ 204.212206][ T9105] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 204.244608][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 204.244627][ T29] audit: type=1400 audit(1769739208.221:3651): avc: denied { mount } for pid=9106 comm="syz.0.1817" name="/" dev="rpc_pipefs" ino=30249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 204.276354][ T31] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.306413][ T29] audit: type=1400 audit(1769739208.281:3652): avc: denied { read } for pid=9110 comm="syz.4.1818" name="file0" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.338309][ T9114] lo speed is unknown, defaulting to 1000 [ 204.344834][ T9114] lo speed is unknown, defaulting to 1000 [ 204.360588][ T9118] xt_policy: output policy not valid in PREROUTING and INPUT [ 204.492481][ T9126] lo speed is unknown, defaulting to 1000 [ 204.498890][ T9126] lo speed is unknown, defaulting to 1000 [ 204.609765][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 204.618722][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 204.627846][ T9135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.646904][ T29] audit: type=1400 audit(1769739208.631:3653): avc: denied { load_policy } for pid=9131 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 204.647218][ T9132] SELinux: policydb magic number 0x3130ffff does not match expected magic number 0xf97cff8c [ 204.678519][ T9132] SELinux: failed to load policy [ 204.795726][ T9145] lo: left allmulticast mode [ 204.800597][ T9145] tunl0: left allmulticast mode [ 204.805641][ T9145] gre0: left allmulticast mode [ 204.810562][ T9145] gretap0: left allmulticast mode [ 204.815659][ T9145] erspan0: left allmulticast mode [ 204.820868][ T9145] ip_vti0: left allmulticast mode [ 204.825998][ T9145] ip6_vti0: left allmulticast mode [ 204.831209][ T9145] sit0: left allmulticast mode [ 204.836172][ T9145] ip6tnl0: left allmulticast mode [ 204.841416][ T9145] ip6gre0: left allmulticast mode [ 204.846717][ T9145] vcan0: left allmulticast mode [ 204.851698][ T9145] bond0: left allmulticast mode [ 204.856684][ T9145] team0: left allmulticast mode [ 204.861688][ T9145] nlmon0: left allmulticast mode [ 204.866775][ T9145] caif0: left allmulticast mode [ 204.871705][ T9145] batadv0: left allmulticast mode [ 204.876850][ T9145] veth0: left allmulticast mode [ 204.881802][ T9145] veth1: left allmulticast mode [ 204.886752][ T9145] wg1: left allmulticast mode [ 204.891557][ T9145] wg2: left allmulticast mode [ 204.896342][ T9145] veth0_to_bridge: left allmulticast mode [ 204.902270][ T9145] bridge_slave_0: left allmulticast mode [ 204.908103][ T9145] veth1_to_bridge: left allmulticast mode [ 204.913894][ T9145] bridge_slave_1: left allmulticast mode [ 204.919732][ T9145] veth0_to_bond: left allmulticast mode [ 204.925448][ T9145] : left allmulticast mode [ 204.930193][ T9145] veth1_to_bond: left allmulticast mode [ 204.935919][ T9145] bond_slave_1: left allmulticast mode [ 204.941615][ T9145] veth0_to_team: left allmulticast mode [ 204.947274][ T9145] team_slave_0: left allmulticast mode [ 204.952903][ T9145] veth1_to_team: left allmulticast mode [ 204.958633][ T9145] team_slave_1: left allmulticast mode [ 204.964408][ T9145] veth0_to_batadv: left allmulticast mode [ 204.970527][ T9145] batadv_slave_0: left allmulticast mode [ 204.976327][ T9145] veth1_to_batadv: left allmulticast mode [ 204.982256][ T9145] xfrm0: left allmulticast mode [ 204.987328][ T9145] veth0_to_hsr: left allmulticast mode [ 204.992961][ T9145] hsr0: left allmulticast mode [ 204.997791][ T9145] hsr_slave_0: left allmulticast mode [ 205.003428][ T9145] veth1_virt_wifi: left allmulticast mode [ 205.009330][ T9145] veth0_virt_wifi: left allmulticast mode [ 205.015166][ T9145] veth1_vlan: left allmulticast mode [ 205.020920][ T9145] vlan0: left allmulticast mode [ 205.026064][ T9145] vlan1: left allmulticast mode [ 205.031117][ T9145] macvlan0: left allmulticast mode [ 205.036430][ T9145] macvlan1: left allmulticast mode [ 205.041631][ T9145] ipvlan0: left allmulticast mode [ 205.046760][ T9145] ipvlan1: left allmulticast mode [ 205.051809][ T9145] veth0_vlan: left allmulticast mode [ 205.057225][ T9145] veth1_macvtap: left allmulticast mode [ 205.062878][ T9145] veth0_macvtap: left allmulticast mode [ 205.068615][ T9145] macvtap0: left allmulticast mode [ 205.073864][ T9145] macsec0: left allmulticast mode [ 205.079262][ T9145] geneve1: left allmulticast mode [ 205.084460][ T9145] veth2: left allmulticast mode [ 205.089514][ T9145] veth3: left allmulticast mode [ 205.094569][ T9145] team1: left allmulticast mode [ 205.099525][ T9145] gre1: left allmulticast mode [ 205.104615][ T9145] bridge0.257: left allmulticast mode [ 205.108843][ T29] audit: type=1326 audit(1769739209.091:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 205.110091][ T9145] bridge0: left allmulticast mode [ 205.138680][ T9145] veth4: left allmulticast mode [ 205.143611][ T9145] veth5: left allmulticast mode [ 205.148811][ T9145] bond2: left allmulticast mode [ 205.153861][ T9145] bond3: left allmulticast mode [ 205.158933][ T9145] veth6: left allmulticast mode [ 205.163908][ T9145] veth7: left allmulticast mode [ 205.168870][ T9145] veth8: left allmulticast mode [ 205.173879][ T9145] veth9: left allmulticast mode [ 205.178905][ T9145] veth10: left allmulticast mode [ 205.183994][ T9145] veth11: left allmulticast mode [ 205.189122][ T9145] hsr1: left allmulticast mode [ 205.193917][ T9145] ip6gretap0: left allmulticast mode [ 205.199414][ T9145] GPL: left allmulticast mode [ 205.204294][ T9145] veth12: left allmulticast mode [ 205.209379][ T9145] veth13: left allmulticast mode [ 205.214537][ T9145] ipvlan2: left allmulticast mode [ 205.217787][ T29] audit: type=1326 audit(1769739209.121:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 205.219698][ T9145] batadv_slave_1: left allmulticast mode [ 205.243339][ T29] audit: type=1326 audit(1769739209.121:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 205.248761][ T9145] bond5: left allmulticast mode [ 205.272154][ T29] audit: type=1326 audit(1769739209.121:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 205.277210][ T9145] macvlan2: left allmulticast mode [ 205.300719][ T29] audit: type=1326 audit(1769739209.131:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f74c74baeb9 code=0x7ffc0000 [ 205.305843][ T9145] bond6: left allmulticast mode [ 205.329609][ T29] audit: type=1326 audit(1769739209.171:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74c747b78e code=0x7ffc0000 [ 205.334344][ T9145] veth14: left allmulticast mode [ 205.357841][ T29] audit: type=1326 audit(1769739209.171:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74c747b78e code=0x7ffc0000 [ 205.362868][ T9145] veth15: left allmulticast mode [ 205.391543][ T9145] gre2: left allmulticast mode [ 205.396415][ T9145] ip6tnl1: left allmulticast mode [ 205.401567][ T9145] erspan1: left allmulticast mode [ 205.453247][ T8166] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.492435][ T8166] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.537375][ T8166] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.556414][ T8166] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.591202][ T9159] bridge0: port 3(team0) entered disabled state [ 205.613616][ T9159] team0 (unregistering): left allmulticast mode [ 205.620052][ T9159] team_slave_0: left allmulticast mode [ 205.625818][ T9159] team_slave_1: left allmulticast mode [ 205.631523][ T9159] bridge2: left allmulticast mode [ 205.636683][ T9159] team0 (unregistering): left promiscuous mode [ 205.642890][ T9159] team_slave_0: left promiscuous mode [ 205.648706][ T9159] team_slave_1: left promiscuous mode [ 205.654593][ T9159] bridge2: left promiscuous mode [ 205.659723][ T9159] bridge0: port 3(team0) entered disabled state [ 205.692061][ T9159] team0 (unregistering): Failed to send options change via netlink (err -105) [ 205.701461][ T9159] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 205.712741][ T9159] team0 (unregistering): Port device team_slave_0 removed [ 205.721027][ T9159] team0 (unregistering): Failed to send options change via netlink (err -105) [ 205.730336][ T9159] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 205.741869][ T9159] team0 (unregistering): Port device team_slave_1 removed [ 205.751349][ T9159] team0 (unregistering): Failed to send options change via netlink (err -105) [ 205.760516][ T9159] team0 (unregistering): Failed to send port change of device bridge2 via netlink (err -105) [ 205.771321][ T9159] team0 (unregistering): Port device bridge2 removed [ 205.821257][ T9175] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 206.025216][ T9177] netlink: 'syz.6.1834': attribute type 4 has an invalid length. [ 206.177558][ T9189] lo speed is unknown, defaulting to 1000 [ 206.183668][ T9189] lo speed is unknown, defaulting to 1000 [ 206.430698][ T9198] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1841'. [ 206.569897][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 206.602156][ T9206] lo speed is unknown, defaulting to 1000 [ 206.627113][ T9206] lo speed is unknown, defaulting to 1000 [ 206.661401][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 206.774701][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 207.600979][ T9221] loop4: detected capacity change from 0 to 8192 [ 207.622807][ T9221] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.676428][ T7026] page_pool_release_retry() stalled pool shutdown: id 69, 51 inflight 61 sec [ 208.921878][ T9246] syzkaller0: entered promiscuous mode [ 208.927483][ T9246] syzkaller0: entered allmulticast mode [ 208.954075][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 209.382762][ T9237] syz.1.1854 (9237) used greatest stack depth: 6104 bytes left [ 209.437762][ T9266] loop4: detected capacity change from 0 to 1024 [ 209.479909][ T9266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.492457][ T9266] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.510166][ T9273] ref_ctr increment failed for inode: 0x77f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888151f072c0 [ 209.523651][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 209.523667][ T29] audit: type=1400 audit(1769739213.501:3719): avc: denied { read write } for pid=9265 comm="syz.4.1866" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.525894][ T9266] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1866: bg 0: block 112: padding at end of block bitmap is not set [ 209.529853][ T29] audit: type=1400 audit(1769739213.501:3720): avc: denied { open } for pid=9265 comm="syz.4.1866" path="/356/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.590468][ T9266] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 209.602984][ T9266] EXT4-fs (loop4): This should not happen!! Data will be lost [ 209.602984][ T9266] [ 209.604308][ T9277] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 209.625847][ T29] audit: type=1400 audit(1769739213.591:3721): avc: denied { ioctl } for pid=9265 comm="syz.4.1866" path="/356/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.726615][ T9274] uprobe: syz.6.1867:9274 failed to unregister, leaking uprobe [ 209.758311][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.796745][ T9284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9284 comm=syz.4.1869 [ 209.866248][ T9285] loop4: detected capacity change from 0 to 128 [ 209.910004][ T9285] bio_check_eod: 24 callbacks suppressed [ 209.910024][ T9285] syz.4.1869: attempt to access beyond end of device [ 209.910024][ T9285] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 209.949867][ T9285] syz.4.1869: attempt to access beyond end of device [ 209.949867][ T9285] loop4: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 209.985951][ T9289] syz.4.1869: attempt to access beyond end of device [ 209.985951][ T9289] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 210.020090][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.020090][ T9283] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 210.033918][ T9283] Buffer I/O error on dev loop4, logical block 69, async page read [ 210.166407][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.166407][ T9283] loop4: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 210.180246][ T9283] Buffer I/O error on dev loop4, logical block 70, async page read [ 210.221697][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.221697][ T9283] loop4: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 210.235569][ T9283] Buffer I/O error on dev loop4, logical block 71, async page read [ 210.243870][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.243870][ T9283] loop4: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 210.257696][ T9283] Buffer I/O error on dev loop4, logical block 72, async page read [ 210.265767][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.265767][ T9283] loop4: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 210.279577][ T9283] Buffer I/O error on dev loop4, logical block 69, async page read [ 210.288164][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.288164][ T9283] loop4: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 210.301927][ T9283] Buffer I/O error on dev loop4, logical block 70, async page read [ 210.346461][ T9283] syz.4.1869: attempt to access beyond end of device [ 210.346461][ T9283] loop4: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 210.360374][ T9283] Buffer I/O error on dev loop4, logical block 71, async page read [ 210.383081][ T9295] lo speed is unknown, defaulting to 1000 [ 210.389862][ T9295] lo speed is unknown, defaulting to 1000 [ 210.572941][ T9295] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1872'. [ 210.582257][ T9295] netlink: zone id is out of range [ 210.587448][ T9295] netlink: zone id is out of range [ 210.593012][ T9295] netlink: zone id is out of range [ 210.616460][ T9295] netlink: set zone limit has 8 unknown bytes [ 210.636039][ T9283] Buffer I/O error on dev loop4, logical block 72, async page read [ 210.645914][ T9283] Buffer I/O error on dev loop4, logical block 69, async page read [ 210.654151][ T9283] Buffer I/O error on dev loop4, logical block 70, async page read [ 210.861514][ T9300] syzkaller0: entered promiscuous mode [ 210.867088][ T9300] syzkaller0: entered allmulticast mode [ 211.060196][ T29] audit: type=1400 audit(1769739215.021:3722): avc: denied { mount } for pid=9303 comm="syz.4.1878" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 211.238680][ T9320] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1877'. [ 211.338240][ T9323] netlink: 'syz.6.1880': attribute type 4 has an invalid length. [ 211.938490][ T9311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.009724][ T29] audit: type=1400 audit(1769739215.981:3723): avc: denied { bind } for pid=9324 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.068029][ T9326] netlink: 'syz.0.1881': attribute type 4 has an invalid length. [ 212.132208][ T9327] netlink: 'syz.0.1881': attribute type 4 has an invalid length. [ 212.184855][ T9322] macvlan2: left promiscuous mode [ 212.190026][ T9322] macvlan2: left allmulticast mode [ 212.195354][ T9322] team1: left promiscuous mode [ 212.200231][ T9322] team1: left allmulticast mode [ 212.205820][ T9322] ip6erspan0: left promiscuous mode [ 212.211158][ T9322] bond2: left allmulticast mode [ 212.216042][ T9322] ip6gretap1: left allmulticast mode [ 212.347727][ T9322] bond5: left allmulticast mode [ 212.352738][ T9322] ip6gretap2: left allmulticast mode [ 212.358118][ T9322] bond5: left promiscuous mode [ 212.363027][ T9322] ip6gretap2: left promiscuous mode [ 212.373243][ T29] audit: type=1326 audit(1769739216.351:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 212.396991][ T29] audit: type=1326 audit(1769739216.351:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 212.420481][ T29] audit: type=1326 audit(1769739216.351:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 212.443972][ T29] audit: type=1326 audit(1769739216.351:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 212.467441][ T29] audit: type=1326 audit(1769739216.351:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f875fb3aeb9 code=0x7ffc0000 [ 212.498053][ T9330] 9p: Bad value for 'rfdno' [ 212.502871][ T9322] macvlan3: left promiscuous mode [ 212.508019][ T9322] macvlan3: left allmulticast mode [ 212.591455][ T9333] xt_policy: output policy not valid in PREROUTING and INPUT [ 212.739121][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 212.888609][ T9342] loop4: detected capacity change from 0 to 512 [ 212.920241][ T9342] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 212.929488][ T9342] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 212.946558][ T9342] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 212.968084][ T9342] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 212.981940][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1895'. [ 212.991056][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1895'. [ 213.001103][ T9342] System zones: 0-2, 18-18, 34-35 [ 213.008097][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.055133][ T9369] netlink: 'syz.1.1897': attribute type 16 has an invalid length. [ 213.063551][ T9369] netlink: 'syz.1.1897': attribute type 17 has an invalid length. [ 213.084037][ T9369] 0{X: left allmulticast mode [ 213.118898][ T9369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.219728][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.240278][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1903'. [ 213.282707][ T9386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9386 comm=syz.3.1904 [ 213.306435][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1898'. [ 213.374349][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 213.580994][ T9418] 8021q: VLANs not supported on caif0 [ 213.587595][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 213.596735][ T9421] netlink: 'syz.1.1916': attribute type 7 has an invalid length. [ 213.604492][ T9421] netlink: 'syz.1.1916': attribute type 8 has an invalid length. [ 213.612286][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 214.042500][ T9450] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 214.084756][ T9455] lo speed is unknown, defaulting to 1000 [ 214.091232][ T9455] lo speed is unknown, defaulting to 1000 [ 214.928236][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 214.928251][ T29] audit: type=1400 audit(1769739218.911:3809): avc: denied { listen } for pid=9491 comm="syz.6.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.040924][ T9501] ipip0: entered promiscuous mode [ 215.205857][ T29] audit: type=1326 audit(1769739219.181:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.214532][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 215.229702][ T29] audit: type=1326 audit(1769739219.181:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.233769][ T29] audit: type=1326 audit(1769739219.181:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.285691][ T29] audit: type=1326 audit(1769739219.181:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.309162][ T29] audit: type=1326 audit(1769739219.211:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.332712][ T29] audit: type=1326 audit(1769739219.211:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.356324][ T29] audit: type=1326 audit(1769739219.211:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.380493][ T29] audit: type=1326 audit(1769739219.221:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.404066][ T29] audit: type=1326 audit(1769739219.221:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9518 comm="syz.6.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9122aaaeb9 code=0x7ffc0000 [ 215.469984][ T9527] lo speed is unknown, defaulting to 1000 [ 215.478288][ T9531] tipc: Started in network mode [ 215.483750][ T9531] tipc: Node identity , cluster identity 4711 [ 215.490170][ T9531] tipc: Failed to obtain node identity [ 215.495750][ T9531] tipc: Enabling of bearer rejected, failed to enable media [ 215.505657][ T9527] lo speed is unknown, defaulting to 1000 [ 215.572011][ T9524] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1948'. [ 215.604483][ T9542] netlink: 'syz.6.1954': attribute type 27 has an invalid length. [ 215.614513][ T9524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5292 sclass=netlink_route_socket pid=9524 comm=syz.1.1948 [ 215.627502][ T9524] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1948'. [ 215.876826][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 215.940353][ T9564] lo speed is unknown, defaulting to 1000 [ 215.951245][ T9564] lo speed is unknown, defaulting to 1000 [ 216.223166][ T9576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9576 comm=syz.1.1965 [ 216.278150][ T9578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9578 comm=syz.1.1966 [ 216.378355][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.426332][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1973'. [ 216.456203][ T9594] vlan0: entered allmulticast mode [ 216.461463][ T9594] bond0: entered allmulticast mode [ 216.476836][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1973'. [ 216.519075][ T9597] ip6gre1: entered promiscuous mode [ 216.524394][ T9597] ip6gre1: entered allmulticast mode [ 216.564985][ T9604] syz_tun: entered allmulticast mode [ 216.573907][ T9604] dvmrp8: entered allmulticast mode [ 216.580179][ T9603] syz_tun: left allmulticast mode [ 216.612585][ T9606] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 216.631987][ T9610] lo speed is unknown, defaulting to 1000 [ 216.638384][ T9610] lo speed is unknown, defaulting to 1000 [ 216.688318][ T37] ================================================================== [ 216.696483][ T37] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 216.705653][ T37] [ 216.707999][ T37] write to 0xffffc900001439f0 of 1 bytes by task 9610 on cpu 1: [ 216.715661][ T37] rwsem_down_write_slowpath+0x3eb/0xa80 [ 216.721587][ T37] down_write+0xab/0xc0 [ 216.725778][ T37] kernfs_add_one+0x5a/0x280 [ 216.730404][ T37] __kernfs_create_file+0x145/0x180 [ 216.735639][ T37] sysfs_add_file_mode_ns+0x132/0x1b0 [ 216.741037][ T37] internal_create_group+0x441/0x9e0 [ 216.746356][ T37] sysfs_create_groups+0x3f/0xf0 [ 216.751344][ T37] ib_setup_port_attrs+0xed2/0x14c0 [ 216.756578][ T37] add_one_compat_dev+0x297/0x390 [ 216.761641][ T37] rdma_dev_init_net+0x1b9/0x240 [ 216.766614][ T37] ops_init+0x22a/0x2e0 [ 216.770804][ T37] setup_net+0x9f/0x230 [ 216.774984][ T37] copy_net_ns+0x308/0x450 [ 216.779449][ T37] create_new_namespaces+0x20e/0x440 [ 216.784759][ T37] copy_namespaces+0x1ad/0x210 [ 216.789542][ T37] copy_process+0xce5/0x1f10 [ 216.794175][ T37] kernel_clone+0x16b/0x5b0 [ 216.798714][ T37] __x64_sys_clone+0x143/0x180 [ 216.803499][ T37] x64_sys_call+0x12d0/0x3000 [ 216.808202][ T37] do_syscall_64+0xc0/0x2a0 [ 216.812770][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.818696][ T37] [ 216.821034][ T37] read to 0xffffc900001439f0 of 1 bytes by task 37 on cpu 0: [ 216.828415][ T37] rwsem_down_write_slowpath+0x45e/0xa80 [ 216.834077][ T37] down_write+0xab/0xc0 [ 216.838258][ T37] kernfs_remove+0x50/0x70 [ 216.842699][ T37] sysfs_remove_dir+0x7d/0xa0 [ 216.847402][ T37] __kobject_del+0x97/0x190 [ 216.851929][ T37] kobject_put+0x124/0x180 [ 216.856366][ T37] net_rx_queue_update_kobjects+0x49b/0x540 [ 216.862293][ T37] netdev_unregister_kobject+0xbf/0x270 [ 216.867866][ T37] unregister_netdevice_many_notify+0x1346/0x1710 [ 216.874303][ T37] unregister_netdevice_many+0x19/0x20 [ 216.879787][ T37] ops_undo_list+0x21d/0x420 [ 216.884408][ T37] cleanup_net+0x31c/0x550 [ 216.888849][ T37] process_scheduled_works+0x4cd/0x9d0 [ 216.894338][ T37] worker_thread+0x6bc/0x8b0 [ 216.898956][ T37] kthread+0x488/0x510 [ 216.903082][ T37] ret_from_fork+0x148/0x280 [ 216.907700][ T37] ret_from_fork_asm+0x1a/0x30 [ 216.912493][ T37] [ 216.914828][ T37] value changed: 0x00 -> 0x01 [ 216.919518][ T37] [ 216.921867][ T37] Reported by Kernel Concurrency Sanitizer on: [ 216.928033][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.939342][ T37] Tainted: [W]=WARN [ 216.943161][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.953246][ T37] Workqueue: netns cleanup_net [ 216.958065][ T37] ==================================================================