last executing test programs: 4m14.835676129s ago: executing program 3 (id=4): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 4m14.79324978s ago: executing program 3 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @dev}, 0x10) close(r1) 4m14.639828522s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(0x0, 0x1) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 4m14.561670094s ago: executing program 3 (id=13): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$tun(r1, 0x0, 0x46) 4m13.064341075s ago: executing program 3 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000180)="2cd889f0253e14", 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 4m13.032607816s ago: executing program 32 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000180)="2cd889f0253e14", 0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 2.316306416s ago: executing program 1 (id=6715): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 2.276864757s ago: executing program 1 (id=6717): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.256618907s ago: executing program 1 (id=6718): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xd3, &(0x7f0000000380)={0x0, 0xfffffffc, 0x1000, 0xfffffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x4502, 0xec7c, 0x4, 0x0, 0x0) 2.216444668s ago: executing program 1 (id=6719): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000003680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) pipe2$9p(&(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e24, 0x9, @empty, 0xfff}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) 2.002959711s ago: executing program 1 (id=6727): syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000190a01"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.914606182s ago: executing program 1 (id=6729): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000580)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.914011062s ago: executing program 0 (id=6730): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2(0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) connect$can_bcm(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.899155242s ago: executing program 0 (id=6731): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000002400)) unlinkat(0xffffffffffffffff, 0x0, 0x200) 1.898391452s ago: executing program 2 (id=6732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x2, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0xbf, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x201, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0xb4, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.559394147s ago: executing program 0 (id=6734): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.553760387s ago: executing program 2 (id=6736): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00!', 0x2}], 0x1, 0x7, 0x7) 1.40398175s ago: executing program 2 (id=6737): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.290174801s ago: executing program 2 (id=6738): timerfd_create(0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000002400)) 1.101046864s ago: executing program 4 (id=6741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000580)=[{&(0x7f0000001180)="93", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x80800) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 1.081171865s ago: executing program 4 (id=6742): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) read(r0, &(0x7f0000000240)=""/205, 0xcd) 625.127701ms ago: executing program 0 (id=6747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 607.453732ms ago: executing program 0 (id=6748): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x123642, 0x60) openat(0xffffffffffffff9c, 0x0, 0x4042, 0xe9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 579.797962ms ago: executing program 2 (id=6749): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 577.066862ms ago: executing program 0 (id=6750): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 565.181762ms ago: executing program 5 (id=6751): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX=0x0], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000800)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000000000000a000020ff00000004000400bc00f75599ffffff00000000b33fbff3cf674886beefb8e04fec2dbd251c296bd7fe18fc63e2e74d87d03aad77def9234dacda94bd901d51beee5b41"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006a0001012dbd7000040000000200000000000000de00000070a14c7908a9738bd040e940af8f3a09a94a772f7f42143d9d43578101e8541bdcbc0fc0892cfad6b4bf2c2ae4033a2f640a6f50ec7756718c9dd8d3ac9fba1f137c6cc2d85fe6e9d9617c4c508098501836fef6bd2dd36b273e96eb11dc8cb700f79b97543218220452aa71f46588a0c41e784adda5c081e4cae70510f181aa1ed8"], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r1}, 0x18) 502.443493ms ago: executing program 2 (id=6752): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9dfb6528b25b9848, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x1, &(0x7f0000000300)=@raw=[@exit], 0x0, 0x2, 0x18, &(0x7f0000000380)=""/24, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x2, 0x9, 0x85}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[0x1], 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 501.866803ms ago: executing program 5 (id=6762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff48100180c120d04ca306000000020000760e1860b008d77e00000300", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 229.910927ms ago: executing program 4 (id=6753): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 229.561677ms ago: executing program 5 (id=6754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x2d01, &(0x7f0000000280)={0x0, 0x2756, 0x10100, 0xfffffffe, 0x24}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 121.022639ms ago: executing program 5 (id=6755): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 119.997909ms ago: executing program 4 (id=6756): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$security_selinux(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x31590, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0xa, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x58}}, 0x0) times(0x0) gettid() 98.616949ms ago: executing program 5 (id=6757): socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x1, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5}, {0x5, 0xfffffffe}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x40}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xd, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffc, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x8}, {0x2000, 0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xd, 0x0, 0x0, 0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {0x4}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x4}, {}, {}, {0x4}, {0x3}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 46.21508ms ago: executing program 4 (id=6758): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) socket(0x2b, 0x80801, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.891061ms ago: executing program 5 (id=6759): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 4 (id=6760): timerfd_create(0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000002400)) kernel console output (not intermixed with test programs): ee929 code=0x7ffc0000 [ 192.133845][ T29] audit: type=1326 audit(191.756:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 192.156716][ T29] audit: type=1326 audit(191.756:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 192.179641][ T29] audit: type=1326 audit(191.756:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5846ed290 code=0x7ffc0000 [ 192.202563][ T29] audit: type=1326 audit(191.756:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 192.225428][ T29] audit: type=1326 audit(191.756:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.4699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 192.270057][T15217] vlan0: entered allmulticast mode [ 192.275242][T15217] bond3: entered allmulticast mode [ 192.280376][T15217] gretap1: entered allmulticast mode [ 192.299384][T15217] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 192.363430][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4704'. [ 192.534383][T15233] syzkaller0: entered allmulticast mode [ 192.540346][T15233] syzkaller0: entered promiscuous mode [ 192.547224][T15233] syzkaller0 (unregistering): left allmulticast mode [ 192.554006][T15233] syzkaller0 (unregistering): left promiscuous mode [ 192.685436][T15246] batadv2: entered promiscuous mode [ 192.690758][T15246] batadv2: entered allmulticast mode [ 193.349593][T15294] netlink: 'syz.2.4733': attribute type 1 has an invalid length. [ 193.385729][T15294] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.411759][T15294] bond4: (slave gretap1): making interface the new active one [ 193.429258][T15294] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 193.487776][T15294] vlan2: entered allmulticast mode [ 193.493526][T15294] bond4: entered allmulticast mode [ 193.498668][T15294] gretap1: entered allmulticast mode [ 193.536951][T15300] netlink: 'syz.5.4734': attribute type 1 has an invalid length. [ 193.569243][T15294] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 193.619017][T15303] __nla_validate_parse: 2 callbacks suppressed [ 193.619032][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4734'. [ 193.650411][T15300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.747287][T15303] bond5 (unregistering): Released all slaves [ 194.111679][T15317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4741'. [ 194.945084][T15354] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4756'. [ 194.959912][T15354] batadv1: entered promiscuous mode [ 194.965134][T15354] batadv1: entered allmulticast mode [ 194.998599][T15356] tipc: Enabling of bearer rejected, already enabled [ 195.227151][T15369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.234399][T15369] IPv6: NLM_F_CREATE should be set when creating new route [ 195.797317][T15417] netlink: 'syz.0.4784': attribute type 4 has an invalid length. [ 195.806949][T15417] netlink: 'syz.0.4784': attribute type 4 has an invalid length. [ 195.825244][T15420] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4785'. [ 195.871991][T15420] batadv2: entered promiscuous mode [ 195.877287][T15420] batadv2: entered allmulticast mode [ 195.890799][T14059] IPVS: starting estimator thread 0... [ 195.988819][T15426] IPVS: using max 2688 ests per chain, 134400 per kthread [ 196.169954][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4795'. [ 196.277409][T15451] sch_fq: defrate 2048 ignored. [ 196.428080][T15467] netlink: 'syz.2.4806': attribute type 10 has an invalid length. [ 196.435979][T15467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4806'. [ 196.509438][T15467] dummy0: entered promiscuous mode [ 197.006662][T15501] netlink: 'syz.5.4819': attribute type 1 has an invalid length. [ 197.066788][T15501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.144979][T15501] vlan0: entered allmulticast mode [ 197.150225][T15501] bond5: entered allmulticast mode [ 197.246437][T15523] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 197.262306][T15523] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 197.284900][T15527] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 197.367587][T15535] bridge: RTM_NEWNEIGH with invalid ether address [ 197.380720][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 197.380735][ T29] audit: type=1326 audit(197.366:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.409926][ T29] audit: type=1326 audit(197.366:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.432823][ T29] audit: type=1326 audit(197.366:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.455737][ T29] audit: type=1326 audit(197.366:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.493617][ T29] audit: type=1326 audit(197.366:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.516580][ T29] audit: type=1326 audit(197.406:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.539503][ T29] audit: type=1326 audit(197.406:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.562368][ T29] audit: type=1326 audit(197.406:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.585404][ T29] audit: type=1326 audit(197.406:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.608427][ T29] audit: type=1326 audit(197.406:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15536 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 197.633024][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4833'. [ 197.644273][T15542] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.656429][T15543] tipc: New replicast peer: 0.0.255.255 [ 197.662148][T15543] tipc: Enabled bearer , priority 10 [ 197.735041][T15542] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.787270][T15542] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.840946][T15542] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.887952][T15566] sit0: entered allmulticast mode [ 197.895578][T15566] sit0: entered promiscuous mode [ 197.917739][T15542] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.935128][T15542] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.962665][T15542] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.979849][T15542] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.381873][T15591] bridge: RTM_NEWNEIGH with invalid ether address [ 198.572894][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4855'. [ 198.614736][T15606] all: renamed from lo (while UP) [ 198.789618][T15628] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 198.981250][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4872'. [ 199.891650][T15691] 9pnet: p9_errstr2errno: server reported unknown error [ 199.943298][T15692] vxcan1 speed is unknown, defaulting to 1000 [ 200.092790][T15720] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4896'. [ 200.125473][T15692] lo speed is unknown, defaulting to 1000 [ 200.175707][T15730] 9pnet: p9_errstr2errno: server reported unknown error [ 200.375471][T15752] batadv_slave_0: entered promiscuous mode [ 200.386900][T15752] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 200.415275][T15752] batadv_slave_0 (unregistering): left promiscuous mode [ 200.554786][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4925'. [ 200.731996][T15774] netlink: 'syz.0.4929': attribute type 1 has an invalid length. [ 200.748388][T15774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.775853][T15774] vlan0: entered allmulticast mode [ 200.781128][T15774] bond2: entered allmulticast mode [ 200.971599][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4941'. [ 201.242127][T15811] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.309846][T15811] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.369528][T15822] batman_adv: batadv0: Adding interface: dummy0 [ 201.375835][T15822] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.403685][T15822] batman_adv: batadv0: Interface activated: dummy0 [ 201.412051][T15811] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.430405][T15825] 9pnet: p9_errstr2errno: server reported unknown error [ 201.445999][T15822] batadv0: mtu less than device minimum [ 201.452277][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.463091][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.473808][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.484665][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.495672][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.506461][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.517288][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.528044][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.538958][T15822] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 201.608968][T15811] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.695937][T15811] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.709407][T15811] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.723062][T15811] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.741146][T15833] vxcan1 speed is unknown, defaulting to 1000 [ 201.753989][T15811] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.824986][T15833] lo speed is unknown, defaulting to 1000 [ 202.124808][T15863] 9pnet: p9_errstr2errno: server reported unknown error [ 202.408906][T15886] 9pnet_fd: Insufficient options for proto=fd [ 202.454511][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4980'. [ 202.464125][T15890] batman_adv: batadv0: Interface deactivated: dummy0 [ 202.470875][T15890] batman_adv: batadv0: Removing interface: dummy0 [ 202.502743][T15891] vxcan1 speed is unknown, defaulting to 1000 [ 202.642660][T15891] lo speed is unknown, defaulting to 1000 [ 202.817849][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 202.817864][ T29] audit: type=1326 audit(202.796:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 202.857174][T15923] vlan0: entered allmulticast mode [ 202.888772][ T29] audit: type=1326 audit(202.796:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 202.912246][ T29] audit: type=1326 audit(202.796:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 202.935215][ T29] audit: type=1326 audit(202.796:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 202.958799][ T29] audit: type=1326 audit(202.796:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 202.982317][ T29] audit: type=1326 audit(202.796:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 203.005361][ T29] audit: type=1326 audit(202.796:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 203.028912][ T29] audit: type=1326 audit(202.796:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 203.051871][ T29] audit: type=1326 audit(202.796:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 203.075503][ T29] audit: type=1326 audit(202.796:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15918 comm="syz.5.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 203.118066][T15934] bridge0: port 1(dummy0) entered disabled state [ 203.147252][T15934] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.155811][T15934] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.164313][T15934] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.172795][T15934] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.663047][T15979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5013'. [ 203.692810][T15981] pimreg: entered allmulticast mode [ 203.704245][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 203.721310][T15985] tipc: Started in network mode [ 203.726211][T15985] tipc: Node identity ac14140f, cluster identity 4711 [ 203.733192][T15985] tipc: New replicast peer: 255.255.255.255 [ 203.739493][T15985] tipc: Enabled bearer , priority 10 [ 204.270357][T16033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5039'. [ 204.404315][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5044'. [ 204.858865][ T8394] tipc: Node number set to 2886997007 [ 205.097211][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5065'. [ 205.202468][T16103] vxcan1 speed is unknown, defaulting to 1000 [ 205.324231][T16103] lo speed is unknown, defaulting to 1000 [ 205.416441][T16111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5079'. [ 205.439934][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5079'. [ 205.670624][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5080'. [ 205.684116][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5080'. [ 206.314426][T16192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16192 comm=syz.5.5102 [ 206.466271][T16194] vxcan1 speed is unknown, defaulting to 1000 [ 206.531539][T16194] lo speed is unknown, defaulting to 1000 [ 206.944256][T16239] netlink: 'syz.4.5121': attribute type 12 has an invalid length. [ 207.266990][T16268] netlink: 'syz.4.5134': attribute type 83 has an invalid length. [ 207.327388][T16276] netlink: 'syz.4.5134': attribute type 83 has an invalid length. [ 207.482193][T16295] tipc: Enabling of bearer rejected, failed to enable media [ 207.675267][T16297] vxcan1 speed is unknown, defaulting to 1000 [ 207.744594][T16297] lo speed is unknown, defaulting to 1000 [ 208.119350][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 208.119365][ T29] audit: type=1326 audit(208.106:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.0.5163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x0 [ 208.385723][T16339] net_ratelimit: 12 callbacks suppressed [ 208.385741][T16339] Set syz1 is full, maxelem 65536 reached [ 208.735726][T16385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5180'. [ 208.778506][ T29] audit: type=1400 audit(208.756:3757): avc: denied { ioctl } for pid=16386 comm="syz.2.5182" path="socket:[43838]" dev="sockfs" ino=43838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.864895][T16393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5184'. [ 209.489918][ T8394] lo speed is unknown, defaulting to 1000 [ 209.495764][ T8394] syz0: Port: 1 Link DOWN [ 209.762746][T16466] netlink: 'syz.2.5212': attribute type 4 has an invalid length. [ 209.780051][T16466] netlink: 'syz.2.5212': attribute type 4 has an invalid length. [ 210.001806][T16474] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5215'. [ 210.144828][ T29] audit: type=1326 audit(210.126:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.168478][ T29] audit: type=1326 audit(210.126:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.194376][ T29] audit: type=1326 audit(210.126:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.217395][ T29] audit: type=1326 audit(210.126:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.241147][ T29] audit: type=1326 audit(210.126:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.264062][ T29] audit: type=1326 audit(210.126:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.287731][ T29] audit: type=1326 audit(210.126:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.311375][ T29] audit: type=1326 audit(210.126:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.2.5219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 210.443369][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 210.473018][T16506] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.481301][T16506] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.490144][T16506] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.498342][T16506] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.520201][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 210.606783][T16524] wireguard0: entered promiscuous mode [ 212.218926][T16619] sch_fq: defrate 0 ignored. [ 212.619876][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5280'. [ 212.641317][T16642] netlink: 'syz.0.5282': attribute type 7 has an invalid length. [ 212.649791][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5282'. [ 213.578161][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5292'. [ 213.615807][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5294'. [ 213.633516][T16672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.648192][T16672] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 213.663018][T16672] macvlan0: entered promiscuous mode [ 213.668341][T16672] macvlan0: entered allmulticast mode [ 213.713559][T16672] bond6: entered promiscuous mode [ 213.718628][T16672] bridge9: entered promiscuous mode [ 213.725042][T16672] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 213.734291][T16672] bond6: left promiscuous mode [ 213.739195][T16672] bridge9: left promiscuous mode [ 214.003534][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 214.003548][ T29] audit: type=1400 audit(213.986:3888): avc: denied { getopt } for pid=16717 comm="syz.5.5316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.188273][T16724] x_tables: duplicate underflow at hook 3 [ 214.214720][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'. [ 214.224199][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'. [ 214.234193][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'. [ 214.263094][ T29] audit: type=1326 audit(214.246:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 214.286082][ T29] audit: type=1326 audit(214.246:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 214.312033][ T29] audit: type=1326 audit(214.246:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 214.335379][ T29] audit: type=1326 audit(214.246:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 214.358812][ T29] audit: type=1326 audit(214.246:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 214.381767][ T29] audit: type=1326 audit(214.246:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e2b290847 code=0x7ffc0000 [ 214.405144][ T29] audit: type=1326 audit(214.246:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2e2b2907bc code=0x7ffc0000 [ 214.428048][ T29] audit: type=1326 audit(214.246:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2e2b2906f4 code=0x7ffc0000 [ 214.451384][ T29] audit: type=1326 audit(214.246:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16727 comm="syz.4.5322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2e2b2906f4 code=0x7ffc0000 [ 214.765458][T16756] vxcan1 speed is unknown, defaulting to 1000 [ 214.808458][T16761] netlink: 'syz.2.5336': attribute type 10 has an invalid length. [ 214.827068][T16761] dummy0: left promiscuous mode [ 214.847804][T16761] netlink: 'syz.2.5336': attribute type 10 has an invalid length. [ 214.919955][T16766] wireguard0: entered promiscuous mode [ 214.925442][T16766] wireguard0: entered allmulticast mode [ 214.940450][T16756] lo speed is unknown, defaulting to 1000 [ 215.117541][T16780] netlink: 'syz.5.5342': attribute type 7 has an invalid length. [ 215.125901][T16780] __nla_validate_parse: 4 callbacks suppressed [ 215.125911][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5342'. [ 215.235248][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5348'. [ 215.251950][T16793] bridge0: port 1(batadv0) entered blocking state [ 215.258515][T16793] bridge0: port 1(batadv0) entered disabled state [ 215.266478][T16793] batadv0: entered allmulticast mode [ 215.272909][T16793] batadv0: entered promiscuous mode [ 215.703306][T16820] sch_fq: defrate 0 ignored. [ 215.749224][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 215.758450][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 215.764415][T16829] netlink: 'syz.1.5363': attribute type 27 has an invalid length. [ 215.775851][T16829] wg2: left promiscuous mode [ 215.781050][T16829] wg2: left allmulticast mode [ 215.786034][T16829] macsec0: left promiscuous mode [ 215.791531][T16829] ip6erspan0: left promiscuous mode [ 215.796899][T16829] ip6gre1: left allmulticast mode [ 215.801972][T16829] ip6gre2: left allmulticast mode [ 215.807133][T16829] ip6gre3: left allmulticast mode [ 215.812797][T16829] vxlan0: left promiscuous mode [ 215.817725][T16829] ip6gre4: left allmulticast mode [ 215.823334][T16829] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.831709][T16829] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.840625][T16829] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.848991][T16829] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.211793][T16861] netlink: 'syz.0.5377': attribute type 27 has an invalid length. [ 216.220769][T16861] vxlan0: left promiscuous mode [ 216.283826][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5382'. [ 216.302714][T16873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.323549][T16873] bond5: (slave bridge17): Enslaving as an active interface with an up link [ 216.340923][T16873] macvlan0: entered promiscuous mode [ 216.346254][T16873] macvlan0: entered allmulticast mode [ 216.352955][T16873] bond5: entered promiscuous mode [ 216.358014][T16873] bridge17: entered promiscuous mode [ 216.364084][T16873] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 216.375465][T16873] bond5: left promiscuous mode [ 216.380952][T16873] bridge17: left promiscuous mode [ 216.555448][T16895] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.607071][T16900] netlink: 'syz.2.5391': attribute type 27 has an invalid length. [ 216.616674][T16900] sit0: left promiscuous mode [ 216.621552][T16900] sit0: left allmulticast mode [ 216.649577][T16900] batman_adv: batadv0: Interface deactivated: macvlan0 [ 216.680217][T16900] ip6erspan0: left promiscuous mode [ 216.685655][T16900] ip6gre2: left allmulticast mode [ 216.690847][T16900] ip6gre3: left allmulticast mode [ 216.696076][T16900] gtp0: left promiscuous mode [ 216.709535][T16910] netlink: 'syz.1.5396': attribute type 4 has an invalid length. [ 216.728557][T16910] netlink: 'syz.1.5396': attribute type 4 has an invalid length. [ 216.769981][T16914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5398'. [ 216.823714][T16921] vxcan1 speed is unknown, defaulting to 1000 [ 216.866196][T16927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5403'. [ 216.927767][T16921] lo speed is unknown, defaulting to 1000 [ 217.000117][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 217.020444][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 217.045449][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 217.055000][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 217.066509][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 217.076502][T16937] netlink: 'syz.5.5409': attribute type 27 has an invalid length. [ 217.085181][T16937] wg2: left promiscuous mode [ 217.089988][T16937] wg2: left allmulticast mode [ 217.094898][T16937] geneve0: left allmulticast mode [ 217.100892][T16937] ip6gre2: left allmulticast mode [ 217.106490][T16937] ip6gre3: left allmulticast mode [ 217.111620][T16937] bond0: left allmulticast mode [ 217.116514][T16937] bond2: left allmulticast mode [ 217.121822][T16937] ip6gre4: left allmulticast mode [ 217.127412][T16937] bond4: left promiscuous mode [ 217.133025][T16937] batadv1: left promiscuous mode [ 217.138031][T16937] batadv1: left allmulticast mode [ 217.905659][T16969] netlink: 'syz.4.5422': attribute type 10 has an invalid length. [ 217.930189][T16969] netlink: 'syz.4.5422': attribute type 10 has an invalid length. [ 217.950313][T16969] dummy0: entered promiscuous mode [ 218.037383][T16978] netlink: 'syz.4.5424': attribute type 27 has an invalid length. [ 218.065493][T16978] $Hÿ: left promiscuous mode [ 218.073359][T16978] wg2: left promiscuous mode [ 218.078028][T16978] wg2: left allmulticast mode [ 218.083098][T16978] bridge7: left promiscuous mode [ 218.088119][T16978] bridge7: left allmulticast mode [ 218.093554][T16978] bond0: left allmulticast mode [ 218.098416][T16978] bond3: left allmulticast mode [ 218.385388][T17013] sit0: entered allmulticast mode [ 218.395644][T17013] sit0: entered promiscuous mode [ 219.080862][T17048] wireguard0: entered promiscuous mode [ 219.086393][T17048] wireguard0: entered allmulticast mode [ 219.304038][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 219.304052][ T29] audit: type=1326 audit(219.286:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.352972][ T29] audit: type=1326 audit(219.316:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.375959][ T29] audit: type=1326 audit(219.316:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.398355][ T29] audit: type=1326 audit(219.316:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.421156][ T29] audit: type=1326 audit(219.316:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.443556][ T29] audit: type=1326 audit(219.316:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.466804][ T29] audit: type=1326 audit(219.316:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.489523][ T29] audit: type=1326 audit(219.316:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.511907][ T29] audit: type=1326 audit(219.316:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 219.534725][ T29] audit: type=1326 audit(219.316:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17065 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd18757e929 code=0x7ffc0000 [ 220.406270][T17227] 9pnet: p9_errstr2errno: server reported unknown error [ 220.425700][T17225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=6892 sclass=netlink_audit_socket pid=17225 comm=syz.0.5473 [ 221.358594][T17315] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 221.516640][T17334] __nla_validate_parse: 22 callbacks suppressed [ 221.516721][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5517'. [ 221.662528][T17346] vxcan1 speed is unknown, defaulting to 1000 [ 221.721727][T17346] lo speed is unknown, defaulting to 1000 [ 221.810710][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5526'. [ 221.868458][T17360] wg2: entered promiscuous mode [ 221.873560][T17360] wg2: entered allmulticast mode [ 222.259469][T17407] netlink: 'syz.1.5548': attribute type 1 has an invalid length. [ 222.273600][T17407] bond4: entered promiscuous mode [ 222.278702][T17407] bond4: entered allmulticast mode [ 222.285524][T17407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.298549][T17407] bridge9: entered promiscuous mode [ 222.304620][T17407] bridge9: entered allmulticast mode [ 222.321874][T17407] bond4: (slave bridge9): Enslaving as a backup interface with an up link [ 222.383757][T12230] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 222.500555][T12193] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 223.316075][T17584] vxcan1 speed is unknown, defaulting to 1000 [ 223.435889][T17584] lo speed is unknown, defaulting to 1000 [ 223.574760][T17600] 9pnet: p9_errstr2errno: server reported unknown error [ 224.507208][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 224.507224][ T29] audit: type=1326 audit(224.486:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f3b6858e7 code=0x7ffc0000 [ 224.619365][ T29] audit: type=1326 audit(224.486:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3b62ab19 code=0x7ffc0000 [ 224.642235][ T29] audit: type=1326 audit(224.486:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f3b6858e7 code=0x7ffc0000 [ 224.665899][ T29] audit: type=1326 audit(224.486:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3b62ab19 code=0x7ffc0000 [ 224.689502][ T29] audit: type=1326 audit(224.486:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 224.712416][ T29] audit: type=1326 audit(224.486:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 224.735938][ T29] audit: type=1326 audit(224.486:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 224.759405][ T29] audit: type=1326 audit(224.486:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f3b6858e7 code=0x7ffc0000 [ 224.782201][ T29] audit: type=1326 audit(224.486:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f3b62ab19 code=0x7ffc0000 [ 224.805747][ T29] audit: type=1326 audit(224.486:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17672 comm="syz.1.5580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f3b6858e7 code=0x7ffc0000 [ 224.944760][T17707] vxcan1 speed is unknown, defaulting to 1000 [ 225.065726][T17707] lo speed is unknown, defaulting to 1000 [ 225.140877][T17738] 9pnet: p9_errstr2errno: server reported unknown error [ 225.556529][T17788] wg2: left promiscuous mode [ 225.561288][T17788] wg2: left allmulticast mode [ 225.593411][T17788] wg2: entered promiscuous mode [ 225.598367][T17788] wg2: entered allmulticast mode [ 225.663179][T17798] 9pnet: p9_errstr2errno: server reported unknown error [ 225.722063][T17805] hsr0: entered promiscuous mode [ 225.727426][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5604'. [ 225.736737][T17805] hsr_slave_1: left promiscuous mode [ 225.744183][T17805] hsr0 (unregistering): left promiscuous mode [ 225.820946][T17812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5607'. [ 225.887401][T17822] netlink: 'syz.5.5611': attribute type 1 has an invalid length. [ 225.911396][T17822] bond7: entered promiscuous mode [ 225.916587][T17822] bond7: entered allmulticast mode [ 225.922748][T17822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.940123][T17822] bridge11: entered promiscuous mode [ 225.945569][T17822] bridge11: entered allmulticast mode [ 225.953795][T17822] bond7: (slave bridge11): Enslaving as a backup interface with an up link [ 226.004936][T17831] 9pnet: p9_errstr2errno: server reported unknown error [ 226.019010][ T177] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.138781][ T177] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.515258][T17802] 9pnet_fd: p9_fd_create_tcp (17802): problem connecting socket to 127.0.0.1 [ 226.526305][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5624'. [ 226.664593][T17862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5629'. [ 226.689889][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5629'. [ 226.751007][T17874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=17874 comm=syz.4.5630 [ 226.787891][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5634'. [ 226.904674][T17900] 9pnet: p9_errstr2errno: server reported unknown error [ 227.532062][T17941] wg2: entered promiscuous mode [ 227.537034][T17941] wg2: entered allmulticast mode [ 227.593032][T17946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=17946 comm=syz.2.5668 [ 227.743290][T17950] 9pnet: p9_errstr2errno: server reported unknown error [ 227.752911][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5660'. [ 227.762545][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5660'. [ 227.808632][T17959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5663'. [ 227.965445][T17971] vxcan1 speed is unknown, defaulting to 1000 [ 227.999176][T17975] 9pnet_rdma: rdma_create_trans (17975): problem binding to privport: 13 [ 228.041180][T17971] lo speed is unknown, defaulting to 1000 [ 228.291024][T17988] vxcan1 speed is unknown, defaulting to 1000 [ 228.344834][T17988] lo speed is unknown, defaulting to 1000 [ 228.402073][T17996] 9pnet: p9_errstr2errno: server reported unknown error [ 228.942988][T18030] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5692'. [ 229.100592][T18036] vxcan1 speed is unknown, defaulting to 1000 [ 229.331352][T18036] lo speed is unknown, defaulting to 1000 [ 229.471784][T18040] wg2: entered promiscuous mode [ 229.476696][T18040] wg2: entered allmulticast mode [ 229.911541][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5705'. [ 229.962010][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5705'. [ 230.010369][T18056] vxcan1 speed is unknown, defaulting to 1000 [ 230.140169][T18085] syzkaller0: entered allmulticast mode [ 230.155598][T18085] syzkaller0 (unregistering): left allmulticast mode [ 230.387175][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 230.387187][ T29] audit: type=1400 audit(230.366:4212): avc: denied { setopt } for pid=18081 comm="syz.4.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.541418][T18056] lo speed is unknown, defaulting to 1000 [ 230.854935][T18116] vxcan1 speed is unknown, defaulting to 1000 [ 230.961480][T18116] lo speed is unknown, defaulting to 1000 [ 231.180016][ T29] audit: type=1400 audit(231.166:4213): avc: denied { getopt } for pid=18127 comm="syz.4.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.478677][T18133] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 231.528638][ T29] audit: type=1326 audit(231.506:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 231.552157][ T29] audit: type=1326 audit(231.506:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 231.575059][ T29] audit: type=1326 audit(231.506:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 231.598612][ T29] audit: type=1326 audit(231.506:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e2b28e963 code=0x7ffc0000 [ 231.622025][ T29] audit: type=1326 audit(231.506:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e2b28d3df code=0x7ffc0000 [ 231.644851][ T29] audit: type=1326 audit(231.506:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e2b28e9b7 code=0x7ffc0000 [ 231.672109][ T29] audit: type=1326 audit(231.656:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e2b28d290 code=0x7ffc0000 [ 231.695714][ T29] audit: type=1326 audit(231.656:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18141 comm="syz.4.5737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e2b28d58a code=0x7ffc0000 [ 231.885833][T18164] netlink: 'syz.0.5744': attribute type 4 has an invalid length. [ 231.913869][T18170] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.021450][T18179] __nla_validate_parse: 7 callbacks suppressed [ 232.021466][T18179] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5753'. [ 232.242613][T18198] vxcan1 speed is unknown, defaulting to 1000 [ 232.323391][T18198] lo speed is unknown, defaulting to 1000 [ 232.634056][T18214] vxcan1 speed is unknown, defaulting to 1000 [ 232.764603][T18214] lo speed is unknown, defaulting to 1000 [ 233.127423][T18244] netlink: 'syz.2.5775': attribute type 21 has an invalid length. [ 233.147612][T18244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5775'. [ 233.395280][T18253] netlink: 'syz.2.5782': attribute type 7 has an invalid length. [ 233.403121][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5782'. [ 233.514754][T18260] netlink: 'syz.4.5785': attribute type 7 has an invalid length. [ 233.522705][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5785'. [ 233.779464][T18270] vxcan1 speed is unknown, defaulting to 1000 [ 234.055355][T18285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5793'. [ 234.073625][T18283] syzkaller0: entered allmulticast mode [ 234.092784][T18283] syzkaller0 (unregistering): left allmulticast mode [ 234.131190][T18270] lo speed is unknown, defaulting to 1000 [ 234.226838][T18294] netlink: 'syz.1.5797': attribute type 4 has an invalid length. [ 234.382348][T18298] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5808'. [ 234.392201][T18298] 0ªX¹¦À: renamed from caif0 [ 234.398580][T18298] 0ªX¹¦À: entered allmulticast mode [ 234.403876][T18298] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 234.672277][T18316] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5805'. [ 234.695052][T18319] syzkaller0: entered allmulticast mode [ 234.703419][T18319] syzkaller0 (unregistering): left allmulticast mode [ 234.715998][T18322] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.770175][T18321] vxcan1 speed is unknown, defaulting to 1000 [ 234.836754][T18321] lo speed is unknown, defaulting to 1000 [ 234.872169][T18331] netlink: 'syz.1.5812': attribute type 4 has an invalid length. [ 234.903304][T18331] netlink: 'syz.1.5812': attribute type 4 has an invalid length. [ 235.632859][T18350] 9pnet_fd: Insufficient options for proto=fd [ 235.931107][T18370] tipc: Bearer : already 2 bearers with priority 10 [ 235.938370][T18370] tipc: Bearer : trying with adjusted priority [ 236.078992][T18370] tipc: New replicast peer: 0.0.255.255 [ 236.084611][T18370] tipc: Enabled bearer , priority 9 [ 236.381477][T18382] syzkaller0: entered allmulticast mode [ 236.388549][T18382] syzkaller0 (unregistering): left allmulticast mode [ 236.495858][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 236.495932][ T29] audit: type=1400 audit(236.466:4353): avc: denied { getopt } for pid=18391 comm="syz.0.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.703265][T18414] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5850'. [ 236.725655][T18414] 0ªX¹¦À: renamed from caif0 [ 236.742642][T18414] 0ªX¹¦À: entered allmulticast mode [ 236.747939][T18414] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 236.790677][T18416] syzkaller0: entered allmulticast mode [ 236.796454][T18416] syzkaller0: entered promiscuous mode [ 236.824952][T18416] syzkaller0 (unregistering): left allmulticast mode [ 236.831717][T18416] syzkaller0 (unregistering): left promiscuous mode [ 237.075063][ T29] audit: type=1400 audit(237.056:4354): avc: denied { name_bind } for pid=18432 comm="syz.4.5858" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 237.108960][T18431] netlink: zone id is out of range [ 237.114100][T18431] netlink: zone id is out of range [ 237.119474][T18431] netlink: zone id is out of range [ 237.124617][T18431] netlink: zone id is out of range [ 237.145325][T18431] netlink: zone id is out of range [ 237.152290][T18431] netlink: zone id is out of range [ 237.175076][T18431] netlink: zone id is out of range [ 237.182270][T18431] netlink: zone id is out of range [ 237.203209][T18441] 9pnet_fd: Insufficient options for proto=fd [ 237.288944][T12189] failed while handling packet from 1:16385 [ 237.288965][T12189] failed while handling packet from 1:16385 [ 237.304867][T12189] failed while handling packet from 1:16385 [ 237.312736][T12189] failed while handling packet from 1:16385 [ 237.319654][T12189] failed while handling packet from 1:16385 [ 237.325724][T12189] failed while handling packet from 1:16385 [ 237.332543][T12189] failed while handling packet from 1:16385 [ 237.338543][T12189] failed while handling packet from 1:16385 [ 237.345002][T12189] failed while handling packet from 1:16385 [ 237.351322][T12189] failed while handling packet from 1:16385 [ 237.357499][T12189] failed while handling packet from 1:16385 [ 237.364253][T12189] failed while handling packet from 1:16385 [ 237.378420][T18452] tipc: New replicast peer: 0.0.255.255 [ 237.378771][T12189] failed while handling packet from 1:16385 [ 237.384390][T18452] tipc: Enabled bearer , priority 10 [ 237.391090][T12189] failed while handling packet from 1:16385 [ 237.411000][T12189] failed while handling packet from 1:16385 [ 237.436199][T12189] failed while handling packet from 1:16385 [ 237.442308][T12189] failed while handling packet from 1:16385 [ 237.448257][T12189] failed while handling packet from 1:16385 [ 237.456690][T12189] failed while handling packet from 1:16385 [ 237.463159][T12189] failed while handling packet from 1:16385 [ 237.464947][T18458] netlink: 'syz.5.5867': attribute type 7 has an invalid length. [ 237.469293][T12189] failed while handling packet from 1:16385 [ 237.469310][T12189] failed while handling packet from 1:16385 [ 237.469323][T12189] failed while handling packet from 1:16385 [ 237.469355][T12189] failed while handling packet from 1:16385 [ 237.469368][T12189] failed while handling packet from 1:16385 [ 237.469382][T12189] failed while handling packet from 1:16385 [ 237.469394][T12189] failed while handling packet from 1:16385 [ 237.469408][T12189] failed while handling packet from 1:16385 [ 237.469421][T12189] failed while handling packet from 1:16385 [ 237.469432][T12189] failed while handling packet from 1:16385 [ 237.469445][T12189] failed while handling packet from 1:16385 [ 237.469499][T12189] failed while handling packet from 1:16385 [ 237.469512][T12189] failed while handling packet from 1:16385 [ 237.469525][T12189] failed while handling packet from 1:16385 [ 237.469538][T12189] failed while handling packet from 1:16385 [ 237.469550][T12189] failed while handling packet from 1:16385 [ 237.469563][T12189] failed while handling packet from 1:16385 [ 237.469637][T12189] failed while handling packet from 1:16385 [ 237.469650][T12189] failed while handling packet from 1:16385 [ 237.469663][T12189] failed while handling packet from 1:16385 [ 237.469676][T12189] failed while handling packet from 1:16385 [ 237.469689][T12189] failed while handling packet from 1:16385 [ 237.469701][T12189] failed while handling packet from 1:16385 [ 237.469712][T12189] failed while handling packet from 1:16385 [ 237.469724][T12189] failed while handling packet from 1:16385 [ 237.469805][T12189] failed while handling packet from 1:16385 [ 237.475603][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5867'. [ 237.656586][T12189] failed while handling packet from 1:16385 [ 237.656606][T12189] failed while handling packet from 1:16385 [ 237.677581][T12189] failed while handling packet from 1:16385 [ 237.683895][T12189] failed while handling packet from 1:16385 [ 237.691449][T12189] failed while handling packet from 1:16385 [ 237.697663][T12189] failed while handling packet from 1:16385 [ 237.704263][T12189] failed while handling packet from 1:16385 [ 237.710423][T12189] failed while handling packet from 1:16385 [ 237.716621][T12189] failed while handling packet from 1:16385 [ 237.723512][T12189] failed while handling packet from 1:16385 [ 237.729703][T12189] failed while handling packet from 1:16385 [ 237.735747][T12189] failed while handling packet from 1:16385 [ 237.751430][T12189] failed while handling packet from 1:16385 [ 237.757407][T12189] failed while handling packet from 1:16385 [ 237.763539][T12189] failed while handling packet from 1:16385 [ 237.769526][T12189] failed while handling packet from 1:16385 [ 237.775434][T12189] failed while handling packet from 1:16385 [ 237.785043][T12189] failed while handling packet from 1:16385 [ 237.791254][T12189] failed while handling packet from 1:16385 [ 237.797285][T12189] failed while handling packet from 1:16385 [ 237.803368][T12189] failed while handling packet from 1:16385 [ 237.810034][T12189] failed while handling packet from 1:16385 [ 237.815996][T12189] failed while handling packet from 1:16385 [ 237.823073][T12189] failed while handling packet from 1:16385 [ 237.830845][T12189] failed while handling packet from 1:16385 [ 237.836856][T12189] failed while handling packet from 1:16385 [ 237.845699][T12189] failed while handling packet from 1:16385 [ 237.853457][T12189] failed while handling packet from 1:16385 [ 237.859712][T12189] failed while handling packet from 1:16385 [ 237.865726][T12189] failed while handling packet from 1:16385 [ 237.874163][T12189] failed while handling packet from 1:16385 [ 237.880355][T12189] failed while handling packet from 1:16385 [ 237.881204][T18472] netlink: 'syz.0.5875': attribute type 4 has an invalid length. [ 237.886386][T12189] failed while handling packet from 1:16385 [ 237.902569][T12189] failed while handling packet from 1:16385 [ 237.908546][T12189] failed while handling packet from 1:16385 [ 237.918250][T12189] failed while handling packet from 1:16385 [ 237.920885][T18474] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 237.924421][T12189] failed while handling packet from 1:16385 [ 237.933585][T18472] netlink: 'syz.0.5875': attribute type 4 has an invalid length. [ 237.938672][T12189] failed while handling packet from 1:16385 [ 237.952318][T12189] failed while handling packet from 1:16385 [ 237.958325][T12189] failed while handling packet from 1:16385 [ 237.965005][T12189] failed while handling packet from 1:16385 [ 237.972335][T12189] failed while handling packet from 1:16385 [ 237.978272][T12189] failed while handling packet from 1:16385 [ 237.984432][T12189] failed while handling packet from 1:16385 [ 237.992614][T12189] failed while handling packet from 1:16385 [ 237.998587][T12189] failed while handling packet from 1:16385 [ 238.004726][T12189] failed while handling packet from 1:16385 [ 238.011238][T18474] bond5: entered promiscuous mode [ 238.013813][T12189] failed while handling packet from 1:16385 [ 238.017182][T18474] bond5: entered allmulticast mode [ 238.022989][T12189] failed while handling packet from 1:16385 [ 238.023010][T12189] failed while handling packet from 1:16385 [ 238.040222][T12189] failed while handling packet from 1:16385 [ 238.046181][T12189] failed while handling packet from 1:16385 [ 238.052897][T12189] failed while handling packet from 1:16385 [ 238.057646][T18474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.058849][T12189] failed while handling packet from 1:16385 [ 238.058864][T12189] failed while handling packet from 1:16385 [ 238.058876][T12189] failed while handling packet from 1:16385 [ 238.058899][T12189] failed while handling packet from 1:16385 [ 238.058912][T12189] failed while handling packet from 1:16385 [ 238.058923][T12189] failed while handling packet from 1:16385 [ 238.058934][T12189] failed while handling packet from 1:16385 [ 238.058965][T12189] failed while handling packet from 1:16385 [ 238.058977][T12189] failed while handling packet from 1:16385 [ 238.058988][T12189] failed while handling packet from 1:16385 [ 238.059055][T12189] failed while handling packet from 1:16385 [ 238.059068][T12189] failed while handling packet from 1:16385 [ 238.059143][T12189] failed while handling packet from 1:16385 [ 238.059156][T12189] failed while handling packet from 1:16385 [ 238.059167][T12189] failed while handling packet from 1:16385 [ 238.059177][T12189] failed while handling packet from 1:16385 [ 238.059243][T12189] failed while handling packet from 1:16385 [ 238.059255][T12189] failed while handling packet from 1:16385 [ 238.059269][T12189] failed while handling packet from 1:16385 [ 238.059280][T12189] failed while handling packet from 1:16385 [ 238.059293][T12189] failed while handling packet from 1:16385 [ 238.059305][T12189] failed while handling packet from 1:16385 [ 238.059318][T12189] failed while handling packet from 1:16385 [ 238.059329][T12189] failed while handling packet from 1:16385 [ 238.059383][T12189] failed while handling packet from 1:16385 [ 238.059396][T12189] failed while handling packet from 1:16385 [ 238.059406][T12189] failed while handling packet from 1:16385 [ 238.059416][T12189] failed while handling packet from 1:16385 [ 238.059427][T12189] failed while handling packet from 1:16385 [ 238.124681][T18483] ip6gretap2: entered promiscuous mode [ 238.126667][T12189] failed while handling packet from 1:16385 [ 238.133139][T18483] ip6gretap2: entered allmulticast mode [ 238.138352][T12189] failed while handling packet from 1:16385 [ 238.193541][T18483] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 238.201049][T12189] failed while handling packet from 1:16385 [ 238.279467][T12189] failed while handling packet from 1:16385 [ 238.285378][T12189] failed while handling packet from 1:16385 [ 238.292266][T12189] failed while handling packet from 1:16385 [ 238.298236][T12189] failed while handling packet from 1:16385 [ 238.304223][T12189] failed while handling packet from 1:16385 [ 238.310190][T12189] failed while handling packet from 1:16385 [ 238.316157][T12189] failed while handling packet from 1:16385 [ 238.338740][T12189] failed while handling packet from 1:16385 [ 238.344816][T12189] failed while handling packet from 1:16385 [ 238.374828][T12189] failed while handling packet from 1:16385 [ 238.383094][T12189] failed while handling packet from 1:16385 [ 238.404926][T12189] failed while handling packet from 1:16385 [ 238.411633][T12189] failed while handling packet from 1:16385 [ 238.417682][T12189] failed while handling packet from 1:16385 [ 238.423912][T12189] failed while handling packet from 1:16385 [ 238.430235][T12189] failed while handling packet from 1:16385 [ 238.436294][T12189] failed while handling packet from 1:16385 [ 238.442851][T12189] failed while handling packet from 1:16385 [ 238.471440][T12189] failed while handling packet from 1:16385 [ 238.481806][T12189] failed while handling packet from 1:16385 [ 238.489488][T12189] failed while handling packet from 1:16385 [ 238.495445][T12189] failed while handling packet from 1:16385 [ 238.502096][T12189] failed while handling packet from 1:16385 [ 238.508148][T12189] failed while handling packet from 1:16385 [ 238.514231][T12189] failed while handling packet from 1:16385 [ 238.520248][T12189] failed while handling packet from 1:16385 [ 238.526226][T12189] failed while handling packet from 1:16385 [ 238.532813][T12189] failed while handling packet from 1:16385 [ 238.538941][T12189] failed while handling packet from 1:16385 [ 238.544971][T12189] failed while handling packet from 1:16385 [ 238.550983][T12189] failed while handling packet from 1:16385 [ 238.557027][T12189] failed while handling packet from 1:16385 [ 238.582772][T12189] failed while handling packet from 1:16385 [ 238.593458][T12189] failed while handling packet from 1:16385 [ 238.600284][T12189] failed while handling packet from 1:16385 [ 238.606341][T12189] failed while handling packet from 1:16385 [ 238.612438][T12189] failed while handling packet from 1:16385 [ 238.618461][T12189] failed while handling packet from 1:16385 [ 238.650753][T12189] failed while handling packet from 1:16385 [ 238.656773][T12189] failed while handling packet from 1:16385 [ 238.662820][T12189] failed while handling packet from 1:16385 [ 238.668773][T12189] failed while handling packet from 1:16385 [ 238.674764][T12189] failed while handling packet from 1:16385 [ 238.681366][T12189] failed while handling packet from 1:16385 [ 238.687597][T12189] failed while handling packet from 1:16385 [ 238.697754][T12189] failed while handling packet from 1:16385 [ 238.703882][T12189] failed while handling packet from 1:16385 [ 238.720020][T12189] failed while handling packet from 1:16385 [ 238.726001][T12189] failed while handling packet from 1:16385 [ 238.733574][T12189] failed while handling packet from 1:16385 [ 238.740233][T12189] failed while handling packet from 1:16385 [ 238.746248][T12189] failed while handling packet from 1:16385 [ 238.753915][T12189] failed while handling packet from 1:16385 [ 238.760009][T12189] failed while handling packet from 1:16385 [ 238.765966][T12189] failed while handling packet from 1:16385 [ 238.774680][T12189] failed while handling packet from 1:16385 [ 238.780816][T12189] failed while handling packet from 1:16385 [ 238.787003][T12189] failed while handling packet from 1:16385 [ 238.794738][T12189] failed while handling packet from 1:16385 [ 238.801539][T12189] failed while handling packet from 1:16385 [ 238.807565][T12189] failed while handling packet from 1:16385 [ 238.852196][T12189] failed while handling packet from 1:16385 [ 238.863792][T12189] failed while handling packet from 1:16385 [ 238.873986][T12189] failed while handling packet from 1:16385 [ 238.893981][T12189] failed while handling packet from 1:16385 [ 238.900646][T12189] failed while handling packet from 1:16385 [ 238.906619][T12189] failed while handling packet from 1:16385 [ 238.915011][T12189] failed while handling packet from 1:16385 [ 238.921246][T12189] failed while handling packet from 1:16385 [ 238.927362][T12189] failed while handling packet from 1:16385 [ 238.935597][T12189] failed while handling packet from 1:16385 [ 238.941653][T12189] failed while handling packet from 1:16385 [ 238.947769][T12189] failed while handling packet from 1:16385 [ 238.955312][T12189] failed while handling packet from 1:16385 [ 238.962121][T12189] failed while handling packet from 1:16385 [ 238.968271][T12189] failed while handling packet from 1:16385 [ 238.975899][T12189] failed while handling packet from 1:16385 [ 238.981896][T12189] failed while handling packet from 1:16385 [ 238.988064][T12189] failed while handling packet from 1:16385 [ 239.017414][T12189] failed while handling packet from 1:16385 [ 239.027299][T12189] failed while handling packet from 1:16385 [ 239.034064][T12189] failed while handling packet from 1:16385 [ 239.042576][T12189] failed while handling packet from 1:16385 [ 239.048688][T12189] failed while handling packet from 1:16385 [ 239.054882][T12189] failed while handling packet from 1:16385 [ 239.063191][T12189] failed while handling packet from 1:16385 [ 239.069346][T12189] failed while handling packet from 1:16385 [ 239.075506][T12189] failed while handling packet from 1:16385 [ 239.087423][T12189] failed while handling packet from 1:16385 [ 239.094366][T12189] failed while handling packet from 1:16385 [ 239.105103][T12189] failed while handling packet from 1:16385 [ 239.115459][T12189] failed while handling packet from 1:16385 [ 239.134485][T12189] failed while handling packet from 1:16385 [ 239.149796][T12189] failed while handling packet from 1:16385 [ 239.160799][T12189] failed while handling packet from 1:16385 [ 239.175718][T12189] failed while handling packet from 1:16385 [ 239.188917][T12189] failed while handling packet from 1:16385 [ 239.480866][T18530] syzkaller0: entered allmulticast mode [ 239.494106][T18530] syzkaller0: entered promiscuous mode [ 239.510076][T18530] syzkaller0 (unregistering): left allmulticast mode [ 239.516819][T18530] syzkaller0 (unregistering): left promiscuous mode [ 239.631988][T18534] batadv_slave_1: entered promiscuous mode [ 239.643954][T18534] batadv_slave_1: left promiscuous mode [ 239.757981][T18508] syz.1.5886 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 239.773021][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.1.5886 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 239.773045][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.773060][T18508] Call Trace: [ 239.773065][T18508] [ 239.773072][T18508] __dump_stack+0x1d/0x30 [ 239.773128][T18508] dump_stack_lvl+0xe8/0x140 [ 239.773144][T18508] dump_stack+0x15/0x1b [ 239.773158][T18508] dump_header+0x81/0x220 [ 239.773226][T18508] oom_kill_process+0x334/0x3f0 [ 239.773251][T18508] out_of_memory+0x979/0xb80 [ 239.773276][T18508] try_charge_memcg+0x5e6/0x9e0 [ 239.773311][T18508] obj_cgroup_charge_pages+0xa6/0x150 [ 239.773369][T18508] __memcg_kmem_charge_page+0x9f/0x170 [ 239.773393][T18508] __alloc_frozen_pages_noprof+0x188/0x360 [ 239.773422][T18508] alloc_pages_mpol+0xb3/0x250 [ 239.773484][T18508] alloc_pages_noprof+0x90/0x130 [ 239.773509][T18508] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 239.773546][T18508] __kvmalloc_node_noprof+0x30f/0x4e0 [ 239.773581][T18508] ? ip_set_alloc+0x1f/0x30 [ 239.773605][T18508] ? ip_set_alloc+0x1f/0x30 [ 239.773693][T18508] ? __kmalloc_cache_noprof+0x189/0x320 [ 239.773716][T18508] ip_set_alloc+0x1f/0x30 [ 239.773798][T18508] hash_netiface_create+0x282/0x740 [ 239.773828][T18508] ? __pfx_hash_netiface_create+0x10/0x10 [ 239.773916][T18508] ip_set_create+0x3c9/0x960 [ 239.773952][T18508] ? __nla_parse+0x40/0x60 [ 239.773981][T18508] nfnetlink_rcv_msg+0x4c3/0x590 [ 239.774089][T18508] ? selinux_capable+0x1f9/0x270 [ 239.774147][T18508] netlink_rcv_skb+0x120/0x220 [ 239.774242][T18508] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.774270][T18508] nfnetlink_rcv+0x16b/0x1690 [ 239.774302][T18508] ? __rcu_read_lock+0x37/0x50 [ 239.774332][T18508] ? css_rstat_updated+0xcd/0x5b0 [ 239.774372][T18508] ? __pte_offset_map_lock+0x1d4/0x230 [ 239.774463][T18508] ? __rcu_read_unlock+0x4f/0x70 [ 239.774481][T18508] ? strnchr+0x1e/0x40 [ 239.774497][T18508] ? bpf_bprintf_prepare+0xc42/0xd50 [ 239.774523][T18508] ? bpf_trace_vprintk+0x119/0x200 [ 239.774551][T18508] ? __rcu_read_unlock+0x4f/0x70 [ 239.774576][T18508] ? should_fail_ex+0x30/0x280 [ 239.774600][T18508] ? selinux_nlmsg_lookup+0x99/0x890 [ 239.774689][T18508] ? selinux_netlink_send+0x59f/0x5f0 [ 239.774715][T18508] ? __rcu_read_unlock+0x34/0x70 [ 239.774733][T18508] ? __netlink_lookup+0x266/0x2a0 [ 239.774788][T18508] netlink_unicast+0x5a5/0x680 [ 239.774858][T18508] netlink_sendmsg+0x58b/0x6b0 [ 239.774876][T18508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.774899][T18508] __sock_sendmsg+0x145/0x180 [ 239.774921][T18508] ____sys_sendmsg+0x31e/0x4e0 [ 239.774981][T18508] ___sys_sendmsg+0x17b/0x1d0 [ 239.775070][T18508] __x64_sys_sendmsg+0xd4/0x160 [ 239.775100][T18508] x64_sys_call+0x2999/0x2fb0 [ 239.775119][T18508] do_syscall_64+0xd2/0x200 [ 239.775133][T18508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.775232][T18508] ? clear_bhb_loop+0x40/0x90 [ 239.775302][T18508] ? clear_bhb_loop+0x40/0x90 [ 239.775376][T18508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.775394][T18508] RIP: 0033:0x7f6f3b68e929 [ 239.775418][T18508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.775432][T18508] RSP: 002b:00007f6f39cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.775453][T18508] RAX: ffffffffffffffda RBX: 00007f6f3b8b5fa0 RCX: 00007f6f3b68e929 [ 239.775464][T18508] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 239.775473][T18508] RBP: 00007f6f3b710ca1 R08: 0000000000000000 R09: 0000000000000000 [ 239.775560][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.775569][T18508] R13: 0000000000000000 R14: 00007f6f3b8b5fa0 R15: 00007ffda1bc44c8 [ 239.775583][T18508] [ 239.775595][T18508] memory: usage 307200kB, limit 307200kB, failcnt 988 [ 240.157005][T18508] memory+swap: usage 307328kB, limit 9007199254740988kB, failcnt 0 [ 240.165732][T18508] kmem: usage 239616kB, limit 9007199254740988kB, failcnt 0 [ 240.173115][T18508] Memory cgroup stats for /syz1: [ 240.181628][T18508] cache 68997120 [ 240.190272][T18508] rss 208896 [ 240.193622][T18508] shmem 81920 [ 240.197010][T18508] mapped_file 8192 [ 240.200866][T18508] dirty 4096 [ 240.204115][T18508] writeback 0 [ 240.207420][T18508] workingset_refault_anon 4112 [ 240.212800][T18508] workingset_refault_file 5559 [ 240.217571][T18508] swap 131072 [ 240.220861][T18508] swapcached 0 [ 240.224232][T18508] pgpgin 405781 [ 240.227729][T18508] pgpgout 388885 [ 240.231262][T18508] pgfault 351409 [ 240.234784][T18508] pgmajfault 625 [ 240.238304][T18508] inactive_anon 270336 [ 240.242736][T18508] active_anon 4096 [ 240.246431][T18508] inactive_file 0 [ 240.250071][T18508] active_file 8192 [ 240.253833][T18508] unevictable 68923392 [ 240.257933][T18508] hierarchical_memory_limit 314572800 [ 240.263350][T18508] hierarchical_memsw_limit 9223372036854771712 [ 240.269986][T18508] total_cache 68997120 [ 240.274040][T18508] total_rss 208896 [ 240.277732][T18508] total_shmem 81920 [ 240.281547][T18508] total_mapped_file 8192 [ 240.285778][T18508] total_dirty 4096 [ 240.289499][T18508] total_writeback 0 [ 240.293373][T18508] total_workingset_refault_anon 4112 [ 240.298654][T18508] total_workingset_refault_file 5559 [ 240.304464][T18508] total_swap 131072 [ 240.308682][T18508] total_swapcached 0 [ 240.312650][T18508] total_pgpgin 405781 [ 240.316620][T18508] total_pgpgout 388885 [ 240.320898][T18508] total_pgfault 351412 [ 240.324956][T18508] total_pgmajfault 625 [ 240.329514][T18508] total_inactive_anon 270336 [ 240.334091][T18508] total_active_anon 4096 [ 240.338317][T18508] total_inactive_file 0 [ 240.342503][T18508] total_active_file 8192 [ 240.346728][T18508] total_unevictable 68923392 [ 240.351311][T18508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5886,pid=18507,uid=0 [ 240.366357][T18508] Memory cgroup out of memory: Killed process 18507 (syz.1.5886) total-vm:95808kB, anon-rss:948kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 240.427216][T18543] netlink: 'syz.4.5906': attribute type 1 has an invalid length. [ 240.440584][T18543] bond6: entered promiscuous mode [ 240.445724][T18543] bond6: entered allmulticast mode [ 240.454994][T18543] geneve0: entered allmulticast mode [ 240.461598][T18543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.469857][T18543] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.478081][T18543] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.486998][T18543] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.496567][T18543] bond6: (slave geneve0): making interface the new active one [ 240.504152][T18543] geneve0: entered promiscuous mode [ 240.510652][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5906'. [ 240.510876][T18543] bond6: (slave geneve0): Enslaving as an active interface with an up link [ 240.547072][T18548] bond6: left promiscuous mode [ 240.552580][T18548] geneve0: left promiscuous mode [ 240.557641][T18548] bond6: left allmulticast mode [ 240.582916][T18548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.612481][T18551] macsec0: entered promiscuous mode [ 240.664153][ T29] audit: type=1326 audit(240.646:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18555 comm="syz.5.5909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5846ee929 code=0x0 [ 241.439329][ T29] audit: type=1326 audit(241.416:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.462291][ T29] audit: type=1326 audit(241.416:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.485737][ T29] audit: type=1326 audit(241.416:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.509445][ T29] audit: type=1326 audit(241.416:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.532401][ T29] audit: type=1326 audit(241.416:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.555987][ T29] audit: type=1326 audit(241.416:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.579358][ T29] audit: type=1326 audit(241.416:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.602247][ T29] audit: type=1326 audit(241.416:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.625867][ T29] audit: type=1326 audit(241.416:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.648676][ T29] audit: type=1326 audit(241.416:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.672166][ T29] audit: type=1326 audit(241.416:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.695735][ T29] audit: type=1326 audit(241.416:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.719547][ T29] audit: type=1326 audit(241.416:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18583 comm="syz.0.5927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 241.986009][T18605] syz.1.5926: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 242.001302][T18605] CPU: 1 UID: 0 PID: 18605 Comm: syz.1.5926 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 242.001333][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.001351][T18605] Call Trace: [ 242.001358][T18605] [ 242.001365][T18605] __dump_stack+0x1d/0x30 [ 242.001384][T18605] dump_stack_lvl+0xe8/0x140 [ 242.001407][T18605] dump_stack+0x15/0x1b [ 242.001544][T18605] warn_alloc+0x12b/0x1a0 [ 242.001642][T18605] ? __account_obj_stock+0x211/0x350 [ 242.001662][T18605] __vmalloc_node_range_noprof+0x9c/0xe00 [ 242.001708][T18605] ? __cgroup_account_cputime+0x81/0xa0 [ 242.001816][T18605] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 242.001855][T18605] ? probe_sched_wakeup+0x85/0xa0 [ 242.001922][T18605] ? __rcu_read_unlock+0x4f/0x70 [ 242.001944][T18605] ? avc_has_perm_noaudit+0x1b1/0x200 [ 242.002040][T18605] ? should_fail_ex+0x30/0x280 [ 242.002075][T18605] ? xskq_create+0x36/0xe0 [ 242.002099][T18605] vmalloc_user_noprof+0x7d/0xb0 [ 242.002147][T18605] ? xskq_create+0x80/0xe0 [ 242.002325][T18605] xskq_create+0x80/0xe0 [ 242.002345][T18605] xsk_init_queue+0x95/0xf0 [ 242.002368][T18605] xsk_setsockopt+0x35c/0x510 [ 242.002385][T18605] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.002435][T18605] __sys_setsockopt+0x184/0x200 [ 242.002473][T18605] __x64_sys_setsockopt+0x64/0x80 [ 242.002499][T18605] x64_sys_call+0x2bd5/0x2fb0 [ 242.002520][T18605] do_syscall_64+0xd2/0x200 [ 242.002536][T18605] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.002639][T18605] ? clear_bhb_loop+0x40/0x90 [ 242.002662][T18605] ? clear_bhb_loop+0x40/0x90 [ 242.002682][T18605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.002700][T18605] RIP: 0033:0x7f6f3b68e929 [ 242.002718][T18605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.002733][T18605] RSP: 002b:00007f6f39cef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.002753][T18605] RAX: ffffffffffffffda RBX: 00007f6f3b8b5fa0 RCX: 00007f6f3b68e929 [ 242.002766][T18605] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 242.002781][T18605] RBP: 00007f6f3b710ca1 R08: 0000000000000004 R09: 0000000000000000 [ 242.002795][T18605] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.002808][T18605] R13: 0000000000000000 R14: 00007f6f3b8b5fa0 R15: 00007ffda1bc44c8 [ 242.002823][T18605] [ 242.002828][T18605] Mem-Info: [ 242.249352][T18605] active_anon:18366 inactive_anon:311 isolated_anon:0 [ 242.249352][T18605] active_file:10407 inactive_file:12671 isolated_file:0 [ 242.249352][T18605] unevictable:16835 dirty:157 writeback:0 [ 242.249352][T18605] slab_reclaimable:3335 slab_unreclaimable:109918 [ 242.249352][T18605] mapped:34532 shmem:6047 pagetables:1305 [ 242.249352][T18605] sec_pagetables:0 bounce:0 [ 242.249352][T18605] kernel_misc_reclaimable:0 [ 242.249352][T18605] free:1688138 free_pcp:46705 free_cma:0 [ 242.295652][T18605] Node 0 active_anon:62096kB inactive_anon:1244kB active_file:41628kB inactive_file:50684kB unevictable:67340kB isolated(anon):0kB isolated(file):0kB mapped:126760kB dirty:628kB writeback:0kB shmem:12936kB writeback_tmp:0kB kernel_stack:4992kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 242.325765][T18605] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.354830][T18605] lowmem_reserve[]: 0 2882 7860 7860 [ 242.360164][T18605] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 242.390683][T18605] lowmem_reserve[]: 0 0 4978 4978 [ 242.395785][T18605] Node 0 Normal free:3789364kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62096kB inactive_anon:1244kB active_file:41628kB inactive_file:50684kB unevictable:67340kB writepending:628kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:194524kB local_pcp:180784kB free_cma:0kB [ 242.429204][T18605] lowmem_reserve[]: 0 0 0 0 [ 242.433738][T18605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.446409][T18605] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 242.462922][T18605] Node 0 Normal: 14*4kB (UE) 966*8kB (ME) 1064*16kB (ME) 608*32kB (UME) 339*64kB (UME) 277*128kB (ME) 130*256kB (UME) 150*512kB (UME) 136*1024kB (UME) 77*2048kB (UM) 801*4096kB (UM) = 3789352kB [ 242.482264][T18605] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.491720][T18605] 43251 total pagecache pages [ 242.496848][T18605] 182 pages in swap cache [ 242.501199][T18605] Free swap = 123952kB [ 242.505407][T18605] Total swap = 124996kB [ 242.509570][T18605] 2097051 pages RAM [ 242.513379][T18605] 0 pages HighMem/MovableOnly [ 242.518049][T18605] 80812 pages reserved [ 242.629890][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5936'. [ 242.711072][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5938'. [ 242.732002][T18635] ipvlan2: entered promiscuous mode [ 242.763764][T18643] tipc: Enabling of bearer rejected, failed to enable media [ 243.538956][T18674] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 243.581173][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5955'. [ 243.970394][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5969'. [ 244.058378][T18712] net_ratelimit: 16 callbacks suppressed [ 244.058391][T18712] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.221431][T18725] tipc: Enabling of bearer rejected, failed to enable media [ 245.045885][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5994'. [ 245.137124][T18784] netlink: 'syz.1.6000': attribute type 1 has an invalid length. [ 245.166653][T18784] bond5: entered promiscuous mode [ 245.172384][T18784] bond5: entered allmulticast mode [ 245.235901][T18784] geneve0: entered allmulticast mode [ 245.247740][T18784] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.256042][T18784] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.264915][T18784] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.273142][T18784] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.284183][T18795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6000'. [ 245.294765][T18784] bond5: (slave geneve0): making interface the new active one [ 245.302331][T18784] geneve0: entered promiscuous mode [ 245.310745][T18784] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 245.332116][T18795] bond5: left promiscuous mode [ 245.336960][T18795] geneve0: left promiscuous mode [ 245.342673][T18795] bond5: left allmulticast mode [ 245.347925][T18795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.479248][T18811] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6009'. [ 245.514706][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6008'. [ 245.593908][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6016'. [ 245.648542][T18836] netlink: 'syz.0.6018': attribute type 1 has an invalid length. [ 245.664637][T18836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.679770][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6018'. [ 245.691695][T18836] vlan0: entered promiscuous mode [ 245.696875][T18836] bond3: entered promiscuous mode [ 245.705177][T18836] bridge0: port 1(dummy0) entered disabled state [ 245.714564][T18836] bond3: (slave dummy0): making interface the new active one [ 245.723268][T18836] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 245.734239][T18839] 0177: entered promiscuous mode [ 246.878030][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 246.878072][ T29] audit: type=1326 audit(246.856:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 246.935578][ T29] audit: type=1326 audit(246.886:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 246.959272][ T29] audit: type=1326 audit(246.886:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 246.982173][ T29] audit: type=1326 audit(246.886:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.005809][ T29] audit: type=1326 audit(246.896:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.029429][ T29] audit: type=1326 audit(246.896:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.052383][ T29] audit: type=1326 audit(246.896:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.076030][ T29] audit: type=1326 audit(246.896:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.099559][ T29] audit: type=1326 audit(246.896:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.122462][ T29] audit: type=1326 audit(246.896:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18892 comm="syz.4.6040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 247.611051][T18917] vxcan1 speed is unknown, defaulting to 1000 [ 247.660214][T18923] __nla_validate_parse: 3 callbacks suppressed [ 247.660229][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6049'. [ 247.815353][T18917] lo speed is unknown, defaulting to 1000 [ 247.970986][T18940] ip6gre5: entered allmulticast mode [ 247.980430][T18942] atomic_op ffff8881313c6928 conn xmit_atomic 0000000000000000 [ 248.417194][T18963] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.500480][T18963] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.599588][T18963] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.760360][T18963] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.817307][T18963] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.829626][T18963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.842959][T18963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.856727][T18963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.896993][T18982] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6074'. [ 249.306523][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6087'. [ 249.383063][T19011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19011 comm=syz.5.6087 [ 249.590929][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6095'. [ 249.684385][T19048] bridge: RTM_NEWNEIGH with invalid ether address [ 250.843781][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6115'. [ 250.901851][T19084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19084 comm=syz.4.6115 [ 251.131641][T19117] vxcan1 speed is unknown, defaulting to 1000 [ 251.140378][T19118] netlink: 'syz.2.6122': attribute type 10 has an invalid length. [ 251.238912][T19117] lo speed is unknown, defaulting to 1000 [ 251.700638][T19150] sch_fq: defrate 4294967295 ignored. [ 251.735823][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6141'. [ 251.825034][T19160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6145'. [ 251.946564][T19178] vxcan1 speed is unknown, defaulting to 1000 [ 251.995011][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 251.995024][ T29] audit: type=1326 audit(251.976:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.029139][ T29] audit: type=1326 audit(251.976:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.052807][ T29] audit: type=1326 audit(252.016:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.075906][ T29] audit: type=1326 audit(252.016:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.099504][ T29] audit: type=1326 audit(252.016:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.122733][ T29] audit: type=1326 audit(252.016:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.125317][T19178] lo speed is unknown, defaulting to 1000 [ 252.146171][ T29] audit: type=1326 audit(252.016:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.175396][ T29] audit: type=1326 audit(252.016:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.198296][ T29] audit: type=1326 audit(252.016:4598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.221485][ T29] audit: type=1326 audit(252.016:4599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.5.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 252.245278][T19180] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -32018, delta: 1 [ 252.254698][T19180] ref_ctr increment failed for inode: 0x1949 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810c8e6300 [ 253.032054][T19200] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 253.113317][T19219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19219 comm=syz.1.6166 [ 253.126068][T19219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pid=19219 comm=syz.1.6166 [ 253.382336][T19240] vxcan1 speed is unknown, defaulting to 1000 [ 253.534815][T19240] lo speed is unknown, defaulting to 1000 [ 254.151989][T19272] Set syz1 is full, maxelem 65536 reached [ 255.145866][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6205'. [ 255.160636][T19324] team1: entered promiscuous mode [ 255.165831][T19324] team1: entered allmulticast mode [ 255.328604][T19344] bridge: RTM_NEWNEIGH with invalid ether address [ 255.359695][T19347] netlink: 'syz.4.6216': attribute type 1 has an invalid length. [ 255.378377][T19347] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.436783][T19347] bond7 (unregistering): Released all slaves [ 256.714726][T19456] IPVS: ip_vs_add_dest(): server weight less than zero [ 256.999534][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 256.999548][ T29] audit: type=1326 audit(256.976:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.037246][ T29] audit: type=1326 audit(257.016:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.060918][ T29] audit: type=1326 audit(257.016:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.083890][ T29] audit: type=1326 audit(257.016:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.107321][ T29] audit: type=1326 audit(257.016:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.130943][ T29] audit: type=1326 audit(257.016:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.153856][ T29] audit: type=1326 audit(257.016:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.177346][ T29] audit: type=1326 audit(257.016:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.200854][ T29] audit: type=1326 audit(257.016:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.223887][ T29] audit: type=1326 audit(257.016:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19492 comm="syz.5.6246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5846ee929 code=0x7ffc0000 [ 257.816084][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6254'. [ 257.974254][T19588] tipc: Bearer : already 2 bearers with priority 10 [ 257.981703][T19588] tipc: Bearer : trying with adjusted priority [ 257.988522][T19588] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 258.363746][T19610] netlink: 'syz.2.6273': attribute type 7 has an invalid length. [ 258.371608][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 258.441798][T19614] cgroup: Invalid name [ 258.783092][T19632] atomic_op ffff888123c35928 conn xmit_atomic 0000000000000000 [ 258.935664][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6288'. [ 259.068546][T19638] vxcan1 speed is unknown, defaulting to 1000 [ 259.145104][T19658] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6294'. [ 259.383995][T19670] vxcan1 speed is unknown, defaulting to 1000 [ 259.644130][T19680] bridge: RTM_NEWNEIGH with invalid ether address [ 259.702449][T19682] ip6gre4: entered allmulticast mode [ 259.738334][T19638] lo speed is unknown, defaulting to 1000 [ 259.834892][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6297'. [ 259.855320][T19670] lo speed is unknown, defaulting to 1000 [ 260.035480][T19696] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6307'. [ 260.436507][T19713] vxcan1 speed is unknown, defaulting to 1000 [ 260.805744][T19732] vxcan1 speed is unknown, defaulting to 1000 [ 260.830137][T19734] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 261.249750][T19713] lo speed is unknown, defaulting to 1000 [ 261.268080][T19732] lo speed is unknown, defaulting to 1000 [ 261.574607][T19776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6340'. [ 261.657919][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'. [ 261.681591][T19786] netlink: 'syz.2.6342': attribute type 1 has an invalid length. [ 261.716630][T19786] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.797119][T19786] bond6 (unregistering): Released all slaves [ 262.094592][T19806] atomic_op ffff888138f74528 conn xmit_atomic 0000000000000000 [ 262.356112][T19816] netlink: 'syz.1.6353': attribute type 7 has an invalid length. [ 262.362088][T19815] xt_connbytes: Forcing CT accounting to be enabled [ 262.363911][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6353'. [ 262.370493][T19815] Cannot find set identified by id 0 to match [ 262.538515][T19828] atomic_op ffff888118da0d28 conn xmit_atomic 0000000000000000 [ 262.657931][T19839] netlink: 'syz.2.6373': attribute type 6 has an invalid length. [ 262.689766][T19844] bridge: RTM_NEWNEIGH with invalid ether address [ 263.114831][T19857] tipc: Enabling of bearer rejected, already enabled [ 263.136112][T19859] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 263.441752][T19878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19878 comm=syz.5.6379 [ 263.454923][T19878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19878 comm=syz.5.6379 [ 263.473452][T19880] netlink: 'syz.0.6380': attribute type 1 has an invalid length. [ 263.488533][T19880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.497452][T19883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6381'. [ 263.507690][T19880] bond4 (unregistering): Released all slaves [ 263.562100][T19888] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 263.650661][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 263.650738][ T29] audit: type=1326 audit(263.636:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.680549][ T29] audit: type=1326 audit(263.636:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.703615][ T29] audit: type=1326 audit(263.636:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.727438][ T29] audit: type=1326 audit(263.636:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.756810][T19902] netlink: 'syz.5.6399': attribute type 10 has an invalid length. [ 263.760789][ T29] audit: type=1326 audit(263.686:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.766138][T19902] geneve1: entered promiscuous mode [ 263.788193][ T29] audit: type=1326 audit(263.686:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.816245][ T29] audit: type=1326 audit(263.686:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.839835][ T29] audit: type=1326 audit(263.716:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.862757][ T29] audit: type=1326 audit(263.716:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.886487][ T29] audit: type=1326 audit(263.716:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19894 comm="syz.1.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 263.942573][T19917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6394'. [ 263.997920][T19922] netlink: 'syz.1.6396': attribute type 1 has an invalid length. [ 264.013245][T19922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.038125][T19922] bond6 (unregistering): Released all slaves [ 264.142818][T19920] vxcan1 speed is unknown, defaulting to 1000 [ 264.597520][T19920] lo speed is unknown, defaulting to 1000 [ 264.728110][T19952] vxcan1 speed is unknown, defaulting to 1000 [ 264.864873][T19952] lo speed is unknown, defaulting to 1000 [ 265.023026][T19970] macvtap0: entered promiscuous mode [ 265.029391][T19970] macvtap0: left promiscuous mode [ 265.049413][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 265.390498][T19987] vxcan1 speed is unknown, defaulting to 1000 [ 265.430091][T19991] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.497629][T19987] lo speed is unknown, defaulting to 1000 [ 265.587244][T19997] tipc: Failed to remove unknown binding: 66,3,3/2886997007:1247940859/1247940860 [ 265.633905][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 265.645192][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6427'. [ 265.677223][T20003] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6429'. [ 265.700720][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6428'. [ 265.818839][T20019] @: renamed from vlan0 [ 265.839910][T20018] vxcan1 speed is unknown, defaulting to 1000 [ 265.904222][T20018] lo speed is unknown, defaulting to 1000 [ 266.265871][T20042] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 266.300418][T20043] vxcan1 speed is unknown, defaulting to 1000 [ 266.394870][T20043] lo speed is unknown, defaulting to 1000 [ 266.457556][T20052] netlink: 'syz.5.6445': attribute type 10 has an invalid length. [ 266.676297][T20072] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.760712][T20072] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.841058][T20072] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.948642][T20082] vxcan1 speed is unknown, defaulting to 1000 [ 266.955406][T20084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6457'. [ 266.965742][T20072] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.065186][T20072] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.076578][T20072] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.089186][T20072] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.101047][T20072] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.112590][T20082] lo speed is unknown, defaulting to 1000 [ 267.325586][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6454'. [ 267.460349][T20100] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 267.560606][T20109] @ÿ: renamed from bond_slave_0 [ 267.608609][T20111] blktrace: Concurrent blktraces are not allowed on loop0 [ 267.805940][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6486'. [ 268.073184][T20142] vxcan1 speed is unknown, defaulting to 1000 [ 268.149668][T20142] lo speed is unknown, defaulting to 1000 [ 268.604690][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6489'. [ 268.694960][T20178] vxcan1 speed is unknown, defaulting to 1000 [ 268.750857][T20183] vxcan1 speed is unknown, defaulting to 1000 [ 268.807724][T20178] lo speed is unknown, defaulting to 1000 [ 268.840303][T20183] lo speed is unknown, defaulting to 1000 [ 269.097103][T20198] xt_hashlimit: max too large, truncated to 1048576 [ 269.244460][ T8381] IPVS: starting estimator thread 0... [ 269.284434][T20207] vxcan1 speed is unknown, defaulting to 1000 [ 269.358579][T20207] lo speed is unknown, defaulting to 1000 [ 269.399460][T20206] IPVS: using max 2640 ests per chain, 132000 per kthread [ 269.580922][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 269.580934][ T29] audit: type=1400 audit(269.566:4946): avc: denied { bind } for pid=20232 comm="syz.4.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.836151][T20241] vxcan1 speed is unknown, defaulting to 1000 [ 269.895872][T20263] netlink: '¬í': attribute type 10 has an invalid length. [ 269.904308][T20263] netlink: '¬í': attribute type 10 has an invalid length. [ 270.382389][T20241] lo speed is unknown, defaulting to 1000 [ 270.565684][T20346] netlink: 'syz.1.6518': attribute type 10 has an invalid length. [ 270.650408][T20366] vxcan1 speed is unknown, defaulting to 1000 [ 270.764841][T20366] lo speed is unknown, defaulting to 1000 [ 270.786329][ T29] audit: type=1326 audit(270.766:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.809997][ T29] audit: type=1326 audit(270.766:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.832975][ T29] audit: type=1326 audit(270.766:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.855917][ T29] audit: type=1326 audit(270.766:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.879486][ T29] audit: type=1326 audit(270.766:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.902465][ T29] audit: type=1326 audit(270.766:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.926118][ T29] audit: type=1326 audit(270.766:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.949580][ T29] audit: type=1326 audit(270.766:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 270.972628][ T29] audit: type=1326 audit(270.766:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20383 comm="syz.1.6523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3b68e929 code=0x7ffc0000 [ 271.003254][T20388] xt_hashlimit: max too large, truncated to 1048576 [ 271.075673][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6527'. [ 271.425582][T20414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20414 comm=syz.0.6535 [ 271.466025][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 271.479714][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6537'. [ 271.893797][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6541'. [ 272.539995][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 272.549637][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 272.568000][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 272.581053][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 272.590009][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 272.725976][T20466] vxcan1 speed is unknown, defaulting to 1000 [ 273.068374][T20466] lo speed is unknown, defaulting to 1000 [ 273.367699][T20482] netlink: '¬í': attribute type 10 has an invalid length. [ 273.411515][T20482] netlink: '¬í': attribute type 10 has an invalid length. [ 273.740011][T20508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.834696][T20514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.847672][T20511] vxcan1 speed is unknown, defaulting to 1000 [ 273.862909][T20517] netlink: '¬í': attribute type 10 has an invalid length. [ 273.883453][T20517] bond3: (slave dummy0): Releasing active interface [ 273.890871][T20517] dummy0: left promiscuous mode [ 273.904904][T20517] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 273.914039][T20517] team0: Failed to send options change via netlink (err -105) [ 273.921632][T20517] team0: Port device dummy0 added [ 273.929564][T20525] netlink: 'syz.0.6576': attribute type 10 has an invalid length. [ 273.938179][T20525] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 273.949303][T20525] team0: Failed to send options change via netlink (err -105) [ 273.957021][T20525] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 273.968635][T20525] team0: Port device dummy0 removed [ 273.975776][T20514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.000198][T20511] lo speed is unknown, defaulting to 1000 [ 274.014560][T20514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.067257][T20514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.147657][T20514] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.161270][T20514] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.172085][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6582'. [ 274.185214][T20514] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.193865][T20539] hsr_slave_0: left promiscuous mode [ 274.200857][T20539] hsr_slave_1: left promiscuous mode [ 274.212198][T20514] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.274828][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6584'. [ 274.317194][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6589'. [ 274.341454][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6589'. [ 274.420587][T20562] netlink: '¬í': attribute type 10 has an invalid length. [ 274.428218][T20562] netlink: '¬í': attribute type 10 has an invalid length. [ 274.515128][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6594'. [ 274.542256][T20572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.567052][T20572] vlan1: entered allmulticast mode [ 274.572892][T20572] bond4: entered allmulticast mode [ 274.681114][T20586] tipc: Enabling of bearer rejected, already enabled [ 274.740532][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 274.740547][ T29] audit: type=1326 audit(274.726:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.783435][ T29] audit: type=1326 audit(274.756:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.807067][ T29] audit: type=1326 audit(274.756:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20598 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2e2b2c11e5 code=0x7ffc0000 [ 274.830445][ T29] audit: type=1326 audit(274.756:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.853463][ T29] audit: type=1326 audit(274.766:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.877072][ T29] audit: type=1326 audit(274.766:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.900415][ T29] audit: type=1326 audit(274.766:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.923261][ T29] audit: type=1326 audit(274.766:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.946784][ T29] audit: type=1326 audit(274.766:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 274.970121][ T29] audit: type=1326 audit(274.766:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20596 comm="syz.4.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2b28e929 code=0x7ffc0000 [ 275.024724][T20608] netlink: 'syz.0.6609': attribute type 4 has an invalid length. [ 275.121903][T20620] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 275.156384][T20623] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.211523][T20623] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.249936][T20623] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.286667][T20633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.310620][T20623] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.327442][T20639] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.376402][T20623] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.390982][T20623] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.404472][T20623] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.414420][T20639] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.429191][T20623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.466920][T20639] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.495122][T20647] netlink: 'syz.4.6626': attribute type 1 has an invalid length. [ 275.509872][T20647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.521890][T20647] bond7 (unregistering): Released all slaves [ 275.635592][T20639] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.707159][T20659] netlink: 'syz.2.6632': attribute type 39 has an invalid length. [ 275.722156][T20639] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.735385][T20639] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.762453][T20639] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.777626][T20668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.792129][T20639] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.832305][T20668] vlan0: entered allmulticast mode [ 275.837490][T20668] bond6: entered allmulticast mode [ 276.015844][T20691] vxcan1 speed is unknown, defaulting to 1000 [ 276.132972][T20691] lo speed is unknown, defaulting to 1000 [ 276.299703][T20708] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.308112][T20708] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.316688][T20708] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.325142][T20708] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.338961][T20706] vxcan1 speed is unknown, defaulting to 1000 [ 276.405957][T20706] lo speed is unknown, defaulting to 1000 [ 276.441687][T20721] vxcan1 speed is unknown, defaulting to 1000 [ 276.524461][T20721] lo speed is unknown, defaulting to 1000 [ 276.661182][T20741] vxcan1 speed is unknown, defaulting to 1000 [ 276.688953][T20749] blktrace: Concurrent blktraces are not allowed on loop9 [ 276.699580][T20749] hsr_slave_0: left promiscuous mode [ 276.742135][T20749] hsr_slave_1: left promiscuous mode [ 276.780562][T20741] lo speed is unknown, defaulting to 1000 [ 276.854314][T20757] IPVS: Error connecting to the multicast addr [ 277.113927][T20780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20780 comm=syz.0.6676 [ 277.870400][T20816] netlink: 'syz.1.6691': attribute type 21 has an invalid length. [ 277.890356][T20816] netlink: 'syz.1.6691': attribute type 6 has an invalid length. [ 277.898212][T20816] __nla_validate_parse: 15 callbacks suppressed [ 277.898225][T20816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6691'. [ 277.979432][T20829] blktrace: Concurrent blktraces are not allowed on loop11 [ 278.010935][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6704'. [ 278.486742][T20834] uprobe: syz.4.6697:20834 failed to unregister, leaking uprobe [ 278.740535][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6700'. [ 278.810887][T20848] vxcan1 speed is unknown, defaulting to 1000 [ 278.925140][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6702'. [ 278.940607][T20863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.953161][T20863] vlan1: entered allmulticast mode [ 278.958312][T20863] bond5: entered allmulticast mode [ 278.973355][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6701'. [ 278.982444][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6701'. [ 279.151923][T20875] vxcan1 speed is unknown, defaulting to 1000 [ 279.325023][T20883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.360102][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6716'. [ 279.383762][T20891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.415781][T20891] vlan1: entered allmulticast mode [ 279.421640][T20891] bond6: entered allmulticast mode [ 279.521543][T20875] lo speed is unknown, defaulting to 1000 [ 279.580480][T20848] lo speed is unknown, defaulting to 1000 [ 279.689139][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6727'. [ 279.780051][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 279.780066][ T29] audit: type=1326 audit(279.766:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.814383][ T29] audit: type=1326 audit(279.796:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.837430][ T29] audit: type=1326 audit(279.796:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcff9d0d290 code=0x7ffc0000 [ 279.861010][ T29] audit: type=1326 audit(279.796:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.883921][ T29] audit: type=1326 audit(279.796:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.906831][ T29] audit: type=1326 audit(279.796:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.930402][ T29] audit: type=1326 audit(279.796:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.953383][ T29] audit: type=1326 audit(279.796:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.958001][T20919] vxcan1 speed is unknown, defaulting to 1000 [ 279.976306][ T29] audit: type=1326 audit(279.796:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 279.976335][ T29] audit: type=1326 audit(279.796:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20924 comm="syz.0.6731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcff9d0e929 code=0x7ffc0000 [ 280.356802][T20936] vxcan1 speed is unknown, defaulting to 1000 [ 280.678432][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6740'. [ 280.793759][T20919] lo speed is unknown, defaulting to 1000 [ 280.835981][T20936] lo speed is unknown, defaulting to 1000 [ 280.948580][T20962] netlink: 'syz.5.6745': attribute type 7 has an invalid length. [ 280.956436][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6745'. [ 281.138239][T20975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20975 comm=syz.5.6751 [ 281.545204][T20977] vxcan1 speed is unknown, defaulting to 1000 [ 281.758466][T12230] ================================================================== [ 281.766570][T12230] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 281.773778][T12230] [ 281.776095][T12230] read-write to 0xffff8881071b1b40 of 8 bytes by task 3292 on cpu 0: [ 281.784238][T12230] __xa_set_mark+0xd2/0x1a0 [ 281.788748][T12230] __folio_mark_dirty+0x3af/0x4d0 [ 281.793779][T12230] mark_buffer_dirty+0x11e/0x210 [ 281.798732][T12230] block_page_mkwrite+0x287/0x3d0 [ 281.803769][T12230] ext4_page_mkwrite+0x76b/0xba0 [ 281.808713][T12230] do_wp_page+0xe5a/0x2400 [ 281.813128][T12230] handle_mm_fault+0x77d/0x2be0 [ 281.817985][T12230] do_user_addr_fault+0x636/0x1090 [ 281.823112][T12230] exc_page_fault+0x62/0xa0 [ 281.827630][T12230] asm_exc_page_fault+0x26/0x30 [ 281.832489][T12230] [ 281.834811][T12230] read to 0xffff8881071b1b40 of 8 bytes by task 12230 on cpu 1: [ 281.842445][T12230] xas_find_marked+0x218/0x620 [ 281.847217][T12230] find_get_entry+0x5d/0x380 [ 281.851830][T12230] filemap_get_folios_tag+0x13b/0x210 [ 281.857214][T12230] mpage_prepare_extent_to_map+0x320/0xaa0 [ 281.863031][T12230] ext4_do_writepages+0x6ea/0x21c0 [ 281.868138][T12230] ext4_writepages+0x176/0x300 [ 281.872908][T12230] do_writepages+0x1c3/0x310 [ 281.877502][T12230] __writeback_single_inode+0x80/0x7c0 [ 281.882965][T12230] writeback_sb_inodes+0x480/0xa20 [ 281.888085][T12230] __writeback_inodes_wb+0x94/0x1a0 [ 281.893289][T12230] wb_writeback+0x266/0x5c0 [ 281.897798][T12230] wb_workfn+0x4c9/0x910 [ 281.902040][T12230] process_scheduled_works+0x4cb/0x9d0 [ 281.907519][T12230] worker_thread+0x582/0x770 [ 281.912117][T12230] kthread+0x489/0x510 [ 281.916184][T12230] ret_from_fork+0xda/0x150 [ 281.920692][T12230] ret_from_fork_asm+0x1a/0x30 [ 281.925461][T12230] [ 281.927781][T12230] value changed: 0x03c0400042b03918 -> 0x03c060004ab03918 [ 281.934897][T12230] [ 281.937223][T12230] Reported by Kernel Concurrency Sanitizer on: [ 281.943369][T12230] CPU: 1 UID: 0 PID: 12230 Comm: kworker/u8:55 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 281.956119][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.966167][T12230] Workqueue: writeback wb_workfn (flush-8:0) [ 281.972236][T12230] ================================================================== [ 282.329073][T20977] lo speed is unknown, defaulting to 1000