last executing test programs: 12.407023078s ago: executing program 2 (id=4158): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, 0x0) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 9.559912426s ago: executing program 2 (id=4175): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 8.642847s ago: executing program 2 (id=4166): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000400), 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/140, 0x8c}], 0x1, 0x3533, 0x401) 7.575600759s ago: executing program 2 (id=4176): syz_io_uring_setup(0x110c, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x4, 0x0, 0xd42, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5fffffffffffffff, 0xffffffffffffffff, 0x1) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 6.435939242s ago: executing program 2 (id=4183): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x1001f3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x9, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, 0xffffffffffffffff, 0x8000000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 6.414027317s ago: executing program 3 (id=4193): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x3) 5.949929652s ago: executing program 0 (id=4184): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 5.207938595s ago: executing program 3 (id=4189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.10056202s ago: executing program 2 (id=4190): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0xa}, 0x106260, 0xfffd, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") r2 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x8) 4.944183225s ago: executing program 1 (id=4192): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.886398902s ago: executing program 3 (id=4194): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x200000, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.735801258s ago: executing program 1 (id=4195): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, 0x0, 0x0, 0xf, 0x4, 0x0, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000ac1414bb000000000000000000000000000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000108000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000520000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007d00000005350000020001002000000000000000480003006465666c617465000000"], 0x140}}, 0x844) 4.444725962s ago: executing program 4 (id=4196): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc3", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) pipe(&(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) 4.314041853s ago: executing program 0 (id=4197): syz_io_uring_setup(0x110c, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x4, 0x0, 0xd42, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5fffffffffffffff, 0xffffffffffffffff, 0x1) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) 4.039969131s ago: executing program 1 (id=4198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 3.883818406s ago: executing program 3 (id=4199): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 3.142727599s ago: executing program 1 (id=4200): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x1) sync() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) 3.139755928s ago: executing program 0 (id=4210): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.138361358s ago: executing program 4 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x829, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) 2.166239638s ago: executing program 3 (id=4201): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 2.166006678s ago: executing program 4 (id=4202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") fallocate(0xffffffffffffffff, 0x0, 0x2000000, 0x1001f3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x9, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100001a, 0x12, 0xffffffffffffffff, 0x8000000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) 2.165458218s ago: executing program 0 (id=4213): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2.164818658s ago: executing program 1 (id=4203): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r2, &(0x7f0000000580)=""/225, 0xe1, 0x40000000000000, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x88000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) 1.516851952s ago: executing program 4 (id=4204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r2, r1, 0x0, 0x578410ed) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x80000001, 0xa0, 0x0, 0x8}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xf4}}, 0x10) 1.516121151s ago: executing program 1 (id=4217): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1e}, 0x94) 1.260740454s ago: executing program 0 (id=4205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xdd, 0x5, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3409}]}}]}, 0x44}}, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty=0x1c00}}}], 0x20}}], 0x27, 0x0) 1.170534664s ago: executing program 0 (id=4206): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0xf5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@nobh}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 126.910618ms ago: executing program 3 (id=4207): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x3, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}, {{@in6=@loopback, 0x4d5, 0x33}, 0xa, @in=@remote, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x4000) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000140)=@v3={0x3000000, [{0x81, 0xfffffe00}, {0x3ff, 0x3}], r4}, 0x18, 0x1) 126.675938ms ago: executing program 4 (id=4208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x64e, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0, 0x1000000}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa8]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000d40)="7da18017110b397d", &(0x7f0000000e00)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7, &(0x7f0000000500)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) socket(0x1d, 0x2, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1) r5 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x1000) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000000c0)={0xbe, "15889e670a03540745f2710647b1425e1290d27871d25f560a910aaa344d9641ef7b7b2ebb7e6ff6c875cd2defb88c327e15ff6cde30280c3f36679f476e9219536de39e84a31aa2b8378ccd880e9b843eedd53800500faa98f7756dd03b43a19cd989d52e57e67f57f7af15c950bb8b4ce17175ff836de1c8a080ebfc460cdd4b8cc9b139894bc95c8e6c8b1dbbedcde1103bfc1325d64423deb31a10463e00a33a5cf81d8bc093a7a64435722dfe7ab1e47ace29c9090c328dc4fe8686"}) kernel console output (not intermixed with test programs): 0 [ 349.823737][T12451] dump_stack_lvl+0x95/0xd0 [ 349.823771][T12451] dump_stack+0x15/0x1b [ 349.823798][T12451] dump_header+0x80/0x240 [ 349.823822][T12451] oom_kill_process+0x295/0x350 [ 349.823846][T12451] out_of_memory+0x97d/0xb80 [ 349.823869][T12451] try_charge_memcg+0x62e/0xa10 [ 349.823986][T12451] obj_cgroup_charge_pages+0x23/0xc0 [ 349.824035][T12451] __memcg_kmem_charge_page+0x9e/0x170 [ 349.824066][T12451] __alloc_frozen_pages_noprof+0x18a/0x360 [ 349.824095][T12451] alloc_pages_mpol+0xb3/0x260 [ 349.824184][T12451] alloc_pages_noprof+0x8f/0x130 [ 349.824210][T12451] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 349.824319][T12451] __kvmalloc_node_noprof+0x3d4/0x650 [ 349.824363][T12451] ? futex_hash_allocate+0x190/0x9d0 [ 349.824397][T12451] ? futex_hash_allocate+0x190/0x9d0 [ 349.824432][T12451] futex_hash_allocate+0x190/0x9d0 [ 349.824482][T12451] ? cap_task_prctl+0x13f/0x6e0 [ 349.824525][T12451] futex_hash_prctl+0xd8/0xf0 [ 349.824558][T12451] __se_sys_prctl+0xa3d/0x13f0 [ 349.824637][T12451] __x64_sys_prctl+0x67/0x80 [ 349.824662][T12451] x64_sys_call+0x2533/0x3020 [ 349.824687][T12451] do_syscall_64+0x12c/0x370 [ 349.824725][T12451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.824747][T12451] RIP: 0033:0x7fa16ebdc799 [ 349.824764][T12451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.824861][T12451] RSP: 002b:00007fa16d62f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 349.824887][T12451] RAX: ffffffffffffffda RBX: 00007fa16ee55fa0 RCX: 00007fa16ebdc799 [ 349.824904][T12451] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 349.824997][T12451] RBP: 00007fa16ec72bd9 R08: 0000000000000000 R09: 0000000000000000 [ 349.825013][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.825028][T12451] R13: 00007fa16ee56038 R14: 00007fa16ee55fa0 R15: 00007ffcd64979b8 [ 349.825092][T12451] [ 350.266175][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.283922][T12451] memory: usage 136108kB, limit 307200kB, failcnt 874 [ 350.298903][T12456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.341356][T12456] ext4 filesystem being mounted at /423/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.359323][T12451] memory+swap: usage 78648kB, limit 9007199254740988kB, failcnt 0 [ 350.382116][T12451] kmem: usage 55428kB, limit 9007199254740988kB, failcnt 0 [ 350.418417][T12451] Memory cgroup stats for /syz2: [ 350.418697][T12451] cache 1327104 [ 350.444959][T12451] rss 204800 [ 350.451357][T12451] shmem 262144 [ 350.455564][ T28] audit: type=1400 audit(1772400297.267:6418): avc: denied { ioctl } for pid=12450 comm="syz.2.3159" path="socket:[72759]" dev="sockfs" ino=72759 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 350.545652][T12451] mapped_file 94208 [ 350.550304][T12451] dirty 28672 [ 350.553805][T12451] writeback 0 [ 350.557413][T12451] workingset_refault_anon 950 [ 350.562214][T12451] workingset_refault_file 1925 [ 350.567193][T12451] swap 0 [ 350.570297][T12451] swapcached 30887936 [ 350.574353][T12451] pgpgin 223608 [ 350.577850][T12451] pgpgout 223188 [ 350.581587][T12451] pgfault 290323 [ 350.585200][T12451] pgmajfault 190 [ 350.588891][T12451] inactive_anon 565248 [ 350.593445][T12451] active_anon 73728 [ 350.597725][T12451] inactive_file 24576 [ 350.602072][T12451] active_file 1011712 [ 350.606379][T12451] unevictable 0 [ 350.609872][T12451] hierarchical_memory_limit 314572800 [ 350.615661][T12451] hierarchical_memsw_limit 9223372036854771712 [ 350.621929][T12451] total_cache 1327104 [ 350.625971][T12451] total_rss 204800 [ 350.629746][T12451] total_shmem 262144 [ 350.634112][T12451] total_mapped_file 94208 [ 350.638482][T12451] total_dirty 28672 [ 350.642413][T12451] total_writeback 0 [ 350.647040][T12451] total_workingset_refault_anon 950 [ 350.652590][T12451] total_workingset_refault_file 1925 [ 350.658202][T12451] total_swap 0 [ 350.661590][T12451] total_swapcached 30887936 [ 350.666547][T12451] total_pgpgin 223608 [ 350.670642][T12451] total_pgpgout 223188 [ 350.674992][T12451] total_pgfault 290323 [ 350.679166][T12451] total_pgmajfault 190 [ 350.698057][T12451] total_inactive_anon 565248 [ 350.703041][T12451] total_active_anon 73728 [ 350.707673][T12451] total_inactive_file 24576 [ 350.713885][T12451] total_active_file 1011712 [ 350.718566][T12451] total_unevictable 0 [ 350.733493][ T28] audit: type=1400 audit(1772400297.527:6419): avc: denied { listen } for pid=12486 comm="syz.1.3167" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 350.774169][T12451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3159,pid=12450,uid=0 [ 350.794568][ T28] audit: type=1400 audit(1772400297.527:6420): avc: denied { accept } for pid=12486 comm="syz.1.3167" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 350.836047][T12451] Memory cgroup out of memory: Killed process 12450 (syz.2.3159) total-vm:96328kB, anon-rss:1416kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 350.938843][ T6270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.962927][T12501] lo speed is unknown, defaulting to 1000 [ 351.257806][T12501] lo speed is unknown, defaulting to 1000 [ 354.034536][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 354.164312][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 354.215904][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 354.225710][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 354.254825][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 354.268409][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3198'. [ 355.326925][T12600] lo speed is unknown, defaulting to 1000 [ 355.959894][T12600] lo speed is unknown, defaulting to 1000 [ 356.049357][T12605] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 356.063449][T12605] syzkaller0: entered promiscuous mode [ 356.075348][T12605] syzkaller0: entered allmulticast mode [ 356.089641][T12609] SET target dimension over the limit! [ 356.779088][T12633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3216'. [ 356.889555][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3218'. [ 357.293162][T12657] lo speed is unknown, defaulting to 1000 [ 357.531543][T12616] loop2: detected capacity change from 0 to 1024 [ 357.629469][T12657] lo speed is unknown, defaulting to 1000 [ 357.706267][T12616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.071492][T12668] loop3: detected capacity change from 0 to 512 [ 358.160369][T12668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.217222][T12668] ext4 filesystem being mounted at /643/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.278424][ T6270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.399288][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 358.409631][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3226'. [ 358.424384][T12674] tipc: Enabling of bearer rejected, failed to enable media [ 358.447463][T12674] tipc: Enabled bearer , priority 0 [ 358.476495][T12677] vlan0: entered promiscuous mode [ 358.492003][T12677] bridge3: entered promiscuous mode [ 358.503528][T12666] syz.3.3225 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 358.508107][T12677] vlan0: entered allmulticast mode [ 358.544228][T12677] bridge3: entered allmulticast mode [ 358.553796][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.3.3225 Tainted: G W syzkaller #0 PREEMPT(full) [ 358.553838][T12666] Tainted: [W]=WARN [ 358.553845][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.553870][T12666] Call Trace: [ 358.553878][T12666] [ 358.553888][T12666] __dump_stack+0x1d/0x30 [ 358.553921][T12666] dump_stack_lvl+0x95/0xd0 [ 358.553948][T12666] dump_stack+0x15/0x1b [ 358.553969][T12666] dump_header+0x80/0x240 [ 358.553995][T12666] oom_kill_process+0x295/0x350 [ 358.554022][T12666] out_of_memory+0x97d/0xb80 [ 358.554047][T12666] try_charge_memcg+0x62e/0xa10 [ 358.554177][T12666] obj_cgroup_charge_pages+0x23/0xc0 [ 358.554211][T12666] __memcg_kmem_charge_page+0x9e/0x170 [ 358.554310][T12666] __alloc_frozen_pages_noprof+0x18a/0x360 [ 358.554346][T12666] alloc_pages_mpol+0xb3/0x260 [ 358.554468][T12666] alloc_pages_noprof+0x8f/0x130 [ 358.554516][T12666] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 358.554615][T12666] __kvmalloc_node_noprof+0x3d4/0x650 [ 358.554646][T12666] ? futex_hash_allocate+0x190/0x9d0 [ 358.554679][T12666] ? futex_hash_allocate+0x190/0x9d0 [ 358.554728][T12666] ? __list_add_valid_or_report+0x38/0xe0 [ 358.554818][T12666] futex_hash_allocate+0x190/0x9d0 [ 358.554904][T12666] ? cap_task_prctl+0x13f/0x6e0 [ 358.554929][T12666] futex_hash_prctl+0xd8/0xf0 [ 358.554985][T12666] __se_sys_prctl+0xa3d/0x13f0 [ 358.555017][T12666] __x64_sys_prctl+0x67/0x80 [ 358.555102][T12666] x64_sys_call+0x2533/0x3020 [ 358.555132][T12666] do_syscall_64+0x12c/0x370 [ 358.555156][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.555181][T12666] RIP: 0033:0x7f635206c799 [ 358.555200][T12666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.555244][T12666] RSP: 002b:00007f6350ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 358.555269][T12666] RAX: ffffffffffffffda RBX: 00007f63522e5fa0 RCX: 00007f635206c799 [ 358.555285][T12666] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 358.555361][T12666] RBP: 00007f6352102bd9 R08: 0000000000000000 R09: 0000000000000000 [ 358.555447][T12666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.555461][T12666] R13: 00007f63522e6038 R14: 00007f63522e5fa0 R15: 00007ffcfdc0f808 [ 358.555483][T12666] [ 358.555519][T12666] memory: usage 264820kB, limit 307200kB, failcnt 1717 [ 358.843735][T12666] memory+swap: usage 234260kB, limit 9007199254740988kB, failcnt 0 [ 358.864136][T12666] kmem: usage 147924kB, limit 9007199254740988kB, failcnt 0 [ 358.937017][T12666] Memory cgroup stats for /syz3: [ 358.937347][T12666] cache 11890688 [ 358.946822][T12666] rss 204800 [ 358.954165][T12666] shmem 11354112 [ 358.986000][T12666] mapped_file 49152 [ 358.992318][T12666] dirty 32768 [ 359.003432][T12666] writeback 0 [ 359.013561][T12666] workingset_refault_anon 332 [ 359.035641][T12666] workingset_refault_file 2808 [ 359.060358][T12666] swap 57905152 [ 359.136897][T12666] swapcached 62738432 [ 359.181419][T12666] pgpgin 390353 [ 359.230505][T12666] pgpgout 387200 [ 359.266167][T12666] pgfault 327725 [ 359.298886][T12666] pgmajfault 57 [ 359.322691][T12666] inactive_anon 11714560 [ 359.353888][T12666] active_anon 655360 [ 359.379897][T12666] inactive_file 40960 [ 359.408188][T12666] active_file 503808 [ 359.437003][T12666] unevictable 0 [ 359.462396][T12666] hierarchical_memory_limit 314572800 [ 359.501451][T12666] hierarchical_memsw_limit 9223372036854771712 [ 359.545871][T12666] total_cache 11890688 [ 359.575667][T12666] total_rss 204800 [ 359.601018][T12666] total_shmem 11354112 [ 359.630812][T12666] total_mapped_file 49152 [ 359.660274][T12666] total_dirty 32768 [ 359.726461][T12666] total_writeback 0 [ 359.762542][T12666] total_workingset_refault_anon 332 [ 359.813332][T12666] total_workingset_refault_file 2808 [ 359.901181][T12666] total_swap 57905152 [ 359.945742][T12666] total_swapcached 62738432 [ 360.094428][T12666] total_pgpgin 390353 [ 360.098465][T12666] total_pgpgout 387200 [ 360.102547][T12666] total_pgfault 327725 [ 360.128329][T12666] total_pgmajfault 57 [ 360.132443][T12666] total_inactive_anon 11714560 [ 360.165360][T12666] total_active_anon 655360 [ 360.193071][T12666] total_inactive_file 40960 [ 360.213938][T12666] total_active_file 503808 [ 360.218485][T12666] total_unevictable 0 [ 360.262824][T12666] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3225,pid=12665,uid=0 [ 360.338662][T12666] Memory cgroup out of memory: Killed process 12666 (syz.3.3225) total-vm:96328kB, anon-rss:1420kB, file-rss:22260kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 360.500880][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.882192][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 361.901826][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 361.919038][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 361.957218][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 362.111430][T12749] syzkaller0: entered promiscuous mode [ 362.119940][T12749] syzkaller0: entered allmulticast mode [ 362.257086][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3252'. [ 362.341034][T12756] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12756 comm=syz.2.3252 [ 362.799777][T12765] loop2: detected capacity change from 0 to 1024 [ 362.879754][T12777] xt_bpf: check failed: parse error [ 362.892743][T12765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 362.900161][ T28] audit: type=1326 audit(1772400309.687:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 362.915294][T12765] System zones: 0-1, 3-36 [ 362.937872][ T28] audit: type=1326 audit(1772400309.687:6422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 362.964625][ T28] audit: type=1326 audit(1772400309.687:6423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 362.989317][ T28] audit: type=1326 audit(1772400309.687:6424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 362.997675][T12765] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3256: bad orphan inode 134217728 [ 363.014433][ T28] audit: type=1326 audit(1772400309.687:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 363.014551][ T28] audit: type=1326 audit(1772400309.687:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 363.093357][T12765] loop2: lost filesystem error report for type 5 error -117 [ 363.107345][T12765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.156894][T12780] netlink: 'syz.0.3262': attribute type 8 has an invalid length. [ 363.164964][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 363.186109][T12780] bond0: entered promiscuous mode [ 363.218039][T12780] bond0: left promiscuous mode [ 363.354515][ T28] audit: type=1326 audit(1772400310.147:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 363.411734][ T28] audit: type=1326 audit(1772400310.157:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 363.436970][ T28] audit: type=1326 audit(1772400310.157:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 363.440459][ T6270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.467521][ T28] audit: type=1326 audit(1772400310.157:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.0.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 363.660264][T12805] loop3: detected capacity change from 0 to 2048 [ 363.695382][T12805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.746707][T12809] loop2: detected capacity change from 0 to 2048 [ 363.808613][T12809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.850228][T12805] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3271: bg 0: block 234: padding at end of block bitmap is not set [ 363.871297][T12805] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1128 with error 28 [ 363.884432][T12805] EXT4-fs (loop3): This should not happen!! Data will be lost [ 363.884432][T12805] [ 363.915337][T12805] EXT4-fs (loop3): Total free blocks count 0 [ 363.938565][T12805] EXT4-fs (loop3): Free/Dirty block details [ 363.945234][T12805] EXT4-fs (loop3): free_blocks=0 [ 363.945588][ T6270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.950737][T12805] EXT4-fs (loop3): dirty_blocks=1136 [ 363.965871][T12805] EXT4-fs (loop3): Block reservation details [ 363.972776][T12805] EXT4-fs (loop3): i_reserved_data_blocks=71 [ 364.158920][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.906306][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 364.953139][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 365.015198][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 365.096165][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3277'. [ 365.804644][T12860] netlink: 'syz.2.3288': attribute type 16 has an invalid length. [ 365.808238][T12861] netlink: 'syz.3.3287': attribute type 39 has an invalid length. [ 365.828791][T12860] netlink: 'syz.2.3288': attribute type 17 has an invalid length. [ 365.851318][T12860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.125105][T12849] syz.1.3283 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 366.165689][T12849] CPU: 0 UID: 0 PID: 12849 Comm: syz.1.3283 Tainted: G W syzkaller #0 PREEMPT(full) [ 366.165749][T12849] Tainted: [W]=WARN [ 366.165758][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.165784][T12849] Call Trace: [ 366.165791][T12849] [ 366.165800][T12849] __dump_stack+0x1d/0x30 [ 366.165880][T12849] dump_stack_lvl+0x95/0xd0 [ 366.165962][T12849] dump_stack+0x15/0x1b [ 366.165988][T12849] dump_header+0x80/0x240 [ 366.166015][T12849] oom_kill_process+0x295/0x350 [ 366.166038][T12849] out_of_memory+0x97d/0xb80 [ 366.166060][T12849] try_charge_memcg+0x62e/0xa10 [ 366.166116][T12849] obj_cgroup_charge_pages+0x23/0xc0 [ 366.166149][T12849] __memcg_kmem_charge_page+0x9e/0x170 [ 366.166225][T12849] __alloc_frozen_pages_noprof+0x18a/0x360 [ 366.166259][T12849] alloc_pages_mpol+0xb3/0x260 [ 366.166293][T12849] alloc_pages_noprof+0x8f/0x130 [ 366.166401][T12849] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 366.166443][T12849] __kvmalloc_node_noprof+0x3d4/0x650 [ 366.166471][T12849] ? futex_hash_allocate+0x190/0x9d0 [ 366.166574][T12849] ? futex_hash_allocate+0x190/0x9d0 [ 366.166609][T12849] futex_hash_allocate+0x190/0x9d0 [ 366.166687][T12849] ? cap_task_prctl+0x13f/0x6e0 [ 366.166763][T12849] futex_hash_prctl+0xd8/0xf0 [ 366.166793][T12849] __se_sys_prctl+0xa3d/0x13f0 [ 366.166825][T12849] __x64_sys_prctl+0x67/0x80 [ 366.166928][T12849] x64_sys_call+0x2533/0x3020 [ 366.166958][T12849] do_syscall_64+0x12c/0x370 [ 366.167067][T12849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.167153][T12849] RIP: 0033:0x7f5907d0c799 [ 366.167172][T12849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.167193][T12849] RSP: 002b:00007f5906767028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 366.167226][T12849] RAX: ffffffffffffffda RBX: 00007f5907f85fa0 RCX: 00007f5907d0c799 [ 366.167242][T12849] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 366.167257][T12849] RBP: 00007f5907da2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 366.167272][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.167287][T12849] R13: 00007f5907f86038 R14: 00007f5907f85fa0 R15: 00007ffd5fc0f708 [ 366.167378][T12849] [ 366.168069][T12866] lo speed is unknown, defaulting to 1000 [ 366.228234][T12849] memory: usage 231284kB, limit 307200kB, failcnt 5065 [ 366.369880][T12868] loop2: detected capacity change from 0 to 8192 [ 366.433906][T12849] memory+swap: usage 267972kB, limit 9007199254740988kB, failcnt 0 [ 366.442026][T12849] kmem: usage 198716kB, limit 9007199254740988kB, failcnt 0 [ 366.450357][T12849] Memory cgroup stats for /syz1: [ 366.450578][T12849] cache 1404928 [ 366.459888][T12849] rss 540672 [ 366.463300][T12849] shmem 876544 [ 366.500003][T12849] mapped_file 49152 [ 366.509068][T12849] dirty 32768 [ 366.516827][T12849] writeback 0 [ 366.583835][T12849] workingset_refault_anon 563 [ 366.588648][T12849] workingset_refault_file 4078 [ 366.593521][T12849] swap 68722688 [ 366.605808][T12866] lo speed is unknown, defaulting to 1000 [ 366.735561][T12849] swapcached 87166976 [ 366.741353][T12849] pgpgin 357676 [ 366.749609][T12849] pgpgout 357147 [ 366.863766][T12849] pgfault 356924 [ 366.892414][T12849] pgmajfault 179 [ 366.925802][T12849] inactive_anon 24576 [ 366.961878][T12849] active_anon 1609728 [ 366.996572][T12849] inactive_file 0 [ 367.029099][T12849] active_file 532480 [ 367.053800][T12849] unevictable 0 [ 367.057312][T12849] hierarchical_memory_limit 314572800 [ 367.062761][T12849] hierarchical_memsw_limit 9223372036854771712 [ 367.069271][T12849] total_cache 1404928 [ 367.073275][T12849] total_rss 540672 [ 367.077161][T12849] total_shmem 876544 [ 367.081153][T12849] total_mapped_file 49152 [ 367.085798][T12849] total_dirty 32768 [ 367.089646][T12849] total_writeback 0 [ 367.093788][T12849] total_workingset_refault_anon 563 [ 367.099045][T12849] total_workingset_refault_file 4078 [ 367.104545][T12849] total_swap 68722688 [ 367.108554][T12849] total_swapcached 87166976 [ 367.113267][T12849] total_pgpgin 357676 [ 367.117368][T12849] total_pgpgout 357147 [ 367.121462][T12849] total_pgfault 356924 [ 367.125599][T12849] total_pgmajfault 179 [ 367.129732][T12849] total_inactive_anon 24576 [ 367.134440][T12849] total_active_anon 1609728 [ 367.138965][T12849] total_inactive_file 0 [ 367.143196][T12849] total_active_file 532480 [ 367.147834][T12849] total_unevictable 0 [ 367.152058][T12849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3283,pid=12848,uid=0 [ 367.167416][T12849] Memory cgroup out of memory: Killed process 12849 (syz.1.3283) total-vm:96328kB, anon-rss:1416kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:0 [ 367.325593][T12881] raw_sendmsg: syz.0.3295 forgot to set AF_INET. Fix it! [ 367.334225][T12881] __nla_validate_parse: 3 callbacks suppressed [ 367.334241][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 367.371076][T12881] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3295'. [ 367.404574][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 367.414619][T12881] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3295'. [ 367.444236][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3295'. [ 368.101211][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 368.754093][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 368.754163][ T28] audit: type=1400 audit(1772400315.557:6470): avc: denied { map } for pid=12921 comm="syz.0.3309" path="socket:[75047]" dev="sockfs" ino=75047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 368.950314][T12918] loop2: detected capacity change from 0 to 512 [ 369.381578][ T28] audit: type=1326 audit(1772400316.157:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.442467][ T28] audit: type=1326 audit(1772400316.157:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.452668][T12955] loop3: detected capacity change from 0 to 512 [ 369.490950][T12957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 369.511912][T12957] bond5: (slave ip6gretap0): making interface the new active one [ 369.534407][T12955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.547341][ T28] audit: type=1326 audit(1772400316.217:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.583082][T12957] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 369.594306][T12955] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.608780][ T28] audit: type=1326 audit(1772400316.217:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.657324][ T28] audit: type=1326 audit(1772400316.217:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.690748][ T28] audit: type=1326 audit(1772400316.227:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.717093][ T28] audit: type=1326 audit(1772400316.227:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.776869][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3323'. [ 369.783242][ T28] audit: type=1326 audit(1772400316.237:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 369.826289][T12968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3323'. [ 369.835770][T12968] veth3: entered promiscuous mode [ 369.841275][T12968] veth3: entered allmulticast mode [ 370.051502][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.574137][ T28] audit: type=1400 audit(1772400317.337:6479): avc: denied { watch watch_reads } for pid=12987 comm="syz.0.3331" path="/file0" dev="ramfs" ino=74115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 370.897904][T12993] ip6tnl0: Caught tx_queue_len zero misconfig [ 371.487249][T13002] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 371.590374][T13002] bond5: entered promiscuous mode [ 371.606542][T13002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.731601][T13000] loop3: detected capacity change from 0 to 1024 [ 371.740337][T13000] EXT4-fs: Ignoring removed orlov option [ 371.763842][T13000] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 371.806319][T13002] bond5: (slave bridge12): making interface the new active one [ 371.806523][T13000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.836421][T13002] bridge12: entered promiscuous mode [ 371.844893][T13002] bond5: (slave bridge12): Enslaving as an active interface with an up link [ 371.875317][T13000] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.3336: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 372.037397][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.132226][T13035] loop3: detected capacity change from 0 to 1024 [ 372.153500][T13035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.155673][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.627097][ T3404] lo speed is unknown, defaulting to 1000 [ 374.633276][ T3404] syz0: Port: 1 Link DOWN [ 374.987453][T13099] loop3: detected capacity change from 0 to 512 [ 375.007760][T13099] EXT4-fs (loop3): Invalid default hash set in the superblock [ 375.073672][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 375.079988][ T28] audit: type=1326 audit(1772400321.867:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.116848][ T28] audit: type=1326 audit(1772400321.907:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.164704][ T28] audit: type=1326 audit(1772400321.907:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.204611][ T28] audit: type=1326 audit(1772400321.907:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.232655][ T28] audit: type=1326 audit(1772400321.907:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.707911][ T28] audit: type=1326 audit(1772400321.907:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.731899][ T28] audit: type=1326 audit(1772400321.907:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 375.837675][T13116] vlan3: entered promiscuous mode [ 375.842971][T13116] vlan3: entered allmulticast mode [ 375.849524][T13116] hsr_slave_1: entered allmulticast mode [ 375.935569][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3367'. [ 376.015783][ T28] audit: type=1400 audit(1772400322.817:6494): avc: denied { unmount } for pid=13130 comm="syz.0.3370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 376.104817][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 376.216253][T13136] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.780746][ T28] audit: type=1400 audit(1772400324.577:6495): avc: denied { read } for pid=13161 comm="syz.4.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.992908][T13169] lo speed is unknown, defaulting to 1000 [ 378.028874][T13166] v: renamed from ip6_vti0 [ 380.626598][T13170] lo speed is unknown, defaulting to 1000 [ 380.715868][T13169] lo speed is unknown, defaulting to 1000 [ 380.793911][T13170] lo speed is unknown, defaulting to 1000 [ 381.294059][T13188] syzkaller0: entered promiscuous mode [ 381.327855][T13188] syzkaller0: entered allmulticast mode [ 381.779123][T13195] loop3: detected capacity change from 0 to 128 [ 382.222900][T13202] batadv_slave_0: entered promiscuous mode [ 382.266580][T13204] netlink: 'syz.4.3390': attribute type 10 has an invalid length. [ 382.274704][ T28] audit: type=1400 audit(1772400329.067:6496): avc: denied { listen } for pid=13203 comm="syz.4.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.667947][T13225] netlink: 'syz.3.3398': attribute type 1 has an invalid length. [ 382.746241][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'. [ 382.790401][T13225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.813831][T13231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13231 comm=syz.0.3400 [ 382.838331][T13233] vlan2: entered promiscuous mode [ 382.848344][T13231] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 382.867745][T13233] bond8: entered promiscuous mode [ 382.879137][T13233] vlan2: entered allmulticast mode [ 382.914705][T13233] bond8: entered allmulticast mode [ 382.945764][T13225] bond8: (slave bridge0): making interface the new active one [ 382.955605][T13236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3400'. [ 383.017968][T13225] bridge0: entered promiscuous mode [ 383.034001][T13225] bridge0: entered allmulticast mode [ 383.040460][T13225] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 383.124141][T13235] bond4: (slave geneve2): making interface the new active one [ 383.164847][T13235] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 383.280671][T13236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 383.303573][ T137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 383.332188][ T137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 383.366814][ T137] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 383.381740][ T137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 386.196970][T13310] bridge0: entered allmulticast mode [ 386.209478][T13310] bridge_slave_1: left allmulticast mode [ 386.215266][T13310] bridge_slave_1: left promiscuous mode [ 386.221295][T13310] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.295046][T13310] bridge_slave_0: left allmulticast mode [ 386.335060][T13310] bridge_slave_0: left promiscuous mode [ 386.343223][T13310] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.566941][T13332] lo speed is unknown, defaulting to 1000 [ 386.683442][T13334] lo speed is unknown, defaulting to 1000 [ 386.683954][T13332] lo speed is unknown, defaulting to 1000 [ 386.756044][ T28] audit: type=1400 audit(1772400333.557:6497): avc: denied { getopt } for pid=13333 comm="syz.2.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.796411][T13334] lo speed is unknown, defaulting to 1000 [ 386.826383][ T28] audit: type=1400 audit(1772400333.587:6498): avc: denied { name_connect } for pid=13336 comm="syz.3.3428" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 386.961983][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3431'. [ 386.983474][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3431'. [ 387.373840][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3435'. [ 387.741437][T13372] syz.2.3438 (13372): attempted to duplicate a private mapping with mremap. This is not supported. [ 387.953473][T13377] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 388.030188][T13377] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.051344][T13372] tipc: Enabled bearer , priority 10 [ 388.079996][T13380] macvlan2: entered promiscuous mode [ 388.130389][T13380] macvlan2: entered allmulticast mode [ 388.159060][T13380] bond5: entered promiscuous mode [ 388.180193][T13380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.226566][T13380] bond5: left promiscuous mode [ 388.291187][T13377] bond5: (slave ip6gretap1): making interface the new active one [ 388.355656][T13377] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 388.996811][T13396] lo speed is unknown, defaulting to 1000 [ 389.067936][T13402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.270835][T13396] lo speed is unknown, defaulting to 1000 [ 389.924143][ T28] audit: type=1400 audit(1772400336.717:6499): avc: denied { read write } for pid=13415 comm="syz.3.3451" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 389.952147][ T28] audit: type=1400 audit(1772400336.717:6500): avc: denied { open } for pid=13415 comm="syz.3.3451" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 390.031672][T13423] : renamed from bond_slave_0 [ 390.096994][T13427] loop3: detected capacity change from 0 to 128 [ 390.116405][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'. [ 390.253072][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.266282][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.283376][T13441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.439151][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.439151][ T7594] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 390.467421][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.467421][ T7594] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 390.500829][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.500829][ T7594] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 390.535393][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.535393][ T7594] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 390.559210][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.559210][ T7594] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 390.590929][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.590929][ T7594] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 390.607314][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.607314][ T7594] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 390.647888][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.647888][ T7594] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 390.685007][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.685007][ T7594] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 390.700572][ T7594] kworker/u8:8: attempt to access beyond end of device [ 390.700572][ T7594] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 391.751815][T13477] batadv_slave_0: left promiscuous mode [ 391.781285][T13477] veth0_vlan: left allmulticast mode [ 391.797856][T13480] loop3: detected capacity change from 0 to 8192 [ 391.840984][T13477] bond2: left promiscuous mode [ 391.845953][T13477] bridge7: left promiscuous mode [ 391.851270][T13477] bond2: left allmulticast mode [ 391.865449][T13477] bridge7: left allmulticast mode [ 391.878777][T13477] vlan2: left promiscuous mode [ 391.885698][T13477] bond3: left promiscuous mode [ 391.891377][T13477] geneve2: left promiscuous mode [ 391.926306][T13477] veth3: left promiscuous mode [ 391.931381][T13477] veth3: left allmulticast mode [ 391.938012][T13477] bond5: left promiscuous mode [ 391.942902][T13477] bridge12: left promiscuous mode [ 391.956651][T12632] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.965326][T12632] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.976527][T12632] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.986864][T12632] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.995826][T12632] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.004959][T12632] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.013512][T12632] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.034783][T12632] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.169660][T13492] netlink: 'syz.1.3475': attribute type 13 has an invalid length. [ 394.216841][T13520] tipc: Enabling of bearer rejected, failed to enable media [ 395.262363][ T28] audit: type=1400 audit(1772400342.057:6501): avc: denied { name_bind } for pid=13538 comm="syz.0.3486" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 395.319420][T13537] lo speed is unknown, defaulting to 1000 [ 395.368963][T13545] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 395.537307][T13537] lo speed is unknown, defaulting to 1000 [ 397.650000][T13570] lo: Caught tx_queue_len zero misconfig [ 398.070451][T13548] lo speed is unknown, defaulting to 1000 [ 398.455063][T13548] lo speed is unknown, defaulting to 1000 [ 400.445004][T13608] loop3: detected capacity change from 0 to 512 [ 400.875633][T13608] EXT4-fs: Mount option(s) incompatible with ext2 [ 400.908984][T13614] bond5: option mode: unable to set because the bond device has slaves [ 400.940346][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'. [ 401.174804][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 401.252692][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.263209][T13616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.279864][ T9382] lo speed is unknown, defaulting to 1000 [ 401.298136][ T9382] syz0: Port: 1 Link ACTIVE [ 401.303195][T13620] lo speed is unknown, defaulting to 1000 [ 401.350552][T13614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.383335][T13614] bond5: (slave bond0): Enslaving as an active interface with an up link [ 401.447641][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 401.467854][T13620] lo speed is unknown, defaulting to 1000 [ 401.475341][T13627] netlink: 'syz.2.3515': attribute type 1 has an invalid length. [ 401.507510][T13627] bond6: entered promiscuous mode [ 401.513266][T13627] bond6: entered allmulticast mode [ 401.519020][T13627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.546684][T13625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13625 comm=syz.4.3514 [ 401.575705][T13627] erspan1: entered allmulticast mode [ 401.592906][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'. [ 401.630864][T13627] bond6: (slave erspan1): making interface the new active one [ 401.645999][T13627] erspan1: entered promiscuous mode [ 401.652215][T13627] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 401.730836][T13636] bond6 (unregistering): (slave erspan1): Releasing active interface [ 401.741165][T13636] erspan1: left promiscuous mode [ 401.755690][T13636] bond6 (unregistering): Released all slaves [ 401.778056][T13639] ipvlan0: Caught tx_queue_len zero misconfig [ 401.851251][T13647] lo speed is unknown, defaulting to 1000 [ 402.031012][T13647] lo speed is unknown, defaulting to 1000 [ 402.785099][T13671] loop3: detected capacity change from 0 to 128 [ 402.804567][T13671] vfat: Unknown parameter 'utf8?0' [ 402.928958][T13680] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.937140][T13680] tipc: Enabled bearer , priority 10 [ 403.066516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.177540][T13685] loop3: detected capacity change from 0 to 512 [ 403.344615][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.887814][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.904132][ T7594] tipc: Subscription rejected, illegal request [ 404.152904][ T28] audit: type=1400 audit(1772400350.947:6502): avc: denied { remount } for pid=13704 comm="syz.4.3542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 404.266196][T13685] EXT4-fs (loop3): 1 orphan inode deleted [ 404.366811][T13685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.904648][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.177763][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 405.355708][T13752] sch_fq: defrate 7 ignored. [ 405.394291][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.411390][T13753] hugetlbfs: syz.1.3554 (13753): Using mlock ulimits for SHM_HUGETLB is obsolete [ 405.482561][T13759] vlan5: entered allmulticast mode [ 405.487952][T13759] bond4: entered allmulticast mode [ 405.493241][T13759] macvlan2: entered allmulticast mode [ 405.933749][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.946042][T13774] bridge0: entered allmulticast mode [ 405.997222][T13774] veth0_to_bridge: left allmulticast mode [ 406.022094][ T28] audit: type=1326 audit(1772400352.817:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 406.088096][T13774] veth0_to_bridge: left promiscuous mode [ 406.203576][T13774] bridge0: port 3(veth0_to_bridge) entered disabled state [ 406.252863][ T28] audit: type=1326 audit(1772400352.847:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 406.558381][ T28] audit: type=1326 audit(1772400352.847:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 406.611218][T13774] bridge_slave_1: left allmulticast mode [ 406.635183][T13774] bridge_slave_1: left promiscuous mode [ 406.681500][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.727196][T13774] bridge_slave_0: left allmulticast mode [ 406.745545][ T28] audit: type=1326 audit(1772400352.847:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 406.803134][T13774] bridge_slave_0: left promiscuous mode [ 406.835101][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.905118][ T28] audit: type=1326 audit(1772400352.857:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 406.974681][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.150879][ T28] audit: type=1326 audit(1772400352.857:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 407.339152][ T28] audit: type=1326 audit(1772400352.867:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 407.469553][ T28] audit: type=1326 audit(1772400352.877:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 407.503772][ T28] audit: type=1326 audit(1772400352.877:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.4.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 407.649796][T13792] lo speed is unknown, defaulting to 1000 [ 407.878371][T13792] lo speed is unknown, defaulting to 1000 [ 408.025631][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.481317][T13797] lo speed is unknown, defaulting to 1000 [ 408.569848][T13797] lo speed is unknown, defaulting to 1000 [ 408.839119][ T3367] lo speed is unknown, defaulting to 1000 [ 408.839344][T12627] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.862455][ T3367] syU×: Port: 1 Link DOWN [ 408.863818][T12627] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.913754][T12627] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.947948][T12627] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.958522][T13824] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 409.003014][ T3367] lo speed is unknown, defaulting to 1000 [ 409.010784][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3576'. [ 409.054232][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.081247][T13824] bond5: entered promiscuous mode [ 409.086969][T13824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.100961][T13829] bridge10: entered promiscuous mode [ 409.175429][T13829] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 409.616538][T13851] syzkaller0: entered promiscuous mode [ 409.622840][T13851] syzkaller0: entered allmulticast mode [ 409.710311][T13851] 0: reclassify loop, rule prio 0, protocol 800 [ 409.717360][T13849] sch_fq: defrate 7 ignored. [ 410.116663][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.469332][T13867] Cannot find add_set index 0 as target [ 410.771964][T13875] syzkaller0: entered promiscuous mode [ 410.778050][T13875] syzkaller0: entered allmulticast mode [ 410.808729][T13863] lo speed is unknown, defaulting to 1000 [ 411.042898][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 411.042942][ T28] audit: type=1400 audit(1772400357.837:6516): avc: denied { execute } for pid=13888 comm="syz.4.3595" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=78494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 411.134644][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.136179][T13863] lo speed is unknown, defaulting to 1000 [ 411.345817][ T28] audit: type=1400 audit(1772400358.147:6517): avc: denied { create } for pid=13881 comm="syz.2.3591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 411.355044][T13865] lo speed is unknown, defaulting to 1000 [ 411.624037][T13865] lo speed is unknown, defaulting to 1000 [ 411.789535][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 411.815609][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3597'. [ 411.995909][T13906] loop3: detected capacity change from 0 to 128 [ 412.096543][T13908] bond3: option mode: unable to set because the bond device has slaves [ 412.118014][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 412.138182][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 412.166319][T13908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.173782][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.186801][T13908] bond3: (slave bond0): making interface the new active one [ 412.214727][T13908] bond0: entered allmulticast mode [ 412.220013][T13908] bond_slave_0: entered allmulticast mode [ 412.238070][T13908] bond_slave_1: entered allmulticast mode [ 412.256291][T13908] bond3: (slave bond0): Enslaving as an active interface with an up link [ 412.282735][T13910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3601'. [ 412.340459][T13910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3601'. [ 412.387795][T13911] bond3: (slave bond0): Releasing active interface [ 412.395427][T13911] bond0: left allmulticast mode [ 412.408836][T13911] bond_slave_0: left allmulticast mode [ 412.423273][T13911] bond_slave_1: left allmulticast mode [ 412.440856][T13919] loop3: detected capacity change from 0 to 4096 [ 412.463048][T13919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.475619][T13911] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.494094][T13919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.507857][T13911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.564807][T13915] lo speed is unknown, defaulting to 1000 [ 412.654684][ T28] audit: type=1326 audit(1772400359.457:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 412.768174][ T28] audit: type=1326 audit(1772400359.477:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 412.804215][ T28] audit: type=1326 audit(1772400359.597:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 412.835892][T13915] lo speed is unknown, defaulting to 1000 [ 413.230723][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.319339][ T28] audit: type=1326 audit(1772400360.117:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 413.353831][ T28] audit: type=1326 audit(1772400360.117:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13918 comm="syz.3.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 413.442529][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.569699][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3614'. [ 413.623351][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3614'. [ 413.700133][T13950] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 414.253756][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.411607][T13967] x_tables: duplicate entry at hook 1 [ 414.822114][T13976] loop3: detected capacity change from 0 to 1024 [ 414.855229][T13976] EXT4-fs: Ignoring removed orlov option [ 414.861167][T13976] EXT4-fs: Ignoring removed nobh option [ 414.908672][T13976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.108699][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.305546][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.449772][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 415.461535][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'. [ 415.738004][T13999] team0: Port device team_slave_0 removed [ 415.835883][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'. [ 416.003462][T14022] bond1: option mode: unable to set because the bond device has slaves [ 416.034018][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 416.056612][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 416.124562][T14022] batman_adv: batadv0: Interface activated: dummy0 [ 416.131531][T14022] batman_adv: batadv0: Interface deactivated: dummy0 [ 416.138614][T14022] batman_adv: batadv0: Removing interface: dummy0 [ 416.181045][T14022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.323822][ T10] lo speed is unknown, defaulting to 1000 [ 416.333757][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.336126][ T9382] syz1: Port: 1 Link ACTIVE [ 416.351022][ T10] syU×: Port: 1 Link ACTIVE [ 416.379013][ T9382] lo speed is unknown, defaulting to 1000 [ 416.827414][T14038] syzkaller0: entered promiscuous mode [ 416.879739][T14038] syzkaller0: entered allmulticast mode [ 417.383809][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.597459][T14042] rdma_rxe: rxe_newlink: failed to add lo [ 417.706435][T14054] lo speed is unknown, defaulting to 1000 [ 417.849983][T14054] lo speed is unknown, defaulting to 1000 [ 418.413776][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.710707][T14083] tipc: Resetting bearer [ 418.970870][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3656'. [ 418.980736][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3656'. [ 419.042003][T14101] syzkaller0: entered promiscuous mode [ 419.060133][T14101] syzkaller0: entered allmulticast mode [ 419.146351][T14107] bridge_slave_1: entered allmulticast mode [ 419.153499][T14107] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 419.252289][T14113] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.453788][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.494288][T14119] sctp: [Deprecated]: syz.3.3664 (pid 14119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.494288][T14119] Use struct sctp_sack_info instead [ 419.530777][ T28] audit: type=1400 audit(1772400366.327:6523): avc: denied { setcurrent } for pid=14117 comm="syz.3.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 419.552355][ T28] audit: type=1401 audit(1772400366.327:6524): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 419.800136][T14127] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 420.494634][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 420.923540][T14150] loop3: detected capacity change from 0 to 512 [ 420.958332][T14150] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3673: invalid indirect mapped block 256 (level 2) [ 420.979994][T14150] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 420.980439][T14150] EXT4-fs (loop3): 2 truncates cleaned up [ 420.989790][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 420.989813][ C1] EXT4-fs (loop3): initial error at time 1772400367: ext4_free_branches:1023: inode 11 [ 420.989843][ C1] EXT4-fs (loop3): last error at time 1772400367: ext4_free_branches:1023: inode 11 [ 421.086091][T14150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.210409][ T28] audit: type=1400 audit(1772400368.007:6525): avc: denied { setopt } for pid=14157 comm="syz.1.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 421.297051][T14159] lo speed is unknown, defaulting to 1000 [ 421.304638][ T28] audit: type=1400 audit(1772400368.097:6526): avc: denied { getopt } for pid=14157 comm="syz.1.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 421.472113][T14160] lo speed is unknown, defaulting to 1000 [ 421.543752][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.642407][T14159] lo speed is unknown, defaulting to 1000 [ 421.681173][T14160] lo speed is unknown, defaulting to 1000 [ 421.840157][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.573752][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.278612][T14197] netlink: 'syz.1.3687': attribute type 4 has an invalid length. [ 423.329122][T14199] netlink: 'syz.1.3687': attribute type 4 has an invalid length. [ 423.355399][T14196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3686'. [ 423.614722][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.895880][T14209] bridge_slave_0: invalid flags given to default FDB implementation [ 423.980004][ T70] bond8: (slave bridge0): link status definitely down, disabling slave [ 423.989864][ T70] bridge0: left promiscuous mode [ 423.995136][ T70] bridge0: left allmulticast mode [ 424.000597][ T70] bond8: now running without any active interface! [ 424.008424][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3690'. [ 424.315869][T14220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14220 comm=syz.2.3693 [ 424.663771][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.864036][ T28] audit: type=1400 audit(1772400371.587:6527): avc: denied { mount } for pid=14224 comm="syz.4.3695" name="/" dev="rpc_pipefs" ino=80477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 424.907660][T14228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.951140][T14228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.169307][T14231] syz.2.3697: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 425.254863][T14231] CPU: 1 UID: 0 PID: 14231 Comm: syz.2.3697 Tainted: G W syzkaller #0 PREEMPT(full) [ 425.254909][T14231] Tainted: [W]=WARN [ 425.254916][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.254929][T14231] Call Trace: [ 425.254935][T14231] [ 425.254945][T14231] __dump_stack+0x1d/0x30 [ 425.255011][T14231] dump_stack_lvl+0x95/0xd0 [ 425.255104][T14231] dump_stack+0x15/0x1b [ 425.255192][T14231] warn_alloc+0x145/0x1c0 [ 425.255215][T14231] ? __schedule+0x85a/0xd40 [ 425.255323][T14231] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 425.255350][T14231] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 425.255403][T14231] ? irqentry_exit+0x91/0x520 [ 425.255445][T14231] ? xskq_create+0x36/0xe0 [ 425.255467][T14231] ? should_fail_ex+0x30/0x280 [ 425.255491][T14231] ? xskq_create+0x36/0xe0 [ 425.255512][T14231] vmalloc_user_noprof+0x7d/0xb0 [ 425.255539][T14231] ? xskq_create+0x80/0xe0 [ 425.255585][T14231] xskq_create+0x80/0xe0 [ 425.255607][T14231] xsk_init_queue+0x70/0xb0 [ 425.255635][T14231] xsk_setsockopt+0x477/0x640 [ 425.255655][T14231] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.255674][T14231] __sys_setsockopt+0x184/0x200 [ 425.255743][T14231] __x64_sys_setsockopt+0x64/0x80 [ 425.255770][T14231] x64_sys_call+0x2327/0x3020 [ 425.255836][T14231] do_syscall_64+0x12c/0x370 [ 425.255859][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.255881][T14231] RIP: 0033:0x7fa16ebdc799 [ 425.255898][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.255936][T14231] RSP: 002b:00007fa16d62f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.255957][T14231] RAX: ffffffffffffffda RBX: 00007fa16ee55fa0 RCX: 00007fa16ebdc799 [ 425.255971][T14231] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 425.255985][T14231] RBP: 00007fa16ec72bd9 R08: 0000000000000004 R09: 0000000000000000 [ 425.255999][T14231] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 425.256030][T14231] R13: 00007fa16ee56038 R14: 00007fa16ee55fa0 R15: 00007ffcd64979b8 [ 425.256097][T14231] [ 425.256104][T14231] Mem-Info: [ 425.474206][T14231] active_anon:18093 inactive_anon:3031 isolated_anon:0 [ 425.474206][T14231] active_file:9843 inactive_file:13217 isolated_file:0 [ 425.474206][T14231] unevictable:0 dirty:279 writeback:0 [ 425.474206][T14231] slab_reclaimable:4186 slab_unreclaimable:97273 [ 425.474206][T14231] mapped:32039 shmem:11736 pagetables:5126 [ 425.474206][T14231] sec_pagetables:0 bounce:0 [ 425.474206][T14231] kernel_misc_reclaimable:0 [ 425.474206][T14231] free:1692884 free_pcp:16918 free_cma:0 [ 425.540118][T14231] Node 0 active_anon:60772kB inactive_anon:12124kB active_file:39372kB inactive_file:52868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116672kB dirty:1116kB writeback:0kB shmem:35460kB kernel_stack:4496kB pagetables:20504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.579981][T14231] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.614608][T14231] lowmem_reserve[]: 0 2879 7857 7857 [ 425.622445][T14231] Node 0 DMA32 free:2944668kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 425.655777][T14231] lowmem_reserve[]: 0 0 4978 4978 [ 425.660947][T14231] Node 0 Normal free:3820724kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61420kB inactive_anon:12124kB active_file:39372kB inactive_file:52868kB unevictable:0kB writepending:1116kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:66308kB local_pcp:53124kB free_cma:0kB [ 425.696436][T14231] lowmem_reserve[]: 0 0 0 0 [ 425.701157][T14231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.704551][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.724695][T14231] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944668kB [ 425.772804][T14231] Node 0 Normal: 1041*4kB (UME) 686*8kB (UME) 316*16kB (UME) 421*32kB (UME) 107*64kB (UME) 66*128kB (UME) 226*256kB (UM) 338*512kB (UME) 288*1024kB (UM) 178*2048kB (UM) 705*4096kB (UM) = 3821524kB [ 425.794029][T14231] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 425.803415][T14231] 34927 total pagecache pages [ 425.809382][T14231] 176 pages in swap cache [ 425.814878][T14231] Free swap = 168kB [ 425.819032][T14231] Total swap = 124996kB [ 425.823425][T14231] 2097051 pages RAM [ 425.843993][T14231] 0 pages HighMem/MovableOnly [ 425.848840][T14231] 81603 pages reserved [ 426.260018][T14253] netlink: 'syz.3.3703': attribute type 16 has an invalid length. [ 426.287541][T14253] netlink: 'syz.3.3703': attribute type 17 has an invalid length. [ 426.405109][ T28] audit: type=1400 audit(1772400373.207:6528): avc: denied { write } for pid=14254 comm="syz.2.3702" name="file1" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 426.428562][T14255] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3702'. [ 426.451770][ T28] audit: type=1400 audit(1772400373.237:6529): avc: denied { setattr } for pid=14254 comm="syz.2.3702" name="file1" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 426.745825][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 426.781604][T14262] lo speed is unknown, defaulting to 1000 [ 426.800516][T14258] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 426.974855][T14262] lo speed is unknown, defaulting to 1000 [ 427.019329][T14281] loop3: detected capacity change from 0 to 1024 [ 427.105643][T14281] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 427.147077][T14281] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 427.193763][T14281] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #8: comm syz.3.3709: inode has both inline data and extents flags [ 427.324732][T14281] loop3: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 427.328691][T14281] EXT4-fs (loop3): no journal found [ 427.337916][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 427.337941][ C1] EXT4-fs (loop3): initial error at time 1772400374: ext4_get_journal_inode:5863: inode 8 [ 427.337973][ C1] EXT4-fs (loop3): last error at time 1772400374: ext4_get_journal_inode:5863: inode 8 [ 427.773786][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 428.835842][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.853749][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 430.903747][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 431.276661][T14363] lo speed is unknown, defaulting to 1000 [ 431.437287][T14363] lo speed is unknown, defaulting to 1000 [ 431.616439][T14372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.740126][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3734'. [ 431.751780][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3734'. [ 431.799461][ T28] audit: type=1400 audit(1772400378.557:6530): avc: denied { read } for pid=14378 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 431.814279][T14372] netlink: 'syz.3.3734': attribute type 6 has an invalid length. [ 431.873558][T14375] lo speed is unknown, defaulting to 1000 [ 431.933751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 432.103631][T14375] lo speed is unknown, defaulting to 1000 [ 432.200034][T14381] Set syz1 is full, maxelem 65536 reached [ 432.474486][T14404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.522330][T14404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 432.664638][T14401] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 432.672106][T14401] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 432.925140][T14401] vhci_hcd vhci_hcd.0: Device attached [ 432.974653][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 433.104711][ T9372] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 433.251645][ T9372] usb 7-3: new full-speed USB device number 3 using vhci_hcd [ 433.300546][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 433.346475][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3746'. [ 433.523981][T14410] vhci_hcd: connection reset by peer [ 433.535652][ T70] vhci_hcd vhci_hcd.3: stop threads [ 433.541134][ T70] vhci_hcd vhci_hcd.3: release socket [ 433.551331][ T70] vhci_hcd vhci_hcd.3: disconnect device [ 434.023737][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.053751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 435.481714][T14455] netlink: 'syz.0.3765': attribute type 14 has an invalid length. [ 436.108305][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 436.132091][T14479] blktrace: Concurrent blktraces are not allowed on loop6 [ 436.147488][T14490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.288829][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3762'. [ 436.354878][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3762'. [ 436.376303][T14490] netlink: 'syz.4.3762': attribute type 6 has an invalid length. [ 436.426550][T14498] syz.1.3766 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 436.456235][T14498] CPU: 1 UID: 0 PID: 14498 Comm: syz.1.3766 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.456277][T14498] Tainted: [W]=WARN [ 436.456285][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.456298][T14498] Call Trace: [ 436.456306][T14498] [ 436.456324][T14498] __dump_stack+0x1d/0x30 [ 436.456355][T14498] dump_stack_lvl+0x95/0xd0 [ 436.456381][T14498] dump_stack+0x15/0x1b [ 436.456421][T14498] dump_header+0x80/0x240 [ 436.456447][T14498] oom_kill_process+0x295/0x350 [ 436.456510][T14498] out_of_memory+0x97d/0xb80 [ 436.456581][T14498] try_charge_memcg+0x62e/0xa10 [ 436.456622][T14498] obj_cgroup_charge_pages+0x23/0xc0 [ 436.456658][T14498] __memcg_kmem_charge_page+0x9e/0x170 [ 436.456691][T14498] __alloc_frozen_pages_noprof+0x18a/0x360 [ 436.456720][T14498] alloc_pages_mpol+0xb3/0x260 [ 436.456779][T14498] alloc_pages_noprof+0x8f/0x130 [ 436.456829][T14498] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 436.456870][T14498] __kvmalloc_node_noprof+0x3d4/0x650 [ 436.456898][T14498] ? futex_hash_allocate+0x190/0x9d0 [ 436.456956][T14498] ? futex_hash_allocate+0x190/0x9d0 [ 436.456984][T14498] futex_hash_allocate+0x190/0x9d0 [ 436.457017][T14498] ? cap_task_prctl+0x13f/0x6e0 [ 436.457074][T14498] futex_hash_prctl+0xd8/0xf0 [ 436.457105][T14498] __se_sys_prctl+0xa3d/0x13f0 [ 436.457137][T14498] __x64_sys_prctl+0x67/0x80 [ 436.457168][T14498] x64_sys_call+0x2533/0x3020 [ 436.457241][T14498] do_syscall_64+0x12c/0x370 [ 436.457320][T14498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.457345][T14498] RIP: 0033:0x7f5907d0c799 [ 436.457363][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.457382][T14498] RSP: 002b:00007f5906767028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 436.457430][T14498] RAX: ffffffffffffffda RBX: 00007f5907f85fa0 RCX: 00007f5907d0c799 [ 436.457447][T14498] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 436.457461][T14498] RBP: 00007f5907da2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 436.457523][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.457536][T14498] R13: 00007f5907f86038 R14: 00007f5907f85fa0 R15: 00007ffd5fc0f708 [ 436.457555][T14498] [ 436.457596][T14498] memory: usage 295760kB, limit 307200kB, failcnt 5515 [ 436.530169][T14502] lo speed is unknown, defaulting to 1000 [ 436.544555][T14498] memory+swap: usage 336876kB, limit 9007199254740988kB, failcnt 0 [ 436.753875][T14498] kmem: usage 218396kB, limit 9007199254740988kB, failcnt 0 [ 436.761378][T14498] Memory cgroup stats for /syz1: [ 436.761629][T14498] cache 5074944 [ 436.789920][T14498] rss 552960 [ 436.796902][T14498] shmem 5070848 [ 436.803838][T14498] mapped_file 4096 [ 436.814734][T14498] dirty 0 [ 436.822272][T14498] writeback 0 [ 436.835851][T14498] workingset_refault_anon 563 [ 436.847922][T14498] workingset_refault_file 8874 [ 436.869081][T14498] swap 68722688 [ 436.883207][T14498] swapcached 87166976 [ 436.934660][T14498] pgpgin 462711 [ 436.948583][T14498] pgpgout 461324 [ 436.964640][T14498] pgfault 415884 [ 436.989663][T14498] pgmajfault 189 [ 437.013740][T14498] inactive_anon 5648384 [ 437.050237][T14498] active_anon 24576 [ 437.083879][T14502] lo speed is unknown, defaulting to 1000 [ 437.104739][T14498] inactive_file 0 [ 437.133748][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 437.153908][T14498] active_file 8192 [ 437.157670][T14498] unevictable 0 [ 437.161141][T14498] hierarchical_memory_limit 314572800 [ 437.243834][T14498] hierarchical_memsw_limit 9223372036854771712 [ 437.272356][T14498] total_cache 5074944 [ 437.283205][T14498] total_rss 552960 [ 437.294592][T14498] total_shmem 5070848 [ 437.309077][T14498] total_mapped_file 4096 [ 437.314388][T14498] total_dirty 0 [ 437.323967][T14498] total_writeback 0 [ 437.341608][T14498] total_workingset_refault_anon 563 [ 437.354751][T14498] total_workingset_refault_file 8874 [ 437.371664][T14498] total_swap 68722688 [ 437.381777][T14498] total_swapcached 87166976 [ 437.393730][T14498] total_pgpgin 462711 [ 437.403915][T14498] total_pgpgout 461324 [ 437.441147][T14498] total_pgfault 415884 [ 437.504889][T14498] total_pgmajfault 189 [ 437.509009][T14498] total_inactive_anon 5648384 [ 437.522413][T14498] total_active_anon 24576 [ 437.527740][T14498] total_inactive_file 0 [ 437.532081][T14498] total_active_file 8192 [ 437.539019][T14498] total_unevictable 0 [ 437.543290][T14498] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3766,pid=14497,uid=0 [ 437.559340][T14498] Memory cgroup out of memory: Killed process 14498 (syz.1.3766) total-vm:161612kB, anon-rss:1416kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 438.011295][T14529] lo speed is unknown, defaulting to 1000 [ 438.173874][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 438.230493][T14529] lo speed is unknown, defaulting to 1000 [ 438.334639][ T9372] usb 7-3: enqueue for inactive port 2 [ 438.345281][ T9372] usb 7-3: enqueue for inactive port 2 [ 438.424824][ T9372] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 438.470475][ T28] audit: type=1326 audit(1772400386.272:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 438.561463][ T28] audit: type=1326 audit(1772400386.272:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 438.596897][ T28] audit: type=1326 audit(1772400386.272:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 438.748875][ T28] audit: type=1326 audit(1772400386.272:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 438.773892][ T28] audit: type=1326 audit(1772400386.272:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 438.805047][ T28] audit: type=1326 audit(1772400386.272:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 439.213745][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 439.333163][ T28] audit: type=1326 audit(1772400386.272:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 439.794561][ T28] audit: type=1326 audit(1772400386.272:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 439.828181][ T28] audit: type=1326 audit(1772400386.272:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 439.894604][ T28] audit: type=1326 audit(1772400386.272:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14532 comm="syz.4.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 440.253749][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 441.294992][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.209683][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 442.243927][T14592] gretap0: left allmulticast mode [ 442.334678][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.379525][T14592] gretap0: left promiscuous mode [ 442.416188][T14592] bridge0: port 2(gretap0) entered disabled state [ 442.525657][T14592] veth0_to_bridge: left allmulticast mode [ 442.549635][T14592] veth0_to_bridge: left promiscuous mode [ 442.588733][T14592] bridge0: port 1(veth0_to_bridge) entered disabled state [ 442.760286][T14592] vlan3 (unregistering): left allmulticast mode [ 442.773282][T14592] bridge0 (unregistering): left allmulticast mode [ 442.793621][T14592] vlan3 (unregistering): left promiscuous mode [ 442.825018][T14592] bridge0 (unregistering): left promiscuous mode [ 442.841607][T14592] bridge9: port 1(vlan3) entered disabled state [ 443.080365][T14605] lo speed is unknown, defaulting to 1000 [ 443.207559][T14605] lo speed is unknown, defaulting to 1000 [ 443.294687][T14616] syzkaller0: entered promiscuous mode [ 443.300496][T14616] syzkaller0: entered allmulticast mode [ 443.401509][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 443.584089][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 443.584106][ T28] audit: type=1400 audit(1772400391.392:6585): avc: denied { bind } for pid=14619 comm="syz.1.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 443.790152][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3806'. [ 444.420790][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 444.521214][T14646] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.656637][T14646] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.837334][T14646] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.030558][T14646] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.255830][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.275117][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.323572][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.342422][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 445.465159][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 446.504608][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 447.106839][T14675] netlink: 'syz.1.3817': attribute type 1 has an invalid length. [ 447.164144][T14675] 8021q: adding VLAN 0 to HW filter on device bond7 [ 447.543754][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.481579][T14709] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3830'. [ 448.573796][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 448.686672][T14717] loop3: detected capacity change from 0 to 512 [ 448.756165][T14717] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 448.836938][T14720] tipc: Enabling of bearer rejected, failed to enable media [ 448.875532][T14717] EXT4-fs (loop3): 1 truncate cleaned up [ 448.890372][T14717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.943116][T14699] syz.0.3827 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 449.196850][T14699] CPU: 0 UID: 0 PID: 14699 Comm: syz.0.3827 Tainted: G W syzkaller #0 PREEMPT(full) [ 449.196963][T14699] Tainted: [W]=WARN [ 449.196971][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.196982][T14699] Call Trace: [ 449.196989][T14699] [ 449.196997][T14699] __dump_stack+0x1d/0x30 [ 449.197093][T14699] dump_stack_lvl+0x95/0xd0 [ 449.197123][T14699] dump_stack+0x15/0x1b [ 449.197201][T14699] dump_header+0x80/0x240 [ 449.197228][T14699] oom_kill_process+0x295/0x350 [ 449.197250][T14699] out_of_memory+0x97d/0xb80 [ 449.197273][T14699] try_charge_memcg+0x62e/0xa10 [ 449.197352][T14699] obj_cgroup_charge_pages+0x23/0xc0 [ 449.197383][T14699] __memcg_kmem_charge_page+0x9e/0x170 [ 449.197411][T14699] __alloc_frozen_pages_noprof+0x18a/0x360 [ 449.197460][T14699] alloc_pages_mpol+0xb3/0x260 [ 449.197489][T14699] alloc_pages_noprof+0x8f/0x130 [ 449.197582][T14699] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 449.197615][T14699] __kvmalloc_node_noprof+0x3d4/0x650 [ 449.197639][T14699] ? ip_set_alloc+0x24/0x30 [ 449.197668][T14699] ? ip_set_alloc+0x24/0x30 [ 449.197739][T14699] ? __kmalloc_cache_noprof+0x18a/0x410 [ 449.197761][T14699] ip_set_alloc+0x24/0x30 [ 449.197786][T14699] hash_netiface_create+0x282/0x740 [ 449.197825][T14699] ? __pfx_hash_netiface_create+0x10/0x10 [ 449.197922][T14699] ip_set_create+0x3cf/0x970 [ 449.197987][T14699] ? __nla_parse+0x40/0x60 [ 449.198056][T14699] nfnetlink_rcv_msg+0x509/0x5d0 [ 449.198157][T14699] netlink_rcv_skb+0x123/0x220 [ 449.198189][T14699] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 449.198217][T14699] nfnetlink_rcv+0x167/0x1720 [ 449.198243][T14699] ? __kfree_skb+0x109/0x150 [ 449.198335][T14699] ? nlmon_xmit+0x4f/0x60 [ 449.198362][T14699] ? consume_skb+0x4b/0x160 [ 449.198385][T14699] ? nlmon_xmit+0x4f/0x60 [ 449.198500][T14699] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 449.198534][T14699] ? __dev_queue_xmit+0x136c/0x1f20 [ 449.198564][T14699] ? __dev_queue_xmit+0x148/0x1f20 [ 449.198652][T14699] ? ref_tracker_free+0x37d/0x3e0 [ 449.198677][T14699] ? __netlink_deliver_tap+0x4dc/0x500 [ 449.198790][T14699] netlink_unicast+0x5c0/0x690 [ 449.198862][T14699] netlink_sendmsg+0x5c8/0x6f0 [ 449.198990][T14699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.199019][T14699] ____sys_sendmsg+0x5af/0x600 [ 449.199047][T14699] ___sys_sendmsg+0x195/0x1e0 [ 449.199094][T14699] __x64_sys_sendmsg+0xd4/0x160 [ 449.199135][T14699] x64_sys_call+0x194c/0x3020 [ 449.199218][T14699] do_syscall_64+0x12c/0x370 [ 449.199244][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.199271][T14699] RIP: 0033:0x7fdcc2b6c799 [ 449.199288][T14699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.199306][T14699] RSP: 002b:00007fdcc15c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.199381][T14699] RAX: ffffffffffffffda RBX: 00007fdcc2de5fa0 RCX: 00007fdcc2b6c799 [ 449.199398][T14699] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 449.199414][T14699] RBP: 00007fdcc2c02bd9 R08: 0000000000000000 R09: 0000000000000000 [ 449.199431][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.199443][T14699] R13: 00007fdcc2de6038 R14: 00007fdcc2de5fa0 R15: 00007ffe16223718 [ 449.199462][T14699] [ 449.199530][T14699] memory: usage 173680kB, limit 307200kB, failcnt 2517 [ 449.567241][T14699] memory+swap: usage 125828kB, limit 9007199254740988kB, failcnt 0 [ 449.575600][T14699] kmem: usage 106064kB, limit 9007199254740988kB, failcnt 0 [ 449.583355][T14699] Memory cgroup stats for /syz0: [ 449.583562][T14699] cache 19165184 [ 449.592263][T14699] rss 770048 [ 449.595856][T14699] shmem 19161088 [ 449.599606][T14699] mapped_file 4096 [ 449.603727][T14699] dirty 4096 [ 449.607109][T14699] writeback 0 [ 449.610451][T14699] workingset_refault_anon 2397 [ 449.623759][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 449.661143][T14699] workingset_refault_file 5600 [ 449.675568][T14699] swap 253952 [ 449.715252][T14699] swapcached 36724736 [ 449.721740][T14699] pgpgin 423282 [ 449.743795][T14699] pgpgout 418409 [ 449.753256][T14699] pgfault 412322 [ 449.757784][T14699] pgmajfault 454 [ 449.761412][T14699] inactive_anon 2674688 [ 449.774424][T14699] active_anon 17281024 [ 449.778808][T14699] inactive_file 0 [ 449.782558][T14699] active_file 4096 [ 449.787409][T14699] unevictable 0 [ 449.791083][T14699] hierarchical_memory_limit 314572800 [ 449.797629][T14699] hierarchical_memsw_limit 9223372036854771712 [ 449.811904][T14699] total_cache 19165184 [ 449.817025][T14699] total_rss 770048 [ 449.820883][T14699] total_shmem 19161088 [ 449.825625][T14699] total_mapped_file 4096 [ 449.830205][T14699] total_dirty 4096 [ 450.050129][T14699] total_writeback 0 [ 450.067697][T14699] total_workingset_refault_anon 2397 [ 450.087995][T14699] total_workingset_refault_file 5600 [ 450.238494][T14699] total_swap 253952 [ 450.242420][T14699] total_swapcached 36724736 [ 450.247347][T14699] total_pgpgin 423282 [ 450.251408][T14699] total_pgpgout 418409 [ 450.258119][T14699] total_pgfault 412322 [ 450.262297][T14699] total_pgmajfault 454 [ 450.267536][T14699] total_inactive_anon 2674688 [ 450.270676][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.272472][T14699] total_active_anon 17281024 [ 450.286619][T14699] total_inactive_file 0 [ 450.297204][T14699] total_active_file 4096 [ 450.302194][T14699] total_unevictable 0 [ 450.307948][T14699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3827,pid=14698,uid=0 [ 450.324353][T14699] Memory cgroup out of memory: Killed process 14699 (syz.0.3827) total-vm:96340kB, anon-rss:1436kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 450.647665][T14744] loop3: detected capacity change from 0 to 1764 [ 450.655940][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 451.694618][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 452.733804][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 452.922883][T14783] lo speed is unknown, defaulting to 1000 [ 452.997098][T14783] lo speed is unknown, defaulting to 1000 [ 453.773744][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 454.840698][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 455.130803][T14819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14819 comm=syz.2.3861 [ 455.591623][T14824] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3862'. [ 455.602943][T14824] netlink: zone id is out of range [ 455.609414][T14824] netlink: zone id is out of range [ 455.619347][T14824] netlink: zone id is out of range [ 455.817610][T14824] netlink: set zone limit has 8 unknown bytes [ 455.853755][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 456.893778][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 457.474191][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.483606][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.492723][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.503226][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.513038][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.523429][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.534075][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.543244][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.553606][T14852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3871'. [ 457.940341][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 458.201612][T14861] sctp: [Deprecated]: syz.4.3875 (pid 14861) Use of int in maxseg socket option. [ 458.201612][T14861] Use struct sctp_assoc_value instead [ 458.328034][T14861] IPVS: set_ctl: invalid protocol: 60 10.1.1.4:20257 [ 458.337764][ T10] IPVS: starting estimator thread 0... [ 458.374536][T14864] veth0_to_bridge: left allmulticast mode [ 458.391866][T14864] veth0_to_bridge: left promiscuous mode [ 458.418594][T14864] bridge0: port 1(veth0_to_bridge) entered disabled state [ 458.460729][T14864] bond0: (slave bridge_slave_1): Releasing backup interface [ 458.471365][T14864] bridge_slave_1: left allmulticast mode [ 458.477582][T14866] IPVS: using max 2640 ests per chain, 132000 per kthread [ 458.501800][T14864] bond1: (slave ip6gretap1): Removing an active aggregator [ 458.512172][T14864] bond1: (slave ip6gretap1): Releasing backup interface [ 458.539384][T14864] vlan0: left promiscuous mode [ 458.549717][T14864] bridge0: left promiscuous mode [ 458.560067][T14864] bridge6: port 1(vlan0) entered disabled state [ 458.577238][T14864] bond2: (slave gretap1): Releasing active interface [ 458.593850][T14864] gretap1: left allmulticast mode [ 458.767263][T14864] bond4: (slave geneve2): Releasing active interface [ 458.808390][T14864] bond5: (slave bridge10): Releasing backup interface [ 458.911098][T14864] bridge10: left promiscuous mode [ 458.973743][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 459.176289][T14865] team0: Mode changed to "loadbalance" [ 459.919384][ T28] audit: type=1326 audit(1772400407.722:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.2.3890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16ebdc799 code=0x0 [ 460.013740][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 461.053785][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 462.093740][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.134568][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 463.534608][ T28] audit: type=1326 audit(1772400411.322:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 463.721032][ T28] audit: type=1326 audit(1772400411.322:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 463.850804][ T28] audit: type=1326 audit(1772400411.332:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 463.876431][ T28] audit: type=1326 audit(1772400411.332:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.009537][ T28] audit: type=1326 audit(1772400411.332:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.073894][ T28] audit: type=1326 audit(1772400411.332:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.101227][ T28] audit: type=1326 audit(1772400411.332:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.128943][ T28] audit: type=1326 audit(1772400411.332:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.173751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 464.184672][ T28] audit: type=1326 audit(1772400411.332:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14950 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92d751c799 code=0x7ffc0000 [ 464.234696][T14965] __nla_validate_parse: 12 callbacks suppressed [ 464.234717][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 464.509857][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 464.529403][T14977] bond8: option lacp_active: invalid value (5) [ 464.538791][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3910'. [ 464.553572][T14977] bond8 (unregistering): Released all slaves [ 465.213758][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 466.263731][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 467.133158][T15024] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 467.133158][T15024] program syz.3.3925 not setting count and/or reply_len properly [ 467.302643][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 467.379074][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3928'. [ 467.389111][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3928'. [ 467.399871][T15030] netlink: 'syz.2.3928': attribute type 6 has an invalid length. [ 468.305797][T15047] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3933'. [ 468.356747][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 468.546913][T15030] lo speed is unknown, defaulting to 1000 [ 468.721777][T15030] lo speed is unknown, defaulting to 1000 [ 469.373738][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 469.921702][T15074] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 470.413751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 470.448847][T15081] loop3: detected capacity change from 0 to 1024 [ 470.862356][T15081] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 470.889541][T15081] System zones: 0-1, 3-8 [ 470.945439][T15081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 470.989493][T15081] ext4 filesystem being mounted at /761/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.223351][T15081] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.3942: Freeing blocks not in datazone - block = 0, count = 16 [ 471.373282][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.453840][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 471.461859][T15114] loop3: detected capacity change from 0 to 256 [ 472.165143][T15110] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 472.217899][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 472.217918][ T28] audit: type=1326 audit(1772400420.022:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.266236][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3949'. [ 472.274881][T15124] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3948'. [ 472.283746][ T28] audit: type=1326 audit(1772400420.022:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.356467][ T28] audit: type=1326 audit(1772400420.022:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.494089][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 472.529810][T15133] ipip0: entered promiscuous mode [ 472.541969][ T28] audit: type=1326 audit(1772400420.022:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.650370][ T28] audit: type=1326 audit(1772400420.022:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.749046][T15148] lo speed is unknown, defaulting to 1000 [ 472.771183][ T28] audit: type=1326 audit(1772400420.022:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.820055][ T28] audit: type=1326 audit(1772400420.022:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.870156][ T28] audit: type=1326 audit(1772400420.022:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 472.872684][T15148] lo speed is unknown, defaulting to 1000 [ 472.934753][ T28] audit: type=1326 audit(1772400420.022:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15119 comm="syz.0.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc2b6c799 code=0x7ffc0000 [ 473.016168][T15118] kexec: Could not allocate control_code_buffer [ 473.543745][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 473.834432][T15161] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3964'. [ 474.573734][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 474.924907][T15184] tipc: Enabled bearer , priority 0 [ 474.932305][T15184] syzkaller0: entered promiscuous mode [ 474.938083][T15184] syzkaller0: entered allmulticast mode [ 474.968538][T15184] tipc: Resetting bearer [ 475.209015][T15183] tipc: Resetting bearer [ 475.248023][T15183] tipc: Disabling bearer [ 475.614703][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 475.667216][ T28] audit: type=1326 audit(1772400423.472:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15187 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16ebdc799 code=0x7ffc0000 [ 476.039363][T15210] tipc: Enabling of bearer rejected, failed to enable media [ 476.261751][T15213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3980'. [ 476.666224][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 477.270073][T15238] loop3: detected capacity change from 0 to 1024 [ 477.342999][T15238] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 477.353787][T15238] System zones: 0-1, 3-36 [ 477.400875][T15238] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3990: bad orphan inode 134217728 [ 477.436568][T15238] loop3: lost filesystem error report for type 5 error -117 [ 477.454880][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 477.471052][ C1] EXT4-fs (loop3): initial error at time 1772400425: ext4_orphan_get:1417 [ 477.481757][ C1] EXT4-fs (loop3): last error at time 1772400425: ext4_orphan_get:1417 [ 477.541078][T15244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3992'. [ 477.578792][T15238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.632940][T15247] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 477.670490][T15247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.692891][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 477.705294][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 477.709606][T15247] macvlan3: entered promiscuous mode [ 477.720410][T15247] macvlan3: entered allmulticast mode [ 477.734244][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3993'. [ 477.752920][T15247] bond6: (slave bridge0): making interface the new active one [ 477.762759][T15247] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 478.138241][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.311244][T15262] xt_limit: Overflow, try lower: 0/0 [ 478.536672][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'. [ 478.743781][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 479.773727][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 480.204417][T15307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4012'. [ 480.776691][T15311] tipc: Enabling of bearer rejected, failed to enable media [ 480.823728][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 481.641722][T15320] tipc: Enabling of bearer rejected, already enabled [ 481.763326][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4017'. [ 481.853722][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 482.309438][T15343] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 482.894609][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 483.140130][T15345] tipc: Enabling of bearer rejected, already enabled [ 483.239302][T15347] lo speed is unknown, defaulting to 1000 [ 483.557587][T15347] lo speed is unknown, defaulting to 1000 [ 483.599997][T15354] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 483.795226][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 483.854135][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 483.854227][ T28] audit: type=1326 audit(1772400431.662:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.0.4032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcc2b6c799 code=0x0 [ 483.943726][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 484.391124][T15384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4036'. [ 484.973730][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 485.559406][T15416] bond5: (slave bond0): Releasing active interface [ 485.576141][T15416] ip6gretap0: entered promiscuous mode [ 485.604203][T15416] bond0: (slave bond_slave_0): Releasing backup interface [ 485.616497][T15416] bond0: (slave bond_slave_1): Releasing backup interface [ 485.629106][T15417] netlink: 'syz.2.4044': attribute type 39 has an invalid length. [ 485.645651][T15416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.658383][T15416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.898638][T15411] loop3: detected capacity change from 0 to 512 [ 485.967018][T15411] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 486.013731][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 486.087904][T15411] EXT4-fs (loop3): 1 truncate cleaned up [ 486.146755][T15411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.063711][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 487.375645][T15443] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 487.678601][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.103737][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 489.133772][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 489.146670][T15471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4062'. [ 489.346773][T15494] netlink: 'syz.1.4066': attribute type 4 has an invalid length. [ 489.616382][T15503] loop3: detected capacity change from 0 to 512 [ 489.644079][T15503] EXT4-fs: Ignoring removed nobh option [ 489.702180][T15503] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 1: comm syz.3.4068: invalid block [ 489.722758][T15503] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 489.723052][T15503] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4068: couldn't read orphan inode 11 (err -117) [ 489.732354][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 489.732392][ C1] EXT4-fs (loop3): initial error at time 1772400437: __ext4_iget:5378: inode 11: block 1 [ 489.732429][ C1] EXT4-fs (loop3): last error at time 1772400437: __ext4_iget:5378: inode 11: block 1 [ 489.784282][T15503] loop3: lost filesystem error report for type 5 error -117 [ 489.792679][T15503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.020195][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4075'. [ 490.114402][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.174508][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 490.775715][T15545] ip6gre1: entered promiscuous mode [ 490.812992][T15545] ip6gre1: entered allmulticast mode [ 491.214624][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 492.253749][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 492.378403][T15556] loop3: detected capacity change from 0 to 512 [ 492.477176][T15556] EXT4-fs (loop3): 1 truncate cleaned up [ 492.489818][T15556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.522746][ T28] audit: type=1400 audit(1772400440.322:6698): avc: denied { unlink } for pid=15555 comm="syz.3.4084" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 493.094778][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 493.125629][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 4 with error 28 [ 493.153511][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 493.153511][ T30] [ 493.177047][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 493.202950][ T30] EXT4-fs (loop3): Free/Dirty block details [ 493.224232][ T30] EXT4-fs (loop3): free_blocks=0 [ 493.241076][ T30] EXT4-fs (loop3): dirty_blocks=4 [ 493.257584][ T30] EXT4-fs (loop3): Block reservation details [ 493.290357][ T30] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 493.303730][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 493.339303][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.872695][ T28] audit: type=1400 audit(1772400441.672:6699): avc: denied { ioctl } for pid=15591 comm="syz.3.4091" path="socket:[88719]" dev="sockfs" ino=88719 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.334560][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 494.630407][T15608] tipc: Enabled bearer , priority 0 [ 494.639955][T15608] syzkaller0: entered promiscuous mode [ 494.656153][T15608] syzkaller0: entered allmulticast mode [ 494.688035][T15608] tipc: Resetting bearer [ 494.696994][T15607] tipc: Resetting bearer [ 494.723920][T15607] tipc: Disabling bearer [ 495.383733][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 495.951593][T15625] lo speed is unknown, defaulting to 1000 [ 496.074811][T15625] lo speed is unknown, defaulting to 1000 [ 496.076555][T15628] tipc: Enabling of bearer rejected, already enabled [ 496.395270][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4111'. [ 496.409760][T15639] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4111'. [ 496.425938][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 496.612809][T15648] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 496.684886][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 496.704638][T15653] hsr_slave_0: left promiscuous mode [ 496.783847][T15653] hsr_slave_1: left promiscuous mode [ 497.386493][T15661] loop3: detected capacity change from 0 to 256 [ 497.454630][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 497.634958][T15668] netlink: 'syz.2.4120': attribute type 7 has an invalid length. [ 497.650192][T15669] tipc: Enabled bearer , priority 0 [ 497.669503][T15669] syzkaller0: entered promiscuous mode [ 497.693705][T15669] syzkaller0: entered allmulticast mode [ 497.701765][T15669] tipc: Resetting bearer [ 497.719199][ T28] audit: type=1326 audit(1772400445.522:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.2.4122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16ebdc799 code=0x0 [ 497.743750][T15667] tipc: Resetting bearer [ 497.772631][T15667] tipc: Disabling bearer [ 498.493757][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 499.533723][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 500.574810][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 501.623726][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 502.663765][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 503.066597][T15723] tipc: Enabling of bearer rejected, failed to enable media [ 503.693720][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 503.854248][T15735] lo speed is unknown, defaulting to 1000 [ 504.733727][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.616717][T15735] lo speed is unknown, defaulting to 1000 [ 505.788803][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 505.940172][T15764] tipc: Enabling of bearer rejected, failed to enable media [ 506.823719][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 507.067982][ T28] audit: type=1400 audit(1772400454.872:6701): avc: denied { read } for pid=15779 comm="syz.3.4153" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 507.110573][ T28] audit: type=1400 audit(1772400454.892:6702): avc: denied { open } for pid=15779 comm="syz.3.4153" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 507.135225][ T28] audit: type=1400 audit(1772400454.902:6703): avc: denied { append } for pid=15779 comm="syz.3.4153" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 507.853716][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 508.124702][T15801] lo speed is unknown, defaulting to 1000 [ 508.277693][T15803] loop3: detected capacity change from 0 to 512 [ 508.302975][T15803] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294443010)! [ 508.355237][T15801] lo speed is unknown, defaulting to 1000 [ 508.393606][T15803] EXT4-fs (loop3): group descriptors corrupted! [ 508.903711][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 509.473077][T15815] tipc: Enabled bearer , priority 0 [ 509.553810][T15815] syzkaller0: entered promiscuous mode [ 509.561501][T15815] syzkaller0: entered allmulticast mode [ 509.605234][T15815] tipc: Resetting bearer [ 509.616249][T15814] tipc: Resetting bearer [ 509.636551][T15814] tipc: Disabling bearer [ 509.934608][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 510.450268][T15826] loop3: detected capacity change from 0 to 8192 [ 510.974585][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.039420][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 512.285187][T15845] loop3: detected capacity change from 0 to 512 [ 512.306697][T15845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 512.332859][T15845] EXT4-fs (loop3): orphan cleanup on readonly fs [ 512.377745][T15845] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 512.427074][T15848] tipc: Enabling of bearer rejected, already enabled [ 512.453849][T15845] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 512.479145][T15845] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.4167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 512.532611][T15845] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 512.533682][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 512.549646][ C1] EXT4-fs (loop3): last error at time 1772400460: ext4_ext_check_inode:521: inode 13 [ 512.560688][T15845] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4167: couldn't read orphan inode 13 (err -117) [ 512.574022][T15845] loop3: lost filesystem error report for type 5 error -117 [ 512.584478][T15845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.652219][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.695602][T15855] netlink: 'syz.3.4171': attribute type 7 has an invalid length. [ 512.812244][T15858] tipc: Enabled bearer , priority 0 [ 512.830632][T15858] syzkaller0: entered promiscuous mode [ 512.841427][T15858] syzkaller0: entered allmulticast mode [ 512.867728][T15858] tipc: Resetting bearer [ 512.884632][T15857] tipc: Resetting bearer [ 512.894280][T15857] tipc: Disabling bearer [ 512.965118][ T28] audit: type=1326 audit(1772400460.772:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15859 comm="syz.3.4173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f635206c799 code=0x0 [ 513.063762][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 513.668115][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'. [ 513.956472][T15877] loop3: detected capacity change from 0 to 1024 [ 513.974365][T15877] EXT4-fs: Ignoring removed oldalloc option [ 513.980321][T15877] ext2: Unknown parameter 'smackfsdef' [ 514.094796][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 514.114002][ T28] audit: type=1326 audit(1772400461.912:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 514.158222][ T28] audit: type=1326 audit(1772400461.912:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 514.191137][ T28] audit: type=1326 audit(1772400461.912:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 514.321168][ T28] audit: type=1326 audit(1772400461.912:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 514.408757][T15890] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4182'. [ 514.421345][T15890] netlink: zone id is out of range [ 514.427749][T15890] netlink: zone id is out of range [ 514.437422][T15890] netlink: zone id is out of range [ 514.838023][ T28] audit: type=1326 audit(1772400461.912:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 514.941024][T15890] netlink: set zone limit has 8 unknown bytes [ 514.993806][ T28] audit: type=1326 audit(1772400461.912:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 515.028889][T15892] loop3: detected capacity change from 0 to 8192 [ 515.122708][ T28] audit: type=1326 audit(1772400461.912:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 515.155688][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 515.279131][ T28] audit: type=1326 audit(1772400461.912:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 515.360439][ T28] audit: type=1326 audit(1772400461.912:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz.3.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f635206c799 code=0x7ffc0000 [ 515.638045][T15914] tipc: Enabled bearer , priority 0 [ 515.654309][T15914] syzkaller0: entered promiscuous mode [ 515.660702][T15914] syzkaller0: entered allmulticast mode [ 515.686043][T15914] tipc: Resetting bearer [ 515.804259][T15913] tipc: Resetting bearer [ 515.811247][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 515.832022][T15913] tipc: Disabling bearer [ 516.183757][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 516.410797][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4195'. [ 516.999399][T15940] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4198'. [ 517.025334][T15940] netlink: zone id is out of range [ 517.031749][T15940] netlink: zone id is out of range [ 517.055500][T15940] netlink: zone id is out of range [ 517.226363][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 517.583377][T15940] netlink: set zone limit has 8 unknown bytes [ 518.254635][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 519.082898][T15960] loop3: detected capacity change from 0 to 512 [ 519.212932][T15960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.293724][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 519.355606][T15960] EXT4-fs (loop3): 1 truncate cleaned up [ 519.460611][T15960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.546639][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4204'. [ 520.333704][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 520.660156][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.685101][T15989] tipc: Enabling of bearer rejected, already enabled [ 521.373750][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 521.589072][ T23] ================================================================== [ 521.597395][ T23] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 521.605901][ T23] [ 521.608241][ T23] read-write to 0xffff88810048b138 of 8 bytes by task 3311 on cpu 0: [ 521.616422][ T23] __filemap_remove_folio+0x218/0x310 [ 521.621829][ T23] __remove_mapping+0x390/0x4c0 [ 521.626700][ T23] remove_mapping+0x22/0x90 [ 521.631214][ T23] mapping_try_invalidate+0x293/0x430 [ 521.636947][ T23] invalidate_mapping_pages+0x27/0x40 [ 521.642436][ T23] invalidate_bdev+0x58/0x70 [ 521.647100][ T23] ext4_put_super+0x624/0x7d0 [ 521.651872][ T23] generic_shutdown_super+0xee/0x220 [ 521.657258][ T23] kill_block_super+0x2a/0x70 [ 521.661951][ T23] ext4_kill_sb+0x42/0x80 [ 521.666282][ T23] deactivate_locked_super+0x75/0x1c0 [ 521.672460][ T23] deactivate_super+0x97/0xa0 [ 521.677141][ T23] cleanup_mnt+0x2bb/0x330 [ 521.681690][ T23] __cleanup_mnt+0x19/0x20 [ 521.686290][ T23] task_work_run+0x130/0x1a0 [ 521.690905][ T23] exit_to_user_mode_loop+0x1f4/0x6f0 [ 521.696491][ T23] do_syscall_64+0x249/0x370 [ 521.701170][ T23] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.707153][ T23] [ 521.709482][ T23] read to 0xffff88810048b138 of 8 bytes by task 23 on cpu 1: [ 521.716860][ T23] nr_blockdev_pages+0x7e/0xd0 [ 521.721637][ T23] si_meminfo+0x87/0xd0 [ 521.725832][ T23] update_defense_level+0x47/0x5d0 [ 521.731127][ T23] defense_work_handler+0x1f/0x80 [ 521.736264][ T23] process_scheduled_works+0x4de/0x9e0 [ 521.741738][ T23] worker_thread+0x581/0x770 [ 521.746785][ T23] kthread+0x22a/0x280 [ 521.750966][ T23] ret_from_fork+0x150/0x360 [ 521.755663][ T23] ret_from_fork_asm+0x1a/0x30 [ 521.760439][ T23] [ 521.762771][ T23] value changed: 0x0000000000000007 -> 0x0000000000000004 [ 521.769876][ T23] [ 521.772295][ T23] Reported by Kernel Concurrency Sanitizer on: [ 521.778666][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.789635][ T23] Tainted: [W]=WARN [ 521.793468][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.803722][ T23] Workqueue: events_long defense_work_handler [ 521.810001][ T23] ================================================================== [ 521.925480][ T9382] kernel read not supported for file bpf-prog (pid: 9382 comm: kworker/0:12) [ 522.413817][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 523.453755][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 524.493765][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 525.533742][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 526.573737][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.613744][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 528.653768][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 529.693761][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 530.733736][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available