last executing test programs: 2.020186983s ago: executing program 3 (id=2457): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.954405285s ago: executing program 3 (id=2460): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) fcntl$notify(r0, 0x402, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x18) socket$inet6(0xa, 0x3, 0x3c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 1.878671179s ago: executing program 3 (id=2464): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) 1.83474296s ago: executing program 3 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r5, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x0, 0x2a9, 0x0, 0x0) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) 1.489585065s ago: executing program 4 (id=2479): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r2) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x7, @none, 0xe, 0x1}, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.178095329s ago: executing program 2 (id=2481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0xbc3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r7, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r7, &(0x7f0000000480), 0x1, 0x2) mq_timedsend(r6, 0x0, 0x4, 0x6, 0x0) mq_timedreceive(r6, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES16, @ANYRES32], 0x3c}}, 0x8000) 1.16664139s ago: executing program 3 (id=2482): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89001) r1 = syz_open_dev$usbfs(0x0, 0x200204, 0x2040) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r3, r3, 0x0, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x4, 0xc1, 0x0, 0x0, 0x6, 0x3, 0x0, 0x1, 0x101, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x81) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) 997.070647ms ago: executing program 0 (id=2483): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) 970.949828ms ago: executing program 4 (id=2484): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2001) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0x3, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="578d2cbd7000fddbdf250200800014010000000003007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="200e0500", @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25140000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x4400404c) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9e5a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 956.460259ms ago: executing program 4 (id=2485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 916.78055ms ago: executing program 4 (id=2486): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32=r0, @ANYBLOB="00000091764f000000001e21e521a771ab0889f3", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 916.57675ms ago: executing program 0 (id=2487): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) syz_emit_ethernet(0x85, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @rr={0x7, 0x7, 0xca, [@broadcast]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"e1aed3cd1647e1b264ce6146843c426ca01ec62131403a9e65a2370adf98e0ce25275ef7ca7a8b9a8aa8825ba733df5702ac24b5643a5294275069cfff000db77c0df4fdf504b9"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 915.25669ms ago: executing program 4 (id=2488): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 897.613901ms ago: executing program 0 (id=2489): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 883.259572ms ago: executing program 0 (id=2490): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) 793.055376ms ago: executing program 4 (id=2491): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000390009002cbd06000000000004000000e9ffffff0b0001"], 0x24}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xced31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r7, &(0x7f0000001140)=""/4096, 0x1000) 318.914687ms ago: executing program 3 (id=2508): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r10}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES64=r10, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x400c003}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a09"], 0xd4}}, 0x8818) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 307.488216ms ago: executing program 2 (id=2510): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)="270502005902000b0600002fb96dbcf706e1050007008100", 0x18}], 0x1}, 0x0) 280.530118ms ago: executing program 2 (id=2511): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 269.903428ms ago: executing program 2 (id=2513): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x521040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) close(r6) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = dup(r8) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0x128, 0x128, 0xffffffff, 0x0, 0x128, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'pim6reg\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x44}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5777c784bfe89e37d0184c242a34c316b3fd9e8e69d4cb7e56e7a9a6849a"}}, {{@ip={@remote, @local, 0xff000000, 0xffffff00, 'bond0\x00', 'vxcan1\x00', {}, {0xff}, 0x11, 0x1, 0x69}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x1, 0x0, 0x1, 0x7, 0x1], 0x1, 0x5}, {0xffffffffffffffff, [0x7, 0x2, 0x0, 0x1, 0x2, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @icmp_id=0x64}}}}, {{@ip={@empty, @multicast1, 0xff, 0x0, 'geneve1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x6c, 0x0, 0xc}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @remote, @icmp_id=0x64, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r11, 0x0, 0x4}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x100) 241.80743ms ago: executing program 2 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x18) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) fadvise64(r4, 0x2e9, 0x7, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420080, 0x1, 0x24}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) readahead(r0, 0xf828, 0xfff) 209.289301ms ago: executing program 2 (id=2516): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89001) r1 = syz_open_dev$usbfs(0x0, 0x200204, 0x2040) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r6, r6, 0x0, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x4, 0xc1, &(0x7f00000007c0)={0x80, 0x6, 0xfffa, 0x4362}, 0x8, 0x6, 0x3, 0x0, 0x1, 0x101, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}}, [0xd, 0x4, 0x43d, 0x3, 0x3, 0x7f, 0x4, 0x1000, 0xffffffffffffffff, 0x6, 0x7fffffffffffffff, 0xffff7fffffffffff, 0x1, 0x401, 0x4]}, &(0x7f0000000040)=0x100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x81) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) 49.155948ms ago: executing program 1 (id=2520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x40000) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x40000) 48.997078ms ago: executing program 1 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x18) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) (fail_nth: 2) 48.909058ms ago: executing program 1 (id=2522): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f00000001c0)=""/100, 0x64, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 44.629568ms ago: executing program 1 (id=2523): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 42.193318ms ago: executing program 1 (id=2524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 33.389239ms ago: executing program 0 (id=2525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x521040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) close(r6) r7 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = dup(r8) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x368, 0x128, 0x128, 0xffffffff, 0x0, 0x128, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'pim6reg\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x44}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5777c784bfe89e37d0184c242a34c316b3fd9e8e69d4cb7e56e7a9a6849a"}}, {{@ip={@remote, @local, 0xff000000, 0xffffff00, 'bond0\x00', 'vxcan1\x00', {}, {0xff}, 0x11, 0x1, 0x69}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x1, 0x0, 0x1, 0x7, 0x1], 0x1, 0x5}, {0xffffffffffffffff, [0x7, 0x2, 0x0, 0x1, 0x2, 0x2], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e24, @icmp_id=0x64}}}}, {{@ip={@empty, @multicast1, 0xff, 0x0, 'geneve1\x00', 'wlan0\x00', {0xff}, {0xff}, 0x6c, 0x0, 0xc}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010101, @remote, @icmp_id=0x64, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r11, 0x0, 0x4}, 0x18) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x100) 597.04µs ago: executing program 1 (id=2526): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x4000}, 0x4004000) 0s ago: executing program 0 (id=2527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x18) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) fadvise64(r4, 0x2e9, 0x7, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420080, 0x1, 0x24}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) readahead(r0, 0xf828, 0xfff) kernel console output (not intermixed with test programs): d! [ 35.338447][ T3804] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 35.564237][ T3795] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 35.768402][ T3827] set_capacity_and_notify: 5 callbacks suppressed [ 35.768416][ T3827] loop4: detected capacity change from 0 to 512 [ 35.782181][ T3827] EXT4-fs: Ignoring removed bh option [ 35.888911][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.902873][ T3827] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.189456][ T3823] Set syz1 is full, maxelem 65536 reached [ 36.202001][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.249187][ T3841] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 36.316951][ T3853] loop0: detected capacity change from 0 to 512 [ 36.323804][ T3853] EXT4-fs: dax option not supported [ 36.468723][ T3864] loop0: detected capacity change from 0 to 512 [ 36.497310][ T3864] ext4: Unknown parameter 'n' [ 36.610278][ T3869] loop2: detected capacity change from 0 to 512 [ 36.616745][ T3869] EXT4-fs: Ignoring removed bh option [ 36.665063][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.677998][ T3869] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.712378][ T3883] loop4: detected capacity change from 0 to 512 [ 36.720544][ T3883] EXT4-fs: dax option not supported [ 36.839413][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.229425][ T29] kauditd_printk_skb: 32572 callbacks suppressed [ 37.229441][ T29] audit: type=1326 audit(1765476161.863:38314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.263658][ T29] audit: type=1326 audit(1765476161.873:38315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.287209][ T29] audit: type=1326 audit(1765476161.873:38316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.310682][ T29] audit: type=1326 audit(1765476161.873:38317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.334050][ T29] audit: type=1326 audit(1765476161.873:38318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.357455][ T29] audit: type=1326 audit(1765476161.873:38319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.381447][ T29] audit: type=1326 audit(1765476161.873:38320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.404835][ T29] audit: type=1326 audit(1765476161.873:38321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.428264][ T29] audit: type=1326 audit(1765476161.873:38322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.452366][ T29] audit: type=1326 audit(1765476161.873:38323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 37.495434][ T3947] loop0: detected capacity change from 0 to 512 [ 37.502363][ T3947] EXT4-fs: dax option not supported [ 37.936115][ T3973] loop2: detected capacity change from 0 to 512 [ 37.946745][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.946904][ T3973] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.948145][ T3973] __nla_validate_parse: 15 callbacks suppressed [ 37.948157][ T3973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.183'. [ 37.948171][ T3973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 38.017287][ T3965] netlink: 'syz.4.180': attribute type 6 has an invalid length. [ 38.017303][ T3965] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.180'. [ 38.407495][ T3987] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 38.418277][ T3987] @: renamed from vlan0 (while UP) [ 38.491709][ T3992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3992 comm=syz.1.188 [ 38.525212][ T3992] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 38.590312][ T4001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 38.634338][ T4005] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.191'. [ 38.643593][ T4005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 38.784379][ T3972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.127404][ T4012] netlink: 'syz.3.197': attribute type 6 has an invalid length. [ 39.127422][ T4012] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.197'. [ 39.207884][ T4018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 39.292387][ T4026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4026 comm=syz.2.201 [ 39.293419][ T4026] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.314499][ T4024] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 39.480807][ T4046] loop0: detected capacity change from 0 to 512 [ 39.493299][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.520118][ T4050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 39.538165][ T4046] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.550711][ T4046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.209'. [ 39.643312][ T4060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4060 comm=syz.1.213 [ 39.693722][ T4060] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.850440][ T4048] netlink: 'syz.3.210': attribute type 6 has an invalid length. [ 40.058567][ T4081] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 40.319293][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.674751][ T4140] tipc: Started in network mode [ 40.679764][ T4140] tipc: Node identity , cluster identity 4711 [ 40.685858][ T4140] tipc: Failed to obtain node identity [ 40.691382][ T4140] tipc: Enabling of bearer rejected, failed to enable media [ 40.747450][ T4147] loop4: detected capacity change from 0 to 512 [ 40.765771][ T4147] EXT4-fs: dax option not supported [ 40.836690][ T4157] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.463804][ T4163] Set syz1 is full, maxelem 65536 reached [ 41.674919][ T4181] loop4: detected capacity change from 0 to 512 [ 41.705928][ T4181] EXT4-fs: dax option not supported [ 41.723881][ C1] hrtimer: interrupt took 32956 ns [ 41.731358][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.739933][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.769993][ T4185] bridge0: entered allmulticast mode [ 41.798828][ T4193] bridge_slave_1: left allmulticast mode [ 41.804532][ T4193] bridge_slave_1: left promiscuous mode [ 41.810260][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.844602][ T4193] bridge_slave_0: left allmulticast mode [ 41.850289][ T4193] bridge_slave_0: left promiscuous mode [ 41.856206][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.985600][ T4207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4207 comm=syz.1.270 [ 42.001696][ T4207] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.319088][ T4189] Set syz1 is full, maxelem 65536 reached [ 42.380602][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 42.380628][ T29] audit: type=1326 audit(1765476167.023:38533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.411218][ T29] audit: type=1326 audit(1765476167.023:38534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.434692][ T29] audit: type=1326 audit(1765476167.053:38535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.458153][ T29] audit: type=1326 audit(1765476167.053:38536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.517069][ T4244] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.523703][ T4244] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.531378][ T4244] audit: backlog limit exceeded [ 42.559464][ T4254] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 42.570500][ T29] audit: type=1326 audit(1765476167.053:38537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.593877][ T29] audit: type=1326 audit(1765476167.053:38538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.617322][ T29] audit: type=1326 audit(1765476167.053:38539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 42.790612][ T4281] FAULT_INJECTION: forcing a failure. [ 42.790612][ T4281] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.803768][ T4281] CPU: 0 UID: 0 PID: 4281 Comm: syz.4.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.803797][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.803820][ T4281] Call Trace: [ 42.803830][ T4281] [ 42.803845][ T4281] __dump_stack+0x1d/0x30 [ 42.803870][ T4281] dump_stack_lvl+0xe8/0x140 [ 42.803971][ T4281] dump_stack+0x15/0x1b [ 42.803988][ T4281] should_fail_ex+0x265/0x280 [ 42.804008][ T4281] should_fail+0xb/0x20 [ 42.804025][ T4281] should_fail_usercopy+0x1a/0x20 [ 42.804046][ T4281] _copy_from_user+0x1c/0xb0 [ 42.804126][ T4281] ___sys_sendmsg+0xc1/0x1d0 [ 42.804165][ T4281] __x64_sys_sendmsg+0xd4/0x160 [ 42.804203][ T4281] x64_sys_call+0x17ba/0x3000 [ 42.804224][ T4281] do_syscall_64+0xd8/0x2a0 [ 42.804309][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.804327][ T4281] RIP: 0033:0x7ff56096f749 [ 42.804347][ T4281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.804363][ T4281] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.804380][ T4281] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 42.804420][ T4281] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 42.804466][ T4281] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.804477][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.804488][ T4281] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 42.804506][ T4281] [ 43.206531][ T4300] __nla_validate_parse: 20 callbacks suppressed [ 43.206548][ T4300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.304'. [ 43.435467][ T4265] Set syz1 is full, maxelem 65536 reached [ 43.690933][ T4311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4311 comm=syz.1.306 [ 43.691767][ T4311] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.779572][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 43.792170][ T4315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 43.959704][ T4322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 44.018350][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 44.085096][ T4332] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 44.126257][ T4336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4336 comm=syz.1.317 [ 44.169073][ T4336] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.280610][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 44.327823][ T4356] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.323'. [ 44.336945][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'. [ 44.385573][ T4360] loop4: detected capacity change from 0 to 512 [ 44.392334][ T4360] EXT4-fs: dax option not supported [ 44.418021][ T4364] netlink: 'syz.4.328': attribute type 2 has an invalid length. [ 44.448322][ T4368] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 44.463188][ T4370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4370 comm=syz.4.331 [ 44.477173][ T4370] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 44.552945][ T4377] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 44.593943][ T4383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 44.675076][ T4389] FAULT_INJECTION: forcing a failure. [ 44.675076][ T4389] name failslab, interval 1, probability 0, space 0, times 1 [ 44.687822][ T4389] CPU: 1 UID: 0 PID: 4389 Comm: syz.4.338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.687847][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.687859][ T4389] Call Trace: [ 44.687866][ T4389] [ 44.687874][ T4389] __dump_stack+0x1d/0x30 [ 44.687966][ T4389] dump_stack_lvl+0xe8/0x140 [ 44.687989][ T4389] dump_stack+0x15/0x1b [ 44.688009][ T4389] should_fail_ex+0x265/0x280 [ 44.688056][ T4389] should_failslab+0x8c/0xb0 [ 44.688075][ T4389] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 44.688113][ T4389] ? alloc_vmap_area+0x241/0xea0 [ 44.688205][ T4389] alloc_vmap_area+0x241/0xea0 [ 44.688240][ T4389] ? should_fail_ex+0xdb/0x280 [ 44.688264][ T4389] ? __kmalloc_cache_node_noprof+0x2b3/0x4d0 [ 44.688286][ T4389] __get_vm_area_node+0x173/0x1d0 [ 44.688307][ T4389] __vmalloc_node_range_noprof+0x28e/0x1310 [ 44.688365][ T4389] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 44.688388][ T4389] ? path_openat+0x1e82/0x23b0 [ 44.688426][ T4389] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 44.688501][ T4389] __vmalloc_noprof+0xa4/0xf0 [ 44.688526][ T4389] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 44.688544][ T4389] ? ppp_poll+0x121/0x170 [ 44.688565][ T4389] bpf_prog_alloc_no_stats+0x47/0x390 [ 44.688585][ T4389] ? bpf_prog_alloc+0x2a/0x150 [ 44.688666][ T4389] ? ppp_poll+0x121/0x170 [ 44.688690][ T4389] bpf_prog_alloc+0x3c/0x150 [ 44.688777][ T4389] ? ppp_poll+0x121/0x170 [ 44.688798][ T4389] bpf_prog_create+0x73/0x130 [ 44.688820][ T4389] ? __pfx_ppp_ioctl+0x10/0x10 [ 44.688843][ T4389] ppp_get_filter+0x113/0x160 [ 44.688925][ T4389] ppp_ioctl+0xb93/0x11c0 [ 44.688950][ T4389] ? __fget_files+0x184/0x1c0 [ 44.688972][ T4389] ? __pfx_ppp_ioctl+0x10/0x10 [ 44.688992][ T4389] __se_sys_ioctl+0xce/0x140 [ 44.689104][ T4389] __x64_sys_ioctl+0x43/0x50 [ 44.689132][ T4389] x64_sys_call+0x14b0/0x3000 [ 44.689154][ T4389] do_syscall_64+0xd8/0x2a0 [ 44.689191][ T4389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.689213][ T4389] RIP: 0033:0x7ff56096f749 [ 44.689226][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.689256][ T4389] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.689277][ T4389] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 44.689290][ T4389] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003 [ 44.689303][ T4389] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 44.689314][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.689326][ T4389] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 44.689344][ T4389] [ 44.689427][ T4389] syz.4.338: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 44.930794][ T4404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 44.939653][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 44.946935][ T4389] ,cpuset=/,mems_allowed=0 [ 44.993352][ T4389] CPU: 1 UID: 0 PID: 4389 Comm: syz.4.338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.993369][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.993377][ T4389] Call Trace: [ 44.993418][ T4389] [ 44.993423][ T4389] __dump_stack+0x1d/0x30 [ 44.993439][ T4389] dump_stack_lvl+0xe8/0x140 [ 44.993451][ T4389] dump_stack+0x15/0x1b [ 44.993462][ T4389] warn_alloc+0x12b/0x1a0 [ 44.993479][ T4389] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 44.993540][ T4389] ? path_openat+0x1e82/0x23b0 [ 44.993575][ T4389] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 44.993670][ T4389] __vmalloc_noprof+0xa4/0xf0 [ 44.993688][ T4389] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 44.993705][ T4389] ? ppp_poll+0x121/0x170 [ 44.993805][ T4389] bpf_prog_alloc_no_stats+0x47/0x390 [ 44.993816][ T4389] ? bpf_prog_alloc+0x2a/0x150 [ 44.993826][ T4389] ? ppp_poll+0x121/0x170 [ 44.993840][ T4389] bpf_prog_alloc+0x3c/0x150 [ 44.993851][ T4389] ? ppp_poll+0x121/0x170 [ 44.993867][ T4389] bpf_prog_create+0x73/0x130 [ 44.993882][ T4389] ? __pfx_ppp_ioctl+0x10/0x10 [ 44.993937][ T4389] ppp_get_filter+0x113/0x160 [ 44.993951][ T4389] ppp_ioctl+0xb93/0x11c0 [ 44.994043][ T4389] ? __fget_files+0x184/0x1c0 [ 44.994057][ T4389] ? __pfx_ppp_ioctl+0x10/0x10 [ 44.994071][ T4389] __se_sys_ioctl+0xce/0x140 [ 44.994102][ T4389] __x64_sys_ioctl+0x43/0x50 [ 44.994157][ T4389] x64_sys_call+0x14b0/0x3000 [ 44.994198][ T4389] do_syscall_64+0xd8/0x2a0 [ 44.994217][ T4389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.994230][ T4389] RIP: 0033:0x7ff56096f749 [ 44.994240][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.994250][ T4389] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.994316][ T4389] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 44.994401][ T4389] RDX: 0000200000000080 RSI: 0000000040107447 RDI: 0000000000000003 [ 44.994408][ T4389] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 44.994490][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.994497][ T4389] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 44.994580][ T4389] [ 44.994625][ T4389] Mem-Info: [ 45.223839][ T4389] active_anon:5822 inactive_anon:1 isolated_anon:0 [ 45.223839][ T4389] active_file:8977 inactive_file:2238 isolated_file:0 [ 45.223839][ T4389] unevictable:493 dirty:1678 writeback:0 [ 45.223839][ T4389] slab_reclaimable:3128 slab_unreclaimable:17631 [ 45.223839][ T4389] mapped:29162 shmem:430 pagetables:1495 [ 45.223839][ T4389] sec_pagetables:0 bounce:0 [ 45.223839][ T4389] kernel_misc_reclaimable:0 [ 45.223839][ T4389] free:1853793 free_pcp:8813 free_cma:0 [ 45.268778][ T4389] Node 0 active_anon:27116kB inactive_anon:4kB active_file:35908kB inactive_file:8952kB unevictable:1972kB isolated(anon):0kB isolated(file):0kB mapped:116648kB dirty:6712kB writeback:0kB shmem:1720kB kernel_stack:3568kB pagetables:5980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 45.273074][ T4409] netlink: 'syz.1.346': attribute type 6 has an invalid length. [ 45.296335][ T4389] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 45.333556][ T4389] lowmem_reserve[]: 0 2880 7859 7859 [ 45.338853][ T4389] Node 0 DMA32 free:2945972kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 45.370357][ T4389] lowmem_reserve[]: 0 0 4978 4978 [ 45.375456][ T4389] Node 0 Normal free:4453472kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27116kB inactive_anon:4kB active_file:35908kB inactive_file:8952kB unevictable:1972kB writepending:6712kB zspages:0kB present:5242880kB managed:5098240kB mlocked:1972kB bounce:0kB free_pcp:27900kB local_pcp:9672kB free_cma:0kB [ 45.408936][ T4389] lowmem_reserve[]: 0 0 0 0 [ 45.413454][ T4389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 45.426164][ T4389] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945972kB [ 45.442275][ T4389] Node 0 Normal: 902*4kB (UM) 289*8kB (UME) 64*16kB (UM) 82*32kB (UME) 70*64kB (UM) 31*128kB (UME) 18*256kB (UME) 12*512kB (UME) 5*1024kB (U) 4*2048kB (UME) 1077*4096kB (UM) = 4453472kB [ 45.460802][ T4389] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 45.470212][ T4389] 11642 total pagecache pages [ 45.474867][ T4389] 1 pages in swap cache [ 45.479129][ T4389] Free swap = 124992kB [ 45.483288][ T4389] Total swap = 124996kB [ 45.487426][ T4389] 2097051 pages RAM [ 45.491233][ T4389] 0 pages HighMem/MovableOnly [ 45.495940][ T4389] 81276 pages reserved [ 45.503640][ T4407] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 45.605644][ T4420] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 45.855089][ T4448] loop4: detected capacity change from 0 to 4096 [ 45.865748][ T4448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.947850][ T4458] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 46.169139][ T4480] Zero length message leads to an empty skb [ 46.178823][ T4482] team0: Device gtp0 is of different type [ 46.285579][ T4495] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 46.514177][ T4516] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 46.623373][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.663231][ T4532] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 46.691957][ T4537] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.716303][ T4541] bond0: entered promiscuous mode [ 46.721536][ T4541] bond_slave_0: entered promiscuous mode [ 46.727360][ T4541] bond_slave_1: entered promiscuous mode [ 47.412422][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 47.412453][ T29] audit: type=1326 audit(1765476172.053:38966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.460689][ T4576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4576 comm=syz.0.409 [ 47.462119][ T4576] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 47.473082][ T29] audit: type=1326 audit(1765476172.083:38967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.504631][ T29] audit: type=1326 audit(1765476172.083:38968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.528089][ T29] audit: type=1326 audit(1765476172.083:38969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.551720][ T29] audit: type=1326 audit(1765476172.083:38970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.575276][ T29] audit: type=1326 audit(1765476172.083:38971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.575314][ T29] audit: type=1326 audit(1765476172.083:38972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.575421][ T29] audit: type=1326 audit(1765476172.083:38973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.575526][ T29] audit: type=1326 audit(1765476172.083:38974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.575560][ T29] audit: type=1326 audit(1765476172.083:38975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4573 comm="syz.2.408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 47.756945][ T4597] FAULT_INJECTION: forcing a failure. [ 47.756945][ T4597] name failslab, interval 1, probability 0, space 0, times 0 [ 47.769628][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.769655][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.769719][ T4597] Call Trace: [ 47.769793][ T4597] [ 47.769802][ T4597] __dump_stack+0x1d/0x30 [ 47.769903][ T4597] dump_stack_lvl+0xe8/0x140 [ 47.769926][ T4597] dump_stack+0x15/0x1b [ 47.769946][ T4597] should_fail_ex+0x265/0x280 [ 47.770046][ T4597] should_failslab+0x8c/0xb0 [ 47.770065][ T4597] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 47.770085][ T4597] ? __d_alloc+0x37/0x340 [ 47.770152][ T4597] __d_alloc+0x37/0x340 [ 47.770176][ T4597] d_alloc+0x2e/0x100 [ 47.770206][ T4597] lookup_one_qstr_excl+0x99/0x250 [ 47.770229][ T4597] filename_create+0x141/0x210 [ 47.770283][ T4597] do_linkat+0x12b/0x620 [ 47.770306][ T4597] __x64_sys_link+0x58/0x70 [ 47.770324][ T4597] x64_sys_call+0x1325/0x3000 [ 47.770350][ T4597] do_syscall_64+0xd8/0x2a0 [ 47.770383][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.770423][ T4597] RIP: 0033:0x7ff56096f749 [ 47.770438][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.770464][ T4597] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 47.770531][ T4597] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 47.770542][ T4597] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000200000000580 [ 47.770554][ T4597] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.770566][ T4597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.770579][ T4597] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 47.770644][ T4597] [ 47.966156][ T4600] xt_bpf: check failed: parse error [ 48.446754][ T4650] __nla_validate_parse: 9 callbacks suppressed [ 48.446765][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'. [ 48.545253][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 48.570944][ T4657] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 48.919036][ T4671] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.983370][ T4671] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.992521][ T4681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.451'. [ 49.032719][ T4686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4686 comm=syz.0.452 [ 49.047757][ T4686] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.056911][ T4671] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.113687][ T4671] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.197618][ T394] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.222454][ T394] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.242830][ T394] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.259604][ T394] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.365516][ T4687] netlink: 'syz.4.450': attribute type 6 has an invalid length. [ 49.373232][ T4687] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.450'. [ 49.377270][ T4706] syz.2.458 uses obsolete (PF_INET,SOCK_PACKET) [ 49.625813][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 49.709008][ T4734] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 50.025033][ T4744] lo speed is unknown, defaulting to 1000 [ 50.030970][ T4744] lo speed is unknown, defaulting to 1000 [ 50.036895][ T4744] lo speed is unknown, defaulting to 1000 [ 50.043277][ T4744] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.050996][ T4744] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.062486][ T4744] lo speed is unknown, defaulting to 1000 [ 50.068644][ T4744] lo speed is unknown, defaulting to 1000 [ 50.075039][ T4744] lo speed is unknown, defaulting to 1000 [ 50.081751][ T4744] lo speed is unknown, defaulting to 1000 [ 50.087790][ T4744] lo speed is unknown, defaulting to 1000 [ 50.093969][ T4744] lo speed is unknown, defaulting to 1000 [ 50.219143][ T4756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 50.349424][ T4771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'. [ 50.528464][ T4760] netlink: 'syz.2.477': attribute type 6 has an invalid length. [ 50.536188][ T4760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.477'. [ 50.769006][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 50.785930][ T4785] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 51.141910][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 51.232826][ T4811] 9p: Bad value for 'rfdno' [ 51.476849][ T4821] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.765081][ T4855] IPVS: Unknown mcast interface: O [ 51.886899][ T4866] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 51.973759][ T4876] netlink: 'syz.3.525': attribute type 13 has an invalid length. [ 52.044459][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.051664][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.083450][ T4885] 9p: Bad value for 'rfdno' [ 52.091100][ T4890] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 52.150072][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.161907][ T4876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.210472][ T3483] lo speed is unknown, defaulting to 1000 [ 52.216226][ T3483] syz0: Port: 1 Link DOWN [ 52.227651][ T394] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.236322][ T394] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.249001][ T394] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.258725][ T4899] FAULT_INJECTION: forcing a failure. [ 52.258725][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 52.271417][ T4899] CPU: 0 UID: 0 PID: 4899 Comm: syz.4.531 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.271441][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.271452][ T4899] Call Trace: [ 52.271458][ T4899] [ 52.271465][ T4899] __dump_stack+0x1d/0x30 [ 52.271491][ T4899] dump_stack_lvl+0xe8/0x140 [ 52.271513][ T4899] dump_stack+0x15/0x1b [ 52.271604][ T4899] should_fail_ex+0x265/0x280 [ 52.271628][ T4899] should_failslab+0x8c/0xb0 [ 52.271667][ T4899] kmem_cache_alloc_noprof+0x69/0x4b0 [ 52.271691][ T4899] ? skb_clone+0x151/0x1f0 [ 52.271715][ T4899] skb_clone+0x151/0x1f0 [ 52.271741][ T4899] __netlink_deliver_tap+0x2c9/0x500 [ 52.271810][ T4899] netlink_unicast+0x66b/0x690 [ 52.271837][ T4899] netlink_sendmsg+0x58b/0x6b0 [ 52.271892][ T4899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.271918][ T4899] __sock_sendmsg+0x145/0x180 [ 52.271938][ T4899] ____sys_sendmsg+0x31e/0x4a0 [ 52.271971][ T4899] ___sys_sendmsg+0x17b/0x1d0 [ 52.272010][ T4899] __x64_sys_sendmsg+0xd4/0x160 [ 52.272048][ T4899] x64_sys_call+0x17ba/0x3000 [ 52.272069][ T4899] do_syscall_64+0xd8/0x2a0 [ 52.272103][ T4899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.272271][ T4899] RIP: 0033:0x7ff56096f749 [ 52.272287][ T4899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.272393][ T4899] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.272413][ T4899] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 52.272426][ T4899] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 52.272440][ T4899] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 52.272450][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.272461][ T4899] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 52.272476][ T4899] [ 52.275601][ T394] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.499062][ T4903] loop4: detected capacity change from 0 to 128 [ 52.508501][ T4903] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.521800][ T4903] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.571691][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.675310][ T4916] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 52.700999][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 52.701013][ T29] audit: type=1326 audit(1765476177.343:39229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.749568][ T29] audit: type=1326 audit(1765476177.343:39230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.773219][ T29] audit: type=1326 audit(1765476177.343:39231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.796635][ T29] audit: type=1326 audit(1765476177.343:39232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.820014][ T29] audit: type=1326 audit(1765476177.343:39233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.843466][ T29] audit: type=1326 audit(1765476177.343:39234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.866900][ T29] audit: type=1326 audit(1765476177.343:39235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.890423][ T29] audit: type=1326 audit(1765476177.343:39236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.914047][ T29] audit: type=1326 audit(1765476177.343:39237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 52.937520][ T29] audit: type=1326 audit(1765476177.343:39238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 53.041447][ T4939] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 53.110201][ T4946] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 53.198952][ T4946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.245262][ T4960] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 53.453799][ T4957] __nla_validate_parse: 8 callbacks suppressed [ 53.453824][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 53.764368][ T4982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4982 comm=syz.2.562 [ 53.823183][ T4982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 53.866764][ T4965] Set syz1 is full, maxelem 65536 reached [ 53.974260][ T4995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4995 comm=syz.2.568 [ 54.026234][ T4995] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.137572][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 54.249994][ T5010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 54.390433][ T5018] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 54.451378][ T5018] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 54.490906][ T5018] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 54.535010][ T5020] gretap1: entered promiscuous mode [ 54.551642][ T5020] bond2: (slave gretap1): making interface the new active one [ 54.559369][ T5020] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 54.572920][ T5022] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 54.585361][ T5020] loop4: detected capacity change from 0 to 4096 [ 54.592598][ T5020] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 54.606195][ T5020] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 54.625054][ T5022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.653413][ T5022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.662509][ T5022] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 54.674941][ T5022] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 54.709156][ T5029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5029 comm=syz.2.582 [ 54.723712][ T5029] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 54.761513][ T5035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 54.762583][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 54.789958][ T5033] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 54.815195][ T5033] loop4: detected capacity change from 0 to 512 [ 54.822300][ T5033] EXT4-fs: test_dummy_encryption option not supported [ 54.894980][ T5044] netlink: 'syz.1.590': attribute type 7 has an invalid length. [ 54.948561][ T5050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.592'. [ 54.978187][ T5060] loop4: detected capacity change from 0 to 512 [ 54.998180][ T5060] EXT4-fs: Ignoring removed bh option [ 55.005354][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 55.030232][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 55.104456][ T5073] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 55.127343][ T5060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.165507][ T5060] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.190243][ T5080] lo speed is unknown, defaulting to 1000 [ 55.306911][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.591860][ T5050] Set syz1 is full, maxelem 65536 reached [ 55.612069][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 55.629786][ T5097] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 55.672686][ T5107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5107 comm=syz.4.623 [ 55.691902][ T5109] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 55.696403][ T5107] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.704046][ T5109] @: renamed from vlan0 (while UP) [ 55.765251][ T5117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 56.305236][ T5142] netlink: 'syz.1.625': attribute type 6 has an invalid length. [ 56.432156][ T5113] Set syz1 is full, maxelem 65536 reached [ 56.558208][ T5168] FAULT_INJECTION: forcing a failure. [ 56.558208][ T5168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.571467][ T5168] CPU: 1 UID: 0 PID: 5168 Comm: syz.4.636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.571498][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.571511][ T5168] Call Trace: [ 56.571517][ T5168] [ 56.571525][ T5168] __dump_stack+0x1d/0x30 [ 56.571561][ T5168] dump_stack_lvl+0xe8/0x140 [ 56.571585][ T5168] dump_stack+0x15/0x1b [ 56.571686][ T5168] should_fail_ex+0x265/0x280 [ 56.571710][ T5168] should_fail+0xb/0x20 [ 56.571731][ T5168] should_fail_usercopy+0x1a/0x20 [ 56.571810][ T5168] _copy_from_user+0x1c/0xb0 [ 56.571840][ T5168] memdup_user_nul+0x5f/0xe0 [ 56.571936][ T5168] sel_write_enforce+0x9c/0x2d0 [ 56.571965][ T5168] vfs_writev+0x406/0x8b0 [ 56.571993][ T5168] ? __pfx_sel_write_enforce+0x10/0x10 [ 56.572024][ T5168] do_writev+0xe7/0x210 [ 56.572154][ T5168] __x64_sys_writev+0x45/0x50 [ 56.572179][ T5168] x64_sys_call+0x1ba5/0x3000 [ 56.572205][ T5168] do_syscall_64+0xd8/0x2a0 [ 56.572241][ T5168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.572299][ T5168] RIP: 0033:0x7ff56096f749 [ 56.572316][ T5168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.572344][ T5168] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 56.572364][ T5168] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 56.572378][ T5168] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 56.572392][ T5168] RBP: 00007ff55f3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.572405][ T5168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.572419][ T5168] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 56.572540][ T5168] [ 56.973415][ T5194] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 57.341245][ T5205] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 57.444875][ T5215] lo speed is unknown, defaulting to 1000 [ 57.492039][ T5187] Set syz1 is full, maxelem 65536 reached [ 58.206693][ T5252] lo speed is unknown, defaulting to 1000 [ 58.977374][ T5264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5264 comm=syz.4.673 [ 59.056671][ T5264] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.176008][ T5263] x_tables: duplicate entry at hook 3 [ 59.309793][ T5274] __nla_validate_parse: 15 callbacks suppressed [ 59.309822][ T5274] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.675'. [ 59.325235][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 59.344871][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 59.344886][ T29] audit: type=1326 audit(1765476183.983:39603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.360549][ T5251] Set syz1 is full, maxelem 65536 reached [ 59.463321][ T29] audit: type=1326 audit(1765476184.013:39604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.487056][ T29] audit: type=1326 audit(1765476184.013:39605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18f5e4df90 code=0x7ffc0000 [ 59.510585][ T29] audit: type=1326 audit(1765476184.013:39606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18f5e4df90 code=0x7ffc0000 [ 59.534037][ T29] audit: type=1326 audit(1765476184.013:39607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.557567][ T29] audit: type=1326 audit(1765476184.013:39608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.581126][ T29] audit: type=1326 audit(1765476184.013:39609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.604498][ T29] audit: type=1326 audit(1765476184.013:39610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.628043][ T29] audit: type=1326 audit(1765476184.013:39611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.651555][ T29] audit: type=1326 audit(1765476184.013:39612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5275 comm="syz.3.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 59.828909][ T5300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'. [ 59.966372][ T5310] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 60.109927][ T5328] 9p: Bad value for 'wfdno' [ 60.262079][ T5353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.706'. [ 60.360978][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 60.361930][ T5361] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.377430][ T5361] vhci_hcd vhci_hcd.2: invalid port number 96 [ 60.383593][ T5361] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 60.407024][ T5366] sctp: [Deprecated]: syz.0.711 (pid 5366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 60.407024][ T5366] Use struct sctp_sack_info instead [ 60.423370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.432318][ T5367] mmap: syz.4.710 (5367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.477957][ T5361] lo speed is unknown, defaulting to 1000 [ 60.613111][ T5337] netlink: 'syz.1.696': attribute type 6 has an invalid length. [ 60.620900][ T5337] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.696'. [ 60.667291][ T5395] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 60.713165][ T5399] capability: warning: `syz.3.725' uses 32-bit capabilities (legacy support in use) [ 60.846745][ T5392] loop4: detected capacity change from 0 to 512 [ 60.850641][ T5415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5415 comm=syz.1.730 [ 60.870128][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.726'. [ 60.881609][ T5392] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.722: error while reading EA inode 32 err=-116 [ 60.897062][ T5392] EXT4-fs (loop4): Remounting filesystem read-only [ 60.904589][ T5392] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.917666][ T5392] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 60.928685][ T5392] EXT4-fs (loop4): 1 orphan inode deleted [ 60.934808][ T5392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.948971][ T5392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.041787][ T5392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.722'. [ 61.235619][ T5465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 61.467766][ T5475] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 61.724177][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'. [ 62.005699][ T5520] loop4: detected capacity change from 0 to 1024 [ 62.022084][ T5520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.046832][ T5520] FAULT_INJECTION: forcing a failure. [ 62.046832][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 62.059615][ T5520] CPU: 1 UID: 0 PID: 5520 Comm: syz.4.773 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.059644][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.059695][ T5520] Call Trace: [ 62.059701][ T5520] [ 62.059770][ T5520] __dump_stack+0x1d/0x30 [ 62.059795][ T5520] dump_stack_lvl+0xe8/0x140 [ 62.059819][ T5520] dump_stack+0x15/0x1b [ 62.059839][ T5520] should_fail_ex+0x265/0x280 [ 62.059926][ T5520] should_failslab+0x8c/0xb0 [ 62.059950][ T5520] __kvmalloc_node_noprof+0x149/0x6b0 [ 62.059974][ T5520] ? vmemdup_user+0x2b/0xd0 [ 62.059994][ T5520] ? should_fail_usercopy+0x1a/0x20 [ 62.060031][ T5520] vmemdup_user+0x2b/0xd0 [ 62.060049][ T5520] path_setxattrat+0x1b6/0x310 [ 62.060100][ T5520] __x64_sys_setxattr+0x6e/0x90 [ 62.060191][ T5520] x64_sys_call+0xf1e/0x3000 [ 62.060255][ T5520] do_syscall_64+0xd8/0x2a0 [ 62.060319][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.060343][ T5520] RIP: 0033:0x7ff56096f749 [ 62.060443][ T5520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.060496][ T5520] RSP: 002b:00007ff55f3cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 62.060516][ T5520] RAX: ffffffffffffffda RBX: 00007ff560bc5fa0 RCX: 00007ff56096f749 [ 62.060528][ T5520] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240 [ 62.060538][ T5520] RBP: 00007ff55f3cf090 R08: 0000000000000001 R09: 0000000000000000 [ 62.060549][ T5520] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000001 [ 62.060584][ T5520] R13: 00007ff560bc6038 R14: 00007ff560bc5fa0 R15: 00007ffc0cbfd818 [ 62.060602][ T5520] [ 62.242829][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.589085][ T5555] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 62.725963][ T5565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5565 comm=syz.3.791 [ 63.021565][ T5586] openvswitch: netlink: EtherType 0 is less than min 600 [ 63.215792][ T5597] loop4: detected capacity change from 0 to 1024 [ 63.222919][ T5597] EXT4-fs: Ignoring removed orlov option [ 63.228996][ T5597] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.263770][ T5597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.279073][ T5597] process 'syz.4.802' launched './file0/file0' with NULL argv: empty string added [ 63.302946][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.625518][ T5620] netlink: 'syz.4.808': attribute type 6 has an invalid length. [ 63.702514][ T5633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5633 comm=syz.2.814 [ 63.739147][ T5633] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.792625][ T5642] openvswitch: netlink: EtherType 0 is less than min 600 [ 63.930650][ T5661] loop4: detected capacity change from 0 to 512 [ 63.940151][ T5661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 63.948530][ T5661] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.955691][ T5661] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 63.970811][ T5661] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 63.977620][ T5661] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.822: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 63.995925][ T5661] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.822: couldn't read orphan inode 13 (err -117) [ 64.008433][ T5661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.382602][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 64.382618][ T29] audit: type=1326 audit(1765476189.023:39927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.389769][ T5677] netlink: 'syz.0.830': attribute type 6 has an invalid length. [ 64.412281][ T29] audit: type=1326 audit(1765476189.023:39928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.419942][ T5677] __nla_validate_parse: 9 callbacks suppressed [ 64.420011][ T5677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.830'. [ 64.443338][ T29] audit: type=1326 audit(1765476189.023:39929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.482000][ T29] audit: type=1326 audit(1765476189.023:39930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.505469][ T29] audit: type=1326 audit(1765476189.023:39931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.528852][ T29] audit: type=1326 audit(1765476189.023:39932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.552236][ T29] audit: type=1326 audit(1765476189.023:39933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.575843][ T29] audit: type=1326 audit(1765476189.023:39934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.599414][ T29] audit: type=1326 audit(1765476189.023:39935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.622895][ T29] audit: type=1326 audit(1765476189.023:39936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5676 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 64.675232][ T5682] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 64.684865][ T5682] capability: warning: `syz.1.832' uses deprecated v2 capabilities in a way that may be insecure [ 64.714701][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.773459][ T5691] loop4: detected capacity change from 0 to 512 [ 64.795448][ T5691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.808581][ T5691] ext4 filesystem being mounted at /157/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.853535][ T5710] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 64.902429][ T5721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.842'. [ 64.914829][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.840'. [ 64.952809][ T5691] netlink: 128 bytes leftover after parsing attributes in process `syz.4.836'. [ 64.961939][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'. [ 64.995276][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'. [ 65.105809][ T5749] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.847'. [ 65.114901][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 65.132043][ T5751] 9p: Bad value for 'wfdno' [ 65.151338][ T5752] lo speed is unknown, defaulting to 1000 [ 65.326665][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 65.393246][ T5761] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 65.615297][ T5690] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.686109][ T5773] infiniband syz!: set down [ 65.690707][ T5773] infiniband syz!: added team_slave_0 [ 65.702209][ T5773] RDS/IB: syz!: added [ 65.706353][ T5773] smc: adding ib device syz! with port count 1 [ 65.713383][ T5773] smc: ib device syz! port 1 has no pnetid [ 65.960002][ T5784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5784 comm=syz.3.867 [ 66.013482][ T5787] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 66.055345][ T5789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 66.991734][ T5834] netlink: 'syz.4.886': attribute type 6 has an invalid length. [ 67.561626][ T5869] netlink: 'syz.0.899': attribute type 29 has an invalid length. [ 67.732994][ T5863] netlink: 'syz.4.897': attribute type 6 has an invalid length. [ 68.107942][ T5900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5900 comm=syz.4.911 [ 68.122934][ T5900] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 69.389769][ T29] kauditd_printk_skb: 1500 callbacks suppressed [ 69.389782][ T29] audit: type=1326 audit(1765476194.033:41437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.419583][ T29] audit: type=1326 audit(1765476194.033:41438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.442973][ T29] audit: type=1326 audit(1765476194.033:41439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.466355][ T29] audit: type=1326 audit(1765476194.033:41440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.489741][ T29] audit: type=1326 audit(1765476194.043:41441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.513164][ T29] audit: type=1326 audit(1765476194.043:41442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.536669][ T29] audit: type=1326 audit(1765476194.043:41443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.560300][ T29] audit: type=1326 audit(1765476194.043:41444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.583827][ T29] audit: type=1326 audit(1765476194.043:41445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.607294][ T29] audit: type=1326 audit(1765476194.043:41446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff5609a2005 code=0x7ffc0000 [ 69.645201][ T5970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5970 comm=syz.3.938 [ 69.659378][ T5970] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 69.698363][ T5974] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.029821][ T6001] ip6gre0: entered promiscuous mode [ 70.038177][ T6001] team0: Device ip6gre0 is of different type [ 70.203865][ T6007] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.570519][ T6017] rdma_op ffff888128294580 conn xmit_rdma 0000000000000000 [ 70.650065][ T6021] rdma_op ffff88812850c180 conn xmit_rdma 0000000000000000 [ 70.838864][ T6029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6029 comm=syz.1.961 [ 70.924843][ T6033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6033 comm=syz.0.963 [ 70.973107][ T6036] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.281751][ T6067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.895940][ T6086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6086 comm=syz.0.976 [ 72.140346][ T6094] netlink: 'syz.1.979': attribute type 7 has an invalid length. [ 72.168482][ T6045] netlink: 'syz.3.967': attribute type 6 has an invalid length. [ 72.176243][ T6045] __nla_validate_parse: 21 callbacks suppressed [ 72.176255][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.967'. [ 72.420298][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.984'. [ 72.587217][ T6113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6113 comm=syz.2.987 [ 72.881685][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.991'. [ 73.308393][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 73.415347][ T6140] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 73.429363][ T6140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.456252][ T6140] bond2: (slave geneve2): making interface the new active one [ 73.461535][ T6145] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 73.465067][ T6140] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 73.480468][ T384] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.489904][ T384] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.513092][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.521629][ T384] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.530351][ T384] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.619082][ T6145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.643613][ T6145] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 73.682221][ T6145] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 73.782059][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 73.805562][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 73.934641][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1010'. [ 74.364025][ T6211] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 74.401816][ T6211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.546316][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 74.546329][ T29] audit: type=1400 audit(1765476199.183:42061): avc: denied { bind } for pid=6214 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.547230][ T6216] netlink: 820 bytes leftover after parsing attributes in process `syz.0.1029'. [ 74.552586][ T29] audit: type=1400 audit(1765476199.183:42062): avc: denied { node_bind } for pid=6214 comm="syz.0.1029" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 74.649500][ T29] audit: type=1326 audit(1765476199.223:42063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.673129][ T29] audit: type=1326 audit(1765476199.223:42064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.696704][ T29] audit: type=1326 audit(1765476199.223:42065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.720195][ T29] audit: type=1326 audit(1765476199.223:42066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.743720][ T29] audit: type=1326 audit(1765476199.223:42067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.767194][ T29] audit: type=1326 audit(1765476199.223:42068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.790741][ T29] audit: type=1326 audit(1765476199.223:42069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.814214][ T29] audit: type=1326 audit(1765476199.223:42070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 74.885501][ T6237] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.1036'. [ 74.894842][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 76.258932][ T6324] lo speed is unknown, defaulting to 1000 [ 77.245376][ T6383] __nla_validate_parse: 11 callbacks suppressed [ 77.245466][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 77.448244][ T6399] 9p: Bad value for 'rfdno' [ 77.485777][ T6399] xt_l2tp: invalid flags combination: c [ 77.516876][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 77.611607][ T6409] hsr_slave_0: left promiscuous mode [ 77.617289][ T6409] hsr_slave_1: left promiscuous mode [ 77.808801][ T6423] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.1106'. [ 77.818103][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'. [ 78.302246][ T6429] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 78.311677][ T6429] xt_hashlimit: max too large, truncated to 1048576 [ 78.319285][ T6429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.548339][ T6441] tipc: Enabling of bearer rejected, failed to enable media [ 78.605290][ T6447] syz!: rxe_newlink: already configured on team_slave_0 [ 78.664932][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 78.674049][ T6455] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1119'. [ 78.683352][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 78.708722][ T6455] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1119'. [ 78.802097][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'. [ 78.811091][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 78.955964][ T6475] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 79.237040][ T6492] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 79.886694][ T6530] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 79.944600][ T29] kauditd_printk_skb: 2204 callbacks suppressed [ 79.944677][ T29] audit: type=1326 audit(1765476204.583:44275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 80.028885][ T29] audit: type=1326 audit(1765476204.613:44276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c016bf749 code=0x7ffc0000 [ 80.052529][ T29] audit: type=1326 audit(1765476204.643:44277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.076159][ T29] audit: type=1326 audit(1765476204.643:44278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.099737][ T29] audit: type=1326 audit(1765476204.643:44279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.123295][ T29] audit: type=1326 audit(1765476204.643:44280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.146827][ T29] audit: type=1326 audit(1765476204.643:44281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.170316][ T29] audit: type=1326 audit(1765476204.643:44282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.193818][ T29] audit: type=1326 audit(1765476204.643:44283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.217237][ T29] audit: type=1326 audit(1765476204.643:44284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 80.367170][ T6561] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 82.144550][ T6667] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 82.249746][ T6672] netlink: 'syz.0.1203': attribute type 4 has an invalid length. [ 82.449135][ T6697] __nla_validate_parse: 12 callbacks suppressed [ 82.449153][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 83.014952][ T6713] netlink: 'syz.3.1220': attribute type 4 has an invalid length. [ 83.208430][ T6722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'. [ 83.245329][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 83.253046][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1225'. [ 83.398036][ T6744] netlink: 'syz.0.1232': attribute type 4 has an invalid length. [ 83.682440][ T6726] Set syz1 is full, maxelem 65536 reached [ 84.007224][ T6769] syz!: rxe_newlink: already configured on team_slave_0 [ 84.117851][ T6773] Driver unsupported XDP return value 0 on prog (id 1066) dev N/A, expect packet loss! [ 84.232603][ T6785] lo speed is unknown, defaulting to 1000 [ 84.592904][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'. [ 84.627880][ T6805] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 85.082576][ T29] kauditd_printk_skb: 1962 callbacks suppressed [ 85.082590][ T29] audit: type=1326 audit(1765476209.723:46247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.121321][ T29] audit: type=1326 audit(1765476209.723:46248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.144866][ T29] audit: type=1326 audit(1765476209.723:46249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.168372][ T29] audit: type=1326 audit(1765476209.723:46250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.191937][ T29] audit: type=1326 audit(1765476209.723:46251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.215490][ T29] audit: type=1326 audit(1765476209.723:46252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.239084][ T29] audit: type=1326 audit(1765476209.723:46253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.262565][ T29] audit: type=1326 audit(1765476209.723:46254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.286060][ T29] audit: type=1326 audit(1765476209.723:46255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.309605][ T29] audit: type=1326 audit(1765476209.723:46256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 85.556033][ T6847] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 85.581065][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 85.748364][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 85.822024][ T6871] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 85.875492][ T6876] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1283'. [ 85.915297][ T6878] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 85.940584][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 85.956368][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 86.038717][ T6886] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 86.636612][ T6897] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 86.904700][ T6917] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 87.079134][ T6934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.179911][ T6951] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 87.534233][ T6981] __nla_validate_parse: 9 callbacks suppressed [ 87.534336][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'. [ 87.559223][ T6987] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 87.662461][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1337'. [ 87.827752][ T7024] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 87.854680][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 87.881235][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 87.995366][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 88.048907][ T7037] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.084974][ T7040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.119088][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1356'. [ 88.176518][ T7057] sch_tbf: peakrate 12500000 is lower than or equals to rate 12500000 ! [ 88.208817][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 88.217806][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 88.307139][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 88.332354][ T7091] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.1372'. [ 88.427244][ T7099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7099 comm=syz.4.1379 [ 88.470932][ T7099] lo speed is unknown, defaulting to 1000 [ 88.535805][ T7117] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 88.562126][ T7114] netlink: 'syz.4.1379': attribute type 21 has an invalid length. [ 88.580606][ T7114] netlink: 'syz.4.1379': attribute type 1 has an invalid length. [ 88.696701][ T7126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7126 comm=syz.1.1389 [ 88.732400][ T7126] SELinux: Context ×"VœI‰Î¾üŠo .bgG1‚(ÄI2ŠsAqÉ is not valid (left unmapped). [ 88.851166][ T7147] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 88.919189][ T7153] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 89.252749][ T7191] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 90.221911][ T29] kauditd_printk_skb: 899 callbacks suppressed [ 90.221926][ T29] audit: type=1326 audit(1765476214.813:47156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 90.251700][ T29] audit: type=1326 audit(1765476214.813:47157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.3.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 90.759981][ T7299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7299 comm=syz.1.1459 [ 90.894960][ T7311] 9p: Bad value for 'rfdno' [ 91.115926][ T7318] lo speed is unknown, defaulting to 1000 [ 91.125411][ T29] audit: type=1326 audit(1765476215.763:47158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.149044][ T29] audit: type=1326 audit(1765476215.763:47159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.172825][ T29] audit: type=1326 audit(1765476215.763:47160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.196406][ T29] audit: type=1326 audit(1765476215.763:47161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.220074][ T29] audit: type=1326 audit(1765476215.763:47162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.243858][ T29] audit: type=1326 audit(1765476215.763:47163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.245891][ T7318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7318 comm=syz.3.1465 [ 91.268946][ T29] audit: type=1326 audit(1765476215.763:47164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.303485][ T29] audit: type=1326 audit(1765476215.763:47165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7312 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e8d6f749 code=0x7ffc0000 [ 91.755166][ T7373] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.792534][ T7380] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.829184][ T7389] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 91.930472][ T7403] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.956317][ T7405] hsr_slave_0: left promiscuous mode [ 91.969910][ T7405] hsr_slave_1: left promiscuous mode [ 91.995952][ T7411] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 92.291439][ T7433] hsr_slave_0: left promiscuous mode [ 92.297209][ T7433] hsr_slave_1: left promiscuous mode [ 92.343569][ T7437] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.514244][ T7461] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 92.645125][ T7486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7486 comm=syz.2.1533 [ 92.696226][ T7492] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 92.735719][ T7497] syz!: rxe_newlink: already configured on team_slave_0 [ 92.830885][ T7508] __nla_validate_parse: 20 callbacks suppressed [ 92.830900][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 92.910342][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1550'. [ 92.991295][ T7522] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.103843][ T7538] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.232659][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 93.304453][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1563'. [ 93.418655][ T7567] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.605199][ T7575] IPv6: Can't replace route, no match found [ 93.699555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.767021][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 94.187735][ T7598] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.215551][ T7599] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.549036][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 94.605797][ T7637] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.631008][ T7639] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.261475][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 95.413887][ T7672] syz!: rxe_newlink: already configured on team_slave_0 [ 95.422020][ T7676] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 95.465948][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1613'. [ 95.498413][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 95.498456][ T29] audit: type=1326 audit(1765476220.133:47537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1614" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18f5e4f749 code=0x0 [ 95.587736][ T29] audit: type=1326 audit(1765476220.223:47538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.612194][ T29] audit: type=1326 audit(1765476220.223:47539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.635907][ T29] audit: type=1326 audit(1765476220.223:47540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.659489][ T29] audit: type=1326 audit(1765476220.223:47541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.683096][ T29] audit: type=1326 audit(1765476220.223:47542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.706561][ T29] audit: type=1326 audit(1765476220.223:47543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.730027][ T29] audit: type=1326 audit(1765476220.223:47544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.753529][ T29] audit: type=1326 audit(1765476220.253:47545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 95.784828][ T29] audit: type=1326 audit(1765476220.253:47546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 96.162063][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1624'. [ 96.243480][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 96.799635][ T7760] netlink: 'syz.3.1645': attribute type 6 has an invalid length. [ 97.070755][ T7815] xt_bpf: check failed: parse error [ 97.216264][ T7835] lo speed is unknown, defaulting to 1000 [ 97.372976][ T7846] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 97.399510][ T7851] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 97.482706][ T7831] netlink: 'syz.1.1669': attribute type 6 has an invalid length. [ 98.258011][ T7906] __nla_validate_parse: 12 callbacks suppressed [ 98.258028][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 98.423948][ T7887] Set syz1 is full, maxelem 65536 reached [ 98.534028][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 98.560184][ T7929] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.567676][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 98.750699][ T7956] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 98.952106][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 99.297527][ T7991] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 99.745258][ T8015] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.752402][ T8017] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 99.795623][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 99.847360][ T8022] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 99.907279][ T8029] netlink: 'syz.1.1749': attribute type 7 has an invalid length. [ 99.942086][ T8029] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 99.977318][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1749'. [ 100.128757][ T8054] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 100.154138][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 100.307361][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1767'. [ 100.329165][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1763'. [ 100.868561][ T8073] Set syz1 is full, maxelem 65536 reached [ 100.919807][ T8095] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 100.943824][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 100.943837][ T29] audit: type=1326 audit(1765476225.583:47974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 100.974530][ T29] audit: type=1326 audit(1765476225.583:47975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 100.998180][ T29] audit: type=1326 audit(1765476225.583:47976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.021829][ T29] audit: type=1326 audit(1765476225.583:47977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.045351][ T29] audit: type=1326 audit(1765476225.583:47978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.068912][ T29] audit: type=1326 audit(1765476225.583:47979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.092447][ T29] audit: type=1326 audit(1765476225.583:47980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.116025][ T29] audit: type=1326 audit(1765476225.593:47981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.139918][ T29] audit: type=1326 audit(1765476225.593:47982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.163461][ T29] audit: type=1326 audit(1765476225.593:47983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8096 comm="syz.4.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 101.236543][ T8110] netlink: 'syz.0.1780': attribute type 7 has an invalid length. [ 101.281684][ T8110] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.294776][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1780'. [ 102.075187][ T8155] xt_bpf: check failed: parse error [ 102.246416][ T8173] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 102.771150][ T8217] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 102.814481][ T8221] netlink: 'syz.3.1817': attribute type 1 has an invalid length. [ 102.825970][ T8221] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 103.077142][ T8242] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.489899][ T8272] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 103.584738][ T8278] openvswitch: netlink: EtherType 0 is less than min 600 [ 103.631506][ T8284] __nla_validate_parse: 11 callbacks suppressed [ 103.631522][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1839'. [ 103.746491][ T8304] openvswitch: netlink: EtherType 0 is less than min 600 [ 103.887384][ T8312] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 104.207001][ T8337] openvswitch: netlink: EtherType 0 is less than min 600 [ 104.623871][ T8315] Set syz1 is full, maxelem 65536 reached [ 104.766297][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 104.820045][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 105.308512][ T8373] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.342197][ T8367] netlink: 'syz.2.1873': attribute type 6 has an invalid length. [ 105.349969][ T8367] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1873'. [ 105.950289][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 105.950305][ T29] audit: type=1326 audit(1765476230.583:48347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 105.980108][ T29] audit: type=1326 audit(1765476230.583:48348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.003616][ T29] audit: type=1326 audit(1765476230.583:48349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.027140][ T29] audit: type=1326 audit(1765476230.583:48350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.050748][ T29] audit: type=1326 audit(1765476230.583:48351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.074375][ T29] audit: type=1326 audit(1765476230.583:48352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.098297][ T29] audit: type=1326 audit(1765476230.593:48353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.121784][ T29] audit: type=1326 audit(1765476230.593:48354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.158558][ T29] audit: type=1326 audit(1765476230.653:48355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8387 comm="syz.3.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.185318][ T8402] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 106.369265][ T29] audit: type=1326 audit(1765476231.003:48356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8415 comm="syz.3.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 106.560704][ T8404] netlink: 'syz.1.1890': attribute type 6 has an invalid length. [ 106.568480][ T8404] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1890'. [ 106.645075][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1898'. [ 106.661536][ T8400] netlink: 'syz.4.1889': attribute type 6 has an invalid length. [ 106.669326][ T8400] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1889'. [ 107.005115][ T8441] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 107.909918][ T8476] netlink: 'syz.3.1918': attribute type 7 has an invalid length. [ 107.921192][ T8474] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.931126][ T8476] syz!: rxe_newlink: already configured on team_slave_0 [ 107.962735][ T8465] netlink: 'syz.1.1909': attribute type 6 has an invalid length. [ 107.970528][ T8465] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1909'. [ 108.034387][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'. [ 108.150749][ T8494] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.1922'. [ 108.211176][ T8494] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 108.222930][ T8494] bond3 (unregistering): Released all slaves [ 108.787170][ T8519] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.991121][ T8536] __nla_validate_parse: 2 callbacks suppressed [ 108.991138][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 109.191517][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1940'. [ 109.375380][ T8546] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 109.582335][ T8556] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.1944'. [ 109.606479][ T8556] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.647510][ T8556] bond3 (unregistering): Released all slaves [ 109.718655][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1949'. [ 109.727799][ T8566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1949'. [ 109.819043][ T8576] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.897741][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1958'. [ 110.071600][ T8600] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.136891][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1967'. [ 110.256025][ T8613] syz!: rxe_newlink: already configured on team_slave_0 [ 110.318779][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1969'. [ 110.546072][ T8637] netlink: 'syz.4.1978': attribute type 7 has an invalid length. [ 110.574350][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1978'. [ 110.891483][ T8651] netlink: 'syz.4.1982': attribute type 6 has an invalid length. [ 110.899245][ T8651] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1982'. [ 110.972679][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 110.972692][ T29] audit: type=1326 audit(1765476235.613:48821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.103559][ T29] audit: type=1326 audit(1765476235.673:48822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.127138][ T29] audit: type=1326 audit(1765476235.673:48823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.150961][ T29] audit: type=1326 audit(1765476235.673:48824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.174621][ T29] audit: type=1326 audit(1765476235.673:48825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.198845][ T29] audit: type=1326 audit(1765476235.673:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.222406][ T29] audit: type=1326 audit(1765476235.673:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.245918][ T29] audit: type=1326 audit(1765476235.673:48828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.269370][ T29] audit: type=1326 audit(1765476235.673:48829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.292954][ T29] audit: type=1326 audit(1765476235.673:48830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.4.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 111.536388][ T8669] syz!: rxe_newlink: already configured on team_slave_0 [ 111.711179][ T8691] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 112.331034][ T8713] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.812576][ T8709] Set syz1 is full, maxelem 65536 reached [ 113.001644][ T8735] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 113.417018][ T8763] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 113.925761][ T8812] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 114.162483][ T8864] netlink: 'syz.2.2043': attribute type 7 has an invalid length. [ 114.180832][ T8864] __nla_validate_parse: 13 callbacks suppressed [ 114.180848][ T8864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 114.332610][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 114.352279][ T8882] team1: entered promiscuous mode [ 114.357411][ T8882] team1: entered allmulticast mode [ 114.368346][ T8882] 8021q: adding VLAN 0 to HW filter on device team1 [ 115.612223][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'. [ 115.651003][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 115.757849][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2064'. [ 115.768075][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 115.800110][ T8995] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 115.894203][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'. [ 115.943121][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 115.954430][ T9009] ip6gretap0: entered allmulticast mode [ 116.201881][ T9030] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 116.381591][ T9039] lo speed is unknown, defaulting to 1000 [ 116.469816][ T9044] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.677980][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 116.677996][ T29] audit: type=1326 audit(1765476241.313:48974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9031 comm="syz.2.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 116.772082][ T29] audit: type=1326 audit(1765476241.313:48975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9031 comm="syz.2.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 116.795712][ T29] audit: type=1326 audit(1765476241.393:48976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 116.819606][ T29] audit: type=1326 audit(1765476241.393:48977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 116.843168][ T29] audit: type=1326 audit(1765476241.393:48978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 116.866711][ T29] audit: type=1326 audit(1765476241.393:48979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18f5e4df90 code=0x7ffc0000 [ 116.890250][ T29] audit: type=1326 audit(1765476241.393:48980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18f5e4e1ff code=0x7ffc0000 [ 116.913640][ T29] audit: type=1326 audit(1765476241.393:48981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18f5e4e1ff code=0x7ffc0000 [ 116.936934][ T29] audit: type=1326 audit(1765476241.393:48982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f18f5e4f749 code=0x7ffc0000 [ 116.973858][ T29] audit: type=1326 audit(1765476241.583:48983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9076 comm="syz.4.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 117.067471][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 117.107961][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 117.119099][ T9104] unsupported nla_type 52263 [ 117.177281][ T9110] netlink: 'syz.0.2102': attribute type 21 has an invalid length. [ 117.185393][ T9110] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 117.235940][ T9112] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 117.278105][ T9116] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 117.332070][ T9121] lo speed is unknown, defaulting to 1000 [ 117.794973][ T9153] bridge_slave_0: entered promiscuous mode [ 118.146185][ T9193] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.153303][ T9194] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 118.403200][ T9231] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 118.433010][ T9235] openvswitch: netlink: Message has 8 unknown bytes. [ 118.505894][ T9211] lo speed is unknown, defaulting to 1000 [ 118.771981][ T9245] netlink: 'syz.0.2160': attribute type 6 has an invalid length. [ 118.822845][ T9267] openvswitch: netlink: Message has 8 unknown bytes. [ 118.846382][ T9269] netlink: 'syz.3.2171': attribute type 7 has an invalid length. [ 118.953938][ T9238] netlink: 'syz.2.2161': attribute type 6 has an invalid length. [ 119.167440][ T9299] openvswitch: netlink: Message has 8 unknown bytes. [ 119.262719][ T9320] openvswitch: netlink: Message has 7 unknown bytes. [ 119.264613][ T9316] __nla_validate_parse: 16 callbacks suppressed [ 119.264626][ T9316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2193'. [ 119.351356][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2197'. [ 119.360489][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2197'. [ 119.369584][ T9329] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2197'. [ 119.479668][ T9343] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 119.600297][ T9332] netlink: 'syz.0.2188': attribute type 6 has an invalid length. [ 119.608135][ T9332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2188'. [ 119.871361][ T9375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.959075][ T9396] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.009075][ T9405] openvswitch: netlink: Key type 8224 is out of range max 32 [ 120.158841][ T9421] bond3 (unregistering): Released all slaves [ 120.205754][ T9429] openvswitch: netlink: Key type 8224 is out of range max 32 [ 120.252386][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'. [ 120.352104][ T9453] openvswitch: netlink: Key type 8198 is out of range max 32 [ 120.464458][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 120.592692][ T9481] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.643500][ T9486] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 120.715384][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 120.906578][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 120.930900][ T9527] syz!: rxe_newlink: already configured on team_slave_0 [ 121.211772][ T9549] netlink: 'syz.2.2284': attribute type 6 has an invalid length. [ 121.591015][ T9590] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 121.623205][ T9588] netlink: 'syz.2.2297': attribute type 12 has an invalid length. [ 121.631089][ T9588] netlink: 'syz.2.2297': attribute type 29 has an invalid length. [ 121.638924][ T9588] netlink: 'syz.2.2297': attribute type 2 has an invalid length. [ 121.710568][ T9609] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 121.727088][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 121.727103][ T29] audit: type=1400 audit(1765476246.363:49466): avc: denied { listen } for pid=9610 comm="syz.2.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.754357][ T29] audit: type=1400 audit(1765476246.363:49467): avc: denied { accept } for pid=9610 comm="syz.2.2308" lport=47128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.775528][ T29] audit: type=1326 audit(1765476246.393:49468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.799229][ T29] audit: type=1326 audit(1765476246.393:49469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.823051][ T29] audit: type=1326 audit(1765476246.393:49470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.846687][ T29] audit: type=1326 audit(1765476246.393:49471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.870215][ T29] audit: type=1326 audit(1765476246.413:49472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.894822][ T29] audit: type=1326 audit(1765476246.413:49473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.918389][ T29] audit: type=1326 audit(1765476246.413:49474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.942057][ T29] audit: type=1326 audit(1765476246.413:49475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.2.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c922f749 code=0x7ffc0000 [ 121.986145][ T9619] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 122.254973][ T9652] lo speed is unknown, defaulting to 1000 [ 122.326850][ T9659] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 122.463211][ T9667] lo speed is unknown, defaulting to 1000 [ 122.672133][ T9692] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 122.738271][ T9698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.789296][ T9698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.855177][ T9698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.898003][ T9703] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 122.938928][ T9698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.008606][ T406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.021509][ T803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.032790][ T803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.050882][ T803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.218151][ T9731] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.218151][ T9731] The task syz.4.2355 (9731) triggered the difference, watch for misbehavior. [ 123.580248][ T9761] netlink: 'syz.2.2366': attribute type 6 has an invalid length. [ 123.807023][ T9790] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 123.898254][ T9808] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 124.105727][ T9840] lo speed is unknown, defaulting to 1000 [ 124.408474][ T9863] __nla_validate_parse: 28 callbacks suppressed [ 124.408512][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 124.481454][ T9871] xt_l2tp: invalid flags combination: c [ 124.487330][ T9871] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 124.518520][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2412'. [ 124.555569][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 124.673212][ T9886] openvswitch: netlink: Message has 7 unknown bytes. [ 124.750003][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2421'. [ 124.876030][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 124.975569][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 125.258689][ T9921] netlink: 'syz.3.2428': attribute type 6 has an invalid length. [ 125.266509][ T9921] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2428'. [ 125.569705][ T9929] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 125.571199][ T9926] netlink: 'syz.3.2430': attribute type 6 has an invalid length. [ 125.585349][ T9926] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2430'. [ 125.597150][ T9929] 9pnet_virtio: no channels available for device syz [ 125.645485][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 125.749807][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2436'. [ 125.806329][ T9956] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 125.819935][ T9959] netlink: 'syz.4.2443': attribute type 7 has an invalid length. [ 125.900072][ T9970] sctp: [Deprecated]: syz.3.2447 (pid 9970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.900072][ T9970] Use struct sctp_sack_info instead [ 126.022441][ T9992] dvmrp6: entered allmulticast mode [ 126.373194][T10025] netlink: 'syz.0.2466': attribute type 8 has an invalid length. [ 126.583212][ T36] IPVS: starting estimator thread 0... [ 126.589011][T10040] 9p: Bad value for 'wfdno' [ 126.679601][T10049] IPVS: using max 2448 ests per chain, 122400 per kthread [ 126.714315][T10063] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 126.814508][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 126.814534][ T29] audit: type=1326 audit(1765476251.453:50065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.844920][ T29] audit: type=1326 audit(1765476251.483:50066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.870132][ T29] audit: type=1326 audit(1765476251.483:50067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.893774][ T29] audit: type=1326 audit(1765476251.483:50068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.920305][ T29] audit: type=1326 audit(1765476251.563:50069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.943966][ T29] audit: type=1326 audit(1765476251.563:50070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.967812][ T29] audit: type=1326 audit(1765476251.563:50071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 126.991519][ T29] audit: type=1326 audit(1765476251.563:50072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 127.015148][ T29] audit: type=1326 audit(1765476251.563:50073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 127.039163][ T29] audit: type=1326 audit(1765476251.563:50074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff56096f749 code=0x7ffc0000 [ 127.206342][T10086] ref_ctr_offset mismatch. inode: 0x9fc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2000000 [ 127.283686][T10092] openvswitch: netlink: Message has 7 unknown bytes. [ 127.628354][T10127] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 127.860424][T10147] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 127.898515][T10153] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 128.097975][T10175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 128.169990][ T31] ================================================================== [ 128.178098][ T31] BUG: KCSAN: data-race in io_waitid_complete / io_waitid_wait [ 128.185655][ T31] [ 128.187969][ T31] write to 0xffff888128852518 of 8 bytes by task 10094 on cpu 0: [ 128.195669][ T31] io_waitid_wait+0xb5/0x130 [ 128.200252][ T31] __wake_up_sync_key+0x52/0x80 [ 128.205095][ T31] __wake_up_parent+0x36/0x40 [ 128.209762][ T31] do_notify_parent+0x4e8/0x560 [ 128.214607][ T31] do_exit+0xc01/0x15d0 [ 128.218757][ T31] __x64_sys_exit+0x1f/0x20 [ 128.223268][ T31] x64_sys_call+0x2fe7/0x3000 [ 128.227948][ T31] do_syscall_64+0xd8/0x2a0 [ 128.232451][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.238333][ T31] [ 128.240641][ T31] write to 0xffff888128852518 of 8 bytes by task 31 on cpu 1: [ 128.248096][ T31] io_waitid_complete+0xdf/0x220 [ 128.253042][ T31] __io_waitid_cancel+0x50/0xa0 [ 128.257886][ T31] io_cancel_remove_all+0x266/0x2b0 [ 128.263070][ T31] io_waitid_remove_all+0x31/0x40 [ 128.268087][ T31] io_uring_try_cancel_requests+0x289/0x310 [ 128.273985][ T31] io_ring_exit_work+0x14b/0x520 [ 128.278922][ T31] process_scheduled_works+0x4ce/0x9d0 [ 128.284371][ T31] worker_thread+0x582/0x770 [ 128.288953][ T31] kthread+0x489/0x510 [ 128.293048][ T31] ret_from_fork+0x149/0x290 [ 128.297631][ T31] ret_from_fork_asm+0x1a/0x30 [ 128.302409][ T31] [ 128.304726][ T31] value changed: 0xffff888103a5f1a0 -> 0x0000000000000000 [ 128.311815][ T31] [ 128.314127][ T31] Reported by Kernel Concurrency Sanitizer on: [ 128.320272][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.329982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.340025][ T31] Workqueue: iou_exit io_ring_exit_work [ 128.345577][ T31] ==================================================================