last executing test programs: 18m15.137758721s ago: executing program 32 (id=171): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x30}, 0xc4) 17m18.460080603s ago: executing program 33 (id=1828): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) alarm(0xb79a) 16m40.990422961s ago: executing program 34 (id=2822): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 16m27.292517057s ago: executing program 35 (id=2787): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 16m1.640496776s ago: executing program 36 (id=3363): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000040)=0x10001b) 14m48.652084683s ago: executing program 37 (id=5649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x22, &(0x7f00000016c0)={@empty, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@can={0xc, {{0x4}, 0xa, 0x2, 0x0, 0x0, "80eb2430ba6e5759"}}}}, 0x0) 14m0.356366656s ago: executing program 38 (id=6874): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) poll(&(0x7f0000000000)=[{r0, 0x108a}], 0x1, 0xe16) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 13m9.815268291s ago: executing program 39 (id=8077): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x800003, {0x2, 0xf0, 0x3}, 0xff}, 0x18) getpeername(r0, 0x0, &(0x7f0000000480)) 11m24.549283351s ago: executing program 40 (id=10148): move_pages(0x0, 0x200000000000003d, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 10m23.834644862s ago: executing program 41 (id=11275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}]}}]}, 0x44}}, 0x0) 10m20.567039679s ago: executing program 42 (id=11305): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0xa}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x5c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0x1}], 0x1) 10m17.71600369s ago: executing program 43 (id=11340): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1, 0x23) io_uring_enter(r0, 0x2219, 0x8926, 0x16, 0x0, 0x0) 9m58.17370632s ago: executing program 44 (id=11606): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000600)={0x7, 0x4d, 0x2}, 0xfffffe4c) 9m5.399712137s ago: executing program 45 (id=12313): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) 8m32.525090849s ago: executing program 46 (id=13024): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) 8m15.092251719s ago: executing program 2 (id=13287): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0xb000000) 8m14.216046271s ago: executing program 2 (id=13311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000240)='.', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 8m14.210315742s ago: executing program 2 (id=13312): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsync(r0) 8m14.152027582s ago: executing program 2 (id=13315): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 8m14.111994783s ago: executing program 2 (id=13317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 8m13.528265731s ago: executing program 2 (id=13328): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 8m13.528130951s ago: executing program 47 (id=13328): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) 7m57.355348764s ago: executing program 6 (id=13475): bind$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010401010000000000000000020000000a0002"], 0x20}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 7m57.227925575s ago: executing program 6 (id=13478): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000500)={'vlan0\x00', @random="013701352ebf"}) 7m56.791116331s ago: executing program 6 (id=13482): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m56.699773773s ago: executing program 6 (id=13486): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m56.535831715s ago: executing program 6 (id=13491): capset(0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x1000008, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m55.999276803s ago: executing program 6 (id=13504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r2, 0x20, 0x8000, 0x10000) 7m55.941499304s ago: executing program 48 (id=13504): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x100) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) fallocate(r2, 0x20, 0x8000, 0x10000) 7m47.577511493s ago: executing program 0 (id=13648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r0) 7m47.435500386s ago: executing program 0 (id=13653): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 7m47.411731806s ago: executing program 0 (id=13654): openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m47.329735527s ago: executing program 0 (id=13657): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) 7m47.296168398s ago: executing program 0 (id=13658): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001880)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)='s', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private2, 0x7a}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000200)="c2", 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r2, 0x1) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 7m46.707759766s ago: executing program 0 (id=13667): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m46.707640316s ago: executing program 49 (id=13667): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7m43.163161737s ago: executing program 4 (id=13720): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7m43.111977108s ago: executing program 4 (id=13722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) 7m43.026201429s ago: executing program 4 (id=13724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 7m42.94525705s ago: executing program 4 (id=13729): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000002c0)={0x8}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 7m42.780462502s ago: executing program 4 (id=13731): r0 = socket(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) 7m41.132193436s ago: executing program 4 (id=13767): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20040804) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 7m41.102689046s ago: executing program 50 (id=13767): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20040804) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 6m25.879372766s ago: executing program 5 (id=15075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@quota}]}, 0x1, 0x50d, &(0x7f0000000d40)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x13b) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f67003000028006000c400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4000) syz_emit_ethernet(0xfc1, &(0x7f00000023c0)=ANY=[], 0x0) 6m25.613137929s ago: executing program 5 (id=15086): setresgid(0xee00, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r2]) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 6m25.495631841s ago: executing program 5 (id=15090): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m25.337207883s ago: executing program 5 (id=15097): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 6m25.290220814s ago: executing program 5 (id=15098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m25.096243707s ago: executing program 5 (id=15099): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc0089364, 0x0) 6m25.096105107s ago: executing program 51 (id=15099): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc0089364, 0x0) 14.619525939s ago: executing program 8 (id=18508): r0 = socket$inet_smc(0x2b, 0x1, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r3 = inotify_init() fgetxattr(r3, &(0x7f0000000040)=@random={'osx.', '\x00'}, 0x0, 0xfffffffffffffd25) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) fcntl$getown(r1, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.558526355s ago: executing program 8 (id=18512): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 12.945182784s ago: executing program 8 (id=18517): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac", 0x2}], 0x1}}], 0x2, 0x40) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca, 0x6, 0xbc7, 0x7f, 0x6a4, 0x0, 0xb119, 0x2, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000063c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xb, 0x3ff, 0x401, 0x3}, {0xed, 0x1, 0x7ff, 0x40, 0x401}, 0x4, 0xfffffc01, 0x1045}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x54a72803820cb231, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xb, 0x9}, {0x3, 0xffe0}}}, 0x24}}, 0x40) 12.52873526s ago: executing program 8 (id=18519): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 11.662591233s ago: executing program 8 (id=18529): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x3c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x6}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FIB_RULE_POLICY=@FRA_FWMARK={0x6c, 0xa, 0x7fffffff}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e24}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008800}, 0x4000000) 8.135480927s ago: executing program 8 (id=18555): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r2, 0x0) socket(0x10, 0x3, 0x0) 5.630854775s ago: executing program 7 (id=18570): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5.492586517s ago: executing program 7 (id=18571): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x200, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xb}, 0xc0, 0x9, 0x6, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 4.986841745s ago: executing program 7 (id=18577): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.60576694s ago: executing program 7 (id=18580): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) syz_emit_ethernet(0xbe, 0x0, 0x0) 3.97748366s ago: executing program 1 (id=18581): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) 3.122437562s ago: executing program 9 (id=18584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 3.013801074s ago: executing program 1 (id=18585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000001580)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0xc7}}, {@data_err_ignore}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r2 = creat(&(0x7f0000000040)='./file1\x00', 0xd) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) fallocate(r1, 0x10, 0x3, 0x7c27) io_setup(0x1, &(0x7f00000004c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f0000000140)='i', 0x1, 0x9fd}]) 2.947768855s ago: executing program 3 (id=18586): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8224c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x10140) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.844654926s ago: executing program 9 (id=18587): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.815404717s ago: executing program 3 (id=18588): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xb34, 0x100000, 0x2000, 0x1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.64304997s ago: executing program 9 (id=18589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000440)="05031c00d3fc14000000478886dd", 0xe, 0x4004, &(0x7f0000000200)={0x11, 0x10, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 2.61373422s ago: executing program 1 (id=18590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040801}, 0x24008840) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x78bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x0, 0x0, 0x0, 0x80, 0x9], 0x5, [0xfffe, 0xe6, 0xfffe, 0x7, 0x0, 0xe, 0x0, 0xc, 0x0, 0x5c4, 0x8000, 0x4, 0x0, 0x3dc, 0x0, 0xffff], [0x0, 0x4, 0xc6, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0x1001]}}}}]}, 0x88}}, 0x20000000) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) socket$netlink(0x10, 0x3, 0xe) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.541086736s ago: executing program 1 (id=18591): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x20000400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 876.623676ms ago: executing program 7 (id=18592): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 863.419077ms ago: executing program 3 (id=18593): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x2) 795.098648ms ago: executing program 3 (id=18594): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x4010) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000440)={0x12, {{0x29, 0x0, 0x3e000000, @empty, 0x40000005}}}, 0x88) wait4(r1, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) 780.613157ms ago: executing program 1 (id=18595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 729.664158ms ago: executing program 9 (id=18596): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x4, 0x400}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x1000b, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 584.494121ms ago: executing program 9 (id=18597): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 517.430972ms ago: executing program 3 (id=18598): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x90, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000516000/0x2000)=nil, 0x2000, 0x1000009, 0x50, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) 476.162532ms ago: executing program 1 (id=18599): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r5, 0x0, 0x38f9, 0x0) fcntl$setstatus(r5, 0x4, 0x6c00) write(r3, &(0x7f0000000040), 0xffffff4a) 318.746915ms ago: executing program 9 (id=18600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 260.143515ms ago: executing program 3 (id=18601): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r1 = syz_clone(0x20000000, 0x0, 0x8, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x0) 0s ago: executing program 7 (id=18602): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 963.464157][ T28] audit: type=1400 audit(1782266284.152:14715): avc: denied { create } for pid=19601 comm="syz.9.17292" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 963.604301][T19617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17295'. [ 964.296400][T19632] loop9: detected capacity change from 0 to 1024 [ 964.336414][T19632] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 964.367667][T19632] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 1: comm syz.9.17304: lblock 1 mapped to illegal pblock 1 (length 1) [ 964.402433][T19632] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 964.402739][T19632] Quota error (device loop9): write_blk: dquota write failed [ 964.411856][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 964.411873][ C1] EXT4-fs (loop9): initial error at time 1782266285: ext4_map_blocks:833: inode 3: block 1 [ 964.411944][ C1] EXT4-fs (loop9): last error at time 1782266285: ext4_map_blocks:833: inode 3: block 1 [ 964.517110][T19632] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 964.541033][T19632] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.17304: Failed to acquire dquot type 0 [ 964.582521][T19632] loop9: lost filesystem error report for type 5 error -117 [ 964.582730][T19632] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.17304: Freeing blocks not in datazone - block = 0, count = 4096 [ 964.617669][T19632] loop9: lost filesystem error report for type 5 error -117 [ 964.617916][T19632] EXT4-fs error (device loop9): ext4_read_inode_bitmap:141: comm syz.9.17304: Invalid inode bitmap blk 0 in block_group 0 [ 964.649202][ T9608] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 964.674533][T19632] loop9: lost filesystem error report for type 5 error -117 [ 964.674688][T19632] EXT4-fs error (device loop9) in ext4_free_inode:363: Corrupt filesystem [ 964.694904][ T9608] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 964.695024][ T9608] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 964.736153][T19632] loop9: lost filesystem error report for type 5 error -117 [ 964.739113][T19632] EXT4-fs (loop9): 1 orphan inode deleted [ 964.747466][ T9608] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:26: Failed to release dquot type 0 [ 964.747493][ T9608] loop9: lost filesystem error report for type 5 error -117 [ 964.815325][T19632] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.930171][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17311'. [ 965.044505][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17307'. [ 965.058098][T19659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17313'. [ 965.125582][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.390827][T19678] netlink: 'syz.1.17319': attribute type 10 has an invalid length. [ 965.523462][T19678] team0: Device wg2 is of different type [ 965.544512][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.551812][ C1] bridge0: topology change detected, propagating [ 966.343874][ T28] audit: type=1400 audit(1782266287.032:14716): avc: denied { create } for pid=19701 comm="syz.1.17328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 966.473719][T19706] bond4: (slave dummy0): Releasing active interface [ 966.491425][T19706] bond4: (slave veth19): making interface the new active one [ 966.685269][T19706] bridge_slave_1: left allmulticast mode [ 966.736314][T19706] bridge_slave_1: left promiscuous mode [ 966.773565][T19706] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.957429][T19706] bond0: (slave bond_slave_0): Releasing backup interface [ 967.039758][T19706] bond0: (slave bond_slave_1): Releasing backup interface [ 967.072158][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17334'. [ 967.124061][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17334'. [ 967.170175][T19724] netlink: 'syz.1.17334': attribute type 7 has an invalid length. [ 967.180500][T19706] team0: Port device team_slave_0 removed [ 967.251128][T19706] team0: Port device team_slave_1 removed [ 967.403375][T19706] net_ratelimit: 6 callbacks suppressed [ 967.403396][T19706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 967.606106][T15427] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.637822][T15427] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.670858][T15427] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.707406][T15427] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.808133][T19734] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 967.866399][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17338'. [ 967.905280][ T28] audit: type=1400 audit(1782266288.592:14717): avc: denied { relabelto } for pid=19733 comm="syz.1.17338" name="683" dev="tmpfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 967.960636][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17338'. [ 968.015414][T19740] netlink: 'syz.3.17339': attribute type 1 has an invalid length. [ 968.047664][ T28] audit: type=1400 audit(1782266288.602:14718): avc: denied { associate } for pid=19733 comm="syz.1.17338" name="683" dev="tmpfs" ino=3537 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 968.116562][T19740] bond5: entered promiscuous mode [ 968.133949][T19740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 968.164549][ T28] audit: type=1400 audit(1782266288.792:14719): avc: denied { write } for pid=8864 comm="syz-executor" name="683" dev="tmpfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 968.213883][ T28] audit: type=1400 audit(1782266288.792:14720): avc: denied { remove_name } for pid=8864 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 968.280316][ T28] audit: type=1400 audit(1782266288.792:14721): avc: denied { write } for pid=8864 comm="syz-executor" name="683" dev="tmpfs" ino=3537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 968.437720][T19740] bond5: (slave bridge6): making interface the new active one [ 968.476339][T19740] bridge6: entered promiscuous mode [ 968.504750][T19740] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 968.840298][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 968.840315][ T28] audit: type=1326 audit(1782266289.532:14725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19756 comm="syz.8.17346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a230bce59 code=0x0 [ 969.198335][T19770] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17350'. [ 971.661806][ T28] audit: type=1400 audit(1782266292.352:14726): avc: denied { map } for pid=19753 comm="syz.3.17345" path="/791" dev="tmpfs" ino=4081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 972.183127][T19801] netlink: 144 bytes leftover after parsing attributes in process `syz.3.17361'. [ 974.897474][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17379'. [ 975.879195][T19909] SET target dimension over the limit! [ 975.947497][T19908] loop9: detected capacity change from 0 to 1024 [ 976.004476][T19908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.036774][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.641522][T19997] vlan0: left allmulticast mode [ 980.659892][T19997] bridge_slave_0: left allmulticast mode [ 980.676461][T19997] vlan0: left promiscuous mode [ 980.692065][T19997] bridge_slave_0: left promiscuous mode [ 980.709424][T19997] bridge0: port 1(vlan0) entered disabled state [ 980.815802][T19997] bond10: (slave vti0): Releasing backup interface [ 980.822494][T19997] vti0: left promiscuous mode [ 980.834824][T19997] bond11: (slave vlan3): Releasing active interface [ 980.843815][T19997] batman_adv: batadv0: Removing interface: gretap2 [ 980.858132][T19997] bond12: (slave gretap3): Releasing active interface [ 980.872299][T19999] team0: Mode changed to "broadcast" [ 981.265114][T20020] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17433'. [ 981.873877][T20038] bridge7: entered promiscuous mode [ 981.895058][T20038] bridge7: entered allmulticast mode [ 981.921551][T20041] netlink: 'syz.1.17436': attribute type 1 has an invalid length. [ 981.996895][T20044] loop8: detected capacity change from 0 to 7 [ 982.023349][T20041] netlink: 'syz.1.17436': attribute type 2 has an invalid length. [ 982.776543][T20056] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 983.014061][T20070] netlink: 'syz.7.17449': attribute type 4 has an invalid length. [ 983.086641][T20073] netlink: 'syz.7.17449': attribute type 4 has an invalid length. [ 984.076057][T20074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 985.054723][T20114] lo speed is unknown, defaulting to 1000 [ 987.651395][ T3397] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 987.710334][ T3397] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.725979][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17487'. [ 988.753711][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17487'. [ 989.096567][T20183] syz.3.17490 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 989.106325][T20183] CPU: 1 UID: 0 PID: 20183 Comm: syz.3.17490 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 989.106436][T20183] Tainted: [W]=WARN [ 989.106445][T20183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 989.106474][T20183] Call Trace: [ 989.106504][T20183] [ 989.106514][T20183] __dump_stack+0x1d/0x30 [ 989.106546][T20183] dump_stack_lvl+0x95/0xd0 [ 989.106574][T20183] dump_stack+0x15/0x1b [ 989.106599][T20183] dump_header+0x80/0x240 [ 989.106626][T20183] oom_kill_process+0x295/0x350 [ 989.106708][T20183] out_of_memory+0x981/0xbc0 [ 989.106750][T20183] try_charge_memcg+0x621/0xa00 [ 989.106820][T20183] ? should_fail_ex+0x30/0x270 [ 989.106892][T20183] charge_memcg+0x6d/0x120 [ 989.106939][T20183] __mem_cgroup_charge+0x28/0xb0 [ 989.106992][T20183] filemap_add_folio+0x110/0x350 [ 989.107028][T20183] filemap_get_pages+0x80d/0x1360 [ 989.107072][T20183] ? folios_put_refs+0x2c0/0x300 [ 989.107157][T20183] filemap_splice_read+0x3cb/0x790 [ 989.107201][T20183] ? __pfx_filemap_splice_read+0x10/0x10 [ 989.107286][T20183] splice_direct_to_actor+0x261/0x680 [ 989.107327][T20183] ? futex_wait+0x18f/0x1c0 [ 989.107419][T20183] ? __pfx_direct_splice_actor+0x10/0x10 [ 989.107455][T20183] do_splice_direct+0x119/0x1a0 [ 989.107483][T20183] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 989.107520][T20183] do_sendfile+0x37d/0x640 [ 989.107630][T20183] __x64_sys_sendfile64+0x105/0x150 [ 989.107662][T20183] x64_sys_call+0x2dc4/0x3020 [ 989.107724][T20183] do_syscall_64+0x136/0x3c0 [ 989.107816][T20183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.107849][T20183] RIP: 0033:0x7f1441e9ce59 [ 989.107893][T20183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.107916][T20183] RSP: 002b:00007f14408f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 989.107942][T20183] RAX: ffffffffffffffda RBX: 00007f1442115fa0 RCX: 00007f1441e9ce59 [ 989.107959][T20183] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 989.107975][T20183] RBP: 00007f1441f32e6f R08: 0000000000000000 R09: 0000000000000000 [ 989.107991][T20183] R10: 0002000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 989.108041][T20183] R13: 00007f1442116038 R14: 00007f1442115fa0 R15: 00007ffe19d4f8c8 [ 989.108062][T20183] [ 989.108071][T20183] memory: usage 307200kB, limit 307200kB, failcnt 1100 [ 989.345280][T20183] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 989.353194][T20183] kmem: usage 305300kB, limit 9007199254740988kB, failcnt 0 [ 989.360529][T20183] Memory cgroup stats for /syz3: [ 989.360831][T20183] cache 1945600 [ 989.369370][T20183] rss 0 [ 989.372156][T20183] shmem 0 [ 989.375212][T20183] mapped_file 0 [ 989.378741][T20183] dirty 0 [ 989.381693][T20183] writeback 0 [ 989.385079][T20183] workingset_refault_anon 6032 [ 989.389942][T20183] workingset_refault_file 5081 [ 989.394768][T20183] swap 442368 [ 989.398218][T20183] swapcached 93569024 [ 989.402222][T20183] pgpgin 789035 [ 989.405729][T20183] pgpgout 788560 [ 989.409323][T20183] pgfault 869362 [ 989.412885][T20183] pgmajfault 893 [ 989.416465][T20183] inactive_anon 0 [ 989.420107][T20183] active_anon 0 [ 989.423587][T20183] inactive_file 0 [ 989.427285][T20183] active_file 0 [ 989.430769][T20183] unevictable 1945600 [ 989.434786][T20183] hierarchical_memory_limit 314572800 [ 989.440245][T20183] hierarchical_memsw_limit 9223372036854771712 [ 989.446438][T20183] total_cache 1945600 [ 989.450446][T20183] total_rss 0 [ 989.453744][T20183] total_shmem 0 [ 989.457227][T20183] total_mapped_file 0 [ 989.461289][T20183] total_dirty 0 [ 989.464786][T20183] total_writeback 0 [ 989.468623][T20183] total_workingset_refault_anon 6032 [ 989.473952][T20183] total_workingset_refault_file 5081 [ 989.479294][T20183] total_swap 442368 [ 989.483144][T20183] total_swapcached 93569024 [ 989.487684][T20183] total_pgpgin 789035 [ 989.491756][T20183] total_pgpgout 788560 [ 989.495885][T20183] total_pgfault 869364 [ 989.500052][T20183] total_pgmajfault 893 [ 989.504141][T20183] total_inactive_anon 0 [ 989.508342][T20183] total_active_anon 0 [ 989.512340][T20183] total_inactive_file 0 [ 989.516526][T20183] total_active_file 0 [ 989.520532][T20183] total_unevictable 1945600 [ 989.525140][T20183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17490,pid=20182,uid=0 [ 989.540296][T20183] Memory cgroup out of memory: Killed process 20182 (syz.3.17490) total-vm:96084kB, anon-rss:1236kB, file-rss:22108kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 991.779848][T20255] loop9: detected capacity change from 0 to 128 [ 991.898838][T20255] EXT4-fs: Ignoring removed i_version option [ 992.164899][T20255] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 992.272341][T20255] ext4 filesystem being mounted at /432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 992.607368][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.654948][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.702192][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.799050][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.824910][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.861469][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 992.978019][T20255] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.9.17512: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 993.026848][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 993.067252][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17516'. [ 993.165756][T13030] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 993.399911][T20284] bond0: entered promiscuous mode [ 993.421952][T20284] bond_slave_0: entered promiscuous mode [ 993.445659][T20284] bond_slave_1: entered promiscuous mode [ 993.466649][T20284] team0: entered promiscuous mode [ 993.482411][T20284] team_slave_0: entered promiscuous mode [ 993.502854][T20284] team_slave_1: entered promiscuous mode [ 993.538981][T20284] batadv_slave_0: entered promiscuous mode [ 993.563756][T20284] batadv_slave_0: left promiscuous mode [ 993.592538][T20284] bond0: left promiscuous mode [ 993.608932][T20284] bond_slave_0: left promiscuous mode [ 993.638882][T20284] bond_slave_1: left promiscuous mode [ 993.662341][T20284] team0: left promiscuous mode [ 993.678723][T20284] team_slave_0: left promiscuous mode [ 993.706334][T20284] team_slave_1: left promiscuous mode [ 994.131853][T20299] lo speed is unknown, defaulting to 1000 [ 994.141658][ T7752] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 994.288620][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 994.288720][ T7752] Tainted: [W]=WARN [ 994.288728][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 994.288816][ T7752] Call Trace: [ 994.288824][ T7752] [ 994.288831][ T7752] __dump_stack+0x1d/0x30 [ 994.288860][ T7752] dump_stack_lvl+0x95/0xd0 [ 994.288885][ T7752] dump_stack+0x15/0x1b [ 994.288910][ T7752] dump_header+0x80/0x240 [ 994.288948][ T7752] oom_kill_process+0x295/0x350 [ 994.289006][ T7752] out_of_memory+0x981/0xbc0 [ 994.289042][ T7752] try_charge_memcg+0x621/0xa00 [ 994.289163][ T7752] charge_memcg+0x6d/0x120 [ 994.289196][ T7752] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 994.289237][ T7752] swap_cache_alloc_folio+0x47b/0x5e0 [ 994.289340][ T7752] swap_cluster_readahead+0x3d2/0x460 [ 994.289388][ T7752] swapin_readahead+0xd8/0x8a0 [ 994.289500][ T7752] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 994.289538][ T7752] ? hrtimer_start_range_ns+0x108/0x120 [ 994.289595][ T7752] ? __rcu_read_unlock+0x4e/0x70 [ 994.289621][ T7752] ? swap_cache_get_folio+0x1f7/0x200 [ 994.289656][ T7752] do_swap_page+0x2a2/0x1ec0 [ 994.289764][ T7752] ? __schedule+0x799/0xd10 [ 994.289799][ T7752] ? __rcu_read_lock+0x36/0x50 [ 994.289827][ T7752] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 994.289900][ T7752] handle_mm_fault+0xb3c/0x2da0 [ 994.289947][ T7752] do_user_addr_fault+0x634/0x1060 [ 994.289984][ T7752] ? trace_page_fault_user+0x1f/0xa0 [ 994.290070][ T7752] exc_page_fault+0x62/0xa0 [ 994.290096][ T7752] asm_exc_page_fault+0x26/0x30 [ 994.290138][ T7752] RIP: 0033:0x7f1441e57fd7 [ 994.290158][ T7752] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 994.290179][ T7752] RSP: 002b:00007ffe19d4fbc0 EFLAGS: 00010202 [ 994.290203][ T7752] RAX: 0000000000000000 RBX: 00005555866ff500 RCX: 00007f1441e57fd7 [ 994.290220][ T7752] RDX: 00007ffe19d4fc00 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.290233][ T7752] RBP: 00007ffe19d4fc6c R08: 0000000000000000 R09: 0000000000000000 [ 994.290247][ T7752] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 994.290263][ T7752] R13: 00000000000927c0 R14: 00000000000f29a0 R15: 00007ffe19d4fcc0 [ 994.290289][ T7752] [ 994.525820][ T7752] memory: usage 307200kB, limit 307200kB, failcnt 1550 [ 994.605548][ T7752] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 994.626879][ T7752] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 994.758662][ T7752] Memory cgroup stats for /syz3: [ 994.758999][ T7752] cache 0 [ 994.780194][ T7752] rss 20480 [ 994.793800][ T7752] shmem 0 [ 994.802356][ T7752] mapped_file 0 [ 994.811866][ T7752] dirty 0 [ 994.831414][ T7752] writeback 0 [ 994.858204][ T7752] workingset_refault_anon 6108 [ 994.885899][ T7752] workingset_refault_file 5081 [ 994.916240][ T7752] swap 450560 [ 994.921101][T20306] netlink: 'syz.9.17528': attribute type 13 has an invalid length. [ 994.934989][ T7752] swapcached 94044160 [ 994.951553][ T7752] pgpgin 792604 [ 994.962983][ T7752] pgpgout 792598 [ 994.981256][ T7752] pgfault 873452 [ 995.001968][ T7752] pgmajfault 918 [ 995.013181][ T7752] inactive_anon 0 [ 995.028320][ T7752] active_anon 20480 [ 995.037722][ T7752] inactive_file 0 [ 995.046033][ T7752] active_file 0 [ 995.052534][ T7752] unevictable 0 [ 995.083686][ T7752] hierarchical_memory_limit 314572800 [ 995.102905][ T7752] hierarchical_memsw_limit 9223372036854771712 [ 995.121279][ T7752] total_cache 0 [ 995.130498][ T7752] total_rss 20480 [ 995.137291][ T7752] total_shmem 0 [ 995.148289][ T7752] total_mapped_file 0 [ 995.156162][ T7752] total_dirty 0 [ 995.168031][ T7752] total_writeback 0 [ 995.185720][ T7752] total_workingset_refault_anon 6108 [ 995.202899][ T7752] total_workingset_refault_file 5081 [ 995.216867][ T7752] total_swap 450560 [ 995.222290][ T7752] total_swapcached 94044160 [ 995.239596][ T7752] total_pgpgin 792604 [ 995.247746][ T7752] total_pgpgout 792598 [ 995.256993][ T7752] total_pgfault 873454 [ 995.262420][ T7752] total_pgmajfault 918 [ 995.266880][ T7752] total_inactive_anon 0 [ 995.272671][ T7752] total_active_anon 20480 [ 995.283936][ T7752] total_inactive_file 0 [ 995.289085][ T7752] total_active_file 0 [ 995.293117][ T7752] total_unevictable 0 [ 995.298907][ T7752] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.17522,pid=20283,uid=0 [ 995.325347][ T7752] Memory cgroup out of memory: Killed process 20283 (syz.3.17522) total-vm:100584kB, anon-rss:1256kB, file-rss:26352kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 995.532141][ T49] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.563452][ T49] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.580154][ T49] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.608101][ T49] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.622312][T20318] netlink: 'syz.3.17532': attribute type 1 has an invalid length. [ 995.768069][T20318] 8021q: adding VLAN 0 to HW filter on device bond6 [ 995.809678][ T49] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.882046][ T49] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.910492][ T49] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.986826][ T49] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.293297][T20337] --map-set only usable from mangle table [ 998.478813][T20342] loop9: detected capacity change from 0 to 256 [ 999.148832][T20368] 9pnet_fd: p9_fd_create_unix (20368): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1002.772123][T20421] loop9: detected capacity change from 0 to 8192 [ 1002.895520][T20426] __nla_validate_parse: 1 callbacks suppressed [ 1002.895631][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17570'. [ 1002.923677][T20428] netlink: 'syz.1.17571': attribute type 7 has an invalid length. [ 1002.947863][T20421] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1002.964964][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17570'. [ 1003.119155][T20428] netlink: 'syz.1.17571': attribute type 7 has an invalid length. [ 1003.243810][ T28] audit: type=1400 audit(1782266323.932:14727): avc: denied { getopt } for pid=20437 comm="syz.3.17577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1003.471012][ T28] audit: type=1326 audit(1782266324.162:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1003.553344][ T28] audit: type=1326 audit(1782266324.162:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1003.653061][ T28] audit: type=1326 audit(1782266324.192:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1003.707736][T20448] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 1003.722038][T20445] netlink: 'syz.3.17578': attribute type 2 has an invalid length. [ 1003.762927][ T28] audit: type=1326 audit(1782266324.212:14731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1003.807991][T20445] 0: entered promiscuous mode [ 1003.878569][ T28] audit: type=1326 audit(1782266324.312:14732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1003.920483][T20453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1003.966161][ T28] audit: type=1326 audit(1782266324.312:14733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1004.029217][ T28] audit: type=1326 audit(1782266324.332:14734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1004.081522][ T28] audit: type=1326 audit(1782266324.342:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1004.112652][ T28] audit: type=1326 audit(1782266324.342:14736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.17576" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1004.413330][T20467] loop9: detected capacity change from 0 to 164 [ 1004.519815][T20467] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1006.148610][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17597'. [ 1006.214026][T20503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20503 comm=syz.1.17597 [ 1006.612123][T20507] loop9: detected capacity change from 0 to 512 [ 1007.058568][T20507] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.079963][T20507] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.768272][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17612'. [ 1007.806867][T20547] bond0: (slave bond_slave_0): Releasing backup interface [ 1007.879601][T20547] bond_slave_0: entered promiscuous mode [ 1007.886032][T20547] bond_slave_0: entered allmulticast mode [ 1008.583205][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1008.583220][ T28] audit: type=1400 audit(1782266329.272:14758): avc: denied { write } for pid=20560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1008.726129][ T28] audit: type=1400 audit(1782266329.402:14759): avc: denied { write } for pid=20575 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.335307][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.765619][T20591] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 1009.781410][T20590] netlink: 'syz.9.17619': attribute type 2 has an invalid length. [ 1009.840663][T20593] xt_hashlimit: size too large, truncated to 1048576 [ 1009.878093][T20590] 0: entered promiscuous mode [ 1011.479586][T20625] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.17629'. [ 1011.489581][T20621] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.17629'. [ 1011.518333][T20622] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.17629'. [ 1012.132726][T20628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.179772][T20628] team0: Port device bond0 added [ 1012.195207][T20629] bridge0: port 1(team0) entered blocking state [ 1012.224897][T20629] bridge0: port 1(team0) entered disabled state [ 1012.248134][T20629] team0: entered allmulticast mode [ 1012.272436][T20629] team0: entered promiscuous mode [ 1012.288313][T20629] bond0: entered promiscuous mode [ 1012.671593][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17639'. [ 1012.798719][T20644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1012.825618][T20644] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1013.014965][T20662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.053108][T20662] team0: Port device xfrm0 added [ 1013.068481][T20662] tipc: Started in network mode [ 1013.079927][T20662] tipc: Node identity b20827d5929d, cluster identity 4711 [ 1013.098227][T20662] tipc: Enabled bearer , priority 0 [ 1013.319681][T20666] loop9: detected capacity change from 0 to 256 [ 1013.376309][T20670] netlink: 'syz.1.17648': attribute type 1 has an invalid length. [ 1013.400689][T20666] FAT-fs (loop9): data area starts beyond volume (32 > 0) [ 1013.412675][T20670] bond4: entered promiscuous mode [ 1013.418518][T20666] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1013.429688][T20670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1013.540660][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17646'. [ 1013.572971][T20676] netlink: 'syz.3.17650': attribute type 4 has an invalid length. [ 1013.589719][T20670] bond4: (slave bridge2): making interface the new active one [ 1013.607609][T20670] bridge2: entered promiscuous mode [ 1013.621174][T20678] loop9: detected capacity change from 0 to 1024 [ 1013.628626][T20679] netlink: 'syz.3.17650': attribute type 4 has an invalid length. [ 1013.671576][T20678] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1013.710345][T20678] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 1013.723145][T20678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.792019][ T28] audit: type=1400 audit(1782266334.482:14760): avc: denied { write } for pid=20677 comm="syz.9.17651" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1013.861160][T20670] bridge2: left promiscuous mode [ 1013.906660][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17653'. [ 1013.975239][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.005343][T20689] netlink: 'syz.8.17653': attribute type 10 has an invalid length. [ 1014.049188][T20689] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17653'. [ 1014.072857][T20696] netlink: 'syz.3.17656': attribute type 1 has an invalid length. [ 1014.137125][T20696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1014.153090][T20700] netlink: 'syz.1.17655': attribute type 6 has an invalid length. [ 1014.319452][T20701] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1014.364570][ T2485] tipc: Node number set to 546645973 [ 1014.376034][T18821] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1014.395481][T20696] vlan2: entered allmulticast mode [ 1014.413481][T20696] bond7: entered allmulticast mode [ 1014.432480][T20696] dummy0: entered allmulticast mode [ 1014.517447][T18817] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1014.904049][T20725] IPVS: Unknown mcast interface: vcan0 [ 1014.950127][T20725] netlink: 'syz.1.17662': attribute type 2 has an invalid length. [ 1015.026048][T20725] 0: entered promiscuous mode [ 1015.293152][T20718] loop9: detected capacity change from 0 to 512 [ 1015.716163][T20718] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1015.748036][T20718] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1015.768078][T20737] netlink: 'syz.3.17667': attribute type 1 has an invalid length. [ 1015.790559][T20718] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1015.835795][T20718] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1015.866760][T20737] bond8: entered promiscuous mode [ 1015.883984][T20737] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1015.907415][T20718] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1015.948012][T20718] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #16: comm syz.9.17659: inode has both inline data and extents flags [ 1015.984195][T20740] bond8: (slave bridge7): making interface the new active one [ 1016.009784][T20718] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1016.014435][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1016.030064][ C1] EXT4-fs (loop9): initial error at time 1782266336: ext4_orphan_get:1399: inode 16 [ 1016.039611][ C1] EXT4-fs (loop9): last error at time 1782266336: ext4_orphan_get:1399: inode 16 [ 1016.044618][T20740] bridge7: entered promiscuous mode [ 1016.059230][T20718] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.17659: couldn't read orphan inode 16 (err -117) [ 1016.097750][T20718] loop9: lost filesystem error report for type 5 error -117 [ 1016.162935][T20718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1016.256896][T20740] bridge7: left promiscuous mode [ 1016.286723][ T2485] SELinux: failure in sel_netif_sid_slow(), invalid network interface (109) [ 1016.591061][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.949513][T20760] team0: Device bond0 is already an upper device of the team interface [ 1017.052676][T20765] gtp2: entered allmulticast mode [ 1017.079742][T20767] netlink: 'syz.3.17674': attribute type 1 has an invalid length. [ 1017.230328][T20767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1017.246321][T20768] bond9: (slave geneve2): making interface the new active one [ 1017.256073][T20768] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1017.303304][ T28] audit: type=1400 audit(1782266337.992:14761): avc: denied { lock } for pid=20773 comm="syz.7.17676" path="socket:[165827]" dev="sockfs" ino=165827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1017.384770][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1017.752329][T20784] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17681'. [ 1017.916132][T20791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20791 comm=syz.9.17681 [ 1018.217242][T20793] lo speed is unknown, defaulting to 1000 [ 1018.388818][T20797] netlink: 'syz.9.17683': attribute type 1 has an invalid length. [ 1018.430171][T20797] bond8: entered promiscuous mode [ 1018.442095][T20797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1018.682259][T20799] bond8: (slave bridge8): making interface the new active one [ 1018.701986][T20799] bridge8: entered promiscuous mode [ 1018.732793][T20799] bridge8: left promiscuous mode [ 1018.871240][ T2484] SELinux: failure in sel_netif_sid_slow(), invalid network interface (109) [ 1020.031476][ T28] audit: type=1400 audit(1782266340.722:14762): avc: denied { write } for pid=20812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.129577][ T28] audit: type=1400 audit(1782266340.822:14763): avc: denied { write } for pid=20846 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.963730][ T28] audit: type=1400 audit(1782266341.652:14764): avc: denied { write } for pid=20854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.274448][ T28] audit: type=1400 audit(1782266341.962:14765): avc: denied { write } for pid=20875 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.488892][T20817] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1021.614595][T20876] ip_vti0: entered promiscuous mode [ 1021.633383][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17701'. [ 1021.838555][T20884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.850190][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17704'. [ 1021.863797][T20884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.893415][T20886] bond20: entered promiscuous mode [ 1021.908889][T20886] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1021.952347][T20886] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1021.971305][T20886] bond20: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1021.995964][T20891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1022.003219][T20891] IPv6: NLM_F_CREATE should be set when creating new route [ 1022.010482][T20891] IPv6: NLM_F_CREATE should be set when creating new route [ 1022.054591][T20886] bond20: (slave wireguard1): Error -95 calling set_mac_address [ 1022.082740][T20891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1022.569654][T20891] bond20: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1022.600957][T20891] bond20: (slave wireguard1): Error -95 calling set_mac_address [ 1025.358552][T20971] lo speed is unknown, defaulting to 1000 [ 1025.412493][T20971] lo speed is unknown, defaulting to 1000 [ 1025.443140][T20971] lo speed is unknown, defaulting to 1000 [ 1025.871631][T20971] infiniband syz1: set down [ 1025.876351][T26514] lo speed is unknown, defaulting to 1000 [ 1025.914575][T20971] infiniband syz1: added lo [ 1025.956935][T20971] RDS/IB: syz1: added [ 1025.963938][T20971] smc: adding ib device syz1 with port count 1 [ 1025.970415][T20971] smc: ib device syz1 port 1 has no pnetid [ 1025.976896][T20971] lo speed is unknown, defaulting to 1000 [ 1025.984121][T26514] lo speed is unknown, defaulting to 1000 [ 1026.024222][T20971] lo speed is unknown, defaulting to 1000 [ 1026.088030][T20971] lo speed is unknown, defaulting to 1000 [ 1026.221930][T20988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.388844][T20988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1026.982515][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17742'. [ 1027.081519][T21003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.088803][T21003] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.096078][T21003] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.106591][T21003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.122693][T20989] bond4: left promiscuous mode [ 1027.249151][T20971] lo speed is unknown, defaulting to 1000 [ 1027.395947][T21001] bond13: entered promiscuous mode [ 1027.401423][T21001] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1027.450406][T21016] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17745'. [ 1027.461100][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17745'. [ 1027.472869][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17745'. [ 1027.485484][T21003] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1027.495286][T21003] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1027.539501][T21003] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 1027.614291][T20971] lo speed is unknown, defaulting to 1000 [ 1027.752571][ T28] audit: type=1326 audit(1782266348.442:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21018 comm="syz.3.17746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1441e9ce59 code=0x0 [ 1027.788133][T20971] lo speed is unknown, defaulting to 1000 [ 1027.849149][T20971] lo speed is unknown, defaulting to 1000 [ 1027.897973][T21022] syz.1.17748: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 1027.918862][T21022] CPU: 1 UID: 0 PID: 21022 Comm: syz.1.17748 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1027.918902][T21022] Tainted: [W]=WARN [ 1027.918912][T21022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1027.918955][T21022] Call Trace: [ 1027.918962][T21022] [ 1027.918971][T21022] __dump_stack+0x1d/0x30 [ 1027.918999][T21022] dump_stack_lvl+0x95/0xd0 [ 1027.919024][T21022] dump_stack+0x15/0x1b [ 1027.919093][T21022] warn_alloc+0x145/0x1c0 [ 1027.919120][T21022] ? rb_next+0x4b/0x80 [ 1027.919266][T21022] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 1027.919337][T21022] ? ctx_sched_in+0x3e9/0x410 [ 1027.919382][T21022] ? __rcu_read_unlock+0x4e/0x70 [ 1027.919409][T21022] ? hrtimer_start_range_ns_common+0x55c/0x860 [ 1027.919527][T21022] ? should_fail_ex+0x30/0x270 [ 1027.919560][T21022] ? xskq_create+0x36/0xe0 [ 1027.919624][T21022] ? should_failslab+0x8c/0xb0 [ 1027.919659][T21022] vmalloc_user_noprof+0x7d/0xb0 [ 1027.919746][T21022] ? xskq_create+0x80/0xe0 [ 1027.919796][T21022] xskq_create+0x80/0xe0 [ 1027.919832][T21022] xsk_init_queue+0x70/0xb0 [ 1027.919869][T21022] xsk_setsockopt+0x471/0x640 [ 1027.919905][T21022] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1027.919957][T21022] __sys_setsockopt+0x184/0x200 [ 1027.920061][T21022] __x64_sys_setsockopt+0x64/0x80 [ 1027.920137][T21022] x64_sys_call+0x2327/0x3020 [ 1027.920247][T21022] do_syscall_64+0x136/0x3c0 [ 1027.920284][T21022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.920349][T21022] RIP: 0033:0x7f35b9a4ce59 [ 1027.920369][T21022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.920397][T21022] RSP: 002b:00007f35b84a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1027.920420][T21022] RAX: ffffffffffffffda RBX: 00007f35b9cc5fa0 RCX: 00007f35b9a4ce59 [ 1027.920440][T21022] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1027.920458][T21022] RBP: 00007f35b9ae2e6f R08: 0000000000000004 R09: 0000000000000000 [ 1027.920481][T21022] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1027.920499][T21022] R13: 00007f35b9cc6038 R14: 00007f35b9cc5fa0 R15: 00007fff0f6b3598 [ 1027.920534][T21022] [ 1027.922069][T21022] Mem-Info: [ 1028.197855][T21022] active_anon:41455 inactive_anon:14225 isolated_anon:0 [ 1028.197855][T21022] active_file:2750 inactive_file:25718 isolated_file:0 [ 1028.197855][T21022] unevictable:11 dirty:190 writeback:0 [ 1028.197855][T21022] slab_reclaimable:3517 slab_unreclaimable:152517 [ 1028.197855][T21022] mapped:29286 shmem:31726 pagetables:5177 [ 1028.197855][T21022] sec_pagetables:0 bounce:0 [ 1028.197855][T21022] kernel_misc_reclaimable:0 [ 1028.197855][T21022] free:1657675 free_pcp:18398 free_cma:0 [ 1028.278231][T21024] netlink: 125768 bytes leftover after parsing attributes in process `syz.7.17747'. [ 1028.293995][T21022] Node 0 active_anon:165820kB inactive_anon:56900kB active_file:11000kB inactive_file:102872kB unevictable:44kB isolated(anon):0kB isolated(file):0kB mapped:117144kB dirty:760kB writeback:0kB shmem:126904kB kernel_stack:6624kB pagetables:20708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1028.356055][T21022] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1028.374306][T20971] lo speed is unknown, defaulting to 1000 [ 1028.407785][T21022] lowmem_reserve[]: 0 2878 7857 7857 [ 1028.419391][T21022] Node 0 DMA32 free:2944144kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947756kB mlocked:0kB bounce:0kB free_pcp:3612kB local_pcp:88kB free_cma:0kB [ 1028.484358][T21022] lowmem_reserve[]: 0 0 4978 4978 [ 1028.499344][T21022] Node 0 Normal free:3670964kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:173244kB inactive_anon:56900kB active_file:11000kB inactive_file:102872kB unevictable:44kB writepending:760kB zspages:0kB present:5242880kB managed:5098236kB mlocked:44kB bounce:0kB free_pcp:62616kB local_pcp:53028kB free_cma:0kB [ 1028.596053][T21022] lowmem_reserve[]: 0 0 0 0 [ 1028.615640][T21022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1028.663093][T21022] Node 0 DMA32: 2*4kB (M) 3*8kB (UM) 5*16kB (M) 5*32kB (UM) 4*64kB (M) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 715*4096kB (M) = 2944144kB [ 1028.722027][T21022] Node 0 Normal: 2597*4kB (UME) 1415*8kB (UME) 789*16kB (UM) 176*32kB (ME) 190*64kB (ME) 87*128kB (UME) 54*256kB (UME) 64*512kB (UME) 42*1024kB (UME) 38*2048kB (UME) 840*4096kB (UM) = 3671324kB [ 1028.808082][T21022] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1028.840723][T21022] 61739 total pagecache pages [ 1028.854516][T21022] 102 pages in swap cache [ 1028.869298][T21022] Free swap = 108216kB [ 1028.881850][T21022] Total swap = 124996kB [ 1028.896214][T21022] 2097051 pages RAM [ 1028.908182][T21022] 0 pages HighMem/MovableOnly [ 1028.918401][T21022] 81713 pages reserved [ 1029.043650][T21038] netlink: 'syz.1.17755': attribute type 12 has an invalid length. [ 1029.183451][T21039] netlink: 'syz.9.17754': attribute type 39 has an invalid length. [ 1029.192779][T21038] netlink: 'syz.1.17755': attribute type 4 has an invalid length. [ 1030.206104][T21065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17761'. [ 1030.320614][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17761'. [ 1030.342781][T21068] netlink: 'syz.8.17763': attribute type 4 has an invalid length. [ 1030.366220][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17761'. [ 1030.663687][T21077] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17766'. [ 1030.816767][ T28] audit: type=1400 audit(1782266351.512:14767): avc: denied { read } for pid=21080 comm="syz.9.17768" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1030.911518][ T28] audit: type=1400 audit(1782266351.512:14768): avc: denied { open } for pid=21080 comm="syz.9.17768" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1031.847659][ T28] audit: type=1326 audit(1782266352.542:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1031.933859][ T28] audit: type=1326 audit(1782266352.542:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1031.992951][ T28] audit: type=1326 audit(1782266352.542:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1032.053200][ T28] audit: type=1326 audit(1782266352.542:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1032.108553][ T28] audit: type=1326 audit(1782266352.592:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1032.163318][ T28] audit: type=1326 audit(1782266352.602:14774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1032.216300][ T28] audit: type=1326 audit(1782266352.602:14775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21100 comm="syz.8.17774" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1033.321961][T21114] netlink: 'syz.7.17778': attribute type 11 has an invalid length. [ 1033.454241][T21118] loop9: detected capacity change from 0 to 136 [ 1033.568038][T21118] Attempt to read inode for relocated directory [ 1033.721019][ T28] kauditd_printk_skb: 270 callbacks suppressed [ 1033.721082][ T28] audit: type=1326 audit(1782266354.392:15046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21125 comm="syz.7.17783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1558dfce59 code=0x0 [ 1034.216256][T21135] lo speed is unknown, defaulting to 1000 [ 1034.348326][T21135] lo speed is unknown, defaulting to 1000 [ 1034.956100][T21163] netlink: 'syz.9.17798': attribute type 10 has an invalid length. [ 1035.000734][T21163] netlink: 16154 bytes leftover after parsing attributes in process `syz.9.17798'. [ 1035.554057][T21172] netlink: 20 bytes leftover after parsing attributes in process `syz.9.17800'. [ 1035.861076][T21180] tipc: Enabled bearer , priority 0 [ 1035.868981][T21181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17803'. [ 1035.988768][T21187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21187 comm=syz.7.17803 [ 1036.052211][T21180] syzkaller0: entered promiscuous mode [ 1036.082080][T21180] syzkaller0: entered allmulticast mode [ 1036.101016][T21180] tipc: Resetting bearer [ 1036.234222][T21179] tipc: Resetting bearer [ 1036.301436][T21179] tipc: Disabling bearer [ 1036.740016][T21206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17812'. [ 1038.152056][T21255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17825'. [ 1038.406843][T21222] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1039.070852][T21287] netlink: 'syz.3.17836': attribute type 21 has an invalid length. [ 1039.093335][T21287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17836'. [ 1039.573144][T21301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.698418][T21301] bridge0: entered allmulticast mode [ 1040.314575][T21303] bridge_slave_1: left allmulticast mode [ 1040.327739][T21303] bridge_slave_1: left promiscuous mode [ 1040.338178][T21303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.416311][T21310] tipc: Failed to remove unknown binding: 66,0,0/0:1992660648/1992660650 [ 1040.429766][T21310] tipc: Failed to remove unknown binding: 66,0,0/0:1992660648/1992660649 [ 1040.477520][T21310] tipc: Failed to remove unknown binding: 66,0,0/0:1992660648/1992660650 [ 1040.511657][T21310] tipc: Failed to remove unknown binding: 66,0,0/0:1992660648/1992660649 [ 1041.045734][ T28] audit: type=1326 audit(1782266361.742:15047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21319 comm="syz.1.17849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x0 [ 1041.329211][T21335] loop9: detected capacity change from 0 to 2048 [ 1041.356519][T21335] EXT4-fs: dax option not supported [ 1041.712658][ T28] audit: type=1326 audit(1782266362.402:15048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1041.800367][ T28] audit: type=1326 audit(1782266362.442:15049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1041.910411][ T28] audit: type=1326 audit(1782266362.442:15050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1041.966820][T21363] netlink: 'syz.1.17864': attribute type 10 has an invalid length. [ 1041.999432][T21363] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.17864'. [ 1042.017657][ T28] audit: type=1326 audit(1782266362.442:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1042.113630][ T28] audit: type=1326 audit(1782266362.492:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1042.159425][ T28] audit: type=1326 audit(1782266362.532:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1042.253723][ T28] audit: type=1326 audit(1782266362.532:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1042.346018][ T28] audit: type=1326 audit(1782266362.552:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1042.436401][ T28] audit: type=1326 audit(1782266362.552:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21349 comm="syz.8.17860" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a2307d68e code=0x7ffc0000 [ 1042.767118][T21388] ªªªªªª: renamed from vlan0 (while UP) [ 1042.846053][T21391] tipc: Failed to remove unknown binding: 66,0,0/546645973:3111725861/3111725862 [ 1043.641092][T21425] netlink: 'syz.1.17890': attribute type 20 has an invalid length. [ 1043.658204][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17890'. [ 1044.464745][T21425] netlink: 'syz.1.17890': attribute type 20 has an invalid length. [ 1044.474121][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17890'. [ 1047.658062][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 1047.658080][ T28] audit: type=1326 audit(1782266368.352:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.737236][ T28] audit: type=1326 audit(1782266368.352:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.805233][ T28] audit: type=1326 audit(1782266368.392:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.881662][ T28] audit: type=1326 audit(1782266368.392:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.908960][ T28] audit: type=1326 audit(1782266368.392:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.940607][ T28] audit: type=1326 audit(1782266368.392:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1047.972185][ T28] audit: type=1326 audit(1782266368.412:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1048.001696][ T28] audit: type=1326 audit(1782266368.412:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1048.032544][ T28] audit: type=1326 audit(1782266368.472:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1048.062742][ T28] audit: type=1326 audit(1782266368.472:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21464 comm="syz.1.17902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f35b9a4ce59 code=0x7ffc0000 [ 1048.839764][T21482] erspan0: left promiscuous mode [ 1048.879253][T21482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.894639][T26514] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1048.966807][T21482] veth1_vlan: left promiscuous mode [ 1048.992143][T21482] veth0_vlan: left promiscuous mode [ 1049.015498][T21482] veth0_vlan: entered promiscuous mode [ 1049.044568][T26514] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1049.055599][T21482] veth1_vlan: entered promiscuous mode [ 1049.092518][T21482] erspan0: entered promiscuous mode [ 1049.142543][T21482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.199157][T21482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1049.224683][ T2484] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.283851][T21482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1049.319244][T21482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1049.414355][T21482] 8021q: adding VLAN 0 to HW filter on device team1 [ 1049.656851][T21482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1049.713271][T21482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1049.725664][ T2485] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1049.794686][ T2485] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1049.905960][T21482] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1049.986693][T26510] lo speed is unknown, defaulting to 1000 [ 1049.998708][T26510] syz0: Port: 1 Link ACTIVE [ 1050.090411][T15429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.103849][T15429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.140950][T21485] ip_vti0: left promiscuous mode [ 1050.197952][ T2485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.306547][ T2485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.415365][T26514] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1050.616502][T21485] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1050.658145][T18821] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.672679][T18821] netdevsim netdevsim8 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1050.685727][T18821] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.705688][T18821] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 42496 - 0 [ 1050.725940][T18821] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.740603][T18821] netdevsim netdevsim8 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1050.768151][T18821] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.786255][T18821] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 42496 - 0 [ 1050.824090][T21489] loop9: detected capacity change from 0 to 1024 [ 1050.860630][T26510] lo speed is unknown, defaulting to 1000 [ 1050.878897][T18821] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.908626][T18821] netdevsim netdevsim8 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1050.920622][T21489] EXT4-fs (loop9): filesystem is read-only [ 1050.928340][T18821] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.958064][T18821] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 42496 - 0 [ 1050.988818][T18821] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.029449][T18821] netdevsim netdevsim8 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1051.078723][T18821] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.121905][T18821] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 42496 - 0 [ 1051.835105][T21520] netlink: 92 bytes leftover after parsing attributes in process `syz.8.17921'. [ 1052.274919][T21540] netlink: 32 bytes leftover after parsing attributes in process `syz.9.17925'. [ 1052.857121][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1052.879983][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1052.927195][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1052.964004][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.012492][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.053748][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.094310][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.114979][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1053.114994][ T28] audit: type=1326 audit(1782266373.802:15106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.205872][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.241424][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.257380][ T28] audit: type=1326 audit(1782266373.802:15107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.325518][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.9.17930 [ 1053.375457][T15421] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.395659][ T28] audit: type=1326 audit(1782266373.802:15108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.492234][T15421] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.499741][ T28] audit: type=1326 audit(1782266373.802:15109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.593967][ T28] audit: type=1326 audit(1782266373.842:15110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.658051][T15421] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.697323][ T28] audit: type=1326 audit(1782266373.842:15111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.780925][ T28] audit: type=1326 audit(1782266373.842:15112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.792122][T15421] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.874967][ T28] audit: type=1326 audit(1782266373.842:15113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1053.966870][ T28] audit: type=1326 audit(1782266373.842:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1054.091169][T15421] bridge_slave_1: left allmulticast mode [ 1054.102385][T15421] bridge_slave_1: left promiscuous mode [ 1054.114286][ T28] audit: type=1326 audit(1782266373.842:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21558 comm="syz.3.17934" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1054.124135][T15421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.247462][T15421] bridge_slave_0: left allmulticast mode [ 1054.278209][T15421] bridge_slave_0: left promiscuous mode [ 1054.300892][T15421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.612049][T15421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.634989][T15421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.657280][T15421] bond0 (unregistering): Released all slaves [ 1054.768765][T15421] tipc: Left network mode [ 1054.863113][T21579] netlink: 'syz.8.17941': attribute type 21 has an invalid length. [ 1054.910527][T21579] IPv6: NLM_F_CREATE should be specified when creating new route [ 1054.943458][T21580] netlink: 'syz.8.17941': attribute type 21 has an invalid length. [ 1054.980291][T21579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1054.987660][T21579] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.995114][T21579] IPv6: NLM_F_CREATE should be set when creating new route [ 1055.002451][T21579] IPv6: NLM_F_CREATE should be set when creating new route [ 1055.030454][T15421] hsr_slave_0: left promiscuous mode [ 1055.058384][T21580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1055.067628][T15421] hsr_slave_1: left promiscuous mode [ 1055.073613][T15421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.094928][T15421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.127497][T15421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.144600][ C1] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 1055.144617][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1055.168174][T15421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.241234][T15421] veth1_macvtap: left promiscuous mode [ 1055.251257][T15421] veth0_macvtap: left promiscuous mode [ 1055.304657][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1055.536707][T15421] team0 (unregistering): Port device team_slave_1 removed [ 1055.568187][T15421] team0 (unregistering): Port device team_slave_0 removed [ 1055.683051][T21579] vlan4: entered promiscuous mode [ 1055.703444][T21579] bridge0: entered promiscuous mode [ 1055.857317][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1056.348240][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1056.836788][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1057.064191][T21666] netlink: 'syz.7.17954': attribute type 1 has an invalid length. [ 1057.151259][T21666] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1057.242686][T21668] bond21: (slave dummy0): making interface the new active one [ 1057.338852][T21668] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 1057.408994][T21671] : renamed from dummy0 (while UP) [ 1057.616748][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1058.215694][T21704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17964'. [ 1059.700476][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1059.700494][ T28] audit: type=1326 audit(1782266380.392:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1059.845750][ T28] audit: type=1326 audit(1782266380.432:15127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1059.989405][ T28] audit: type=1326 audit(1782266380.432:15128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1060.112106][ T28] audit: type=1326 audit(1782266380.432:15129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1060.237533][ T28] audit: type=1326 audit(1782266380.432:15130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1060.351869][ T28] audit: type=1326 audit(1782266380.482:15131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1060.458308][ T28] audit: type=1326 audit(1782266380.492:15132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1060.550010][T21727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17970'. [ 1060.580193][ T28] audit: type=1326 audit(1782266380.502:15133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1060.685748][ T28] audit: type=1326 audit(1782266380.512:15134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1060.803880][ T28] audit: type=1326 audit(1782266380.522:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21720 comm="syz.3.17969" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1061.457803][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17980'. [ 1061.481736][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17980'. [ 1061.544637][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1061.910256][T21774] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17984'. [ 1062.243167][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17989'. [ 1062.829940][T21813] netlink: 'syz.3.17997': attribute type 1 has an invalid length. [ 1062.858062][T21813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1063.466345][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1063.474478][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1063.654996][T21830] netlink: 'syz.7.18000': attribute type 1 has an invalid length. [ 1064.154230][T21830] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1064.274664][T21840] bond22: (slave veth13): Enslaving as an active interface with a down link [ 1064.308991][T21830] veth0_virt_wifi: entered promiscuous mode [ 1064.372672][T21830] bond22: (slave veth0_virt_wifi): making interface the new active one [ 1064.411930][T21830] bond22: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1064.469046][T21840] bond22: (slave veth0_virt_wifi): Releasing active interface [ 1065.495121][T21886] lo speed is unknown, defaulting to 1000 [ 1065.743544][T21886] lo speed is unknown, defaulting to 1000 [ 1066.885933][T21905] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1067.721515][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1067.721531][ T28] audit: type=1400 audit(1782266388.402:15155): avc: denied { create } for pid=21913 comm="syz.7.18028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1068.127375][T21912] bond11: invalid ARP target 0.0.0.0 specified for addition [ 1068.173506][T21912] bond11: option arp_ip_target: invalid value (0) [ 1068.589670][T21932] netlink: 'syz.1.18032': attribute type 1 has an invalid length. [ 1068.765876][T21944] IPVS: persistence engine module ip_vs_pe_€ not found [ 1068.801328][T21912] bond11 (unregistering): Released all slaves [ 1068.843004][T21937] bond5: (slave bridge0): Enslaving as a backup interface with an up link [ 1068.945265][T21942] macvlan0: entered promiscuous mode [ 1068.964710][T21942] macvlan0: entered allmulticast mode [ 1068.995486][T21942] bond5: entered promiscuous mode [ 1069.011344][T21942] bridge0: entered promiscuous mode [ 1069.031079][T21942] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1069.130669][T21942] bond5: left promiscuous mode [ 1069.154474][T21942] bridge0: left promiscuous mode [ 1069.175769][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18040'. [ 1069.227827][T21949] syzkaller0: entered promiscuous mode [ 1069.234358][T21949] syzkaller0: entered allmulticast mode [ 1069.269449][T21963] veth0: entered promiscuous mode [ 1069.932713][ T28] audit: type=1400 audit(1782266390.622:15156): avc: denied { write } for pid=21973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.194436][ T28] audit: type=1400 audit(1782266390.882:15157): avc: denied { write } for pid=21996 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.577996][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1070.589895][T22010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1070.615810][T22010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18049'. [ 1070.950546][ T28] audit: type=1400 audit(1782266391.642:15158): avc: denied { write } for pid=22005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.022680][ T28] audit: type=1400 audit(1782266391.712:15159): avc: denied { write } for pid=22032 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.159595][T22040] netlink: 'syz.9.18054': attribute type 1 has an invalid length. [ 1071.175393][T22040] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1071.312988][ T28] audit: type=1400 audit(1782266392.002:15160): avc: denied { write } for pid=22035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.493625][ T28] audit: type=1400 audit(1782266392.182:15161): avc: denied { write } for pid=22061 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.577470][T22040] vlan5: entered allmulticast mode [ 1071.586629][T22040] bond9: entered allmulticast mode [ 1071.673188][T22053] bond9: (slave dummy0): making interface the new active one [ 1071.682143][T22053] dummy0: entered allmulticast mode [ 1071.689165][T22053] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1071.703312][T22063] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18058'. [ 1071.916758][T22083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18062'. [ 1071.999264][T22083] unsupported nlmsg_type 40 [ 1072.162115][ T28] audit: type=1400 audit(1782266392.852:15162): avc: denied { write } for pid=22075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.269154][ T28] audit: type=1400 audit(1782266392.962:15163): avc: denied { write } for pid=22104 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.470962][ T28] audit: type=1326 audit(1782266393.162:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x0 [ 1072.770536][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1072.770553][ T28] audit: type=1326 audit(1782266393.462:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1072.865698][ T28] audit: type=1326 audit(1782266393.472:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1072.964467][ T28] audit: type=1326 audit(1782266393.542:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.042399][ T28] audit: type=1326 audit(1782266393.552:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.138305][ T28] audit: type=1326 audit(1782266393.562:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.196430][T22142] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18079'. [ 1073.243054][ T28] audit: type=1326 audit(1782266393.602:15177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.269625][T22144] veth1: entered allmulticast mode [ 1073.340349][ T28] audit: type=1326 audit(1782266393.612:15178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.382450][ T28] audit: type=1326 audit(1782266393.612:15179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.410549][ T28] audit: type=1326 audit(1782266393.622:15180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1073.436664][ T28] audit: type=1326 audit(1782266393.632:15181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22114 comm="syz.3.18071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1074.447846][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18087'. [ 1074.747025][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18092'. [ 1075.226410][T22191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=22191 comm=syz.3.18096 [ 1076.078547][T22207] netlink: 380 bytes leftover after parsing attributes in process `syz.1.18103'. [ 1076.667036][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18104'. [ 1076.725172][T22213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22213 comm=syz.3.18104 [ 1076.906977][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1077.815764][T22235] lo speed is unknown, defaulting to 1000 [ 1077.907012][T22235] lo speed is unknown, defaulting to 1000 [ 1078.350779][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18116'. [ 1078.453800][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1078.453894][ T28] audit: type=1326 audit(1782266399.142:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22217 comm="syz.3.18108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f1441e96bd7 code=0x0 [ 1079.464693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.472430][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1080.946849][T22290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18129'. [ 1081.030821][T22293] tipc: Failed to remove unknown binding: 66,0,0/0:2874229636/2874229637 [ 1081.050515][T22290] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22290 comm=syz.3.18129 [ 1081.066002][T22293] tipc: Failed to remove unknown binding: 66,0,0/0:2874229636/2874229637 [ 1082.656747][T22327] Set syz1 is full, maxelem 6117 reached [ 1083.936700][T22346] netlink: 14 bytes leftover after parsing attributes in process `syz.9.18146'. [ 1084.144766][T22346] bond0 (unregistering): Released all slaves [ 1084.213072][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18149'. [ 1084.256881][ T28] audit: type=1400 audit(1782266404.932:15210): avc: denied { create } for pid=22347 comm="syz.3.18148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1084.400559][T22350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22350 comm=syz.8.18149 [ 1084.587863][T22350] veth1: entered allmulticast mode [ 1084.618858][T22350] bond15: (slave veth1): Enslaving as an active interface with an up link [ 1084.631607][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18154'. [ 1084.885701][T22375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18155'. [ 1085.255517][T22397] netlink: 112 bytes leftover after parsing attributes in process `syz.3.18163'. [ 1085.739682][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18169'. [ 1086.060188][T22420] netlink: 14 bytes leftover after parsing attributes in process `syz.8.18174'. [ 1087.026895][T22432] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18178'. [ 1087.152209][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18178'. [ 1087.169753][T22420] bond0 (unregistering): Released all slaves [ 1087.253146][T22423] lo speed is unknown, defaulting to 1000 [ 1087.306023][T22423] lo speed is unknown, defaulting to 1000 [ 1087.488269][T22436] : port 1(ip6gretap0) entered blocking state [ 1087.528591][T22436] : port 1(ip6gretap0) entered disabled state [ 1087.587045][T22436] ip6gretap0: entered allmulticast mode [ 1087.628794][T22436] ip6gretap0: entered promiscuous mode [ 1087.670098][T22433] erspan1: entered allmulticast mode [ 1088.118572][T22432] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1088.120365][T22438] ip6gretap0: left allmulticast mode [ 1088.158251][T22438] ip6gretap0: left promiscuous mode [ 1088.179568][T22438] : port 1(ip6gretap0) entered disabled state [ 1089.258851][T22474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18185'. [ 1090.098691][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18195'. [ 1090.178295][T22500] bond11: entered promiscuous mode [ 1090.202070][T22500] bond11: entered allmulticast mode [ 1090.391802][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18199'. [ 1090.432233][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18200'. [ 1090.470182][ T28] audit: type=1107 audit(1782266411.162:15211): pid=22485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1091.481389][T22522] netlink: 112 bytes leftover after parsing attributes in process `syz.9.18203'. [ 1093.675386][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18216'. [ 1093.784705][T22582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.823347][T22582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.252304][ T28] audit: type=1326 audit(1782266414.942:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.363459][ T28] audit: type=1326 audit(1782266414.982:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.467385][ T28] audit: type=1326 audit(1782266414.982:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.563127][ T28] audit: type=1326 audit(1782266414.982:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.654050][ T28] audit: type=1326 audit(1782266414.982:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.744196][ T28] audit: type=1326 audit(1782266414.982:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.796184][ T28] audit: type=1326 audit(1782266414.982:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.857361][T22604] netlink: 72 bytes leftover after parsing attributes in process `syz.8.18220'. [ 1094.866552][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18220'. [ 1094.881996][ T28] audit: type=1326 audit(1782266414.982:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1094.922250][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18220'. [ 1094.989504][ T28] audit: type=1326 audit(1782266414.982:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22588 comm="syz.8.18218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1095.263655][T22611] : port 1(ip6gretap0) entered blocking state [ 1095.322088][T22611] : port 1(ip6gretap0) entered disabled state [ 1095.366267][T22611] ip6gretap0: entered allmulticast mode [ 1095.402261][T22611] ip6gretap0: left allmulticast mode [ 1095.674306][T22606] loop9: detected capacity change from 0 to 512 [ 1095.829793][T22606] EXT4-fs: Ignoring removed bh option [ 1096.240696][T22606] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1096.494242][T22606] EXT4-fs (loop9): 1 truncate cleaned up [ 1096.602824][T22641] 9p: Bad value for 'rfdno' [ 1096.680434][T22606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.976562][T22631] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1097.467413][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1097.467456][ T28] audit: type=1400 audit(1782266418.152:15223): avc: denied { write } for pid=22605 comm="syz.9.18224" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1097.551898][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.393379][T22671] : port 1(ip6gretap0) entered blocking state [ 1098.426577][T22671] : port 1(ip6gretap0) entered disabled state [ 1098.474821][T22671] ip6gretap0: entered allmulticast mode [ 1098.511379][T22671] ip6gretap0: entered promiscuous mode [ 1098.553659][T22679] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18248'. [ 1098.566204][T22672] ip6gretap0: left allmulticast mode [ 1098.616680][T22672] ip6gretap0: left promiscuous mode [ 1098.630738][T22672] : port 1(ip6gretap0) entered disabled state [ 1098.788532][T22679] bond0 (unregistering): Released all slaves [ 1099.003257][T22692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.18251'. [ 1099.199720][ T28] audit: type=1326 audit(1782266419.882:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22688 comm="syz.9.18251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x0 [ 1099.422217][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18256'. [ 1100.509495][T22715] netlink: 'syz.7.18262': attribute type 21 has an invalid length. [ 1100.541382][ T28] audit: type=1400 audit(1782266421.222:15225): avc: denied { map } for pid=22710 comm="syz.9.18261" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1100.565329][T22717] netlink: 'syz.7.18262': attribute type 21 has an invalid length. [ 1100.620200][T22717] IPv6: NLM_F_CREATE should be specified when creating new route [ 1100.682768][T22717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.690055][T22717] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.697311][T22717] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.704588][T22717] IPv6: NLM_F_CREATE should be set when creating new route [ 1100.771375][T22715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1100.809884][T22723] vlan0: entered promiscuous mode [ 1100.826463][T22723] bridge0: entered promiscuous mode [ 1100.915611][ T28] audit: type=1326 audit(1782266421.602:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.019705][ T28] audit: type=1326 audit(1782266421.642:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.108588][ T28] audit: type=1326 audit(1782266421.642:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.218696][ T28] audit: type=1326 audit(1782266421.642:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.345038][ T28] audit: type=1326 audit(1782266421.692:15230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.459108][ T28] audit: type=1326 audit(1782266421.692:15231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1101.542566][T22735] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18267'. [ 1101.601557][ T28] audit: type=1326 audit(1782266421.692:15232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22719 comm="syz.9.18263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1101.857708][T22742] loop9: detected capacity change from 0 to 512 [ 1101.910591][T22740] tipc: Started in network mode [ 1101.921713][T22742] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.18269: bg 0: block 127: padding at end of block bitmap is not set [ 1101.942315][T22740] tipc: Node identity ac14140f, cluster identity 4711 [ 1101.976743][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18270'. [ 1101.984162][T22742] loop9: lost filesystem error report for type 5 error -117 [ 1102.015787][T22742] EXT4-fs error (device loop9): ext4_free_inode:356: comm syz.9.18269: bit already cleared for inode 11 [ 1102.024407][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1102.024436][ C0] EXT4-fs (loop9): initial error at time 1782266422: ext4_validate_block_bitmap:441 [ 1102.024459][ C0] EXT4-fs (loop9): last error at time 1782266422: ext4_validate_block_bitmap:441 [ 1102.039741][T22740] tipc: New replicast peer: 255.255.255.255 [ 1102.070671][T22748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18270'. [ 1102.091104][T22740] tipc: Enabled bearer , priority 10 [ 1102.144553][T22742] loop9: lost filesystem error report for type 5 error -117 [ 1102.145103][T22742] EXT4-fs (loop9): 1 orphan inode deleted [ 1102.169659][T22742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.393161][T22742] netlink: 60 bytes leftover after parsing attributes in process `syz.9.18269'. [ 1102.473322][T13030] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.204460][ T2484] tipc: Node number set to 2886997007 [ 1103.860453][T22795] : port 1(ip6gretap0) entered blocking state [ 1103.888008][T22799] loop9: detected capacity change from 0 to 2048 [ 1103.912559][T22795] : port 1(ip6gretap0) entered disabled state [ 1103.942746][T22795] ip6gretap0: entered allmulticast mode [ 1103.972992][T22795] ip6gretap0: entered promiscuous mode [ 1104.019481][T22798] ip6gretap0: left allmulticast mode [ 1104.039575][T22799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1104.059730][T22798] ip6gretap0: left promiscuous mode [ 1104.084032][T22798] : port 1(ip6gretap0) entered disabled state [ 1104.146808][T22805] netlink: 'syz.7.18285': attribute type 1 has an invalid length. [ 1104.188911][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 1104.188928][ T28] audit: type=1400 audit(1782266424.872:15299): avc: denied { write } for pid=22796 comm="syz.9.18283" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1104.274576][T22805] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1104.330273][T22810] bond12: (slave veth0_to_bond): Releasing active interface [ 1104.351659][ T28] audit: type=1326 audit(1782266424.942:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1104.406868][T22810] bond23: (slave veth0_to_bond): making interface the new active one [ 1104.438129][T22810] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1104.459683][T22533] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1104.489558][ T28] audit: type=1326 audit(1782266424.942:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1104.541066][T22533] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 786 with error 28 [ 1104.600826][T22813] bond23: entered promiscuous mode [ 1104.614479][T22533] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1104.614479][T22533] [ 1104.641631][T22813] veth0_to_bond: entered promiscuous mode [ 1104.649869][ T28] audit: type=1326 audit(1782266424.942:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1104.683699][T22533] EXT4-fs (loop9): Total free blocks count 0 [ 1104.709303][T22813] bond23: entered allmulticast mode [ 1104.720751][T22533] EXT4-fs (loop9): Free/Dirty block details [ 1104.743825][T22813] veth0_to_bond: entered allmulticast mode [ 1104.752487][T22533] EXT4-fs (loop9): free_blocks=2415919104 [ 1104.779175][T22533] EXT4-fs (loop9): dirty_blocks=1344 [ 1104.802539][T22805] macvlan0: entered promiscuous mode [ 1104.808098][ T28] audit: type=1326 audit(1782266424.942:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1104.838205][T22533] EXT4-fs (loop9): Block reservation details [ 1104.871906][T22533] EXT4-fs (loop9): i_reserved_data_blocks=92 [ 1104.880473][T22805] macvlan0: entered allmulticast mode [ 1104.899573][T22805] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1104.925661][T22533] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 786 with max blocks 858 with error 28 [ 1104.950598][T22805] bond23: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1104.966083][ T28] audit: type=1326 audit(1782266424.942:15304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1105.087797][ T28] audit: type=1326 audit(1782266424.942:15305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1105.181626][ T28] audit: type=1326 audit(1782266424.942:15306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1105.268589][ T28] audit: type=1326 audit(1782266424.942:15307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1105.351065][ T28] audit: type=1326 audit(1782266424.942:15308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22806 comm="syz.8.18286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x7ffc0000 [ 1106.089890][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881baf86400: rx timeout, send abort [ 1106.128879][T13030] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1106.164634][T22830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.589913][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811a3ddc00: rx timeout, send abort [ 1106.604403][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881baf86400: abort rx timeout. Force session deactivation [ 1107.098289][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811a3ddc00: abort rx timeout. Force session deactivation [ 1107.624594][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1110.773321][T22900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18318'. [ 1111.246403][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1111.246418][ T28] audit: type=1400 audit(1782266431.942:15340): avc: denied { watch watch_reads } for pid=22903 comm="syz.1.18320" path="/file0" dev="bpf" ino=171322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=file permissive=1 [ 1111.464556][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1111.571668][T22913] netlink: 'syz.1.18321': attribute type 21 has an invalid length. [ 1111.587929][T22913] IPv6: NLM_F_CREATE should be specified when creating new route [ 1111.617172][T22913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1111.624447][T22913] IPv6: NLM_F_CREATE should be set when creating new route [ 1111.631729][T22913] IPv6: NLM_F_CREATE should be set when creating new route [ 1111.638965][T22913] IPv6: NLM_F_CREATE should be set when creating new route [ 1111.696251][T22916] netlink: 'syz.1.18321': attribute type 21 has an invalid length. [ 1111.727571][T22916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1111.753301][T22917] netlink: 'syz.8.18324': attribute type 11 has an invalid length. [ 1111.832619][T22909] vlan1: entered promiscuous mode [ 1111.851326][T22909] bridge0: entered promiscuous mode [ 1112.744556][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1113.837170][ T28] audit: type=1326 audit(1782266434.532:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1113.880268][ T28] audit: type=1326 audit(1782266434.562:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1113.906794][ T28] audit: type=1326 audit(1782266434.562:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1113.933883][ T28] audit: type=1326 audit(1782266434.562:15344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1113.963754][ T28] audit: type=1326 audit(1782266434.562:15345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3e64adce59 code=0x7ffc0000 [ 1113.993287][ T28] audit: type=1326 audit(1782266434.632:15346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1114.059418][T26514] lo speed is unknown, defaulting to 1000 [ 1114.071781][T26514] syz0: Port: 1 Link DOWN [ 1114.078193][T22540] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.099812][T22540] netdevsim netdevsim8 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1114.116677][T22540] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.125498][T22540] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 42496 - 0 [ 1114.134138][T22540] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.143123][T22540] netdevsim netdevsim8 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1114.143276][ T28] audit: type=1326 audit(1782266434.662:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1114.152638][T22540] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.152705][T22540] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 42496 - 0 [ 1114.152761][T26514] lo speed is unknown, defaulting to 1000 [ 1114.152811][T22540] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.152850][T22540] netdevsim netdevsim8 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1114.152924][T22540] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.152957][T22540] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 42496 - 0 [ 1114.310660][T22540] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.356232][ T28] audit: type=1326 audit(1782266434.662:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1114.394487][T22540] netdevsim netdevsim8 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1114.422767][T22540] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.443081][T22540] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 42496 - 0 [ 1114.456938][ T28] audit: type=1326 audit(1782266434.662:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.9.18340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3e64a9d68e code=0x7ffc0000 [ 1114.808774][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18344'. [ 1114.847186][T22987] SET target dimension over the limit! [ 1115.598511][T23005] batman_adv: batadv0: Adding interface: macvtap1 [ 1115.605500][T23005] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.654359][T23005] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1118.867903][T23060] loop9: detected capacity change from 0 to 512 [ 1118.912230][T23060] EXT4-fs: dax option not supported [ 1119.095962][T23061] : port 1(ip6gretap0) entered blocking state [ 1119.107935][T23061] : port 1(ip6gretap0) entered disabled state [ 1119.137742][T23061] ip6gretap0: entered allmulticast mode [ 1119.166224][T23061] ip6gretap0: entered promiscuous mode [ 1119.199984][T23062] ip6gretap0: left allmulticast mode [ 1119.243075][T23062] ip6gretap0: left promiscuous mode [ 1119.271758][T23062] : port 1(ip6gretap0) entered disabled state [ 1120.883092][T23091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18377'. [ 1121.700268][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 1121.700285][ T28] audit: type=1326 audit(1782266442.392:15419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1121.740122][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18382'. [ 1121.813796][ T28] audit: type=1326 audit(1782266442.452:15420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1121.919189][ T28] audit: type=1326 audit(1782266442.452:15421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.039768][ T28] audit: type=1326 audit(1782266442.452:15422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.162937][ T28] audit: type=1326 audit(1782266442.492:15423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.283212][ T28] audit: type=1326 audit(1782266442.492:15424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.390373][ T28] audit: type=1326 audit(1782266442.492:15425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.500444][ T28] audit: type=1326 audit(1782266442.502:15426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1122.564073][ T28] audit: type=1326 audit(1782266442.502:15427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1441e5d68e code=0x7ffc0000 [ 1122.620523][ T28] audit: type=1326 audit(1782266442.502:15428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23096 comm="syz.3.18381" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1441e9ce59 code=0x7ffc0000 [ 1123.059889][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18393'. [ 1123.077964][T23129] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1123.112108][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.125434][T23129] macvlan0: entered promiscuous mode [ 1123.130791][T23129] macvlan0: entered allmulticast mode [ 1123.137572][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.164232][T23129] bond24: entered promiscuous mode [ 1123.170234][T23129] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1123.177873][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.191957][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.216857][T23129] bond24: left promiscuous mode [ 1123.238422][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.251776][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.264873][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.278052][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.291256][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1123.304427][T23132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23132 comm=syz.3.18392 [ 1124.773765][T23158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1124.803554][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18399'. [ 1124.895466][T23144] lo speed is unknown, defaulting to 1000 [ 1125.153908][T23144] lo speed is unknown, defaulting to 1000 [ 1125.502274][T23179] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1125.566336][T23179] openvswitch: netlink: Flow key attr not present in new flow. [ 1125.930909][T23195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18415'. [ 1125.977553][T23195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18415'. [ 1126.184348][T23201] lo speed is unknown, defaulting to 1000 [ 1126.253274][T23201] lo speed is unknown, defaulting to 1000 [ 1127.384891][T23224] tipc: Enabled bearer , priority 10 [ 1127.642850][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 1127.642943][ T28] audit: type=1400 audit(1782266448.332:15492): avc: denied { ioctl } for pid=23229 comm="syz.7.18427" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=173062 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1128.239311][T23253] syzkaller0: entered promiscuous mode [ 1128.267272][T23253] syzkaller0: entered allmulticast mode [ 1128.391176][T23262] netlink: 'syz.1.18436': attribute type 1 has an invalid length. [ 1128.429701][T23262] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1128.542236][T23262] : renamed from dummy0 [ 1128.569213][ T28] audit: type=1326 audit(1782266449.262:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23244 comm="syz.8.18432" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a230bce59 code=0x0 [ 1128.732007][T23270] loop9: detected capacity change from 0 to 8192 [ 1129.479511][ T28] audit: type=1400 audit(1782266450.172:15494): avc: denied { getopt } for pid=23292 comm="syz.1.18443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1130.485301][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18452'. [ 1130.542111][T23317] bridge8: port 1(veth11) entered blocking state [ 1130.557040][T23317] bridge8: port 1(veth11) entered disabled state [ 1130.571545][T23317] veth11: entered allmulticast mode [ 1130.584273][T23317] veth11: entered promiscuous mode [ 1130.591792][T23318] bridge8: port 2(veth0_to_bond) entered blocking state [ 1130.599846][T23318] bridge8: port 2(veth0_to_bond) entered disabled state [ 1130.607804][T23318] veth0_to_bond: entered allmulticast mode [ 1130.614350][T23318] veth0_to_bond: entered promiscuous mode [ 1131.212797][T23345] netlink: 264 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1131.228705][T23343] loop9: detected capacity change from 0 to 8192 [ 1131.265446][T23345] netlink: 264 bytes leftover after parsing attributes in process `syz.3.18464'. [ 1131.822982][T23360] tipc: Enabling of bearer rejected, failed to enable media [ 1131.827378][T23356] selinux_netlink_send: 57 callbacks suppressed [ 1131.827440][T23356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=23356 comm=syz.3.18469 [ 1132.359036][ T28] audit: type=1400 audit(1782266453.032:15495): avc: denied { remount } for pid=23340 comm="syz.9.18462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1133.669913][T23389] tipc: Failed to remove unknown binding: 66,0,0/4281663488:2506625279/2506625281 [ 1133.716442][T23389] tipc: Failed to remove unknown binding: 66,0,0/4281663488:2506625279/2506625280 [ 1134.657184][T23408] xt_hashlimit: size too large, truncated to 1048576 [ 1136.095323][T23425] tipc: Enabling of bearer rejected, failed to enable media [ 1136.150793][ T28] audit: type=1107 audit(1782266712.845:15496): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶ÊÝ…Ü‘Ø‚bCŒ+fx:£Rê¾h|' [ 1136.608285][T23444] lo speed is unknown, defaulting to 1000 [ 1136.648328][T23444] lo speed is unknown, defaulting to 1000 [ 1139.551933][T23498] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.587996][T23498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.673263][T23498] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.712453][T23498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.819758][T23498] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.841619][T23498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.941924][T23498] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.985795][T23498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.050188][T22549] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.066179][T22549] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.077607][T22549] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.090618][T22549] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.134272][T22549] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.157577][T22549] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.187867][T22549] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.207374][T22549] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.250115][ T28] audit: type=1326 audit(1782266716.945:15497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23513 comm="syz.7.18518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1558dfce59 code=0x0 [ 1140.559006][T23525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18521'. [ 1141.614922][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.8.18529'. [ 1142.269528][T23573] loop9: detected capacity change from 0 to 164 [ 1142.368193][T23573] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1144.102132][T23612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=23612 comm=syz.3.18547 [ 1144.222115][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18548'. [ 1144.253990][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18548'. [ 1144.333117][T23616] vlan0: entered promiscuous mode [ 1144.347806][T23616] bridge9: entered promiscuous mode [ 1144.353789][T23616] vlan0: entered allmulticast mode [ 1144.368166][T23616] bridge9: entered allmulticast mode [ 1144.578425][T23619] loop9: detected capacity change from 0 to 512 [ 1147.368106][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18570'. [ 1148.170085][ T28] audit: type=1326 audit(1782266724.865:15498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23714 comm="syz.1.18578" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35b9a4ce59 code=0x0 [ 1150.205755][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18587'. [ 1150.236755][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18587'. [ 1150.390316][T23758] syzkaller0: entered promiscuous mode [ 1150.413544][T23758] syzkaller0: entered allmulticast mode [ 1150.433493][ T28] audit: type=1400 audit(1782266727.125:15499): avc: denied { create } for pid=23759 comm="syz.1.18590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1152.429854][T23792] netlink: 24 bytes leftover after parsing attributes in process `syz.9.18597'. [ 1152.533860][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18597'. [ 1152.688139][T23799] netlink: 24 bytes leftover after parsing attributes in process `syz.9.18600'. [ 1152.916712][T23806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23806 comm=syz.9.18600 [ 1153.099195][ C1] ================================================================== [ 1153.107351][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 1153.114604][ C1] [ 1153.116948][ C1] read-write to 0xffff8881001753e0 of 4 bytes by interrupt on cpu 0: [ 1153.125040][ C1] can_can_gw_rcv+0x812/0x820 [ 1153.129766][ C1] can_rcv_filter+0xc3/0x480 [ 1153.134383][ C1] can_receive+0x13e/0x190 [ 1153.138825][ C1] can_rcv+0x17d/0x1f0 [ 1153.142926][ C1] process_backlog+0x354/0x680 [ 1153.147809][ C1] __napi_poll+0x61/0x300 [ 1153.152161][ C1] net_rx_action+0x456/0x930 [ 1153.156785][ C1] handle_softirqs+0xb9/0x280 [ 1153.161514][ C1] __irq_exit_rcu+0x42/0xd0 [ 1153.166058][ C1] sysvec_apic_timer_interrupt+0x37/0x80 [ 1153.171722][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1153.177763][ C1] [ 1153.180104][ C1] read-write to 0xffff8881001753e0 of 4 bytes by interrupt on cpu 1: [ 1153.188194][ C1] can_can_gw_rcv+0x812/0x820 [ 1153.192916][ C1] can_rcv_filter+0xc3/0x480 [ 1153.197541][ C1] can_receive+0x13e/0x190 [ 1153.201989][ C1] can_rcv+0x17d/0x1f0 [ 1153.206099][ C1] process_backlog+0x354/0x680 [ 1153.210913][ C1] __napi_poll+0x61/0x300 [ 1153.215308][ C1] net_rx_action+0x456/0x930 [ 1153.219940][ C1] handle_softirqs+0xb9/0x280 [ 1153.224642][ C1] do_softirq+0x45/0x60 [ 1153.228822][ C1] __local_bh_enable_ip+0x70/0x80 [ 1153.233876][ C1] __alloc_skb+0x6b1/0x6f0 [ 1153.238408][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 1153.244203][ C1] process_scheduled_works+0x4d4/0x9a0 [ 1153.249692][ C1] worker_thread+0x569/0x750 [ 1153.254326][ C1] kthread+0x221/0x270 [ 1153.258414][ C1] ret_from_fork+0x146/0x330 [ 1153.263050][ C1] ret_from_fork_asm+0x1a/0x30 [ 1153.267847][ C1] [ 1153.270186][ C1] value changed: 0x00ad1648 -> 0x00ad1649 [ 1153.275932][ C1] [ 1153.278274][ C1] Reported by Kernel Concurrency Sanitizer on: [ 1153.284475][ C1] CPU: 1 UID: 0 PID: 22533 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1153.295711][ C1] Tainted: [W]=WARN [ 1153.299531][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.309607][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1153.316426][ C1] ================================================================== [ 1154.351761][T23814] netlink: 'syz.3.18603': attribute type 1 has an invalid length. [ 1154.367433][T23814] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.18603'. [ 1155.624847][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!