last executing test programs: 9m15.849375604s ago: executing program 0 (id=209): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 9m15.542489694s ago: executing program 0 (id=215): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 9m15.471155156s ago: executing program 0 (id=218): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000200)=""/25, &(0x7f0000000280)=0x19) 9m15.424030977s ago: executing program 0 (id=219): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 9m14.735637799s ago: executing program 0 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xb, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 9m14.37999016s ago: executing program 0 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r0, 0x1) 9m14.346469671s ago: executing program 32 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x5, @private1, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r0, 0x1) 8m24.062045368s ago: executing program 4 (id=1129): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ccd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) 8m23.795432347s ago: executing program 4 (id=1132): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r1, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 8m23.716135019s ago: executing program 4 (id=1134): pipe2(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m23.70193085s ago: executing program 4 (id=1135): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 8m23.661468051s ago: executing program 4 (id=1136): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8930, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_hwaddr=@random="7f9ce0511716"}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 8m23.035840601s ago: executing program 4 (id=1151): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000300)=[{r1, 0x202}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8m22.997407472s ago: executing program 33 (id=1151): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000300)=[{r1, 0x202}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8m18.509330253s ago: executing program 5 (id=1213): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=']*.))[\x00') 8m18.416458656s ago: executing program 5 (id=1214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) 8m17.878863764s ago: executing program 5 (id=1223): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 8m17.65649459s ago: executing program 5 (id=1228): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x989042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m17.575974053s ago: executing program 5 (id=1231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x8}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0x0, 0xfff1}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) 8m17.404921078s ago: executing program 5 (id=1235): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 8m17.35422197s ago: executing program 34 (id=1235): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') 7m35.110948413s ago: executing program 7 (id=2085): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x86f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 7m35.038171755s ago: executing program 7 (id=2089): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 7m34.988754017s ago: executing program 7 (id=2091): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x7, 0xfffffffffffffffc, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x159, 0x0, 0x0, 0x0, 0x0, 0x6b0, 0x100000000000000}, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000640)="05", 0x1, 0xc855, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) 7m34.064198736s ago: executing program 7 (id=2109): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x989042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m34.034139837s ago: executing program 7 (id=2110): perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24000824}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) 7m33.572694642s ago: executing program 7 (id=2119): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) 7m33.545031112s ago: executing program 35 (id=2119): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 3.47931972s ago: executing program 3 (id=9937): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x1, 0x7ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.18408098s ago: executing program 3 (id=9944): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.299618648s ago: executing program 1 (id=9955): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) connect$inet6(r2, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) link(&(0x7f0000000200)='./file1\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56) 2.144095623s ago: executing program 1 (id=9957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)="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", 0x681}], 0x1) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 2.052505225s ago: executing program 3 (id=9960): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x14008010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}], 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 2.015449607s ago: executing program 1 (id=9961): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.91134607s ago: executing program 1 (id=9964): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) mq_notify(r0, &(0x7f0000001580)={0x0, 0x3d, 0x0, @thr={&(0x7f00000000c0), 0x0}}) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2e6, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 1.662472428s ago: executing program 6 (id=9971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.625713419s ago: executing program 1 (id=9972): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) timer_create(0x6, &(0x7f0000000300)={0x0, 0x38, 0x7, @tid=r3}, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, &(0x7f0000000200)={0x8, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) 984.167029ms ago: executing program 1 (id=9973): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 841.890873ms ago: executing program 2 (id=9975): socket$packet(0x11, 0x3, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 769.361456ms ago: executing program 2 (id=9976): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 739.613337ms ago: executing program 8 (id=9977): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 610.278391ms ago: executing program 6 (id=9978): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffbf}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 577.167522ms ago: executing program 3 (id=9979): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2c, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf866, r0}, 0x90) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x86}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(r1, &(0x7f0000000000)) 498.455204ms ago: executing program 6 (id=9980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 465.029126ms ago: executing program 2 (id=9981): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x7c168, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x0, 0x8005, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 464.125046ms ago: executing program 3 (id=9982): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[], 0x40}}, 0x24004000) 457.926076ms ago: executing program 6 (id=9983): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 402.982037ms ago: executing program 3 (id=9984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x2000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 400.818757ms ago: executing program 2 (id=9994): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 391.761228ms ago: executing program 8 (id=9985): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 381.968278ms ago: executing program 6 (id=9986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 320.98936ms ago: executing program 2 (id=9987): r0 = socket(0x2, 0x80805, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) 320.20316ms ago: executing program 8 (id=9998): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25010000000000000001410000001800170000010e000003ff65ad273a62"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 255.834232ms ago: executing program 8 (id=9988): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937f5523", "4705a7b6113b967d73ffff201eb2babf", "18d25a06"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 195.561874ms ago: executing program 6 (id=9989): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 195.049924ms ago: executing program 2 (id=9990): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 83.226738ms ago: executing program 8 (id=9991): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cdc49100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = inotify_init1(0x800) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, 0x0) 0s ago: executing program 8 (id=9992): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): syz.1.7996'. [ 473.742170][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7996'. [ 473.766986][T24983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7996'. [ 473.816293][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 473.887308][T25008] netlink: 'syz.8.8005': attribute type 4 has an invalid length. [ 473.901020][T25008] netlink: 'syz.8.8005': attribute type 4 has an invalid length. [ 473.934123][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.052311][ T4120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.169919][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.287265][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.429767][T25038] netlink: 'syz.6.8017': attribute type 4 has an invalid length. [ 474.443366][T25038] netlink: 'syz.6.8017': attribute type 4 has an invalid length. [ 474.458740][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.904484][T25102] netem: change failed [ 478.755923][ T4122] net_ratelimit: 34 callbacks suppressed [ 478.755944][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 478.937692][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.044927][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.163369][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.289945][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.421289][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.547695][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.664494][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.847123][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.986894][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.087009][ T28] kauditd_printk_skb: 638 callbacks suppressed [ 480.087026][ T28] audit: type=1326 audit(8222735638.255:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.160261][ T28] audit: type=1326 audit(8222735638.273:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.192023][ T28] audit: type=1326 audit(8222735638.273:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.243948][ T28] audit: type=1326 audit(8222735638.273:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.269771][ T28] audit: type=1326 audit(8222735638.273:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.296025][ T28] audit: type=1326 audit(8222735638.273:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.298185][T25265] netem: change failed [ 480.322272][ T28] audit: type=1326 audit(8222735638.273:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.352475][ T28] audit: type=1326 audit(8222735638.273:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.378524][ T28] audit: type=1326 audit(8222735638.273:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.404857][ T28] audit: type=1326 audit(8222735638.273:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25255 comm="syz.1.8099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 480.462767][T25273] __nla_validate_parse: 5 callbacks suppressed [ 480.462786][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8112'. [ 480.479791][T25273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8112'. [ 480.596658][T25280] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.606493][T25280] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.756213][T25280] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.766065][T25280] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.889995][T25280] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.901558][T25280] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.025021][T25280] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.036985][T25280] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.266798][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8120'. [ 481.295346][ T393] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.303572][ T393] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.312612][ T393] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.320872][ T393] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.329268][ T393] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.337464][ T393] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.345718][ T393] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.353936][ T393] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.133338][ T4137] net_ratelimit: 31 callbacks suppressed [ 484.133359][ T4137] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.261097][ T4137] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.378857][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.497825][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.519971][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 484.543949][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8134'. [ 484.575536][T25334] netem: change failed [ 484.613796][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.635571][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 484.646640][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 484.656051][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 484.665605][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 484.676038][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8150'. [ 484.686040][T25344] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 484.742269][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.859729][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.977445][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 485.094858][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 485.212451][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.935097][T25418] __nla_validate_parse: 6 callbacks suppressed [ 488.935114][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'. [ 488.969118][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'. [ 489.261205][T25429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8176'. [ 489.490326][ T4120] net_ratelimit: 34 callbacks suppressed [ 489.490375][ T4120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 489.638577][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 489.685651][T25459] IPv6: sit6: Disabled Multicast RS [ 489.788319][ T4132] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 489.898343][T25473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 489.946852][T25473] team0: No ports can be present during mode change [ 489.980808][ T4120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.016795][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8211'. [ 490.038574][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8211'. [ 490.098740][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.229949][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.356088][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.507575][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.577260][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8232'. [ 490.650675][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.936031][T25561] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 491.012734][T25566] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8231'. [ 491.391046][T25596] bond17: entered promiscuous mode [ 491.412089][T25596] ip6gre4: entered promiscuous mode [ 491.417896][T25596] ip6gre4: entered allmulticast mode [ 491.424019][T25596] bond17: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 491.435297][T25596] bond17: (slave ip6gre4): Error -95 calling set_mac_address [ 491.828485][T25607] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8249'. [ 492.425002][T25613] syz.2.8251 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 492.438976][T25613] CPU: 0 UID: 0 PID: 25613 Comm: syz.2.8251 Not tainted syzkaller #0 PREEMPT(lazy) [ 492.439013][T25613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.439032][T25613] Call Trace: [ 492.439042][T25613] [ 492.439107][T25613] __dump_stack+0x1d/0x30 [ 492.439136][T25613] dump_stack_lvl+0x95/0xd0 [ 492.439163][T25613] dump_stack+0x15/0x1b [ 492.439189][T25613] dump_header+0x80/0x240 [ 492.439222][T25613] oom_kill_process+0x295/0x350 [ 492.439269][T25613] out_of_memory+0x97d/0xb80 [ 492.439323][T25613] try_charge_memcg+0x62f/0xa10 [ 492.439374][T25613] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 492.439451][T25613] __alloc_frozen_pages_noprof+0x18a/0x350 [ 492.439487][T25613] alloc_pages_mpol+0xb3/0x260 [ 492.439560][T25613] alloc_pages_noprof+0x8f/0x140 [ 492.439587][T25613] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 492.439623][T25613] __kvmalloc_node_noprof+0x3d4/0x640 [ 492.439652][T25613] ? futex_hash_allocate+0x190/0x9a0 [ 492.439704][T25613] ? futex_hash_allocate+0x190/0x9a0 [ 492.439749][T25613] futex_hash_allocate+0x190/0x9a0 [ 492.439849][T25613] ? cap_task_prctl+0x13f/0x6b0 [ 492.439883][T25613] futex_hash_prctl+0xd8/0xf0 [ 492.439977][T25613] __se_sys_prctl+0x4f4/0x1400 [ 492.440006][T25613] __x64_sys_prctl+0x67/0x80 [ 492.440033][T25613] x64_sys_call+0x2533/0x3020 [ 492.440059][T25613] do_syscall_64+0x12c/0x3b0 [ 492.440223][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.440246][T25613] RIP: 0033:0x7f40c030ce59 [ 492.440264][T25613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.440289][T25613] RSP: 002b:00007f40bed5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 492.440361][T25613] RAX: ffffffffffffffda RBX: 00007f40c0585fa0 RCX: 00007f40c030ce59 [ 492.440375][T25613] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 492.440395][T25613] RBP: 00007f40c03a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 492.440415][T25613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.440432][T25613] R13: 00007f40c0586038 R14: 00007f40c0585fa0 R15: 00007ffdb0f37478 [ 492.440453][T25613] [ 492.665184][T25613] memory: usage 307200kB, limit 307200kB, failcnt 955 [ 492.672017][T25613] memory+swap: usage 347312kB, limit 9007199254740988kB, failcnt 0 [ 492.680154][T25613] kmem: usage 280744kB, limit 9007199254740988kB, failcnt 0 [ 492.687556][T25613] Memory cgroup stats for /syz2: [ 492.687985][T25613] cache 26079232 [ 492.696663][T25613] rss 487424 [ 492.699945][T25613] shmem 26079232 [ 492.703539][T25613] mapped_file 0 [ 492.707470][T25613] dirty 0 [ 492.710440][T25613] writeback 0 [ 492.713742][T25613] workingset_refault_anon 1937 [ 492.718815][T25613] workingset_refault_file 7230 [ 492.723622][T25613] swap 41074688 [ 492.727095][T25613] swapcached 85393408 [ 492.731368][T25613] pgpgin 495845 [ 492.734873][T25613] pgpgout 489231 [ 492.738456][T25613] pgfault 445624 [ 492.742247][T25613] pgmajfault 6464 [ 492.745921][T25613] inactive_anon 26615808 [ 492.750410][T25613] active_anon 475136 [ 492.754391][T25613] inactive_file 0 [ 492.758045][T25613] active_file 0 [ 492.764400][T25613] unevictable 0 [ 492.767916][T25613] hierarchical_memory_limit 314572800 [ 492.773503][T25613] hierarchical_memsw_limit 9223372036854771712 [ 492.779693][T25613] total_cache 26079232 [ 492.784071][T25613] total_rss 487424 [ 492.787828][T25613] total_shmem 26079232 [ 492.791922][T25613] total_mapped_file 0 [ 492.796259][T25613] total_dirty 0 [ 492.799808][T25613] total_writeback 0 [ 492.803846][T25613] total_workingset_refault_anon 1937 [ 492.809171][T25613] total_workingset_refault_file 7230 [ 492.814716][T25613] total_swap 41074688 [ 492.818794][T25613] total_swapcached 85393408 [ 492.823316][T25613] total_pgpgin 495845 [ 492.827637][T25613] total_pgpgout 489231 [ 492.831743][T25613] total_pgfault 445624 [ 492.836029][T25613] total_pgmajfault 6464 [ 492.840257][T25613] total_inactive_anon 26615808 [ 492.845044][T25613] total_active_anon 475136 [ 492.849944][T25613] total_inactive_file 0 [ 492.854213][T25613] total_active_file 0 [ 492.858383][T25613] total_unevictable 0 [ 492.862470][T25613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8251,pid=25612,uid=0 [ 492.877665][T25613] Memory cgroup out of memory: Killed process 25612 (syz.2.8251) total-vm:96216kB, anon-rss:1420kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 493.044613][T25633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8257'. [ 493.055480][T25633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8257'. [ 493.392474][T25672] wg2: Caught tx_queue_len zero misconfig [ 494.905734][ T393] net_ratelimit: 32 callbacks suppressed [ 494.905752][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.047926][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.176130][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.304736][ T4130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.422457][ T4120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.551557][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.678654][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.796221][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.807517][T25781] __nla_validate_parse: 1 callbacks suppressed [ 495.807551][T25781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8317'. [ 495.946184][ T393] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.082209][ T4122] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.796693][T25833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8340'. [ 496.807441][T25833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8340'. [ 497.642502][T25876] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 497.745620][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 497.745639][ T28] audit: type=1326 audit(8222735654.774:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.817983][ T28] audit: type=1326 audit(8222735654.774:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.846122][ T28] audit: type=1326 audit(8222735654.774:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.881357][ T28] audit: type=1326 audit(8222735654.774:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.907184][ T28] audit: type=1326 audit(8222735654.867:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.948446][ T28] audit: type=1326 audit(8222735654.867:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 497.978281][ T28] audit: type=1326 audit(8222735654.867:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 498.004122][ T28] audit: type=1326 audit(8222735654.867:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 498.029839][ T28] audit: type=1326 audit(8222735654.867:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 498.055432][ T28] audit: type=1326 audit(8222735654.951:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25884 comm="syz.2.8360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7ffc0000 [ 499.217205][T25945] bridge0: port 1(gretap0) entered blocking state [ 499.231147][T25945] bridge0: port 1(gretap0) entered disabled state [ 499.240169][T25945] gretap0: entered allmulticast mode [ 499.250537][T25945] gretap0: left allmulticast mode [ 499.449316][T25961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8405'. [ 499.461018][T25961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8405'. [ 499.507817][T25964] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.8391'. [ 499.517022][T25964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8391'. [ 500.339700][ T161] net_ratelimit: 32 callbacks suppressed [ 500.339720][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 500.489329][ T161] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 500.606953][ T4120] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 500.857443][T26016] bond4: left promiscuous mode [ 500.871277][T26016] ip6gre1: left promiscuous mode [ 500.876418][T26016] ip6gre1: left allmulticast mode [ 500.885155][T26016] batman_adv: batadv0: Interface deactivated: geneve2 [ 500.897024][ T4130] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.916948][ T4130] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.936189][ T4130] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.946237][ T4130] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.960855][ T4130] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.969355][ T4130] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.978288][ T4130] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.987622][ T4130] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.252698][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8416'. [ 501.264388][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8416'. [ 501.299392][T26025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8418'. [ 501.343815][T26029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.400632][T26029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.488982][T26041] netlink: 'syz.8.8427': attribute type 7 has an invalid length. [ 501.553642][T26029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.583008][T26029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.666713][ T4130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.680322][ T4130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.695318][ T4130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.710656][ T4130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.793912][T26054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8432'. [ 505.648354][T26187] netlink: 'syz.2.8480': attribute type 4 has an invalid length. [ 505.668725][T26187] netlink: 'syz.2.8480': attribute type 4 has an invalid length. [ 505.744745][ T161] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.769082][ T161] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.790722][T26192] team0: Port device gtp3 added [ 505.800744][ T161] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.822186][ T161] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.893732][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8483'. [ 506.007131][T26199] vlan3: entered promiscuous mode [ 506.012712][T26199] bridge0: entered promiscuous mode [ 507.170693][T26280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8516'. [ 507.200915][T26280] 8021q: adding VLAN 0 to HW filter on device bond18 [ 507.276012][T26280] ipvlan0: entered allmulticast mode [ 507.282324][T26280] bond18: entered allmulticast mode [ 507.292999][T26280] bond18: (slave ipip0): refused to change device type [ 510.127976][T26388] netlink: 6 bytes leftover after parsing attributes in process `syz.8.8571'. [ 510.150159][T26388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.153216][T26421] netlink: 'syz.3.8572': attribute type 1 has an invalid length. [ 511.182892][T26421] 8021q: adding VLAN 0 to HW filter on device bond18 [ 511.495794][T26431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8577'. [ 512.493116][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8583'. [ 512.513847][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8583'. [ 512.664880][T26455] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8586'. [ 512.923258][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 512.923277][ T28] audit: type=1326 audit(8222735668.973:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 512.972231][ T28] audit: type=1326 audit(8222735668.973:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.026787][ T28] audit: type=1326 audit(8222735668.973:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.053049][ T28] audit: type=1326 audit(8222735668.973:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.087170][ T28] audit: type=1326 audit(8222735668.973:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.129063][ T28] audit: type=1326 audit(8222735668.973:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.183378][T26485] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.8600'. [ 513.189253][ T28] audit: type=1326 audit(8222735668.973:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.226821][ T28] audit: type=1326 audit(8222735668.973:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.301866][ T28] audit: type=1326 audit(8222735668.973:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.330981][ T28] audit: type=1326 audit(8222735668.973:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26469 comm="syz.6.8594" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 513.588105][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8610'. [ 513.608583][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8610'. [ 513.672701][T26516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8613'. [ 513.905732][T26525] netlink: 'syz.6.8617': attribute type 1 has an invalid length. [ 513.913676][T26525] netlink: 'syz.6.8617': attribute type 2 has an invalid length. [ 514.458944][T26565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.433121][ T11] Process accounting resumed [ 515.563145][T26580] IPVS: length: 24 != 158478346104 [ 516.067304][T26612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8649'. [ 516.400693][T26623] netlink: 'syz.3.8654': attribute type 1 has an invalid length. [ 516.464648][T26623] 8021q: adding VLAN 0 to HW filter on device bond19 [ 517.650624][T26641] team_slave_1: Caught tx_queue_len zero misconfig [ 517.910601][T26664] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8670'. [ 517.931454][T26664] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8670'. [ 518.213281][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8681'. [ 518.222493][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8681'. [ 518.642207][T26699] sctp: [Deprecated]: syz.8.8685 (pid 26699) Use of int in max_burst socket option deprecated. [ 518.642207][T26699] Use struct sctp_assoc_value instead [ 518.829854][T26705] geneve3: entered promiscuous mode [ 518.837568][T26705] geneve3: entered allmulticast mode [ 518.844249][ T4130] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.853498][ T4130] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.870430][ T4130] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 518.886764][ T4130] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 519.851325][T26758] ref_ctr increment failed for inode: 0x23a1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812c35ec00 [ 519.874773][T26756] uprobe: syz.3.8707:26756 failed to unregister, leaking uprobe [ 520.551882][T26773] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 520.817754][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 520.828934][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 520.828966][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 520.828981][ T3297] Call Trace: [ 520.828990][ T3297] [ 520.829001][ T3297] __dump_stack+0x1d/0x30 [ 520.829029][ T3297] dump_stack_lvl+0x95/0xd0 [ 520.829149][ T3297] dump_stack+0x15/0x1b [ 520.829168][ T3297] dump_header+0x80/0x240 [ 520.829189][ T3297] oom_kill_process+0x295/0x350 [ 520.829225][ T3297] out_of_memory+0x97d/0xb80 [ 520.829326][ T3297] try_charge_memcg+0x62f/0xa10 [ 520.829376][ T3297] charge_memcg+0x6d/0x120 [ 520.829439][ T3297] __mem_cgroup_charge+0x28/0xb0 [ 520.829475][ T3297] filemap_add_folio+0x110/0x350 [ 520.829540][ T3297] __filemap_get_folio_mpol+0x326/0x680 [ 520.829584][ T3297] filemap_fault+0x462/0xb70 [ 520.829633][ T3297] ? __pfx_filemap_map_pages+0x10/0x10 [ 520.829665][ T3297] handle_mm_fault+0x16cd/0x2e70 [ 520.829692][ T3297] ? __pfx_filemap_fault+0x10/0x10 [ 520.829814][ T3297] do_user_addr_fault+0x62f/0x1050 [ 520.829846][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 520.829992][ T3297] exc_page_fault+0x62/0xa0 [ 520.830019][ T3297] asm_exc_page_fault+0x26/0x30 [ 520.830047][ T3297] RIP: 0033:0x7f40c01dae74 [ 520.830067][ T3297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 520.830089][ T3297] RSP: 002b:00007ffdb0f377e0 EFLAGS: 00010202 [ 520.830182][ T3297] RAX: 0000001b32a24000 RBX: 0000000000001022 RCX: 0000000000077a10 [ 520.830200][ T3297] RDX: 0000000000944e98 RSI: 00007ffdb0f37870 RDI: 0000000000000001 [ 520.830216][ T3297] RBP: 00007ffdb0f3781c R08: 000000000235bf12 R09: 3fffffffffffffff [ 520.830297][ T3297] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 520.830314][ T3297] R13: 00000000000927c0 R14: 0000000000077a15 R15: 00007ffdb0f37870 [ 520.830340][ T3297] [ 520.830361][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 1212 [ 521.037370][ T3297] memory+swap: usage 347312kB, limit 9007199254740988kB, failcnt 0 [ 521.045318][ T3297] kmem: usage 280740kB, limit 9007199254740988kB, failcnt 0 [ 521.052663][ T3297] Memory cgroup stats for /syz2: [ 521.053021][ T3297] cache 26079232 [ 521.061576][ T3297] rss 491520 [ 521.064793][ T3297] shmem 26079232 [ 521.068359][ T3297] mapped_file 0 [ 521.071900][ T3297] dirty 0 [ 521.074857][ T3297] writeback 0 [ 521.078164][ T3297] workingset_refault_anon 1959 [ 521.083005][ T3297] workingset_refault_file 7488 [ 521.087785][ T3297] swap 41074688 [ 521.091369][ T3297] swapcached 85483520 [ 521.095372][ T3297] pgpgin 520199 [ 521.098848][ T3297] pgpgout 513584 [ 521.102447][ T3297] pgfault 479320 [ 521.106024][ T3297] pgmajfault 6475 [ 521.109708][ T3297] inactive_anon 303104 [ 521.113832][ T3297] active_anon 26791936 [ 521.117944][ T3297] inactive_file 0 [ 521.121588][ T3297] active_file 0 [ 521.125281][ T3297] unevictable 0 [ 521.128777][ T3297] hierarchical_memory_limit 314572800 [ 521.134370][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 521.140553][ T3297] total_cache 26079232 [ 521.144942][ T3297] total_rss 491520 [ 521.148694][ T3297] total_shmem 26079232 [ 521.152778][ T3297] total_mapped_file 0 [ 521.157852][ T3297] total_dirty 0 [ 521.161355][ T3297] total_writeback 0 [ 521.165455][ T3297] total_workingset_refault_anon 1959 [ 521.171689][ T3297] total_workingset_refault_file 7488 [ 521.177152][ T3297] total_swap 41074688 [ 521.181180][ T3297] total_swapcached 85483520 [ 521.185704][ T3297] total_pgpgin 520199 [ 521.189845][ T3297] total_pgpgout 513584 [ 521.194029][ T3297] total_pgfault 479320 [ 521.198242][ T3297] total_pgmajfault 6475 [ 521.202430][ T3297] total_inactive_anon 303104 [ 521.207035][ T3297] total_active_anon 26791936 [ 521.211854][ T3297] total_inactive_file 0 [ 521.216126][ T3297] total_active_file 0 [ 521.220272][ T3297] total_unevictable 0 [ 521.224304][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8706,pid=26755,uid=0 [ 521.239957][ T3297] Memory cgroup out of memory: Killed process 26755 (syz.2.8706) total-vm:96216kB, anon-rss:1424kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 523.575369][T26814] uprobe: syz.1.8732:26814 failed to unregister, leaking uprobe [ 523.808181][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 523.808198][ T28] audit: type=1326 audit(8222735679.150:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 523.869708][ T28] audit: type=1326 audit(8222735679.178:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 523.921925][T26838] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.8742'. [ 523.928891][ T28] audit: type=1326 audit(8222735679.178:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 523.957661][ T28] audit: type=1326 audit(8222735679.178:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 524.015400][ T28] audit: type=1326 audit(8222735679.178:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 524.041750][ T28] audit: type=1326 audit(8222735679.178:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4eb3ece59 code=0x7ffc0000 [ 524.088410][ T28] audit: type=1326 audit(8222735679.234:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4eb3ad68e code=0x7ffc0000 [ 524.115384][ T28] audit: type=1326 audit(8222735679.234:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4eb3ad68e code=0x7ffc0000 [ 524.142757][ T28] audit: type=1326 audit(8222735679.234:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4eb3ad68e code=0x7ffc0000 [ 524.169334][ T28] audit: type=1326 audit(8222735679.234:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26827 comm="syz.3.8738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc4eb3ad68e code=0x7ffc0000 [ 524.409425][T26846] dummy0: entered promiscuous mode [ 524.417493][T26846] dummy0: left promiscuous mode [ 524.741874][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8762'. [ 525.598555][T26916] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8771'. [ 525.607551][T26916] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8771'. [ 526.070360][T26935] dns_resolver: Unsupported server list version (0) [ 526.932233][T26986] netlink: 'syz.8.8804': attribute type 1 has an invalid length. [ 526.944465][T26989] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3023135706/3023135707 [ 526.954531][T26989] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3023135706/3023135707 [ 527.016928][T26986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 527.033726][T26986] bond6: (slave bond7): making interface the new active one [ 527.041693][T26986] bond6: (slave bond7): Enslaving as an active interface with an up link [ 527.053245][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8808'. [ 527.063039][T26998] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 527.074925][T26995] hsr_slave_1 (unregistering): left promiscuous mode [ 527.092876][T26986] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8804'. [ 527.102703][T26986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.192246][T27009] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8813'. [ 527.202448][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8813'. [ 527.563452][T27020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8828'. [ 527.595083][T27020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8828'. [ 528.393596][T27054] 8021q: adding VLAN 0 to HW filter on device bond17 [ 528.479569][T27056] 8021q: adding VLAN 0 to HW filter on device bond17 [ 528.525951][T27056] bond17: (slave vti0): The slave device specified does not support setting the MAC address [ 528.537290][T27056] bond17: (slave vti0): Error -95 calling set_mac_address [ 528.598648][T27054] veth35: entered promiscuous mode [ 528.611817][T27054] bond17: (slave veth35): Error -99 calling set_mac_address [ 528.732207][T27072] netlink: 'syz.8.8837': attribute type 1 has an invalid length. [ 528.783357][T27072] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.817023][T27072] bond8: entered promiscuous mode [ 528.838937][T27072] bond8: (slave dummy0): making interface the new active one [ 528.869245][T27072] dummy0: entered promiscuous mode [ 528.876404][T27072] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 528.895016][T27078] bond8 (unregistering): left promiscuous mode [ 528.904968][T27078] dummy0: left promiscuous mode [ 528.926799][T27078] bond8 (unregistering): (slave dummy0): Releasing active interface [ 528.965133][T27078] bond8 (unregistering): Released all slaves [ 529.228411][T27107] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 529.290134][T27112] __nla_validate_parse: 4 callbacks suppressed [ 529.290151][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8864'. [ 529.892133][T27158] netlink: 'syz.2.8871': attribute type 4 has an invalid length. [ 529.969899][T27141] futex_wake_op: syz.3.8865 tries to shift op by -9; fix this program [ 530.030701][ T28] kauditd_printk_skb: 654 callbacks suppressed [ 530.030717][ T28] audit: type=1326 audit(8222735684.912:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27159 comm="syz.2.8872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c030ce59 code=0x7fc00000 [ 530.062365][ T28] audit: type=1326 audit(8222735684.968:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27159 comm="syz.2.8872" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f40c030ce59 code=0x7fc00000 [ 530.166713][T27169] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8875'. [ 530.623449][T27196] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.721661][T27196] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.844102][T27196] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.960400][T27196] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.158637][ T161] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.213317][ T4130] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.269819][ T161] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.288417][ T161] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.248719][T27255] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 532.301267][T27255] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 532.381688][T27255] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 532.496913][T27255] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 532.895326][ T4130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.916885][ T4122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.936812][ T4122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 532.950926][ T4122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 533.066004][T27287] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 533.133723][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8920'. [ 533.144364][T27295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8920'. [ 533.408890][T27317] netlink: 'syz.6.8931': attribute type 1 has an invalid length. [ 533.410132][T27306] IPv6: sit5: Disabled Multicast RS [ 533.465544][T27317] 8021q: adding VLAN 0 to HW filter on device bond20 [ 533.498807][T27317] bond20: entered allmulticast mode [ 533.511341][T27317] bond20: (slave ip6gretap1): making interface the new active one [ 533.538989][T27317] ip6gretap1: entered allmulticast mode [ 533.555661][T27317] bond20: (slave ip6gretap1): Enslaving as an active interface with an up link [ 533.606980][T27327] tipc: Failed to remove unknown binding: 66,0,0/2886997007:200384669/200384670 [ 533.655006][ T28] audit: type=1326 audit(8222735688.364:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27325 comm="syz.1.8938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7fc00000 [ 533.686181][ T28] audit: type=1326 audit(8222735688.364:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27325 comm="syz.1.8938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17ea41ce59 code=0x7fc00000 [ 534.639791][T27354] netlink: 'syz.6.8951': attribute type 1 has an invalid length. [ 534.683148][T27354] 8021q: adding VLAN 0 to HW filter on device bond21 [ 535.530184][T27398] netlink: 9 bytes leftover after parsing attributes in process `syz.8.8965'. [ 535.923125][T27414] netlink: 'syz.2.8972': attribute type 2 has an invalid length. [ 536.412196][ T28] audit: type=1326 audit(8222735690.946:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27443 comm="syz.2.8981" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40c030ce59 code=0x0 [ 536.480334][T27464] bond20: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 536.489664][T27464] bond20: entered allmulticast mode [ 536.500228][T27464] ip6gretap2: entered promiscuous mode [ 536.508343][T27464] ip6gretap2: entered allmulticast mode [ 536.514214][T27464] bond20: (slave ip6gretap2): Enslaving as an active interface with an up link [ 536.543945][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8988'. [ 537.199692][T27495] batadv_slave_1: entered promiscuous mode [ 537.215489][T27495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8998'. [ 537.225184][T27495] tc_dump_action: action bad kind [ 537.231987][T27495] batadv_slave_1: left promiscuous mode [ 537.343018][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9002'. [ 537.355571][ T28] audit: type=1326 audit(8222735691.825:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.381850][T27508] xfrm1: entered promiscuous mode [ 537.387090][T27508] xfrm1: entered allmulticast mode [ 537.392523][T27508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9002'. [ 537.402270][ T28] audit: type=1326 audit(8222735691.825:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.446058][ T28] audit: type=1326 audit(8222735691.825:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.473123][ T28] audit: type=1326 audit(8222735691.825:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.499603][ T28] audit: type=1326 audit(8222735691.825:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.527163][ T28] audit: type=1326 audit(8222735691.825:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.553297][ T28] audit: type=1326 audit(8222735691.825:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.584173][ T28] audit: type=1326 audit(8222735691.825:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.610425][ T28] audit: type=1326 audit(8222735691.825:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27509 comm="syz.8.9003" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa977b4ce59 code=0x7ffc0000 [ 537.776776][T27535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9012'. [ 538.116908][T27569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9028'. [ 538.143927][T27569] netlink: 59 bytes leftover after parsing attributes in process `syz.3.9028'. [ 538.174076][T27569] netlink: 59 bytes leftover after parsing attributes in process `syz.3.9028'. [ 538.678164][T27550] syz.8.9019 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 538.696463][T27550] CPU: 0 UID: 0 PID: 27550 Comm: syz.8.9019 Not tainted syzkaller #0 PREEMPT(lazy) [ 538.696530][T27550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 538.696543][T27550] Call Trace: [ 538.696550][T27550] [ 538.696560][T27550] __dump_stack+0x1d/0x30 [ 538.696607][T27550] dump_stack_lvl+0x95/0xd0 [ 538.696629][T27550] dump_stack+0x15/0x1b [ 538.696727][T27550] dump_header+0x80/0x240 [ 538.696749][T27550] oom_kill_process+0x295/0x350 [ 538.696902][T27550] out_of_memory+0x97d/0xb80 [ 538.696942][T27550] try_charge_memcg+0x62f/0xa10 [ 538.697063][T27550] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 538.697143][T27550] __alloc_frozen_pages_noprof+0x18a/0x350 [ 538.697175][T27550] alloc_pages_mpol+0xb3/0x260 [ 538.697267][T27550] alloc_pages_noprof+0x8f/0x140 [ 538.697291][T27550] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 538.697364][T27550] __kvmalloc_node_noprof+0x3d4/0x640 [ 538.697384][T27550] ? futex_hash_allocate+0x190/0x9a0 [ 538.697425][T27550] ? futex_hash_allocate+0x190/0x9a0 [ 538.697465][T27550] futex_hash_allocate+0x190/0x9a0 [ 538.697638][T27550] ? __schedule+0x951/0xd40 [ 538.697658][T27550] ? cap_task_prctl+0x13f/0x6b0 [ 538.697736][T27550] futex_hash_prctl+0xd8/0xf0 [ 538.697768][T27550] __se_sys_prctl+0x4f4/0x1400 [ 538.697855][T27550] __x64_sys_prctl+0x67/0x80 [ 538.697881][T27550] x64_sys_call+0x2533/0x3020 [ 538.697907][T27550] do_syscall_64+0x12c/0x3b0 [ 538.697942][T27550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.697996][T27550] RIP: 0033:0x7fa977b4ce59 [ 538.698012][T27550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.698052][T27550] RSP: 002b:00007fa9765a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 538.698079][T27550] RAX: ffffffffffffffda RBX: 00007fa977dc5fa0 RCX: 00007fa977b4ce59 [ 538.698169][T27550] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 538.698182][T27550] RBP: 00007fa977be2d6f R08: 0000000000000000 R09: 0000000000000000 [ 538.698195][T27550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.698208][T27550] R13: 00007fa977dc6038 R14: 00007fa977dc5fa0 R15: 00007ffc993a0cb8 [ 538.698229][T27550] [ 538.982134][T27550] memory: usage 307200kB, limit 307200kB, failcnt 149 [ 538.989117][T27550] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 538.997896][T27550] kmem: usage 241016kB, limit 9007199254740988kB, failcnt 0 [ 539.017844][T27550] Memory cgroup stats for /syz8: [ 539.018187][T27550] cache 67358720 [ 539.027342][T27550] rss 397312 [ 539.032585][T27550] shmem 67358720 [ 539.043404][T27550] mapped_file 0 [ 539.058838][T27550] dirty 0 [ 539.065163][T27550] writeback 0 [ 539.068491][T27550] workingset_refault_anon 79 [ 539.119678][T27550] workingset_refault_file 0 [ 539.145930][T27550] swap 0 [ 539.155807][T27550] swapcached 20574208 [ 539.168356][T27550] pgpgin 449084 [ 539.172254][T27550] pgpgout 432538 [ 539.189790][T27550] pgfault 372628 [ 539.202317][T27550] pgmajfault 2061 [ 539.206959][T27550] inactive_anon 67772416 [ 539.219485][T27550] active_anon 0 [ 539.226859][T27550] inactive_file 0 [ 539.235452][T27550] active_file 0 [ 539.241842][T27550] unevictable 0 [ 539.252393][T27550] hierarchical_memory_limit 314572800 [ 539.257952][T27550] hierarchical_memsw_limit 9223372036854771712 [ 539.279382][T27550] total_cache 67358720 [ 539.288984][T27550] total_rss 397312 [ 539.301428][T27550] total_shmem 67358720 [ 539.309432][T27550] total_mapped_file 0 [ 539.325934][T27550] total_dirty 0 [ 539.329688][T27550] total_writeback 0 [ 539.333536][T27550] total_workingset_refault_anon 79 [ 539.338710][T27550] total_workingset_refault_file 0 [ 539.343840][T27550] total_swap 0 [ 539.372727][T27550] total_swapcached 20574208 [ 539.384932][T27550] total_pgpgin 449084 [ 539.396726][T27550] total_pgpgout 432538 [ 539.404412][T27550] total_pgfault 372628 [ 539.412215][T27550] total_pgmajfault 2061 [ 539.421258][T27550] total_inactive_anon 67772416 [ 539.435304][T27550] total_active_anon 0 [ 539.442147][T27550] total_inactive_file 0 [ 539.446526][T27550] total_active_file 0 [ 539.450860][T27550] total_unevictable 0 [ 539.454938][T27550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6048,pid=20054,uid=0 [ 539.487098][T27550] Memory cgroup out of memory: Killed process 20054 (syz.8.6048) total-vm:96084kB, anon-rss:1412kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 539.609655][T27647] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 539.771250][T27660] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.9059'. [ 541.507799][T11743] IPVS: starting estimator thread 0... [ 541.617339][T27729] IPVS: using max 2448 ests per chain, 122400 per kthread [ 542.032320][T27746] __nla_validate_parse: 2 callbacks suppressed [ 542.032337][T27746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9092'. [ 543.119995][T27797] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 543.201676][T27797] team0: No ports can be present during mode change [ 543.550451][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9125'. [ 543.567105][T27834] 8021q: adding VLAN 0 to HW filter on device bond18 [ 543.586298][T27834] ipvlan0: entered allmulticast mode [ 543.593611][T27834] bond18: entered allmulticast mode [ 543.604915][T27834] bond18: (slave ipip0): refused to change device type [ 543.720486][T27843] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 544.543611][T27879] syz.1.9149 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 544.553253][T27879] CPU: 0 UID: 0 PID: 27879 Comm: syz.1.9149 Not tainted syzkaller #0 PREEMPT(lazy) [ 544.553355][T27879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.553372][T27879] Call Trace: [ 544.553380][T27879] [ 544.553389][T27879] __dump_stack+0x1d/0x30 [ 544.553454][T27879] dump_stack_lvl+0x95/0xd0 [ 544.553475][T27879] dump_stack+0x15/0x1b [ 544.553496][T27879] dump_header+0x80/0x240 [ 544.553587][T27879] oom_kill_process+0x295/0x350 [ 544.553620][T27879] out_of_memory+0x97d/0xb80 [ 544.553713][T27879] try_charge_memcg+0x62f/0xa10 [ 544.553751][T27879] charge_memcg+0x6d/0x120 [ 544.553781][T27879] __mem_cgroup_charge+0x28/0xb0 [ 544.553875][T27879] handle_mm_fault+0x1061/0x2e70 [ 544.553910][T27879] ? vma_start_read+0x1c7/0x2c0 [ 544.553977][T27879] do_user_addr_fault+0x62f/0x1050 [ 544.554009][T27879] ? trace_page_fault_user+0x1f/0xa0 [ 544.554091][T27879] exc_page_fault+0x62/0xa0 [ 544.554130][T27879] asm_exc_page_fault+0x26/0x30 [ 544.554151][T27879] RIP: 0033:0x7f17ea3da004 [ 544.554240][T27879] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 544.554257][T27879] RSP: 002b:00007ffd2ae9b360 EFLAGS: 00010246 [ 544.554276][T27879] RAX: 00007f17e8e0d000 RBX: 00007f17e8e2d6c0 RCX: 00007f17ea41cc57 [ 544.554370][T27879] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f17e8e2d6c0 [ 544.554387][T27879] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 544.554404][T27879] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd2ae9b4b0 [ 544.554422][T27879] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 544.554514][T27879] [ 544.554522][T27879] memory: usage 307200kB, limit 307200kB, failcnt 2470 [ 544.737188][T27879] memory+swap: usage 329556kB, limit 9007199254740988kB, failcnt 0 [ 544.745575][T27879] kmem: usage 248064kB, limit 9007199254740988kB, failcnt 0 [ 544.753018][T27879] Memory cgroup stats for /syz1: [ 544.753366][T27879] cache 55422976 [ 544.762209][T27879] rss 212992 [ 544.765616][T27879] shmem 54898688 [ 544.769249][T27879] mapped_file 65536 [ 544.850334][T27879] dirty 0 [ 544.853343][T27879] writeback 0 [ 544.856656][T27879] workingset_refault_anon 1487 [ 544.861441][T27879] workingset_refault_file 4548 [ 544.866218][T27879] swap 27475968 [ 544.869754][T27879] swapcached 59101184 [ 544.873884][T27879] pgpgin 496939 [ 544.877363][T27879] pgpgout 483305 [ 544.880924][T27879] pgfault 499151 [ 544.884477][T27879] pgmajfault 4346 [ 544.888838][T27879] inactive_anon 44462080 [ 544.893090][T27879] active_anon 10854400 [ 544.897226][T27879] inactive_file 0 [ 544.900883][T27879] active_file 524288 [ 544.904795][T27879] unevictable 0 [ 544.908272][T27879] hierarchical_memory_limit 314572800 [ 544.913662][T27879] hierarchical_memsw_limit 9223372036854771712 [ 544.919914][T27879] total_cache 55422976 [ 544.924008][T27879] total_rss 212992 [ 544.927833][T27879] total_shmem 54898688 [ 544.931961][T27879] total_mapped_file 65536 [ 544.941629][T27879] total_dirty 0 [ 544.945300][T27879] total_writeback 0 [ 544.949332][T27879] total_workingset_refault_anon 1487 [ 544.955544][T27879] total_workingset_refault_file 4548 [ 544.960981][T27879] total_swap 27475968 [ 544.965322][T27879] total_swapcached 59101184 [ 544.969964][T27879] total_pgpgin 496939 [ 544.974876][T27879] total_pgpgout 483305 [ 544.979122][T27879] total_pgfault 499151 [ 544.983454][T27879] total_pgmajfault 4346 [ 544.988109][T27879] total_inactive_anon 44462080 [ 544.993107][T27879] total_active_anon 10854400 [ 545.029890][T27879] total_inactive_file 0 [ 545.039347][T27879] total_active_file 524288 [ 545.052613][T27879] total_unevictable 0 [ 545.062089][T27879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9149,pid=27879,uid=0 [ 545.097773][T27879] Memory cgroup out of memory: Killed process 27879 (syz.1.9149) total-vm:94300kB, anon-rss:1428kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 545.210123][T27897] pim6reg: entered allmulticast mode [ 545.216079][T27897] pim6reg: left allmulticast mode [ 545.268077][T27900] netlink: 'syz.1.9155': attribute type 4 has an invalid length. [ 545.278042][T27900] netlink: 'syz.1.9155': attribute type 4 has an invalid length. [ 545.389784][T27908] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.9168'. [ 545.754212][T27924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9164'. [ 545.780619][T27924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9164'. [ 546.201350][T27965] netlink: 'syz.6.9181': attribute type 4 has an invalid length. [ 546.349810][T27988] pim6reg1: entered promiscuous mode [ 546.359512][T27988] pim6reg1: entered allmulticast mode [ 547.563715][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9216'. [ 547.574343][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9216'. [ 547.723063][T28066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9223'. [ 547.740554][T28066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9223'. [ 547.912551][T28083] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 548.008783][T28095] netlink: 'syz.1.9233': attribute type 1 has an invalid length. [ 548.052686][T28095] bond19: entered promiscuous mode [ 548.063282][T28095] 8021q: adding VLAN 0 to HW filter on device bond19 [ 548.119638][T28095] bond19: (slave bridge13): making interface the new active one [ 548.127524][T28095] bridge13: entered promiscuous mode [ 548.175593][T28095] bond19: (slave bridge13): Enslaving as an active interface with an up link [ 548.400245][ T28] kauditd_printk_skb: 180 callbacks suppressed [ 548.400260][ T28] audit: type=1326 audit(8222735702.133:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.434911][ T28] audit: type=1326 audit(8222735702.133:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.461344][ T28] audit: type=1326 audit(8222735702.133:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.487483][ T28] audit: type=1326 audit(8222735702.133:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.513462][ T28] audit: type=1326 audit(8222735702.133:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.542747][ T28] audit: type=1326 audit(8222735702.133:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.572151][ T28] audit: type=1326 audit(8222735702.133:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.617030][ T28] audit: type=1326 audit(8222735702.133:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.644491][ T28] audit: type=1326 audit(8222735702.133:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.671251][ T28] audit: type=1326 audit(8222735702.133:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.6.9243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 548.910100][T28146] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 548.999497][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9252'. [ 551.060284][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9292'. [ 551.072759][T28246] macvlan2: entered promiscuous mode [ 551.078920][T28246] bond0: entered promiscuous mode [ 551.084416][T28246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 551.880747][T28291] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 551.932939][T28297] netlink: 'syz.1.9310': attribute type 10 has an invalid length. [ 551.940816][T28297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9310'. [ 551.949792][T28297] bond0: entered promiscuous mode [ 551.955050][T28297] bridge0: port 2(bond0) entered blocking state [ 551.962981][T28297] bridge0: port 2(bond0) entered disabled state [ 551.970228][T28297] bond0: entered allmulticast mode [ 552.001106][T28301] Set syz1 is full, maxelem 14 reached [ 552.019680][T28304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9312'. [ 552.056575][T28304] 8021q: adding VLAN 0 to HW filter on device bond21 [ 552.076989][T28304] 8021q: adding VLAN 0 to HW filter on device bond21 [ 552.096169][T28304] bond21: (slave vti1): The slave device specified does not support setting the MAC address [ 552.116362][T28304] bond21: (slave vti1): Error -95 calling set_mac_address [ 552.140682][T28318] veth35: entered promiscuous mode [ 552.146170][T28318] bond21: (slave veth35): Error -99 calling set_mac_address [ 552.430538][T28340] dns_resolver: Unsupported server list version (0) [ 552.524811][T28350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9326'. [ 553.117327][T28357] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.138303][T28360] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9329'. [ 553.149949][T28360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.196279][T28357] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.228123][T28357] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.341927][T28357] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 553.405703][ T4137] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.435325][ T4137] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.464857][ T4130] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.491862][ T4130] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 553.628536][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9355'. [ 553.646159][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9355'. [ 553.843164][T28400] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9361'. [ 554.059848][T28425] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9360'. [ 554.069836][T28425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9360'. [ 554.396572][T28436] netlink: 277 bytes leftover after parsing attributes in process `syz.8.9364'. [ 554.862613][T28452] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9369'. [ 554.871617][T28452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9369'. [ 555.111427][T28441] syz.8.9366 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 555.128345][T28441] CPU: 0 UID: 0 PID: 28441 Comm: syz.8.9366 Not tainted syzkaller #0 PREEMPT(lazy) [ 555.128375][T28441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.128439][T28441] Call Trace: [ 555.128511][T28441] [ 555.128522][T28441] __dump_stack+0x1d/0x30 [ 555.128552][T28441] dump_stack_lvl+0x95/0xd0 [ 555.128578][T28441] dump_stack+0x15/0x1b [ 555.128601][T28441] dump_header+0x80/0x240 [ 555.128625][T28441] oom_kill_process+0x295/0x350 [ 555.128742][T28441] out_of_memory+0x97d/0xb80 [ 555.128784][T28441] try_charge_memcg+0x62f/0xa10 [ 555.128831][T28441] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 555.128912][T28441] __alloc_frozen_pages_noprof+0x18a/0x350 [ 555.128947][T28441] alloc_pages_mpol+0xb3/0x260 [ 555.129029][T28441] alloc_pages_noprof+0x8f/0x140 [ 555.129118][T28441] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 555.129204][T28441] __kvmalloc_node_noprof+0x3d4/0x640 [ 555.129280][T28441] ? futex_hash_allocate+0x190/0x9a0 [ 555.129325][T28441] ? futex_hash_allocate+0x190/0x9a0 [ 555.129366][T28441] futex_hash_allocate+0x190/0x9a0 [ 555.129447][T28441] ? security_task_prctl+0xca/0x160 [ 555.129519][T28441] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 555.129558][T28441] futex_hash_prctl+0xd8/0xf0 [ 555.129598][T28441] __se_sys_prctl+0x4f4/0x1400 [ 555.129660][T28441] __x64_sys_prctl+0x67/0x80 [ 555.129691][T28441] x64_sys_call+0x2533/0x3020 [ 555.129735][T28441] do_syscall_64+0x12c/0x3b0 [ 555.129779][T28441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.129801][T28441] RIP: 0033:0x7fa977b4ce59 [ 555.129817][T28441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.129846][T28441] RSP: 002b:00007fa9765a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 555.129896][T28441] RAX: ffffffffffffffda RBX: 00007fa977dc5fa0 RCX: 00007fa977b4ce59 [ 555.129916][T28441] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 555.129935][T28441] RBP: 00007fa977be2d6f R08: 0000000000000000 R09: 0000000000000000 [ 555.129953][T28441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.129969][T28441] R13: 00007fa977dc6038 R14: 00007fa977dc5fa0 R15: 00007ffc993a0cb8 [ 555.130054][T28441] [ 555.355189][T28441] memory: usage 307200kB, limit 307200kB, failcnt 291 [ 555.395019][T28441] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 555.418522][T28441] kmem: usage 241196kB, limit 9007199254740988kB, failcnt 0 [ 555.438390][T28441] Memory cgroup stats for /syz8: [ 555.438648][T28441] cache 67358720 [ 555.498313][T28441] rss 212992 [ 555.501683][T28441] shmem 67358720 [ 555.505779][T28441] mapped_file 0 [ 555.509492][T28441] dirty 0 [ 555.512575][T28441] writeback 0 [ 555.516512][T28441] workingset_refault_anon 79 [ 555.524460][T28441] workingset_refault_file 0 [ 555.535775][T28441] swap 0 [ 555.538791][T28441] swapcached 20574208 [ 555.543105][T28441] pgpgin 483154 [ 555.547157][T28441] pgpgout 466653 [ 555.550781][T28441] pgfault 410768 [ 555.554510][T28441] pgmajfault 2061 [ 555.558792][T28441] inactive_anon 67399680 [ 555.563223][T28441] active_anon 188416 [ 555.567255][T28441] inactive_file 0 [ 555.610827][T28441] active_file 0 [ 555.617840][T28441] unevictable 0 [ 555.625589][T28441] hierarchical_memory_limit 314572800 [ 555.631103][T28441] hierarchical_memsw_limit 9223372036854771712 [ 555.639806][T28441] total_cache 67358720 [ 555.643991][T28441] total_rss 212992 [ 555.647783][T28441] total_shmem 67358720 [ 555.651885][T28441] total_mapped_file 0 [ 555.660765][T28441] total_dirty 0 [ 555.718650][T28441] total_writeback 0 [ 555.722635][T28441] total_workingset_refault_anon 79 [ 555.728184][T28441] total_workingset_refault_file 0 [ 555.734939][T28441] total_swap 0 [ 555.742286][T28441] total_swapcached 20574208 [ 555.754950][T28441] total_pgpgin 483154 [ 555.759557][T28441] total_pgpgout 466653 [ 555.775928][T28441] total_pgfault 410768 [ 555.785052][T28441] total_pgmajfault 2061 [ 555.790815][T28441] total_inactive_anon 67399680 [ 555.799153][T28441] total_active_anon 188416 [ 555.803763][T28441] total_inactive_file 0 [ 555.808271][T28441] total_active_file 0 [ 555.812471][T28441] total_unevictable 0 [ 555.821062][T28441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9366,pid=28440,uid=0 [ 555.835794][T28441] Memory cgroup out of memory: Killed process 28441 (syz.8.9366) total-vm:96216kB, anon-rss:1428kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0 [ 555.856640][T28484] uprobe: syz.6.9386:28484 failed to unregister, leaking uprobe [ 556.013274][T28495] ref_ctr increment failed for inode: 0x22b2 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888129a9c380 [ 556.053107][T28492] uprobe: syz.6.9399:28492 failed to unregister, leaking uprobe [ 557.378618][T28518] syz.6.9400 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 557.393181][T28518] CPU: 1 UID: 0 PID: 28518 Comm: syz.6.9400 Not tainted syzkaller #0 PREEMPT(lazy) [ 557.393210][T28518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.393252][T28518] Call Trace: [ 557.393261][T28518] [ 557.393271][T28518] __dump_stack+0x1d/0x30 [ 557.393303][T28518] dump_stack_lvl+0x95/0xd0 [ 557.393332][T28518] dump_stack+0x15/0x1b [ 557.393425][T28518] dump_header+0x80/0x240 [ 557.393457][T28518] oom_kill_process+0x295/0x350 [ 557.393495][T28518] out_of_memory+0x97d/0xb80 [ 557.393632][T28518] try_charge_memcg+0x62f/0xa10 [ 557.393684][T28518] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 557.393765][T28518] __alloc_frozen_pages_noprof+0x18a/0x350 [ 557.393802][T28518] alloc_pages_mpol+0xb3/0x260 [ 557.393833][T28518] alloc_pages_noprof+0x8f/0x140 [ 557.393938][T28518] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 557.394039][T28518] __kvmalloc_node_noprof+0x3d4/0x640 [ 557.394087][T28518] ? futex_hash_allocate+0x190/0x9a0 [ 557.394128][T28518] ? futex_hash_allocate+0x190/0x9a0 [ 557.394189][T28518] futex_hash_allocate+0x190/0x9a0 [ 557.394234][T28518] ? cap_task_prctl+0x13f/0x6b0 [ 557.394277][T28518] futex_hash_prctl+0xd8/0xf0 [ 557.394385][T28518] __se_sys_prctl+0x4f4/0x1400 [ 557.394423][T28518] __x64_sys_prctl+0x67/0x80 [ 557.394489][T28518] x64_sys_call+0x2533/0x3020 [ 557.394522][T28518] do_syscall_64+0x12c/0x3b0 [ 557.394672][T28518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.394701][T28518] RIP: 0033:0x7f632648ce59 [ 557.394723][T28518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.394746][T28518] RSP: 002b:00007f6324edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 557.394769][T28518] RAX: ffffffffffffffda RBX: 00007f6326705fa0 RCX: 00007f632648ce59 [ 557.394788][T28518] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 557.394866][T28518] RBP: 00007f6326522d6f R08: 0000000000000000 R09: 0000000000000000 [ 557.394883][T28518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.394900][T28518] R13: 00007f6326706038 R14: 00007f6326705fa0 R15: 00007ffd05545738 [ 557.394984][T28518] [ 557.617446][T28518] memory: usage 307200kB, limit 307200kB, failcnt 318 [ 557.630777][T28518] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 557.639115][T28518] kmem: usage 241156kB, limit 9007199254740988kB, failcnt 0 [ 557.647681][T28518] Memory cgroup stats for /syz6: [ 557.648099][T28518] cache 67420160 [ 557.657373][T28518] rss 208896 [ 557.668156][T28518] shmem 67420160 [ 557.671757][T28518] mapped_file 0 [ 557.675316][T28518] dirty 0 [ 557.678534][T28518] writeback 0 [ 557.681934][T28518] workingset_refault_anon 1377 [ 557.686904][T28518] workingset_refault_file 0 [ 557.691668][T28518] swap 0 [ 557.694588][T28518] swapcached 20230144 [ 557.698793][T28518] pgpgin 530933 [ 557.702323][T28518] pgpgout 514422 [ 557.706526][T28518] pgfault 493996 [ 557.710121][T28518] pgmajfault 2231 [ 557.713774][T28518] inactive_anon 0 [ 557.717483][T28518] active_anon 67629056 [ 557.721959][T28518] inactive_file 0 [ 557.725626][T28518] active_file 0 [ 557.730863][T28518] unevictable 0 [ 557.734408][T28518] hierarchical_memory_limit 314572800 [ 557.739860][T28518] hierarchical_memsw_limit 9223372036854771712 [ 557.746048][T28518] total_cache 67420160 [ 557.750303][T28518] total_rss 208896 [ 557.754171][T28518] total_shmem 67420160 [ 557.758328][T28518] total_mapped_file 0 [ 557.762525][T28518] total_dirty 0 [ 557.766739][T28518] total_writeback 0 [ 557.770635][T28518] total_workingset_refault_anon 1377 [ 557.775956][T28518] total_workingset_refault_file 0 [ 557.781174][T28518] total_swap 0 [ 557.784582][T28518] total_swapcached 20230144 [ 557.789111][T28518] total_pgpgin 530933 [ 557.793220][T28518] total_pgpgout 514422 [ 557.797381][T28518] total_pgfault 493996 [ 557.801549][T28518] total_pgmajfault 2231 [ 557.805813][T28518] total_inactive_anon 0 [ 557.810060][T28518] total_active_anon 67629056 [ 557.814720][T28518] total_inactive_file 0 [ 557.818930][T28518] total_active_file 0 [ 557.823259][T28518] total_unevictable 0 [ 557.827280][T28518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9400,pid=28517,uid=0 [ 557.842167][T28518] Memory cgroup out of memory: Killed process 28518 (syz.6.9400) total-vm:96216kB, anon-rss:1428kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 558.478044][T28592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 559.316673][T28610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9435'. [ 559.394312][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 559.403690][T28614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 559.525609][T28622] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.9439'. [ 560.627500][T28647] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.9459'. [ 560.642271][T28647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9459'. [ 560.787627][T28657] vlan5: entered promiscuous mode [ 560.802236][T28657] bridge0: entered promiscuous mode [ 561.245477][T28666] bridge0: port 2(gretap0) entered blocking state [ 561.267773][T28666] bridge0: port 2(gretap0) entered disabled state [ 561.295564][T28666] gretap0: entered allmulticast mode [ 561.324140][T28666] gretap0: left allmulticast mode [ 562.514044][T28700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9485'. [ 562.543804][T28700] xfrm1: entered promiscuous mode [ 562.561264][T28700] xfrm1: entered allmulticast mode [ 562.569364][T28700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9485'. [ 562.621694][T28714] netlink: 'syz.3.9480': attribute type 1 has an invalid length. [ 562.636157][T28716] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1823973609/1823973610 [ 562.643160][T28714] 8021q: adding VLAN 0 to HW filter on device bond22 [ 562.653842][T28720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9474'. [ 562.674261][T28714] bond22: entered allmulticast mode [ 562.687842][T28714] bond22: (slave ip6gretap3): making interface the new active one [ 562.695805][T28714] ip6gretap3: entered allmulticast mode [ 562.702306][T28714] bond22: (slave ip6gretap3): Enslaving as an active interface with an up link [ 564.879649][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9514'. [ 564.900599][T28802] netlink: 92 bytes leftover after parsing attributes in process `syz.8.9513'. [ 564.909596][T28802] netlink: 92 bytes leftover after parsing attributes in process `syz.8.9513'. [ 564.918974][T28801] 8021q: adding VLAN 0 to HW filter on device bond19 [ 564.927263][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9511'. [ 564.948752][T28801] 8021q: adding VLAN 0 to HW filter on device bond19 [ 564.956131][T28801] bond19: (slave vti1): The slave device specified does not support setting the MAC address [ 564.967347][T28801] bond19: (slave vti1): Error -95 calling set_mac_address [ 565.018222][T28810] veth29: entered promiscuous mode [ 565.024023][T28810] bond19: (slave veth29): Error -99 calling set_mac_address [ 565.154236][T28820] netlink: 'syz.2.9516': attribute type 1 has an invalid length. [ 565.167288][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9526'. [ 565.188594][T28818] hsr_slave_1 (unregistering): left promiscuous mode [ 565.204486][T28820] 8021q: adding VLAN 0 to HW filter on device bond21 [ 565.213042][T28820] bond20: (slave bond21): making interface the new active one [ 565.221276][T28820] bond20: (slave bond21): Enslaving as an active interface with an up link [ 565.264941][T28820] bond20: (slave gretap1): Enslaving as a backup interface with an up link [ 565.279469][T28820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9516'. [ 565.296621][T28820] 8021q: adding VLAN 0 to HW filter on device bond20 [ 565.827831][ T28] kauditd_printk_skb: 4653 callbacks suppressed [ 565.827853][ T28] audit: type=1326 audit(8222735718.456:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 565.863012][ T28] audit: type=1326 audit(8222735718.484:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 565.889471][ T28] audit: type=1326 audit(8222735718.484:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 565.924602][ T28] audit: type=1326 audit(8222735718.493:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 565.951121][ T28] audit: type=1326 audit(8222735718.493:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 565.977443][ T28] audit: type=1326 audit(8222735718.493:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 566.003700][ T28] audit: type=1326 audit(8222735718.493:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 566.029999][ T28] audit: type=1326 audit(8222735718.493:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 566.055911][ T28] audit: type=1326 audit(8222735718.493:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 566.081886][ T28] audit: type=1326 audit(8222735718.493:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28848 comm="syz.1.9525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 566.116844][T28854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9528'. [ 566.129006][T28854] hsr_slave_1 (unregistering): left promiscuous mode [ 566.305699][T28858] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.443994][T28858] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.703320][T28858] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 566.943311][T28858] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 567.753191][ T4137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.761859][ T4137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.763165][T28883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9540'. [ 567.783367][ T4137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.798043][T28883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9540'. [ 567.809874][ T4137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 567.840623][T28883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9540'. [ 570.448007][T28974] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 570.527497][T28974] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 570.626380][T28974] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 570.689820][T28974] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 570.764717][ T4137] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.777219][ T4122] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.788885][ T4122] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.800700][ T4122] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.016108][T28981] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 571.075605][T28981] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 571.170912][T28981] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 571.223976][T28981] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 572.246171][ T4122] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.265772][ T4122] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.274377][ T4122] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.303404][ T4130] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 572.990078][T29043] batman_adv: batadv0: Adding interface: geneve0 [ 573.011462][T29043] batman_adv: batadv0: The MTU of interface geneve0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.023120][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 573.023162][ T28] audit: type=1326 audit(8222735725.078:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29040 comm="syz.6.9593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f632648ce59 code=0x0 [ 573.070334][T29043] batman_adv: batadv0: Interface activated: geneve0 [ 573.584106][T29057] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 573.765148][T29057] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 573.967960][T29057] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.131803][T29057] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.387638][ T393] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.404286][ T393] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.418814][ T393] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.428379][ T393] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 574.490734][T29084] dns_resolver: Unsupported server list version (0) [ 575.959646][ T28] audit: type=1326 audit(8222735727.931:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29126 comm="syz.2.9619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40c030ce59 code=0x0 [ 576.061538][T29124] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 576.195464][T29124] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 576.248376][T29124] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 576.301614][T29124] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 576.445897][ T4122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.462818][ T4122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.484893][ T4122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.505448][ T4137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 576.840384][T29139] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.990751][T29139] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.628688][T29139] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.810343][T29139] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.885611][ T4122] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.894123][ T4122] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.910999][ T4122] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.925607][ T4122] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.750469][ T28] audit: type=1326 audit(8222735730.541:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.781355][ T28] audit: type=1326 audit(8222735730.541:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.783070][T29169] dns_resolver: Unsupported server list version (0) [ 578.814009][ T28] audit: type=1326 audit(8222735730.541:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.846812][ T28] audit: type=1326 audit(8222735730.541:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.913376][ T28] audit: type=1326 audit(8222735730.541:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.939825][ T28] audit: type=1326 audit(8222735730.541:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 578.990902][T29184] ref_ctr increment failed for inode: 0x27df offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88812c35bcc0 [ 579.004678][ T28] audit: type=1326 audit(8222735730.541:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 579.038064][T29180] uprobe: syz.2.9646:29180 failed to unregister, leaking uprobe [ 579.066211][ T28] audit: type=1326 audit(8222735730.541:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 579.092226][ T28] audit: type=1326 audit(8222735730.541:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 579.119404][ T28] audit: type=1326 audit(8222735730.541:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.1.9650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f17ea41ce59 code=0x7ffc0000 [ 580.643355][T29221] __nla_validate_parse: 16 callbacks suppressed [ 580.643378][T29221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9667'. [ 581.773985][T29256] netlink: 'syz.8.9668': attribute type 1 has an invalid length. [ 581.824959][T29256] 8021q: adding VLAN 0 to HW filter on device bond8 [ 581.847308][T29254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9670'. [ 583.316705][T29283] syz.8.9679 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 583.372612][T29283] CPU: 0 UID: 0 PID: 29283 Comm: syz.8.9679 Not tainted syzkaller #0 PREEMPT(lazy) [ 583.372672][T29283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.372689][T29283] Call Trace: [ 583.372698][T29283] [ 583.372710][T29283] __dump_stack+0x1d/0x30 [ 583.372754][T29283] dump_stack_lvl+0x95/0xd0 [ 583.372775][T29283] dump_stack+0x15/0x1b [ 583.372871][T29283] dump_header+0x80/0x240 [ 583.372895][T29283] oom_kill_process+0x295/0x350 [ 583.372954][T29283] out_of_memory+0x97d/0xb80 [ 583.373027][T29283] try_charge_memcg+0x62f/0xa10 [ 583.373076][T29283] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 583.373106][T29283] __alloc_frozen_pages_noprof+0x18a/0x350 [ 583.373186][T29283] alloc_pages_mpol+0xb3/0x260 [ 583.373213][T29283] alloc_pages_noprof+0x8f/0x140 [ 583.373241][T29283] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 583.373353][T29283] __kvmalloc_node_noprof+0x3d4/0x640 [ 583.373384][T29283] ? futex_hash_allocate+0x190/0x9a0 [ 583.373526][T29283] ? futex_hash_allocate+0x190/0x9a0 [ 583.373581][T29283] futex_hash_allocate+0x190/0x9a0 [ 583.373622][T29283] ? __schedule+0x951/0xd40 [ 583.373730][T29283] ? cap_task_prctl+0x13f/0x6b0 [ 583.373765][T29283] futex_hash_prctl+0xd8/0xf0 [ 583.373862][T29283] __se_sys_prctl+0x4f4/0x1400 [ 583.373900][T29283] __x64_sys_prctl+0x67/0x80 [ 583.373934][T29283] x64_sys_call+0x2533/0x3020 [ 583.373966][T29283] do_syscall_64+0x12c/0x3b0 [ 583.374028][T29283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.374104][T29283] RIP: 0033:0x7fa977b4ce59 [ 583.374125][T29283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.374226][T29283] RSP: 002b:00007fa9765a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 583.374254][T29283] RAX: ffffffffffffffda RBX: 00007fa977dc5fa0 RCX: 00007fa977b4ce59 [ 583.374275][T29283] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 583.374295][T29283] RBP: 00007fa977be2d6f R08: 0000000000000000 R09: 0000000000000000 [ 583.374345][T29283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.374378][T29283] R13: 00007fa977dc6038 R14: 00007fa977dc5fa0 R15: 00007ffc993a0cb8 [ 583.374403][T29283] [ 583.608869][T29283] memory: usage 307200kB, limit 307200kB, failcnt 430 [ 583.620708][T29283] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 583.654646][T29283] kmem: usage 241128kB, limit 9007199254740988kB, failcnt 0 [ 583.678665][T29283] Memory cgroup stats for /syz8: [ 583.679035][T29283] cache 67424256 [ 583.718986][T29283] rss 217088 [ 583.724138][T29283] shmem 67424256 [ 583.731569][T29283] mapped_file 0 [ 583.743451][T29283] dirty 0 [ 583.746434][T29283] writeback 0 [ 583.749846][T29283] workingset_refault_anon 79 [ 583.759180][T29283] workingset_refault_file 0 [ 583.763857][T29283] swap 0 [ 583.766787][T29283] swapcached 20574208 [ 583.770893][T29283] pgpgin 504729 [ 583.774524][T29283] pgpgout 488211 [ 583.778142][T29283] pgfault 444394 [ 583.781737][T29283] pgmajfault 2061 [ 583.785483][T29283] inactive_anon 67399680 [ 583.789766][T29283] active_anon 258048 [ 583.793804][T29283] inactive_file 0 [ 583.797586][T29283] active_file 0 [ 583.801512][T29283] unevictable 0 [ 583.805006][T29283] hierarchical_memory_limit 314572800 [ 583.810498][T29283] hierarchical_memsw_limit 9223372036854771712 [ 583.816881][T29283] total_cache 67424256 [ 583.820984][T29283] total_rss 217088 [ 583.824744][T29283] total_shmem 67424256 [ 583.828884][T29283] total_mapped_file 0 [ 583.832934][T29283] total_dirty 0 [ 583.836649][T29283] total_writeback 0 [ 583.840569][T29283] total_workingset_refault_anon 79 [ 583.845817][T29283] total_workingset_refault_file 0 [ 583.850880][T29283] total_swap 0 [ 583.854285][T29283] total_swapcached 20574208 [ 583.858894][T29283] total_pgpgin 504729 [ 583.862901][T29283] total_pgpgout 488211 [ 583.867120][T29283] total_pgfault 444394 [ 583.871228][T29283] total_pgmajfault 2061 [ 583.875458][T29283] total_inactive_anon 67399680 [ 583.880487][T29283] total_active_anon 258048 [ 583.884937][T29283] total_inactive_file 0 [ 583.889191][T29283] total_active_file 0 [ 583.893292][T29283] total_unevictable 0 [ 583.897303][T29283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9679,pid=29282,uid=0 [ 583.913512][T29283] Memory cgroup out of memory: Killed process 29283 (syz.8.9679) total-vm:96216kB, anon-rss:1432kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 583.997749][T29313] netlink: 'syz.6.9700': attribute type 4 has an invalid length. [ 584.025735][T29313] netlink: 'syz.6.9700': attribute type 4 has an invalid length. [ 584.164573][T29313] batman_adv: batadv0: Interface deactivated: geneve0 [ 584.237230][ T4120] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.258427][ T4120] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.278542][ T4120] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.296856][ T4120] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.336093][T29326] netlink: 'syz.8.9705': attribute type 4 has an invalid length. [ 584.370534][T29326] netlink: 'syz.8.9705': attribute type 4 has an invalid length. [ 584.381220][T29329] dummy0: entered promiscuous mode [ 584.386965][T29329] gretap0: entered promiscuous mode [ 584.392597][T29329] gretap0: left promiscuous mode [ 584.421489][T29329] dummy0: left promiscuous mode [ 584.462180][T29337] bond0: left promiscuous mode [ 584.487015][ T393] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.495574][ T393] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.506915][ T393] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.515391][ T393] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 584.653144][T29345] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 584.682602][T29348] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1340713386/1340713387 [ 584.693416][T29348] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1340713386/1340713387 [ 585.170443][T29372] IPVS: length: 24 != 158478346104 [ 586.505752][T29400] bond0: left allmulticast mode [ 586.514569][T29398] syz2: rxe_newlink: already configured on bond_slave_1 [ 586.517228][T29400] bridge0: port 2(bond0) entered disabled state [ 586.543830][T29400] bond10: (slave dummy0): Releasing active interface [ 586.556283][T29405] tipc: Failed to remove unknown binding: 66,0,0/0:184200075/184200076 [ 586.566165][T29400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.582574][T29405] tipc: Failed to remove unknown binding: 66,0,0/0:184200075/184200076 [ 587.252174][T29414] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.313963][T29414] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.364719][T29414] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.450937][T29414] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 587.548433][ T4137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.557317][ T4137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.574333][ T4137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 587.583215][ T4137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.071033][T29437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.084335][T29436] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9734'. [ 588.112705][T29437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.177065][T29437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.279460][T29437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 588.564416][T29468] team0: Port device gtp1 added [ 588.876524][ T4120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.894183][ T4120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.910611][ T4120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 588.937875][ T4120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 589.170962][T29474] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 589.478604][T29491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9758'. [ 589.484792][T29489] vlan5: entered promiscuous mode [ 589.497290][T29489] bridge0: entered promiscuous mode [ 589.539398][T29491] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 590.175004][T29517] team0: Port device gtp5 added [ 590.703864][T29522] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 590.863181][T29525] IPv6: sit4: Disabled Multicast RS [ 591.152817][T29531] netlink: 277 bytes leftover after parsing attributes in process `syz.1.9774'. [ 591.196827][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 591.196845][ T28] audit: type=1326 audit(8222735742.177:9480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29526 comm="syz.8.9786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa977b4ce59 code=0x0 [ 591.291453][ T28] audit: type=1326 audit(8222735742.271:9481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29532 comm="syz.6.9777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f632648ce59 code=0x0 [ 591.970643][T29542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.045064][T29544] vlan4: entered promiscuous mode [ 592.303399][T29561] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9782'. [ 592.326919][T29561] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9782'. [ 593.022725][T29577] team0: Port device gtp2 added [ 593.525403][T29586] vlan4: entered promiscuous mode [ 594.030807][T29595] vlan4: entered promiscuous mode [ 594.216114][T29581] syz.6.9795 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 594.281614][T29581] CPU: 1 UID: 0 PID: 29581 Comm: syz.6.9795 Not tainted syzkaller #0 PREEMPT(lazy) [ 594.281715][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.281778][T29581] Call Trace: [ 594.281786][T29581] [ 594.281796][T29581] __dump_stack+0x1d/0x30 [ 594.281828][T29581] dump_stack_lvl+0x95/0xd0 [ 594.281882][T29581] dump_stack+0x15/0x1b [ 594.281907][T29581] dump_header+0x80/0x240 [ 594.281937][T29581] oom_kill_process+0x295/0x350 [ 594.281979][T29581] out_of_memory+0x97d/0xb80 [ 594.282047][T29581] try_charge_memcg+0x62f/0xa10 [ 594.282167][T29581] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 594.282202][T29581] __alloc_frozen_pages_noprof+0x18a/0x350 [ 594.282312][T29581] alloc_pages_mpol+0xb3/0x260 [ 594.282346][T29581] alloc_pages_noprof+0x8f/0x140 [ 594.282445][T29581] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 594.282564][T29581] __kvmalloc_node_noprof+0x3d4/0x640 [ 594.282592][T29581] ? futex_hash_allocate+0x190/0x9a0 [ 594.282634][T29581] ? futex_hash_allocate+0x190/0x9a0 [ 594.282742][T29581] futex_hash_allocate+0x190/0x9a0 [ 594.282862][T29581] ? cap_task_prctl+0x13f/0x6b0 [ 594.282897][T29581] futex_hash_prctl+0xd8/0xf0 [ 594.282981][T29581] __se_sys_prctl+0x4f4/0x1400 [ 594.283018][T29581] __x64_sys_prctl+0x67/0x80 [ 594.283051][T29581] x64_sys_call+0x2533/0x3020 [ 594.283091][T29581] do_syscall_64+0x12c/0x3b0 [ 594.283196][T29581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.283284][T29581] RIP: 0033:0x7f632648ce59 [ 594.283305][T29581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.283330][T29581] RSP: 002b:00007f6324edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 594.283357][T29581] RAX: ffffffffffffffda RBX: 00007f6326705fa0 RCX: 00007f632648ce59 [ 594.283375][T29581] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 594.283470][T29581] RBP: 00007f6326522d6f R08: 0000000000000000 R09: 0000000000000000 [ 594.283488][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.283504][T29581] R13: 00007f6326706038 R14: 00007f6326705fa0 R15: 00007ffd05545738 [ 594.283609][T29581] [ 594.504135][T29581] memory: usage 307200kB, limit 307200kB, failcnt 451 [ 594.511254][T29581] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 594.519238][T29581] kmem: usage 229580kB, limit 9007199254740988kB, failcnt 0 [ 594.526606][T29581] Memory cgroup stats for /syz6: [ 594.526881][T29581] cache 79110144 [ 594.535595][T29581] rss 372736 [ 594.538848][T29581] shmem 79110144 [ 594.542455][T29581] mapped_file 0 [ 594.546048][T29581] dirty 0 [ 594.549002][T29581] writeback 0 [ 594.552310][T29581] workingset_refault_anon 1399 [ 594.557150][T29581] workingset_refault_file 0 [ 594.561832][T29581] swap 0 [ 594.564702][T29581] swapcached 20320256 [ 594.568757][T29581] pgpgin 583625 [ 594.572288][T29581] pgpgout 564220 [ 594.575946][T29581] pgfault 541026 [ 594.579619][T29581] pgmajfault 2238 [ 594.583323][T29581] inactive_anon 0 [ 594.586981][T29581] active_anon 79482880 [ 594.591142][T29581] inactive_file 0 [ 594.594813][T29581] active_file 0 [ 594.598408][T29581] unevictable 0 [ 594.601965][T29581] hierarchical_memory_limit 314572800 [ 594.607379][T29581] hierarchical_memsw_limit 9223372036854771712 [ 594.614181][T29581] total_cache 79110144 [ 594.618668][T29581] total_rss 372736 [ 594.623310][T29581] total_shmem 79110144 [ 594.627627][T29581] total_mapped_file 0 [ 594.631841][T29581] total_dirty 0 [ 594.635762][T29581] total_writeback 0 [ 594.640983][T29581] total_workingset_refault_anon 1399 [ 594.648949][T29581] total_workingset_refault_file 0 [ 594.655483][T29581] total_swap 0 [ 594.659229][T29581] total_swapcached 20320256 [ 594.666372][T29581] total_pgpgin 583625 [ 594.672556][T29581] total_pgpgout 564220 [ 594.676918][T29581] total_pgfault 541026 [ 594.681466][T29581] total_pgmajfault 2238 [ 594.685752][T29581] total_inactive_anon 0 [ 594.689969][T29581] total_active_anon 79482880 [ 594.694599][T29581] total_inactive_file 0 [ 594.699138][T29581] total_active_file 0 [ 594.703164][T29581] total_unevictable 0 [ 594.707402][T29581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.9795,pid=29580,uid=0 [ 594.722529][T29581] Memory cgroup out of memory: Killed process 29581 (syz.6.9795) total-vm:96216kB, anon-rss:1424kB, file-rss:22252kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 596.424445][T29683] team0: Port device gtp4 added [ 597.031285][T29693] syz0: rxe_newlink: already configured on bond_slave_1 [ 597.167399][T29697] syz0: rxe_newlink: already configured on bond_slave_1 [ 597.390904][T29715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9849'. [ 597.403273][T29715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9849'. [ 597.770129][ T28] audit: type=1326 audit(8222735748.332:9482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.3.9854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4eb3ece59 code=0x0 [ 598.551860][T29736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9867'. [ 598.619415][T29739] pim6reg: entered allmulticast mode [ 598.640696][T29739] pim6reg: left allmulticast mode [ 598.931443][T29748] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 599.011603][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9865'. [ 599.043431][T29757] macvlan0: entered promiscuous mode [ 599.061124][T29757] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 599.235971][T29762] bond0: (slave vlan3): Opening slave failed [ 599.354785][ T28] audit: type=1326 audit(8222735749.810:9483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29758 comm="syz.6.9866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f632648ce59 code=0x0 [ 599.486583][T29777] pim6reg: entered allmulticast mode [ 599.524445][T29777] pim6reg: left allmulticast mode [ 600.077855][T29807] netlink: 'syz.6.9883': attribute type 11 has an invalid length. [ 600.090765][T29807] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9883'. [ 600.110399][T29791] syz.1.9878 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 600.130362][T29791] CPU: 1 UID: 0 PID: 29791 Comm: syz.1.9878 Not tainted syzkaller #0 PREEMPT(lazy) [ 600.130400][T29791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.130419][T29791] Call Trace: [ 600.130491][T29791] [ 600.130501][T29791] __dump_stack+0x1d/0x30 [ 600.130534][T29791] dump_stack_lvl+0x95/0xd0 [ 600.130566][T29791] dump_stack+0x15/0x1b [ 600.130592][T29791] dump_header+0x80/0x240 [ 600.130621][T29791] oom_kill_process+0x295/0x350 [ 600.130733][T29791] out_of_memory+0x97d/0xb80 [ 600.130776][T29791] try_charge_memcg+0x62f/0xa10 [ 600.130885][T29791] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 600.130921][T29791] __alloc_frozen_pages_noprof+0x18a/0x350 [ 600.130957][T29791] alloc_pages_mpol+0xb3/0x260 [ 600.130992][T29791] alloc_pages_noprof+0x8f/0x140 [ 600.131025][T29791] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 600.131071][T29791] __kvmalloc_node_noprof+0x3d4/0x640 [ 600.131139][T29791] ? futex_hash_allocate+0x190/0x9a0 [ 600.131179][T29791] ? futex_hash_allocate+0x190/0x9a0 [ 600.131224][T29791] futex_hash_allocate+0x190/0x9a0 [ 600.131352][T29791] ? cap_task_prctl+0x13f/0x6b0 [ 600.131387][T29791] futex_hash_prctl+0xd8/0xf0 [ 600.131427][T29791] __se_sys_prctl+0x4f4/0x1400 [ 600.131464][T29791] __x64_sys_prctl+0x67/0x80 [ 600.131549][T29791] x64_sys_call+0x2533/0x3020 [ 600.131581][T29791] do_syscall_64+0x12c/0x3b0 [ 600.131625][T29791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.131696][T29791] RIP: 0033:0x7f17ea41ce59 [ 600.131718][T29791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.131806][T29791] RSP: 002b:00007f17e8e6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 600.131834][T29791] RAX: ffffffffffffffda RBX: 00007f17ea695fa0 RCX: 00007f17ea41ce59 [ 600.131853][T29791] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 600.131870][T29791] RBP: 00007f17ea4b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 600.131925][T29791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.131941][T29791] R13: 00007f17ea696038 R14: 00007f17ea695fa0 R15: 00007ffd2ae9b3b8 [ 600.131966][T29791] [ 600.132034][T29791] memory: usage 307200kB, limit 307200kB, failcnt 2985 [ 600.140356][T29809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9884'. [ 600.146262][T29791] memory+swap: usage 334032kB, limit 9007199254740988kB, failcnt 0 [ 600.371758][T29791] kmem: usage 263952kB, limit 9007199254740988kB, failcnt 0 [ 600.379317][T29791] Memory cgroup stats for /syz1: [ 600.379648][T29791] cache 43868160 [ 600.388707][T29791] rss 208896 [ 600.391996][T29791] shmem 43868160 [ 600.395962][T29791] mapped_file 0 [ 600.400519][T29791] dirty 0 [ 600.403998][T29791] writeback 0 [ 600.410464][T29791] workingset_refault_anon 1508 [ 600.417695][T29791] workingset_refault_file 4840 [ 600.422554][T29791] swap 27475968 [ 600.426119][T29791] swapcached 59277312 [ 600.430196][T29791] pgpgin 546016 [ 600.433729][T29791] pgpgout 535204 [ 600.437525][T29791] pgfault 569975 [ 600.441149][T29791] pgmajfault 4358 [ 600.444875][T29791] inactive_anon 44081152 [ 600.449214][T29791] active_anon 204800 [ 600.453239][T29791] inactive_file 0 [ 600.456977][T29791] active_file 0 [ 600.460594][T29791] unevictable 0 [ 600.464127][T29791] hierarchical_memory_limit 314572800 [ 600.469668][T29791] hierarchical_memsw_limit 9223372036854771712 [ 600.476152][T29791] total_cache 43868160 [ 600.482488][T29791] total_rss 208896 [ 600.486353][T29791] total_shmem 43868160 [ 600.490526][T29791] total_mapped_file 0 [ 600.494615][T29791] total_dirty 0 [ 600.498198][T29791] total_writeback 0 [ 600.502126][T29791] total_workingset_refault_anon 1508 [ 600.507563][T29791] total_workingset_refault_file 4840 [ 600.513073][T29791] total_swap 27475968 [ 600.517196][T29791] total_swapcached 59277312 [ 600.521963][T29791] total_pgpgin 546016 [ 600.527347][T29791] total_pgpgout 535204 [ 600.531500][T29791] total_pgfault 569975 [ 600.536073][T29791] total_pgmajfault 4358 [ 600.541319][T29791] total_inactive_anon 44081152 [ 600.546349][T29791] total_active_anon 204800 [ 600.550941][T29791] total_inactive_file 0 [ 600.555362][T29791] total_active_file 0 [ 600.559424][T29791] total_unevictable 0 [ 600.563498][T29791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9878,pid=29790,uid=0 [ 600.578628][T29791] Memory cgroup out of memory: Killed process 29790 (syz.1.9878) total-vm:96216kB, anon-rss:1424kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 600.897197][T29826] pim6reg: entered allmulticast mode [ 600.919003][T29826] pim6reg: left allmulticast mode [ 601.144306][T29830] netlink: 'syz.2.9891': attribute type 1 has an invalid length. [ 601.169183][T29830] bond22: (slave veth29): Enslaving as an active interface with a down link [ 601.197079][T29830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.205398][T29830] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.215277][T29830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.233069][T29830] veth0_to_team: left promiscuous mode [ 601.243733][T29830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 601.256519][T29830] veth1_macvtap: left promiscuous mode [ 601.262618][T29830] veth0_macvtap: left promiscuous mode [ 601.268675][T29830] veth0_macvtap: entered promiscuous mode [ 601.275190][T29830] veth1_macvtap: entered promiscuous mode [ 601.295939][T29830] veth0_to_team: entered promiscuous mode [ 601.305583][T29830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.316587][T29830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.327215][T29830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.336662][T29830] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 601.371607][T29830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.383259][T29830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.391708][T29830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 601.400191][T29830] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.409140][T29830] 8021q: adding VLAN 0 to HW filter on device bond8 [ 601.419120][T29830] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 601.431413][T29830] 8021q: adding VLAN 0 to HW filter on device bond9 [ 601.439692][T29830] 8021q: adding VLAN 0 to HW filter on device bond10 [ 601.490990][T29830] 8021q: adding VLAN 0 to HW filter on device bond11 [ 601.511944][T29830] 8021q: adding VLAN 0 to HW filter on device bond12 [ 601.523172][T29830] gretap0: entered promiscuous mode [ 601.529479][T29830] 8021q: adding VLAN 0 to HW filter on device bond13 [ 601.560389][T29830] 8021q: adding VLAN 0 to HW filter on device bond14 [ 601.569146][T29830] 8021q: adding VLAN 0 to HW filter on device bond15 [ 601.579591][T29830] 8021q: adding VLAN 0 to HW filter on device bond16 [ 601.633781][T29830] 8021q: adding VLAN 0 to HW filter on device bond17 [ 601.654308][T29830] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 601.670604][T29830] 8021q: adding VLAN 0 to HW filter on device bond19 [ 601.684801][T29830] 8021q: adding VLAN 0 to HW filter on device eth0 [ 601.695199][T29830] 8021q: adding VLAN 0 to HW filter on device eth1 [ 601.705064][T29830] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.738211][T29830] 8021q: adding VLAN 0 to HW filter on device eth3 [ 601.757809][T29830] 8021q: adding VLAN 0 to HW filter on device bond22 [ 601.874702][ T4122] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.900754][ T4122] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.914388][ T4122] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.927801][ T4122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.000449][ T4122] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.024759][ T4122] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.050274][ T4122] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.075698][ T4122] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.131225][ T4132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.138915][ T4132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.171144][ T4132] ip6_tunnel:  xmit: Local address not yet configured! [ 602.178274][ T4132] ip6_tunnel:  xmit: Local address not yet configured! [ 602.187162][ T4132] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 602.195441][ T4132] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 602.246305][ T4137] bond22: (slave veth29): link status definitely up, 10000 Mbps full duplex [ 602.258096][ T8918] ip6_tunnel:  xmit: Local address not yet configured! [ 602.265995][ T4137] bond22: (slave veth29): making interface the new active one [ 602.277506][ T8918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.298356][ T8918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.306497][ T4137] bond22: active interface up! [ 602.319286][ T4132] bond8: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 602.338581][ T4137] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 602.424667][ T4137] bond10: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 602.442590][T29865] netlink: 'syz.2.9906': attribute type 1 has an invalid length. [ 602.466330][ T4137] bond10: (slave veth15): making interface the new active one [ 602.493640][ T4137] bond10: active interface up! [ 602.535020][T29865] 8021q: adding VLAN 0 to HW filter on device bond23 [ 602.568332][T29867] bond23: entered allmulticast mode [ 602.701571][T29882] sctp: [Deprecated]: syz.6.9911 (pid 29882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.701571][T29882] Use struct sctp_sack_info instead [ 603.877119][T29918] netlink: 277 bytes leftover after parsing attributes in process `syz.2.9923'. [ 603.952995][T11740] kernel read not supported for file bpf-prog (pid: 11740 comm: kworker/0:11) [ 604.070487][T29941] netlink: 'syz.3.9935': attribute type 11 has an invalid length. [ 604.087822][T29941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9935'. [ 604.098231][T29930] vlan4: entered promiscuous mode [ 604.117186][T29939] bond0: (slave vlan4): Opening slave failed [ 604.158343][T29943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9936'. [ 604.276673][T29947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9938'. [ 604.452518][ T28] audit: type=1326 audit(8222735754.581:9484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.506062][ T28] audit: type=1326 audit(8222735754.581:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.561316][T29969] bridge_slave_1: entered promiscuous mode [ 604.578710][ T28] audit: type=1326 audit(8222735754.581:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.640978][ T28] audit: type=1326 audit(8222735754.581:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.693303][T29977] vlan4: entered promiscuous mode [ 604.698772][ T28] audit: type=1326 audit(8222735754.581:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.755841][ T28] audit: type=1326 audit(8222735754.581:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.807349][ T28] audit: type=1326 audit(8222735754.581:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.832869][ T28] audit: type=1326 audit(8222735754.581:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 604.880277][ T28] audit: type=1326 audit(8222735754.581:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 605.266694][ T28] audit: type=1326 audit(8222735754.581:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29964 comm="syz.6.9945" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f632648ce59 code=0x7ffc0000 [ 605.668826][T30009] veth0_to_team: entered promiscuous mode [ 605.696334][T30009] pimreg: entered allmulticast mode [ 605.719821][T30009] pimreg: left allmulticast mode [ 606.853732][T30041] netlink: 'syz.8.9974': attribute type 11 has an invalid length. [ 606.868520][T30041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9974'. [ 607.068513][T30004] kexec: Could not allocate control_code_buffer [ 607.282337][T30064] netlink: 'syz.3.9984': attribute type 1 has an invalid length. [ 607.354433][T30064] bond23: (slave veth35): Enslaving as an active interface with a down link [ 607.375122][T30075] netlink: 'syz.2.9987': attribute type 11 has an invalid length. [ 607.376818][T30073] tipc: Enabling of bearer rejected, media not registered [ 607.394056][T30075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9987'. [ 607.482259][T30064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.492946][T30064] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.500939][T30084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9990'. [ 607.535949][T30064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.629577][T30064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 607.630816][ C1] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 607.630893][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 607.711664][T30095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9990'. [ 607.764258][T30064] veth1_macvtap: left promiscuous mode [ 607.781429][T30064] veth0_macvtap: left promiscuous mode [ 607.789913][T30064] veth0_macvtap: entered promiscuous mode [ 607.797053][T30064] veth1_macvtap: entered promiscuous mode [ 607.808832][T30064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.849695][T30039] ================================================================== [ 607.857885][T30039] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 607.866521][T30039] [ 607.868864][T30039] write to 0xffff88814ee1cfa0 of 8 bytes by task 30038 on cpu 0: [ 607.876594][T30039] shmem_file_splice_read+0x40e/0x5a0 [ 607.882001][T30039] splice_direct_to_actor+0x26e/0x670 [ 607.887434][T30039] do_splice_direct+0x119/0x1a0 [ 607.892351][T30039] do_sendfile+0x382/0x650 [ 607.896891][T30039] __x64_sys_sendfile64+0x105/0x150 [ 607.902137][T30039] x64_sys_call+0x2dc4/0x3020 [ 607.906856][T30039] do_syscall_64+0x12c/0x3b0 [ 607.911493][T30039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.917419][T30039] [ 607.919771][T30039] write to 0xffff88814ee1cfa0 of 8 bytes by task 30039 on cpu 1: [ 607.927512][T30039] shmem_file_splice_read+0x40e/0x5a0 [ 607.932923][T30039] splice_direct_to_actor+0x26e/0x670 [ 607.938348][T30039] do_splice_direct+0x119/0x1a0 [ 607.943277][T30039] do_sendfile+0x382/0x650 [ 607.947746][T30039] __x64_sys_sendfile64+0x105/0x150 [ 607.952831][T30064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.952975][T30039] x64_sys_call+0x2dc4/0x3020 [ 607.964277][T30039] do_syscall_64+0x12c/0x3b0 [ 607.968922][T30039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.974858][T30039] [ 607.977211][T30039] value changed: 0x000000000000d30c -> 0x000000000000d31a [ 607.980141][T30064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.984335][T30039] [ 607.984343][T30039] Reported by Kernel Concurrency Sanitizer on: [ 607.984357][T30039] CPU: 1 UID: 0 PID: 30039 Comm: syz.1.9973 Not tainted syzkaller #0 PREEMPT(lazy) [ 607.984393][T30039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.984411][T30039] ================================================================== [ 608.008047][T30064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.041121][T30064] 8021q: adding VLAN 0 to HW filter on device bond5 [ 608.051085][T30064] 8021q: adding VLAN 0 to HW filter on device bond6 [ 608.063914][T30064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 608.083427][T30064] 8021q: adding VLAN 0 to HW filter on device bond8 [ 608.095454][T30064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 608.109180][T30064] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 608.131224][T30064] 8021q: adding VLAN 0 to HW filter on device bond10 [ 608.158379][T30064] 8021q: adding VLAN 0 to HW filter on device bond11 [ 608.236812][T30064] 8021q: adding VLAN 0 to HW filter on device bond12 [ 608.245528][T30064] 8021q: adding VLAN 0 to HW filter on device bond13 [ 608.295470][T30064] veth0_to_team: entered promiscuous mode [ 608.336964][T30064] 8021q: adding VLAN 0 to HW filter on device bond14 [ 608.350563][T30064] 8021q: adding VLAN 0 to HW filter on device bond15 [ 608.360427][T30064] gretap0: entered promiscuous mode [ 608.372184][T30064] 8021q: adding VLAN 0 to HW filter on device bond16 [ 608.379112][ T30] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.400438][ T4132] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.419414][T30064] 8021q: adding VLAN 0 to HW filter on device bond17 [ 608.432674][ T4132] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.442464][T30064] 8021q: adding VLAN 0 to HW filter on device bond20 [ 608.453944][ T4132] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.458195][T30064] 8021q: adding VLAN 0 to HW filter on device bond21 [ 608.471179][T30064] 8021q: adding VLAN 0 to HW filter on device bond22 [ 608.481964][T30064] 8021q: adding VLAN 0 to HW filter on device eth0 [ 608.489746][ T4132] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.494247][T30064] 8021q: adding VLAN 0 to HW filter on device eth1 [ 608.506453][T30064] 8021q: adding VLAN 0 to HW filter on device eth2 [ 608.515883][T30064] 8021q: adding VLAN 0 to HW filter on device eth3 [ 608.518106][ T4132] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.529676][T30064] 8021q: adding VLAN 0 to HW filter on device bond23 [ 608.545651][T30085] bond23: (slave dummy0): making interface the new active one [ 608.550099][ T4130] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.556428][T30085] dummy0: entered promiscuous mode [ 608.566024][T30085] bond23: (slave dummy0): Enslaving as an active interface with an up link [ 608.571926][T11743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.583911][ T4130] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.607940][ T393] bridge0: port 1(vlan3) entered blocking state [ 608.614354][ T393] bridge0: port 1(vlan3) entered forwarding state [ 608.620960][ T4130] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.646477][ T4130] bond15: (slave ip6gretap1): link status up again after 0 ms [ 608.705743][ T4120] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.714173][ T4120] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.722633][ T4120] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.730883][ T4120] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.741145][ T4120] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.749747][ T4120] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.758295][ T4120] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.768069][ T4120] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 608.786349][ T4122] bond23: (slave veth35): link status definitely up, 10000 Mbps full duplex [ 608.806929][ T393] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 608.828569][ T393] bond13: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 608.837462][ T393] bond13: (slave veth19): making interface the new active one [ 608.846879][ T393] bond13: active interface up! [ 608.870909][ T4120] bond20: (slave ip6gretap2): link status definitely up, 0 Mbps full duplex [ 608.879722][ T4120] bond20: active interface up! [ 609.074438][ T4130] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 609.674753][T11743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.198484][ T30] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.206475][ T30] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.871779][T11740] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.767096][ T30] net_ratelimit: 49 callbacks suppressed [ 613.767116][ T30] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 613.863773][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 613.895337][ T393] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.012921][ T30] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.130536][ T393] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.248247][ T393] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.376839][ T4130] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.494078][ T4130] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.547484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.555058][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 614.565787][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.611719][ T393] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.729210][ T30] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 614.846833][ T30] bond15: (slave ip6gretap1): failed to get link speed/duplex [ 615.915873][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.916652][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!