last executing test programs: 12m31.44347204s ago: executing program 32 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) 12m21.187898049s ago: executing program 33 (id=1041): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7fc}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfefffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 11m29.839359169s ago: executing program 34 (id=1770): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, 0x0, 0x24000004) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 11m25.67032924s ago: executing program 35 (id=1930): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, 0x0, 0x200000, 0x0) readv(r1, 0x0, 0x0) 11m3.303078814s ago: executing program 36 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(0x4) 10m49.283092535s ago: executing program 37 (id=2449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000880a020100000800faff0700d06d6558b77d0180c200000288a82f0608"], 0x58) 10m3.738191563s ago: executing program 38 (id=3014): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 9m46.394940705s ago: executing program 39 (id=3469): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m59.044503676s ago: executing program 40 (id=5273): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x5, 0x4, @private2}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x8, 0x7, 0x4565, 0x9}, 0x14) 5m23.966405609s ago: executing program 41 (id=7639): r0 = epoll_create1(0x0) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r0]) 4m47.860042917s ago: executing program 42 (id=8306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 4m47.209394473s ago: executing program 43 (id=8317): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) unshare(0x6a040000) socket$netlink(0x10, 0x3, 0xe) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff7fc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 4m39.647503757s ago: executing program 44 (id=8406): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0x15a}, {&(0x7f0000000d00)="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", 0x327}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x18}) 4m15.803616747s ago: executing program 45 (id=8487): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 4m5.670275933s ago: executing program 6 (id=8766): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 4m5.210577095s ago: executing program 6 (id=8768): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x86020086, r4}) 4m5.142554456s ago: executing program 6 (id=8769): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4m4.680500888s ago: executing program 6 (id=8773): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) 4m4.654550138s ago: executing program 6 (id=8774): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000500)='cpuacct.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 4m4.378977515s ago: executing program 6 (id=8776): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) dup(r1) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0xfffffffe, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.378827695s ago: executing program 46 (id=8776): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) dup(r1) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0xfffffffe, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m47.700051651s ago: executing program 7 (id=9012): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0xc8, 0x6, 0x7}]}) 3m47.459701647s ago: executing program 7 (id=9003): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000280)}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40) 3m47.221338022s ago: executing program 7 (id=9008): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 3m47.121576105s ago: executing program 7 (id=9009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0xa, 0x806}, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 3m46.923312049s ago: executing program 7 (id=9016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6160d1d7) 3m45.833935446s ago: executing program 7 (id=9028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89e5ee0c7cdacabab47380c988cacb08000000000000681b92961f187410c5099eecb2d200000064", 0x28}], 0x1) 3m36.316408378s ago: executing program 0 (id=9160): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m36.2345007s ago: executing program 0 (id=9162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x8, r3}, 0x38) r4 = socket$kcm(0x18, 0x8, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x80047437, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m36.23401653s ago: executing program 0 (id=9163): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 3m36.043077504s ago: executing program 0 (id=9168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x4, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x61}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3m35.114331057s ago: executing program 0 (id=9179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503feff177400407200a0ff0000000069163a0000000000bf67000000000000350602000fff0720170600002019180016060000e0e6e7ffbf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6160d1d7) 3m33.795739969s ago: executing program 0 (id=9189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m30.202845926s ago: executing program 5 (id=9222): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000003200)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m29.775268836s ago: executing program 47 (id=9028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89e5ee0c7cdacabab47380c988cacb08000000000000681b92961f187410c5099eecb2d200000064", 0x28}], 0x1) 3m29.771946057s ago: executing program 5 (id=9229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6160d1d7) 3m28.746332922s ago: executing program 5 (id=9231): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3m25.553328659s ago: executing program 2 (id=9228): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0x100403, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 3m24.418658597s ago: executing program 2 (id=9249): syz_io_uring_setup(0x487, &(0x7f00000012c0)={0x0, 0x9cee, 0x2, 0x10000003, 0x91}, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m24.351632559s ago: executing program 2 (id=9250): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x11, 0xa, 0x100, &(0x7f0000000100)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7c, 0x1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, 0xfffffffffffffffe, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m24.197472682s ago: executing program 2 (id=9251): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 3m24.131666614s ago: executing program 2 (id=9252): socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m24.019203077s ago: executing program 2 (id=9253): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/150, 0x96) 3m17.7384366s ago: executing program 48 (id=9189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 3m12.419395889s ago: executing program 49 (id=9231): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3m7.834630241s ago: executing program 50 (id=9253): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/150, 0x96) 5.492116406s ago: executing program 4 (id=10892): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0) 4.549342289s ago: executing program 4 (id=10906): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) 4.036179301s ago: executing program 9 (id=10908): socket$inet(0x2, 0x2, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240), 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x100, 0x80}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) 2.685742274s ago: executing program 1 (id=10910): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.355109362s ago: executing program 4 (id=10911): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xc4, 0x7fff7ffc}]}) ioperm(0x1, 0x9, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'batadv_slave_0\x00', @random="02000000670b"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) 2.322921403s ago: executing program 9 (id=10913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.271848924s ago: executing program 3 (id=10914): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) recvfrom(r1, 0x0, 0xb, 0x40, 0x0, 0x0) 2.234240175s ago: executing program 3 (id=10915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}], 0x1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) 1.997612041s ago: executing program 4 (id=10917): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000580)=0x28, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x1, 0x21, 0x197}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3bc}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x771f, 0x33, 0x0, 0x0) 1.919306333s ago: executing program 9 (id=10919): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20044846) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 1.708820008s ago: executing program 8 (id=10920): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c01000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000fc001a80400002803c0001"], 0x11c}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000000b0c0)={0x0, 0x0, &(0x7f000000b080)={&(0x7f0000000a80)=@newtaction={0x44, 0x30, 0x1, 0x70bd27, 0x25dfdc01, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) accept(r5, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000606010300000000000000000700000a0900020073797a3100000000e800020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.65516137s ago: executing program 8 (id=10921): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa54ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0xc0a4, 0xa2, 0x101, 0x7, 0x7f, 0x9b9c, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0xb7, 0x9}, &(0x7f0000000380)=0x9c) socket(0x10, 0x803, 0x0) 1.6379728s ago: executing program 8 (id=10922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mlock(&(0x7f00002b5000/0x400000)=nil, 0x400000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000027c0), r0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x88300) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002880)={0x24, r2, 0x609, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.586109441s ago: executing program 1 (id=10923): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0xae582, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0xb) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fsopen(0x0, 0x0) syz_clone3(0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.497631323s ago: executing program 8 (id=10924): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.338537377s ago: executing program 8 (id=10925): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000753000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00006fd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00007a8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0x81fb, 0xc000, 0x8, 0xc2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x1007721, 0x16, 0x0, 0x31) 1.300634758s ago: executing program 3 (id=10926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x5, 0x8, 0x9, 0x3ff, 0xa0dd}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.20830163s ago: executing program 3 (id=10927): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) creat(0x0, 0xd931d3864d39dcdb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000010) fsopen(0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000600)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1.097741013s ago: executing program 1 (id=10928): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10c8d}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 1.091251003s ago: executing program 4 (id=10929): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe, 0xd}, {0xffe0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.052941794s ago: executing program 3 (id=10930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 1.011282285s ago: executing program 9 (id=10931): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 999.710675ms ago: executing program 8 (id=10932): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210080, &(0x7f0000000ac0)={[{@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@lazytime}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@nombcache}, {@resuid}]}, 0x1, 0x5a0, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x18) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 949.659087ms ago: executing program 9 (id=10933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x81, 0x0, 0xf, 0x11, 0x7, 0x4, 0xa, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0xa, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x4, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x34ae, 0x1, 0x9, 0x7f, 0x2, 0xc, 0x43, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 871.650848ms ago: executing program 3 (id=10934): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@nombcache}, {@nogrpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x43aa, 0xc0ca, 0x29, &(0x7f0000000100)={[0xf]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) 792.95245ms ago: executing program 9 (id=10935): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$eJzs3E9rE2sUx/HTpk3TlDa5cLlwBfWgG92ENr4ADdKCGFBqU9SFMLUTDRmTMhMqEbHZiFtfR3HpTlBfgN2IG3HrrgiCmy7Ekc6fmrRpzZ+2SdvvB8o8mWd+PKfTaTlTmFm//fJRMe+k8kZFBmMqgyI12RBJbo4CA8F20BtHpV5NLo79+Hz61p271zPZ7PSs6kxm7lJaVSfOvn389NW595Wx+dcTb0ZkLXlv/Xv669p/a/+v/5p7WHCGxdFSuaKGLpTLFWPBMnWx4BRTqjct03BMLZQc026Yz1vlpaWqGqXF8fiSbTqOGqWqFs2qVspasatqPDAKJU2lUjoel5Mi0XTvUAvJ3OrsrJHZddqNdFEVemC02U7bztSaT+ZWD6EmAADQZ/bu//1ef/f+Pzvvbzvq/7WwW/8v0nX//yF6+OfyKKg1fPpL/x9qfoMR27eicKBsO2PEg9/fRvT/AAAAAAAAAAAAAAAAAAAAAAAcBRuum3BdNxFuw6+R4AGP8HOv68TBaPPnH74Q4HIPS8Y+qntwLyZivVjOLef8rT+fyUtBLDFlUhLy07seAv545lp2elI9SXlnrQT5leVcRDavoUxUCluLJcP8gPcYmp8/88+Un9fG/LDE69dPS0L+bb5+umk+KhfO1+VTkpCP96UsliyKfAkuaC//bEr16o3stvzo5nEAAAAAABwLKd2y4/7dm/cOiMnOeT/fxv8Htt1fD8mpVl5RCQAAAAAAuuZUnxQNyzLtDgYjItJF/LgOItIXZWwbXBGRTuLxfii+/UFMRPw92kn821a8pZTbwjFDItLz09LGoNd/mQAAAADstz9NfxuhT88PsCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6eVt8HFh6/Yyqc2CNet1zk0L9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoI/8DgAA///REBf+") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 767.574411ms ago: executing program 1 (id=10936): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x974, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xff}, 0x1c) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r3 = accept4$unix(r1, 0x0, 0x0, 0x80000) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000600)=""/58, 0x3a}], 0x1}, 0x1fa}], 0x1, 0x20022, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 486.328708ms ago: executing program 1 (id=10937): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14090, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 288.570113ms ago: executing program 1 (id=10938): socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x400, r0, 0x0, 0x0, 0x6, 0x0, 0x2}]) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_destroy(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x62, r3}) 0s ago: executing program 4 (id=10939): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x30004040) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) close(r0) kernel console output (not intermixed with test programs): fter dequeue, screwing up backlog [ 701.510086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.999760][ T28] audit: type=1326 audit(1785101222.380:7588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.9.9975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 702.074552][ T28] audit: type=1326 audit(1785101222.380:7589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.9.9975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 702.116592][ T28] audit: type=1326 audit(1785101222.380:7590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.9.9975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 702.157232][ T28] audit: type=1326 audit(1785101222.417:7591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.9.9975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 702.185945][ T28] audit: type=1326 audit(1785101222.417:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3001 comm="syz.9.9975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 702.486996][ T3029] netlink: 'syz.1.9982': attribute type 20 has an invalid length. [ 702.504880][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9982'. [ 702.526628][ T3029] netlink: 'syz.1.9982': attribute type 20 has an invalid length. [ 702.540907][ T3029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9982'. [ 702.553619][ T3028] netlink: 'syz.3.9980': attribute type 13 has an invalid length. [ 702.566652][ T3028] netlink: 'syz.3.9980': attribute type 17 has an invalid length. [ 702.582085][T20378] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.593702][T20378] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.832800][ T3028] bond3: left allmulticast mode [ 702.988285][ T3028] ip6gre1: left allmulticast mode [ 703.080525][ T3042] loop8: detected capacity change from 0 to 128 [ 703.098383][ T3028] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 703.144982][T20378] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.172920][T20378] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.367345][ T3068] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9997'. [ 705.647630][ T28] audit: type=1326 audit(1785101225.796:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.1.10008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 705.699559][ T28] audit: type=1326 audit(1785101225.824:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.1.10008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 705.727438][ T28] audit: type=1326 audit(1785101225.824:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.1.10008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 705.791968][ T28] audit: type=1326 audit(1785101225.824:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.1.10008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 705.853345][ T28] audit: type=1326 audit(1785101225.824:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3107 comm="syz.1.10008" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 706.963354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.972322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.981225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.990140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.934509][ T3198] loop8: detected capacity change from 0 to 512 [ 709.949164][ T3198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.977021][ T3198] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.992813][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10035'. [ 710.002074][ T3198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10035'. [ 710.064471][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 710.064505][ T28] audit: type=1326 audit(1785101229.932:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.171883][ T28] audit: type=1326 audit(1785101229.932:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.229555][ T28] audit: type=1326 audit(1785101229.932:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.274959][ T28] audit: type=1326 audit(1785101229.932:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.304479][ T28] audit: type=1326 audit(1785101229.960:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.346930][ T28] audit: type=1326 audit(1785101229.960:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.378433][ T28] audit: type=1326 audit(1785101229.960:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.378605][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.405688][ T28] audit: type=1326 audit(1785101229.960:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.532238][ T28] audit: type=1326 audit(1785101229.960:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.572397][ T28] audit: type=1326 audit(1785101229.960:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3205 comm="syz.3.10036" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 710.630392][ T3217] netlink: 192436 bytes leftover after parsing attributes in process `syz.9.10041'. [ 712.407142][ T3254] bond0: (slave team0): Releasing backup interface [ 712.547369][ T3254] bridge_slave_0: left allmulticast mode [ 712.584229][ T3254] bridge_slave_0: left promiscuous mode [ 712.638569][ T3254] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.705111][ T3254] bridge_slave_1: left allmulticast mode [ 712.711732][ T3254] bridge_slave_1: left promiscuous mode [ 712.723465][ T3254] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.740435][ T3262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10057'. [ 712.753796][ T3254] bond0: (slave bond_slave_0): Releasing backup interface [ 712.771145][ T3254] bond0: (slave bond_slave_1): Releasing backup interface [ 712.809455][ T3254] team0: Port device team_slave_0 removed [ 712.821232][ T3254] team0: Port device team_slave_1 removed [ 712.833599][ T3254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 712.864210][ T3255] team0: Port device xfrm0 added [ 712.869911][ T3256] tipc: Enabled bearer , priority 0 [ 713.118386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.126721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.134996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.143276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.612546][ T3297] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10065'. [ 713.853693][ T3305] --map-set only usable from mangle table [ 714.163573][ T3313] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10073'. [ 714.686972][ T3319] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 714.861068][ T3324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10077'. [ 714.895549][ T3324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3324 comm=syz.4.10077 [ 714.991587][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10080'. [ 715.010721][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10080'. [ 715.046407][ T3332] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10081'. [ 716.446816][ T3391] netlink: 380 bytes leftover after parsing attributes in process `syz.1.10092'. [ 717.423111][ T3425] xt_connbytes: Forcing CT accounting to be enabled [ 717.480333][ T3425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.439195][ T3468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10119'. [ 718.504183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.512552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.520867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.529146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.614517][ T3477] IPVS: Unknown mcast interface: vcan0 [ 718.626109][ T3477] netlink: 'syz.1.10123': attribute type 2 has an invalid length. [ 718.635118][ T3475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10122'. [ 718.697033][ T3479] netlink: 'syz.4.10124': attribute type 21 has an invalid length. [ 718.715268][ T3477] 0: entered promiscuous mode [ 718.725423][ T3479] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.745554][ T3479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 718.753410][ T3479] IPv6: NLM_F_CREATE should be set when creating new route [ 718.761204][ T3479] IPv6: NLM_F_CREATE should be set when creating new route [ 718.769077][ T3479] IPv6: NLM_F_CREATE should be set when creating new route [ 718.834262][ T3485] netlink: 'syz.4.10124': attribute type 21 has an invalid length. [ 718.846721][ T3482] tipc: Failed to remove unknown binding: 66,0,0/0:528516888/528516889 [ 718.868351][ T3485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 718.876054][ T3482] tipc: Failed to remove unknown binding: 66,0,0/0:528516888/528516889 [ 718.971743][ T3479] vlan2: entered promiscuous mode [ 718.986108][ T3479] bridge0: entered promiscuous mode [ 719.391911][ T3503] infiniband syz1: set active [ 719.403686][ T3503] infiniband syz1: added syz_tun [ 719.422759][ T3503] RDS/IB: syz1: added [ 719.430937][ T3503] smc: adding ib device syz1 with port count 1 [ 719.437498][ T3503] smc: ib device syz1 port 1 has no pnetid [ 719.918988][ T3521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10138'. [ 721.296378][ T3556] netlink: 'syz.4.10149': attribute type 2 has an invalid length. [ 721.618298][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 721.618332][ T28] audit: type=1400 audit(1785101240.740:7655): avc: denied { write } for pid=3560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.731156][ T28] audit: type=1400 audit(1785101240.843:7656): avc: denied { write } for pid=3571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.002184][ T28] audit: type=1400 audit(1785101241.105:7657): avc: denied { write } for pid=3574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.116058][ T28] audit: type=1400 audit(1785101241.199:7658): avc: denied { write } for pid=3591 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.433285][ T28] audit: type=1400 audit(1785101241.498:7659): avc: denied { write } for pid=3597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.527582][ T28] audit: type=1326 audit(1785101241.545:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.8.10157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 722.566293][ T3639] netlink: 'syz.9.10160': attribute type 21 has an invalid length. [ 722.574843][ T3639] IPv6: NLM_F_CREATE should be specified when creating new route [ 722.585542][ T3639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.593242][ T3639] IPv6: NLM_F_CREATE should be set when creating new route [ 722.601294][ T3639] IPv6: NLM_F_CREATE should be set when creating new route [ 722.609099][ T3639] IPv6: NLM_F_CREATE should be set when creating new route [ 722.621141][ T28] audit: type=1326 audit(1785101241.545:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.8.10157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 722.659061][ T3643] netlink: 'syz.9.10160': attribute type 21 has an invalid length. [ 722.675051][ T3643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.683543][ T28] audit: type=1326 audit(1785101241.545:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.8.10157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 722.785596][ T28] audit: type=1326 audit(1785101241.555:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3621 comm="syz.8.10157" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 722.813178][ T28] audit: type=1400 audit(1785101241.564:7664): avc: denied { write } for pid=3634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.868771][ T3639] vlan0: entered promiscuous mode [ 724.071724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.080766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.089630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.098445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.537208][ T3693] netlink: 380 bytes leftover after parsing attributes in process `syz.9.10168'. [ 727.041711][ T3710] uprobe: syz.1.10174:3710 failed to unregister, leaking uprobe [ 728.178847][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 728.178916][ T28] audit: type=1400 audit(1785101246.879:7726): avc: denied { append } for pid=3749 comm="syz.8.10187" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 728.779763][ T3775] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 728.784855][ T3776] netlink: 'syz.1.10193': attribute type 21 has an invalid length. [ 728.792112][ T3771] netlink: 'syz.4.10194': attribute type 2 has an invalid length. [ 728.798056][ T3776] IPv6: NLM_F_CREATE should be specified when creating new route [ 728.815268][ T3776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.822780][ T3776] IPv6: NLM_F_CREATE should be set when creating new route [ 728.827122][ T3771] 0: entered promiscuous mode [ 728.830256][ T3776] IPv6: NLM_F_CREATE should be set when creating new route [ 728.830286][ T3776] IPv6: NLM_F_CREATE should be set when creating new route [ 728.850278][ T3776] netlink: 'syz.1.10193': attribute type 21 has an invalid length. [ 728.864200][ T3776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.938607][ T3776] vlan3: entered promiscuous mode [ 728.944002][ T3776] bridge0: entered promiscuous mode [ 729.532164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.540507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.548813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.071148][ T3802] netlink: 'syz.9.10204': attribute type 83 has an invalid length. [ 730.388094][ T28] audit: type=1326 audit(1785101248.947:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.425189][ T28] audit: type=1326 audit(1785101248.975:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.458212][ T28] audit: type=1326 audit(1785101248.975:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.485836][ T28] audit: type=1326 audit(1785101248.975:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.550892][ T28] audit: type=1326 audit(1785101248.975:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.579018][ T28] audit: type=1326 audit(1785101248.975:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.597277][ T3824] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 730.625498][ T28] audit: type=1326 audit(1785101248.975:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.653021][ T28] audit: type=1326 audit(1785101248.975:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.680505][ T28] audit: type=1326 audit(1785101248.975:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.1.10208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ffa1032de99 code=0x7ffc0000 [ 730.829699][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10216'. [ 730.839115][ T3837] netlink: 'syz.3.10216': attribute type 10 has an invalid length. [ 730.848013][ T3837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10216'. [ 731.232353][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10217'. [ 731.344615][ T3840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3840 comm=syz.9.10217 [ 732.870462][ T3891] netlink: 'syz.3.10233': attribute type 21 has an invalid length. [ 732.886469][ T3891] IPv6: NLM_F_CREATE should be specified when creating new route [ 732.905847][ T3891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.913756][ T3891] IPv6: NLM_F_CREATE should be set when creating new route [ 732.921914][ T3891] IPv6: NLM_F_CREATE should be set when creating new route [ 732.929723][ T3891] IPv6: NLM_F_CREATE should be set when creating new route [ 732.951788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.960643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.971020][ T3891] netlink: 'syz.3.10233': attribute type 21 has an invalid length. [ 732.979543][ T3891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.997944][ T3894] tipc: Failed to remove unknown binding: 66,0,0/4:1334578967/1334578968 [ 733.007281][ T3894] tipc: Failed to remove unknown binding: 66,0,0/4:1334578967/1334578968 [ 733.062819][ T3891] vlan4: entered promiscuous mode [ 733.117002][ T3891] bridge0: entered promiscuous mode [ 733.172788][ T3891] vlan0: entered promiscuous mode [ 734.221913][ T3917] gre2: left promiscuous mode [ 734.244306][ T3917] gretap2: left promiscuous mode [ 734.259356][ T3917] bond13: left promiscuous mode [ 734.269194][ T3917] bridge4: left promiscuous mode [ 734.288161][ T3917] team1: left promiscuous mode [ 734.293393][ T3917] team1: left allmulticast mode [ 734.301928][ T3917] vlan3: left allmulticast mode [ 734.307147][ T3917] bond17: left allmulticast mode [ 734.314358][ T3917] vlan4: left promiscuous mode [ 734.319645][ T3917] bridge0: left promiscuous mode [ 734.325145][ T3917] vlan0: left promiscuous mode [ 734.330439][ T3917] geneve0: left promiscuous mode [ 734.338773][T20350] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.354116][T20350] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.376107][T20350] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 734.397485][T20350] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.415914][T20350] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.433538][T20350] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 734.458974][T20350] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.485987][T20350] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.506566][T20350] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 734.526290][T20350] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.543285][T20350] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.579280][T20350] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 734.657456][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10247'. [ 735.081149][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 735.081241][ T28] audit: type=1326 audit(1785101253.346:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2249dde99 code=0x7ffc0000 [ 735.166884][ T28] audit: type=1326 audit(1785101253.346:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2249dde99 code=0x7ffc0000 [ 735.244587][ T28] audit: type=1326 audit(1785101253.374:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2249dde99 code=0x7ffc0000 [ 735.310254][ T28] audit: type=1326 audit(1785101253.374:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2249dde99 code=0x7ffc0000 [ 735.371983][ T28] audit: type=1326 audit(1785101253.374:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc2249dde99 code=0x7ffc0000 [ 735.421223][ T28] audit: type=1326 audit(1785101253.449:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc22499e6ce code=0x7ffc0000 [ 735.461842][ T28] audit: type=1326 audit(1785101253.449:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc22499e6ce code=0x7ffc0000 [ 735.511393][ T28] audit: type=1326 audit(1785101253.449:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc22499e6ce code=0x7ffc0000 [ 735.549973][ T28] audit: type=1326 audit(1785101253.458:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc22499e6ce code=0x7ffc0000 [ 735.588049][ T28] audit: type=1326 audit(1785101253.458:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.10249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc22499e6ce code=0x7ffc0000 [ 736.361882][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10264'. [ 736.413371][ T3986] loop8: detected capacity change from 0 to 256 [ 737.055164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.063518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.071849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.466385][ T4010] netlink: 'syz.8.10272': attribute type 21 has an invalid length. [ 737.484668][ T4010] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.505184][ T4010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.512944][ T4010] IPv6: NLM_F_CREATE should be set when creating new route [ 737.520641][ T4010] IPv6: NLM_F_CREATE should be set when creating new route [ 737.522215][ T4011] netlink: 'syz.8.10272': attribute type 21 has an invalid length. [ 737.528448][ T4010] IPv6: NLM_F_CREATE should be set when creating new route [ 737.544876][ T4011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.669105][ T4010] vlan2: entered promiscuous mode [ 737.679442][ T4010] bridge0: entered promiscuous mode [ 737.826053][ T4024] loop8: detected capacity change from 0 to 1024 [ 737.890389][ T4024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 737.931317][ T4024] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.014261][T20350] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm kworker/u8:34: lblock 0 mapped to illegal pblock 0 (length 6) [ 738.080729][T20350] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 738.118945][T20350] EXT4-fs (loop8): This should not happen!! Data will be lost [ 738.118945][T20350] [ 738.153454][T20350] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:34: lblock 8 mapped to illegal pblock 8 (length 8) [ 738.206795][T20350] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 738.236348][ T4031] netlink: 'syz.1.10278': attribute type 16 has an invalid length. [ 738.253828][T20350] EXT4-fs (loop8): This should not happen!! Data will be lost [ 738.253828][T20350] [ 738.276592][ T4031] netlink: 'syz.1.10278': attribute type 17 has an invalid length. [ 738.385102][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.408565][ T4049] netlink: 'syz.3.10280': attribute type 1 has an invalid length. [ 738.419382][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.542921][ T4031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.564838][ T4031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.573718][ T4054] netlink: 'syz.3.10280': attribute type 10 has an invalid length. [ 738.590018][ T4054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10280'. [ 738.591671][ T4031] veth1_vlan: left promiscuous mode [ 738.620194][ T4031] veth0_vlan: left promiscuous mode [ 738.640345][ T4031] veth0_vlan: entered promiscuous mode [ 738.661026][ T4031] veth1_vlan: entered promiscuous mode [ 738.704743][ T4031] veth1_macvtap: left promiscuous mode [ 738.723858][ T4031] veth0_macvtap: left promiscuous mode [ 738.742160][ T4031] veth0_macvtap: entered promiscuous mode [ 738.762103][ T4031] veth1_macvtap: entered promiscuous mode [ 738.798654][ T4031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.816365][ T4024] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10276: bg 0: block 112: padding at end of block bitmap is not set [ 738.822351][ T4031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.840242][ T4024] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 738.842258][ T4031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.863713][ T4031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.875271][ T4024] EXT4-fs (loop8): This should not happen!! Data will be lost [ 738.875271][ T4024] [ 738.899637][ T4024] EXT4-fs (loop8): Total free blocks count 0 [ 738.910457][ T4049] 8021q: adding VLAN 0 to HW filter on device bond18 [ 738.914893][ T4024] EXT4-fs (loop8): Free/Dirty block details [ 738.927874][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.934988][ T8787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.967395][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.974534][ T8787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.984375][ T4024] EXT4-fs (loop8): free_blocks=0 [ 739.049371][ T4061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10282'. [ 739.126208][ T4050] bond18: (slave veth25): Enslaving as an active interface with a down link [ 739.159273][ T4054] : entered promiscuous mode [ 739.161115][T32284] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 739.176141][ T23] syz0: Port: 1 Link ACTIVE [ 739.180999][T20342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.194595][T20342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.240325][T20342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.264981][T20342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.292947][T20350] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.322585][T20350] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.330637][ T5144] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.428114][ T4075] netlink: 'syz.9.10287': attribute type 21 has an invalid length. [ 739.453795][ T4075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.473295][ T4079] ip6erspan0: entered allmulticast mode [ 739.482487][ T4080] netlink: 'syz.9.10287': attribute type 21 has an invalid length. [ 739.497406][ T4080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.566516][ T23] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.625941][ T4075] vlan0: entered promiscuous mode [ 739.681409][ T4088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10291'. [ 739.772379][ T4088] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4088 comm=syz.3.10291 [ 739.813228][ T4090] tipc: Failed to remove unknown binding: 66,0,0/0:2069841023/2069841025 [ 739.823556][ T23] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.829630][ T4090] tipc: Failed to remove unknown binding: 66,0,0/0:2069841023/2069841024 [ 739.860734][ T4090] tipc: Failed to remove unknown binding: 66,0,0/0:2069841023/2069841025 [ 739.874623][ T4090] tipc: Failed to remove unknown binding: 66,0,0/0:2069841023/2069841024 [ 740.497845][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 740.497863][ T28] audit: type=1326 audit(1785101258.408:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.10296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 740.580926][ T28] audit: type=1326 audit(1785101258.446:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.10296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 740.651555][ T28] audit: type=1326 audit(1785101258.483:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.10296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 740.704329][ T28] audit: type=1326 audit(1785101258.483:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.10296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 741.203214][ T4134] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.10307'. [ 741.220693][ T4128] uprobe: syz.8.10304:4128 failed to unregister, leaking uprobe [ 741.255593][ T4128] uprobe: syz.8.10304:4128 failed to unregister, leaking uprobe [ 741.386807][ T4137] netlink: 'syz.9.10308': attribute type 16 has an invalid length. [ 741.394960][ T4137] netlink: 'syz.9.10308': attribute type 17 has an invalid length. [ 741.429618][ T4137] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.454622][ T4137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.509435][ T4137] veth1_macvtap: left promiscuous mode [ 741.526129][ T4137] veth1_macvtap: entered promiscuous mode [ 741.541390][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.556643][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.566934][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.578666][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.616412][ T4137] bridge2: left promiscuous mode [ 741.717428][ T4137] bridge3: left promiscuous mode [ 741.744258][ T4137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 741.781365][ T4137] geneve2: left promiscuous mode [ 741.786653][ T4137] geneve2: left allmulticast mode [ 741.842455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.850767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.859070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.868089][T20348] bond1: (slave gretap1): link status up again after 0 ms [ 741.896521][T20346] bond1: (slave gretap1): link status up again after 0 ms [ 741.918514][T20357] bond1: (slave gretap1): link status up again after 0 ms [ 741.938535][T20357] bond1: (slave gretap1): link status up again after 0 ms [ 741.970455][ T4137] ip6gre1: left promiscuous mode [ 741.988186][ T4137] ip6gre1: left allmulticast mode [ 742.021971][ T4137] xfrm1: left allmulticast mode [ 742.171922][ T4137] bond2: left promiscuous mode [ 742.176795][ T4137] vti0: left promiscuous mode [ 742.181839][ T4137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.203863][ T4137] ipvlan2: left allmulticast mode [ 742.209057][ T4137] ip6gretap0: left allmulticast mode [ 742.216229][ T4137] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 742.225002][ T4137] ip6erspan0: left allmulticast mode [ 742.232486][ T4137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.276446][ T4137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 742.290876][ T4137] team1: left promiscuous mode [ 742.302571][ T4137] team1: left allmulticast mode [ 742.317064][ T4137] team2: left promiscuous mode [ 742.322398][ T4137] team2: left allmulticast mode [ 742.331319][ T4137] bond5: left allmulticast mode [ 742.337137][ T4137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 742.372005][ T4137] bond8: left promiscuous mode [ 742.400443][ T4137] macvlan0: left promiscuous mode [ 742.419707][T20378] net_ratelimit: 20 callbacks suppressed [ 742.419744][T20378] bond1: (slave gretap1): link status up again after 0 ms [ 742.461612][T20350] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.469103][T20350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.477135][T20357] bond1: (slave gretap1): link status up again after 0 ms [ 742.482002][ T4150] syz.1.10313 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 742.509682][T20378] bond1: (slave gretap1): link status up again after 0 ms [ 742.520749][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.1.10313 Not tainted syzkaller #0 PREEMPT(lazy) [ 742.520785][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 742.520802][ T4150] Call Trace: [ 742.520810][ T4150] [ 742.520821][ T4150] __dump_stack+0x1d/0x30 [ 742.520969][ T4150] dump_stack_lvl+0x95/0xd0 [ 742.521066][ T4150] dump_stack+0x15/0x1b [ 742.521088][ T4150] dump_header+0x80/0x240 [ 742.521116][ T4150] oom_kill_process+0x295/0x350 [ 742.521223][ T4150] out_of_memory+0x981/0xbc0 [ 742.521257][ T4150] try_charge_memcg+0x621/0xa00 [ 742.521287][ T4150] ? __rcu_read_unlock+0x4e/0x70 [ 742.521325][ T4150] __memcg_kmem_charge_page+0x199/0x3a0 [ 742.521381][ T4150] __alloc_frozen_pages_noprof+0x18a/0x350 [ 742.521416][ T4150] alloc_pages_mpol+0xa9/0x1d0 [ 742.521502][ T4150] alloc_pages_noprof+0x8f/0x140 [ 742.521541][ T4150] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 742.521622][ T4150] __kvmalloc_node_noprof+0x3a0/0x590 [ 742.521652][ T4150] ? futex_hash_allocate+0x192/0x920 [ 742.521720][ T4150] ? futex_hash_allocate+0x192/0x920 [ 742.521747][ T4150] ? futex_hash_allocate+0x192/0x920 [ 742.521801][ T4150] futex_hash_allocate+0x192/0x920 [ 742.521829][ T4150] ? cap_task_prctl+0x13f/0x6b0 [ 742.521925][ T4150] futex_hash_prctl+0xd8/0xf0 [ 742.522005][ T4150] __se_sys_prctl+0x4f4/0x13b0 [ 742.522038][ T4150] __x64_sys_prctl+0x67/0x80 [ 742.522065][ T4150] x64_sys_call+0x2533/0x3020 [ 742.522162][ T4150] do_syscall_64+0x136/0x3c0 [ 742.522194][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.522239][ T4150] RIP: 0033:0x7ffa1032de99 [ 742.522257][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.522277][ T4150] RSP: 002b:00007ffa0ed87028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 742.522302][ T4150] RAX: ffffffffffffffda RBX: 00007ffa105b5fa0 RCX: 00007ffa1032de99 [ 742.522369][ T4150] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 742.522386][ T4150] RBP: 00007ffa103c3eaf R08: 0000000000000000 R09: 0000000000000000 [ 742.522404][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.522420][ T4150] R13: 00007ffa105b6038 R14: 00007ffa105b5fa0 R15: 00007ffee74e7788 [ 742.522440][ T4150] [ 742.526035][ T4150] memory: usage 254940kB, limit 307200kB, failcnt 122 [ 742.534266][T20350] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.560396][ T4150] memory+swap: usage 232680kB, limit 9007199254740988kB, failcnt 0 [ 742.562244][T20350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.584566][ T4150] kmem: usage 130820kB, limit 9007199254740988kB, failcnt 0 [ 742.619783][T20350] bridge0: port 3(vlan2) entered blocking state [ 742.624318][T20378] bond1: (slave gretap1): link status up again after 0 ms [ 742.629903][T20350] bridge0: port 3(vlan2) entered forwarding state [ 742.666363][T20378] bond1: (slave gretap1): link status up again after 0 ms [ 742.687110][T20378] bond1: (slave gretap1): link status up again after 0 ms [ 742.806734][ T4150] Memory cgroup stats for [ 742.848822][T20350] bridge0: port 4(team0) entered blocking state [ 742.860288][T20350] bridge0: port 4(team0) entered forwarding state [ 742.881714][ T4150] /syz1: [ 742.882168][ T4150] cache 56782848 [ 742.897580][T20342] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.909153][ T4169] netlink: 'syz.9.10318': attribute type 21 has an invalid length. [ 742.916807][T20342] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.944993][ T4150] rss 901120 [ 742.948677][T20342] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.963969][ T4172] netlink: 'syz.9.10318': attribute type 21 has an invalid length. [ 742.975423][ T4172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.983118][ T4172] IPv6: NLM_F_CREATE should be set when creating new route [ 742.990753][ T4172] IPv6: NLM_F_CREATE should be set when creating new route [ 742.998530][ T4172] IPv6: NLM_F_CREATE should be set when creating new route [ 743.006430][ T4169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 743.008373][ T4150] shmem 56569856 [ 743.023986][T20342] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.040479][ T4171] loop8: detected capacity change from 0 to 1024 [ 743.047424][ T4150] mapped_file 0 [ 743.050530][T20346] bond1: (slave gretap1): link status up again after 0 ms [ 743.062582][T20342] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.073581][ T4150] dirty 0 [ 743.078291][T20350] bond1: (slave gretap1): link status up again after 0 ms [ 743.088811][ T4171] EXT4-fs: Ignoring removed bh option [ 743.106526][ T4150] writeback 0 [ 743.113564][T20342] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.125851][ T4150] workingset_refault_anon 1302 [ 743.154282][ T4150] workingset_refault_file 799 [ 743.159336][T20350] bond1: (slave gretap1): link status up again after 0 ms [ 743.177195][T20342] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.177219][ T4171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.187517][T20342] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.198796][T20350] bond1: (slave gretap1): link status up again after 0 ms [ 743.208356][ T4150] swap 12881920 [ 743.220393][ T4150] swapcached 24154112 [ 743.224855][ T4150] pgpgin 199017 [ 743.231847][ T360] bond4: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 743.241512][ T4150] pgpgout 184933 [ 743.248457][ T360] bond4: active interface up! [ 743.253393][ T4150] pgfault 142197 [ 743.253406][ T4150] pgmajfault 2229 [ 743.253416][ T4150] inactive_anon 8773632 [ 743.253426][ T4150] active_anon 48701440 [ 743.253495][ T4150] inactive_file 65536 [ 743.253504][ T4150] active_file 20480 [ 743.253512][ T4150] unevictable 126976 [ 743.253520][ T4150] hierarchical_memory_limit 314572800 [ 743.253529][ T4150] hierarchical_memsw_limit 9223372036854771712 [ 743.253539][ T4150] total_cache 56782848 [ 743.253548][ T4150] total_rss 901120 [ 743.253558][ T4150] total_shmem 56569856 [ 743.336583][ T28] audit: type=1400 audit(1785101261.066:7840): avc: denied { write } for pid=4170 comm="syz.8.10319" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.338130][ T4169] vlan0: entered promiscuous mode [ 743.372304][ T4182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10320'. [ 743.377089][T20346] ip6_tunnel:  xmit: Local address not yet configured! [ 743.382134][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 743.392891][T20346] ip6_tunnel:  xmit: Local address not yet configured! [ 743.398541][ T4150] total_mapped_file 0 [ 743.403393][ T5135] ip6_tunnel:  xmit: Local address not yet configured! [ 743.443844][ T4150] total_dirty 0 [ 743.453200][ T4150] total_writeback 0 [ 743.460111][ T5135] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 743.466569][ T4150] total_workingset_refault_anon 1302 [ 743.502785][ T4150] total_workingset_refault_file 799 [ 743.503321][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.517130][ T4150] total_swap 12881920 [ 743.524667][ T4182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4182 comm=syz.4.10320 [ 743.539937][ T4150] total_swapcached 24154112 [ 743.549071][ T4150] total_pgpgin 199017 [ 743.562869][ T4150] total_pgpgout 184933 [ 743.568015][ T4150] total_pgfault 142197 [ 743.580940][ T4150] total_pgmajfault 2229 [ 743.594168][ T4150] total_inactive_anon 8773632 [ 743.608505][ T4150] total_active_anon 48701440 [ 743.622947][ T4150] total_inactive_file 65536 [ 743.639379][ T4150] total_active_file 20480 [ 743.657027][ T4150] total_unevictable 126976 [ 743.670131][ T4150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10313,pid=4149,uid=0 [ 743.694142][ T4150] Memory cgroup out of memory: Killed process 4150 (syz.1.10313) total-vm:96312kB, anon-rss:1428kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 743.856966][ T4191] uprobe: syz.9.10323:4191 failed to unregister, leaking uprobe [ 743.873233][ T4191] uprobe: syz.9.10323:4191 failed to unregister, leaking uprobe [ 743.921936][ T28] audit: type=1400 audit(1785101261.609:7841): avc: denied { setopt } for pid=4196 comm="syz.1.10336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 744.769841][ T4221] 9pnet_fd: p9_fd_create_unix (4221): problem connecting socket: ./file0: -111 [ 744.779644][ T4223] netlink: 'syz.4.10327': attribute type 16 has an invalid length. [ 744.797497][ T4223] netlink: 'syz.4.10327': attribute type 17 has an invalid length. [ 744.869118][ T4227] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10332'. [ 744.969293][ T4223] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.978880][ T4223] tipc: Resetting bearer [ 744.986688][ T4223] tipc: Resetting bearer [ 744.994890][ T4223] tipc: Resetting bearer [ 745.134245][ T4223] bond1: left promiscuous mode [ 745.139328][ T4223] bridge2: left promiscuous mode [ 745.157781][ T4223] geneve2: left promiscuous mode [ 745.165982][ T4223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.272197][ T360] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 745.272287][ T360] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 745.303955][ T360] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 745.374325][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10337'. [ 745.394514][ T4242] team1: entered promiscuous mode [ 745.399905][ T4242] team1: entered allmulticast mode [ 745.406196][ T4242] 8021q: adding VLAN 0 to HW filter on device team1 [ 745.420027][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10337'. [ 745.430922][ T4242] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 745.451293][ T4242] team2: entered promiscuous mode [ 745.457216][ T4242] team2: entered allmulticast mode [ 745.462969][ T4242] 8021q: adding VLAN 0 to HW filter on device team2 [ 745.817892][ T5137] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 746.176221][ T4261] bridge_slave_1: left allmulticast mode [ 746.182184][ T4261] bridge_slave_1: left promiscuous mode [ 746.188003][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.204455][ T4261] bond0: (slave bond_slave_0): Releasing backup interface [ 746.225824][ T4261] bond0: (slave bond_slave_1): Releasing backup interface [ 746.260532][ T4261] team0: Port device team_slave_0 removed [ 746.269521][ T28] audit: type=1400 audit(1785101263.808:7842): avc: denied { create } for pid=4265 comm="syz.1.10345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 746.293040][ T4261] team0: Port device team_slave_1 removed [ 746.325495][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.357855][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.399052][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.419528][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.469043][ T4263] team0: Mode changed to "activebackup" [ 747.490330][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 747.671495][ T4312] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10360'. [ 747.875497][T20346] net_ratelimit: 39 callbacks suppressed [ 747.875543][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 748.029688][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 748.169637][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 748.191254][ T4326] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 748.232671][ T4328] loop8: detected capacity change from 0 to 512 [ 748.269729][ T4328] EXT4-fs: Ignoring removed bh option [ 748.284439][ T4328] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 748.308550][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 748.317077][ T4328] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.10366: iget: bad i_size value: 3298534883338 [ 748.364960][ T4291] syz.1.10353 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 748.388959][ T4328] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 748.391872][ T4328] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.10366: couldn't read orphan inode 15 (err -117) [ 748.401720][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 748.401750][ C1] EXT4-fs (loop8): initial error at time 1785101265: ext4_orphan_get:1399: inode 15 [ 748.401780][ C1] EXT4-fs (loop8): last error at time 1785101265: ext4_orphan_get:1399: inode 15 [ 748.447537][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 748.467625][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.1.10353 Not tainted syzkaller #0 PREEMPT(lazy) [ 748.467659][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 748.467674][ T4291] Call Trace: [ 748.467683][ T4291] [ 748.467694][ T4291] __dump_stack+0x1d/0x30 [ 748.467726][ T4291] dump_stack_lvl+0x95/0xd0 [ 748.467785][ T4291] dump_stack+0x15/0x1b [ 748.467807][ T4291] dump_header+0x80/0x240 [ 748.467829][ T4291] oom_kill_process+0x295/0x350 [ 748.467910][ T4291] out_of_memory+0x981/0xbc0 [ 748.467945][ T4291] try_charge_memcg+0x621/0xa00 [ 748.468029][ T4291] ? __rcu_read_unlock+0x4e/0x70 [ 748.468070][ T4291] __memcg_kmem_charge_page+0x199/0x3a0 [ 748.468107][ T4291] __alloc_frozen_pages_noprof+0x18a/0x350 [ 748.468199][ T4291] alloc_pages_mpol+0xa9/0x1d0 [ 748.468230][ T4291] alloc_pages_noprof+0x8f/0x140 [ 748.468391][ T4291] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 748.468437][ T4291] __kvmalloc_node_noprof+0x3a0/0x590 [ 748.468546][ T4291] ? futex_hash_allocate+0x192/0x920 [ 748.468575][ T4291] ? futex_hash_allocate+0x192/0x920 [ 748.468602][ T4291] ? futex_hash_allocate+0x192/0x920 [ 748.468631][ T4291] futex_hash_allocate+0x192/0x920 [ 748.468676][ T4291] ? __se_sys_prctl+0x4e5/0x13b0 [ 748.468712][ T4291] futex_hash_prctl+0xd8/0xf0 [ 748.468738][ T4291] __se_sys_prctl+0x4f4/0x13b0 [ 748.468774][ T4291] __x64_sys_prctl+0x67/0x80 [ 748.468808][ T4291] x64_sys_call+0x2533/0x3020 [ 748.468883][ T4291] do_syscall_64+0x136/0x3c0 [ 748.468909][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.468934][ T4291] RIP: 0033:0x7ffa1032de99 [ 748.468953][ T4291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.469038][ T4291] RSP: 002b:00007ffa0ed87028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 748.469108][ T4291] RAX: ffffffffffffffda RBX: 00007ffa105b5fa0 RCX: 00007ffa1032de99 [ 748.469124][ T4291] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 748.469139][ T4291] RBP: 00007ffa103c3eaf R08: 0000000000000000 R09: 0000000000000000 [ 748.469154][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.469171][ T4291] R13: 00007ffa105b6038 R14: 00007ffa105b5fa0 R15: 00007ffee74e7788 [ 748.469237][ T4291] [ 748.715744][ T4291] memory: usage 307200kB, limit 307200kB, failcnt 177 [ 748.722531][ T4291] memory+swap: usage 319780kB, limit 9007199254740988kB, failcnt 0 [ 748.730501][ T4291] kmem: usage 250892kB, limit 9007199254740988kB, failcnt 0 [ 748.733987][ T4328] loop8: lost filesystem error report for type 5 error -117 [ 748.737801][ T4291] Memory cgroup stats for /syz1: [ 748.738146][ T4291] cache 56696832 [ 748.738158][ T4291] rss 897024 [ 748.738168][ T4291] shmem 56569856 [ 748.738177][ T4291] mapped_file 0 [ 748.738187][ T4291] dirty 0 [ 748.738197][ T4291] writeback 0 [ 748.738206][ T4291] workingset_refault_anon 1302 [ 748.738217][ T4291] workingset_refault_file 799 [ 748.738228][ T4291] swap 12881920 [ 748.738237][ T4291] swapcached 24154112 [ 748.738247][ T4291] pgpgin 205516 [ 748.738296][ T4291] pgpgout 191454 [ 748.738307][ T4291] pgfault 149270 [ 748.738338][ T4291] pgmajfault 2229 [ 748.738416][ T4291] inactive_anon 8609792 [ 748.738425][ T4291] active_anon 48861184 [ 748.738435][ T4291] inactive_file 0 [ 748.738445][ T4291] active_file 0 [ 748.738454][ T4291] unevictable 126976 [ 748.738465][ T4291] hierarchical_memory_limit 314572800 [ 748.738476][ T4291] hierarchical_memsw_limit 9223372036854771712 [ 748.738488][ T4291] total_cache 56696832 [ 748.738498][ T4291] total_rss 897024 [ 748.738509][ T4291] total_shmem 56569856 [ 748.738519][ T4291] total_mapped_file 0 [ 748.738529][ T4291] total_dirty 0 [ 748.738538][ T4291] total_writeback 0 [ 748.738548][ T4291] total_workingset_refault_anon 1302 [ 748.738558][ T4291] total_workingset_refault_file 799 [ 748.738618][ T4291] total_swap 12881920 [ 748.738628][ T4291] total_swapcached 24154112 [ 748.738638][ T4291] total_pgpgin 205516 [ 748.738648][ T4291] total_pgpgout 191454 [ 748.738658][ T4291] total_pgfault 149270 [ 748.738731][ T4291] total_pgmajfault 2229 [ 748.738741][ T4291] total_inactive_anon 8609792 [ 748.738752][ T4291] total_active_anon 48861184 [ 748.738762][ T4291] total_inactive_file 0 [ 748.738772][ T4291] total_active_file 0 [ 748.738781][ T4291] total_unevictable 126976 [ 748.738792][ T4291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10353,pid=4289,uid=0 [ 748.739004][ T4291] Memory cgroup out of memory: Killed process 4289 (syz.1.10353) total-vm:96228kB, anon-rss:1424kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 748.739992][T20378] bond1: (slave gretap1): failed to get link speed/duplex [ 748.928974][T20378] bond1: (slave gretap1): failed to get link speed/duplex [ 749.050318][T20378] bond1: (slave gretap1): failed to get link speed/duplex [ 749.139679][ T4334] all: renamed from bridge_slave_1 [ 749.803607][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 750.124297][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 750.145773][ T4311] uprobe: syz.4.10361:4311 failed to unregister, leaking uprobe [ 750.145909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.156964][ T4311] uprobe: syz.4.10361:4311 failed to unregister, leaking uprobe [ 750.249434][ T28] audit: type=1326 audit(1785101267.532:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.4.10369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2249dde99 code=0x0 [ 750.325680][ T4347] netlink: 'syz.1.10372': attribute type 1 has an invalid length. [ 750.404725][ T4347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.428147][ T4328] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.446495][ T4350] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 750.548636][ T4350] bond1: entered allmulticast mode [ 750.565405][ T4347] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 750.776518][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.856150][ T4371] uprobe: syz.3.10381:4371 failed to unregister, leaking uprobe [ 750.867946][ T4371] uprobe: syz.3.10381:4371 failed to unregister, leaking uprobe [ 751.802188][ T4389] x_tables: duplicate underflow at hook 2 [ 751.812283][ T4388] netlink: 'syz.9.10387': attribute type 9 has an invalid length. [ 751.820934][ T4388] netlink: 'syz.9.10387': attribute type 7 has an invalid length. [ 751.829070][ T4388] netlink: 'syz.9.10387': attribute type 8 has an invalid length. [ 752.186744][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 752.457988][ T28] audit: type=1326 audit(1785101269.600:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.483487][ T28] audit: type=1326 audit(1785101269.600:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.531386][ T28] audit: type=1326 audit(1785101269.647:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.569017][ T28] audit: type=1326 audit(1785101269.647:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.656689][ T28] audit: type=1326 audit(1785101269.647:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.720742][ T28] audit: type=1326 audit(1785101269.666:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.763429][ T28] audit: type=1326 audit(1785101269.675:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.810622][ T4410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.833964][ T28] audit: type=1326 audit(1785101269.675:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.916767][ T4410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.930466][ T28] audit: type=1326 audit(1785101269.675:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 752.956929][ T28] audit: type=1326 audit(1785101269.703:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.8.10393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 753.037579][ T4410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.120276][ T4410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.189737][T20342] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.202107][T20342] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.214455][T20350] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.224778][T20342] net_ratelimit: 19 callbacks suppressed [ 753.224797][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 753.240958][T20350] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.324750][ T4441] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 753.342280][ T4442] tipc: Failed to remove unknown binding: 66,0,0/0:1231350801/1231350803 [ 753.350751][ T4442] tipc: Failed to remove unknown binding: 66,0,0/0:1231350801/1231350802 [ 753.359247][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 753.375047][ T4446] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10407'. [ 753.393748][ T4442] tipc: Failed to remove unknown binding: 66,0,0/0:1231350801/1231350803 [ 753.402207][ T4442] tipc: Failed to remove unknown binding: 66,0,0/0:1231350801/1231350802 [ 753.464255][ T4455] netlink: 'syz.8.10410': attribute type 4 has an invalid length. [ 753.468866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.498381][ T4455] netlink: 'syz.8.10410': attribute type 4 has an invalid length. [ 753.512007][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 753.629258][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 753.746736][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 753.874938][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 754.003116][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 754.121535][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 754.344510][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 754.733910][ T4496] tipc: Failed to remove unknown binding: 66,0,0/4:3170748446/3170748448 [ 754.770792][ T4496] tipc: Failed to remove unknown binding: 66,0,0/4:3170748446/3170748447 [ 754.797228][ T4496] tipc: Failed to remove unknown binding: 66,0,0/4:3170748446/3170748448 [ 754.812021][ T4496] tipc: Failed to remove unknown binding: 66,0,0/4:3170748446/3170748447 [ 754.950224][ T4520] netlink: 'syz.8.10429': attribute type 1 has an invalid length. [ 755.026364][ T4520] bridge3: entered promiscuous mode [ 755.059472][ T4520] bond1: (slave bridge3): making interface the new active one [ 755.098092][ T4520] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 755.407430][ T4545] tipc: Failed to remove unknown binding: 66,0,0/4:1589401742/1589401744 [ 755.425984][ T4545] tipc: Failed to remove unknown binding: 66,0,0/4:1589401742/1589401743 [ 755.445557][ T4545] tipc: Failed to remove unknown binding: 66,0,0/4:1589401742/1589401744 [ 755.464814][ T4545] tipc: Failed to remove unknown binding: 66,0,0/4:1589401742/1589401743 [ 756.290335][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 756.938913][ T4586] xt_hashlimit: size too large, truncated to 1048576 [ 757.590128][ T4597] loop8: detected capacity change from 0 to 1024 [ 758.105570][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10462'. [ 758.132909][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10465'. [ 758.341625][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 758.352285][ T4597] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.406658][ T28] kauditd_printk_skb: 587 callbacks suppressed [ 758.406747][ T28] audit: type=1326 audit(1785101275.168:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.9.10467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 758.472952][ T28] audit: type=1326 audit(1785101275.206:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.9.10467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 758.578805][ T28] audit: type=1326 audit(1785101275.328:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.9.10467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 758.618617][ T4631] netlink: 'syz.3.10466': attribute type 16 has an invalid length. [ 758.651807][ T4631] netlink: 'syz.3.10466': attribute type 17 has an invalid length. [ 758.662817][ T28] audit: type=1326 audit(1785101275.393:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.9.10467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 758.680611][ T4631] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.696121][ T4631] : left promiscuous mode [ 758.709379][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.729145][ T4631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.739551][ T4631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.756322][ T4631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.797897][ T4631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 758.810147][ T4631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 758.819436][ T4631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 758.843657][ T4631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.948541][ T4631] bridge0: port 3(vlan0) entered blocking state [ 758.954867][ T4631] bridge0: port 3(vlan0) entered forwarding state [ 758.962691][ T4631] geneve0: entered promiscuous mode [ 758.970765][ T4631] net_ratelimit: 35 callbacks suppressed [ 758.970789][ T4631] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 758.993727][T20357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.001316][T20357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.041298][T16681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.132851][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 759.173567][T20350] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.181790][T20350] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.217483][T16681] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.225941][T20350] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 759.234244][T20350] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.242489][T20350] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.250684][T20350] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 759.263756][T20350] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.271968][T20350] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.280234][T20350] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 759.288533][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 759.306948][ T3397] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.340077][T20350] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.348306][T20350] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.356503][T20350] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 759.382737][ T4662] netlink: 'syz.1.10474': attribute type 4 has an invalid length. [ 759.394844][ T4662] netlink: 'syz.1.10474': attribute type 4 has an invalid length. [ 759.422450][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 759.551918][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 759.636966][ T4669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10477'. [ 759.677905][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 759.806387][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 759.933909][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 760.083559][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 760.201484][ T8787] bond1: (slave gretap1): failed to get link speed/duplex [ 760.637594][ T4702] loop8: detected capacity change from 0 to 512 [ 760.662345][ T4702] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 760.711550][ T4699] syz.8.10487 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 760.725812][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: syz.8.10487 Not tainted syzkaller #0 PREEMPT(lazy) [ 760.725842][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 760.725858][ T4699] Call Trace: [ 760.725874][ T4699] [ 760.725883][ T4699] __dump_stack+0x1d/0x30 [ 760.725911][ T4699] dump_stack_lvl+0x95/0xd0 [ 760.725935][ T4699] dump_stack+0x15/0x1b [ 760.725957][ T4699] dump_header+0x80/0x240 [ 760.725985][ T4699] oom_kill_process+0x295/0x350 [ 760.726104][ T4699] out_of_memory+0x981/0xbc0 [ 760.726139][ T4699] try_charge_memcg+0x621/0xa00 [ 760.726203][ T4699] ? __rcu_read_unlock+0x4e/0x70 [ 760.726239][ T4699] __memcg_kmem_charge_page+0x199/0x3a0 [ 760.726274][ T4699] __alloc_frozen_pages_noprof+0x18a/0x350 [ 760.726373][ T4699] alloc_pages_mpol+0xa9/0x1d0 [ 760.726410][ T4699] alloc_pages_noprof+0x8f/0x140 [ 760.726445][ T4699] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 760.726540][ T4699] __kvmalloc_node_noprof+0x3a0/0x590 [ 760.726597][ T4699] ? futex_hash_allocate+0x192/0x920 [ 760.726619][ T4699] ? futex_hash_allocate+0x192/0x920 [ 760.726645][ T4699] ? futex_hash_allocate+0x192/0x920 [ 760.726675][ T4699] futex_hash_allocate+0x192/0x920 [ 760.726810][ T4699] ? cap_task_prctl+0x13f/0x6b0 [ 760.726855][ T4699] futex_hash_prctl+0xd8/0xf0 [ 760.726881][ T4699] __se_sys_prctl+0x4f4/0x13b0 [ 760.726940][ T4699] __x64_sys_prctl+0x67/0x80 [ 760.726966][ T4699] x64_sys_call+0x2533/0x3020 [ 760.726993][ T4699] do_syscall_64+0x136/0x3c0 [ 760.727054][ T4699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.727081][ T4699] RIP: 0033:0x7f6debd3de99 [ 760.727128][ T4699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.727215][ T4699] RSP: 002b:00007f6dea797028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 760.727239][ T4699] RAX: ffffffffffffffda RBX: 00007f6debfc5fa0 RCX: 00007f6debd3de99 [ 760.727258][ T4699] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 760.727276][ T4699] RBP: 00007f6debdd3eaf R08: 0000000000000000 R09: 0000000000000000 [ 760.727293][ T4699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.727309][ T4699] R13: 00007f6debfc6038 R14: 00007f6debfc5fa0 R15: 00007ffc3dad2b98 [ 760.727339][ T4699] [ 760.727409][ T4699] memory: usage 307200kB, limit 307200kB, failcnt 218 [ 761.045191][ T4699] memory+swap: usage 344660kB, limit 9007199254740988kB, failcnt 0 [ 761.053593][ T4699] kmem: usage 276432kB, limit 9007199254740988kB, failcnt 0 [ 761.067623][ T4699] Memory cgroup stats for /syz8: [ 761.068216][ T4699] cache 31219712 [ 761.086930][ T4699] rss 126976 [ 761.095357][ T4699] shmem 31215616 [ 761.111497][ T4699] mapped_file 0 [ 761.124744][ T4699] dirty 0 [ 761.131455][ T4699] writeback 0 [ 761.141094][ T4699] workingset_refault_anon 0 [ 761.154397][ T4699] workingset_refault_file 0 [ 761.164282][ T4699] swap 38506496 [ 761.172886][ T4699] swapcached 38506496 [ 761.181881][ T4699] pgpgin 153761 [ 761.207002][ T4699] pgpgout 146107 [ 761.226777][ T4699] pgfault 130811 [ 761.230633][ T4699] pgmajfault 4 [ 761.234506][ T4699] inactive_anon 110592 [ 761.240479][ T4699] active_anon 31236096 [ 761.252760][ T4699] inactive_file 0 [ 761.261874][ T4699] active_file 4096 [ 761.273670][ T4699] unevictable 0 [ 761.294532][ T4699] hierarchical_memory_limit 314572800 [ 761.313807][ T4699] hierarchical_memsw_limit 9223372036854771712 [ 761.334351][ T4699] total_cache 31219712 [ 761.348040][ T4699] total_rss 126976 [ 761.360686][ T4699] total_shmem 31215616 [ 761.373502][ T4699] total_mapped_file 0 [ 761.431316][ T4699] total_dirty 0 [ 761.434905][ T4699] total_writeback 0 [ 761.438731][ T4699] total_workingset_refault_anon 0 [ 761.443774][ T4699] total_workingset_refault_file 0 [ 761.448860][ T4699] total_swap 38506496 [ 761.452862][ T4699] total_swapcached 38506496 [ 761.457396][ T4699] total_pgpgin 153761 [ 761.461395][ T4699] total_pgpgout 146107 [ 761.465566][ T4699] total_pgfault 130811 [ 761.469656][ T4699] total_pgmajfault 4 [ 761.473631][ T4699] total_inactive_anon 110592 [ 761.478287][ T4699] total_active_anon 31236096 [ 761.482893][ T4699] total_inactive_file 0 [ 761.494230][ T4699] total_active_file 4096 [ 761.498570][ T4699] total_unevictable 0 [ 761.502655][ T4699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.10487,pid=4698,uid=0 [ 761.527072][ T4699] Memory cgroup out of memory: Killed process 4698 (syz.8.10487) total-vm:96228kB, anon-rss:1360kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 761.571082][ T4702] EXT4-fs: error -4 creating inode table initialization thread [ 761.587223][ T4702] EXT4-fs (loop8): mount failed [ 762.036874][ T28] audit: type=1326 audit(1785101278.565:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.083390][ T28] audit: type=1326 audit(1785101278.565:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.139500][ T4743] netlink: 'syz.4.10499': attribute type 322 has an invalid length. [ 762.157453][ T28] audit: type=1326 audit(1785101278.565:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.202889][ T28] audit: type=1326 audit(1785101278.565:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.257120][ T28] audit: type=1326 audit(1785101278.565:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.328586][ T28] audit: type=1326 audit(1785101278.565:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.9.10497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b50de99 code=0x7ffc0000 [ 762.552622][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10502'. [ 762.635515][ T4752] bond4: entered promiscuous mode [ 762.643913][ T4752] bond4: entered allmulticast mode [ 763.039035][ T4768] tipc: Started in network mode [ 763.044097][ T4768] tipc: Node identity 4, cluster identity 4711 [ 763.050332][ T4768] tipc: Node number set to 4 [ 763.392326][ T4787] netlink: 'syz.8.10513': attribute type 16 has an invalid length. [ 763.439378][ T4787] netlink: 'syz.8.10513': attribute type 17 has an invalid length. [ 763.642003][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 763.727214][ T4787] vlan2: left promiscuous mode [ 763.733193][ T4787] bridge0: left promiscuous mode [ 763.741189][ T4787] ip6erspan0: left allmulticast mode [ 763.752081][ T4787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.762758][ T4787] bridge3: left promiscuous mode [ 764.390010][T20342] net_ratelimit: 33 callbacks suppressed [ 764.390047][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 764.551200][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 764.668365][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 764.796146][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 765.032508][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 765.174712][ T4838] netlink: 165 bytes leftover after parsing attributes in process `syz.9.10533'. [ 765.186688][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 765.186706][ T28] audit: type=1326 audit(1785101281.504:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 765.262560][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 765.262734][ T28] audit: type=1326 audit(1785101281.504:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 765.312185][ T28] audit: type=1326 audit(1785101281.504:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 765.338637][ T28] audit: type=1326 audit(1785101281.504:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 765.370117][ T28] audit: type=1326 audit(1785101281.504:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6debd3de99 code=0x7ffc0000 [ 765.405479][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 765.411213][ T28] audit: type=1326 audit(1785101281.513:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.3.10526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 765.468285][ T28] audit: type=1326 audit(1785101281.513:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.3.10526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc17cf8de99 code=0x7ffc0000 [ 765.524380][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 765.578200][ T28] audit: type=1326 audit(1785101281.551:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6debcfe6ce code=0x7ffc0000 [ 765.604928][ T28] audit: type=1326 audit(1785101281.560:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6debcfe6ce code=0x7ffc0000 [ 765.650830][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 765.659280][ T4856] loop8: detected capacity change from 0 to 512 [ 765.666668][ T4856] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 765.686409][ T28] audit: type=1326 audit(1785101281.560:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.8.10525" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6debcfe6ce code=0x7ffc0000 [ 765.738449][ T4859] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 765.775256][ T4859] bond10 (unregistering): Released all slaves [ 765.781568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.936914][ T4856] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 765.951164][ T4856] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.10549: Failed to acquire dquot type 1 [ 765.962529][ T4856] loop8: lost filesystem error report for type 5 error -28 [ 765.963001][ T4856] EXT4-fs (loop8): 1 truncate cleaned up [ 765.981435][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 765.981456][ C1] EXT4-fs (loop8): initial error at time 1785101282: ext4_mb_generate_buddy:1317 [ 765.981484][ C1] EXT4-fs (loop8): last error at time 1785101282: ext4_acquire_dquot:7041 [ 766.006447][ T4856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.026501][ T4856] EXT4-fs error (device loop8): __ext4_remount:6844: comm syz.8.10549: Abort forced by user [ 766.036904][ T4856] EXT4-fs (loop8): Remounting filesystem read-only [ 766.043433][ T4856] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 766.130870][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.431339][ T4870] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 766.440057][ T4884] xt_hashlimit: size too large, truncated to 1048576 [ 766.674423][ T4890] veth1_to_bond: invalid flags given to default FDB implementation [ 766.863455][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10553'. [ 767.354343][ T4932] xt_hashlimit: size too large, truncated to 1048576 [ 767.569745][ T4939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4939 comm=syz.4.10565 [ 768.285271][ T4959] netlink: 'syz.1.10572': attribute type 322 has an invalid length. [ 769.284140][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 769.453890][ T4964] netlink: 'syz.8.10576': attribute type 10 has an invalid length. [ 769.649363][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.658562][ T4964] bond0: (slave team0): Enslaving as an active interface with an up link [ 769.719788][ T4948] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.862829][T20350] net_ratelimit: 27 callbacks suppressed [ 769.862851][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 769.973098][ T4978] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10583'. [ 770.107473][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 770.180996][ T4948] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.235706][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 770.354724][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 770.423023][ T4948] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.481428][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 770.582401][ T5004] loop8: detected capacity change from 0 to 512 [ 770.599256][ T5004] EXT4-fs: Ignoring removed nobh option [ 770.608911][ T5004] EXT4-fs (loop8): orphan cleanup on readonly fs [ 770.620163][ T5004] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.10591: EA inode hash validation failed [ 770.634286][T20378] bond1: (slave gretap1): failed to get link speed/duplex [ 770.790541][ T4948] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.805552][ T5004] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 770.818667][ T5004] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.10591: corrupted inode contents [ 770.823083][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 770.830635][ T5004] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 770.830856][ T5004] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.10591: mark_inode_dirty error [ 770.839872][ T5008] netlink: 27 bytes leftover after parsing attributes in process `syz.9.10592'. [ 770.846883][ T5004] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 770.847272][ T5004] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.10591: corrupted inode contents [ 770.888503][ T5004] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 770.888943][ T5004] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.10591: mark_inode_dirty error [ 770.906841][ C1] EXT4-fs (loop8): error count since last fsck: 3 [ 770.906891][ C1] EXT4-fs (loop8): initial error at time 1785101286: ext4_do_update_inode:5742: inode 15 [ 770.906943][ C1] EXT4-fs (loop8): last error at time 1785101286: ext4_do_update_inode:5742: inode 15 [ 771.018965][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 771.073784][ T5004] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 771.077855][ T5004] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.10591: mark inode dirty (error -117) [ 771.235290][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 771.306090][ T5004] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 771.309232][ T5004] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 771.332859][T20346] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.342502][ T5004] EXT4-fs (loop8): 1 orphan inode deleted [ 771.348732][ T5004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 771.350036][T20346] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.369846][T20346] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.378071][T20346] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.419986][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 771.696053][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.729970][ T5034] syzkaller0: entered promiscuous mode [ 771.735693][ T5034] syzkaller0: entered allmulticast mode [ 771.746182][ T5034] tipc: Enabled bearer , priority 0 [ 771.785613][ T5033] tipc: Resetting bearer [ 771.807430][ T5033] tipc: Disabling bearer [ 772.704705][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.786838][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10611'. [ 772.797368][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10611'. [ 772.990287][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.020891][ T5089] bond0: entered promiscuous mode [ 773.044612][ T5089] bond_slave_0: entered promiscuous mode [ 773.054121][ T5089] bond_slave_1: entered promiscuous mode [ 773.060830][ T5089] bond0: entered allmulticast mode [ 773.066715][ T5089] bond_slave_0: entered allmulticast mode [ 773.074459][ T5089] bond_slave_1: entered allmulticast mode [ 773.083805][ T5089] team0: Port device bond0 added [ 773.186364][ T5102] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.199353][ T5104] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.10624'. [ 773.208572][ T5104] netlink: 'syz.1.10624': attribute type 1 has an invalid length. [ 773.216369][ T5104] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.10624'. [ 773.378659][ T5102] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.389611][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 773.456781][ T5102] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.523633][ T5102] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.194697][ T5117] syz.1.10626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 774.208655][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.1.10626 Not tainted syzkaller #0 PREEMPT(lazy) [ 774.208690][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 774.208705][ T5117] Call Trace: [ 774.208715][ T5117] [ 774.208776][ T5117] __dump_stack+0x1d/0x30 [ 774.208855][ T5117] dump_stack_lvl+0x95/0xd0 [ 774.208881][ T5117] dump_stack+0x15/0x1b [ 774.208967][ T5117] dump_header+0x80/0x240 [ 774.208995][ T5117] oom_kill_process+0x295/0x350 [ 774.209037][ T5117] out_of_memory+0x981/0xbc0 [ 774.209075][ T5117] try_charge_memcg+0x621/0xa00 [ 774.209162][ T5117] ? __rcu_read_unlock+0x4e/0x70 [ 774.209200][ T5117] __memcg_kmem_charge_page+0x199/0x3a0 [ 774.209248][ T5117] __alloc_frozen_pages_noprof+0x18a/0x350 [ 774.209360][ T5117] alloc_pages_mpol+0xa9/0x1d0 [ 774.209398][ T5117] alloc_pages_noprof+0x8f/0x140 [ 774.209443][ T5117] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 774.209489][ T5117] __kvmalloc_node_noprof+0x3a0/0x590 [ 774.209522][ T5117] ? futex_hash_allocate+0x192/0x920 [ 774.209587][ T5117] ? futex_hash_allocate+0x192/0x920 [ 774.209613][ T5117] ? futex_hash_allocate+0x192/0x920 [ 774.209640][ T5117] futex_hash_allocate+0x192/0x920 [ 774.209666][ T5117] ? cap_task_prctl+0x13f/0x6b0 [ 774.209750][ T5117] futex_hash_prctl+0xd8/0xf0 [ 774.209774][ T5117] __se_sys_prctl+0x4f4/0x13b0 [ 774.209841][ T5117] __x64_sys_prctl+0x67/0x80 [ 774.209888][ T5117] x64_sys_call+0x2533/0x3020 [ 774.209920][ T5117] do_syscall_64+0x136/0x3c0 [ 774.209952][ T5117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.210059][ T5117] RIP: 0033:0x7ffa1032de99 [ 774.210080][ T5117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.210104][ T5117] RSP: 002b:00007ffa0ed66028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 774.210146][ T5117] RAX: ffffffffffffffda RBX: 00007ffa105b6090 RCX: 00007ffa1032de99 [ 774.210164][ T5117] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 774.210243][ T5117] RBP: 00007ffa103c3eaf R08: 0000000000000000 R09: 0000000000000000 [ 774.210260][ T5117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.210277][ T5117] R13: 00007ffa105b6128 R14: 00007ffa105b6090 R15: 00007ffee74e7788 [ 774.210377][ T5117] [ 774.210385][ T5117] memory: usage 307200kB, limit 307200kB, failcnt 234 [ 774.212458][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 774.212474][ T28] audit: type=1326 audit(1785101289.954:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.8.10630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6debd3de99 code=0x0 [ 774.219775][ T5117] memory+swap: usage 319772kB, limit 9007199254740988kB, failcnt 0 [ 774.219796][ T5117] kmem: usage 222528kB, limit 9007199254740988kB, failcnt 0 [ 774.533586][ T5117] Memory cgroup stats for /syz1: [ 774.533862][ T5117] cache 56729600 [ 774.543728][ T5117] rss 29962240 [ 774.547281][ T5117] shmem 56569856 [ 774.550888][ T5117] mapped_file 159744 [ 774.561031][ T5117] dirty 0 [ 774.564815][ T5117] writeback 0 [ 774.568199][ T5117] workingset_refault_anon 1366 [ 774.577402][ T5117] workingset_refault_file 807 [ 774.602278][ T5117] swap 12873728 [ 774.606287][ T5117] swapcached 24420352 [ 774.613990][ T5117] pgpgin 250078 [ 774.626059][ T5117] pgpgout 228910 [ 774.636503][ T5117] pgfault 189664 [ 774.648760][ T5117] pgmajfault 2247 [ 774.657797][ T5117] inactive_anon 8835072 [ 774.668333][ T5117] active_anon 48754688 [ 774.672785][ T5117] inactive_file 0 [ 774.676509][ T5117] active_file 0 [ 774.680054][ T5117] unevictable 29114368 [ 774.684726][ T5117] hierarchical_memory_limit 314572800 [ 774.690246][ T5117] hierarchical_memsw_limit 9223372036854771712 [ 774.704742][ T5117] total_cache 56729600 [ 774.710503][ T5117] total_rss 29962240 [ 774.716317][ T5117] total_shmem 56569856 [ 774.720454][ T5117] total_mapped_file 159744 [ 774.728910][ T5117] total_dirty 0 [ 774.732442][ T5117] total_writeback 0 [ 774.736760][ T5117] total_workingset_refault_anon 1366 [ 774.742144][ T5117] total_workingset_refault_file 807 [ 774.747734][ T5117] total_swap 12873728 [ 774.751784][ T5117] total_swapcached 24420352 [ 774.760923][ T5117] total_pgpgin 250078 [ 774.764977][ T5117] total_pgpgout 228910 [ 774.769344][ T5117] total_pgfault 189664 [ 774.773522][ T5117] total_pgmajfault 2247 [ 774.778820][ T5117] total_inactive_anon 8835072 [ 774.783637][ T5117] total_active_anon 48754688 [ 774.789123][ T5117] total_inactive_file 0 [ 774.793513][ T5117] total_active_file 0 [ 774.797549][ T5117] total_unevictable 29114368 [ 774.802571][ T5117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10626,pid=5107,uid=0 [ 774.808883][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 774.826657][ T5117] Memory cgroup out of memory: Killed process 5117 (syz.1.10626) total-vm:96228kB, anon-rss:29748kB, file-rss:66292kB, shmem-rss:0kB, UID:0 pgtables:252kB oom_score_adj:0 [ 775.215542][ T5149] netlink: 'syz.1.10635': attribute type 21 has an invalid length. [ 775.231671][ T5149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10635'. [ 775.282295][T20346] net_ratelimit: 27 callbacks suppressed [ 775.282315][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 775.367244][ T28] audit: type=1400 audit(1785101291.040:8514): avc: denied { read } for pid=5139 comm="syz.3.10643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 775.420369][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 775.472130][ T28] audit: type=1400 audit(1785101291.143:8515): avc: denied { write } for pid=5152 comm="syz.1.10636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 775.557846][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 775.674838][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 775.824001][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 775.952313][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 776.069714][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 776.187778][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 776.304897][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 776.318726][ T5166] syz.3.10650 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 776.358134][ T5166] CPU: 0 UID: 0 PID: 5166 Comm: syz.3.10650 Not tainted syzkaller #0 PREEMPT(lazy) [ 776.358175][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 776.358192][ T5166] Call Trace: [ 776.358201][ T5166] [ 776.358211][ T5166] __dump_stack+0x1d/0x30 [ 776.358237][ T5166] dump_stack_lvl+0x95/0xd0 [ 776.358264][ T5166] dump_stack+0x15/0x1b [ 776.358288][ T5166] dump_header+0x80/0x240 [ 776.358313][ T5166] oom_kill_process+0x295/0x350 [ 776.358384][ T5166] out_of_memory+0x981/0xbc0 [ 776.358423][ T5166] try_charge_memcg+0x621/0xa00 [ 776.358476][ T5166] __memcg_kmem_charge_page+0x199/0x3a0 [ 776.358591][ T5166] __alloc_frozen_pages_noprof+0x18a/0x350 [ 776.358629][ T5166] alloc_pages_mpol+0xa9/0x1d0 [ 776.358696][ T5166] alloc_pages_noprof+0x8f/0x140 [ 776.358730][ T5166] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 776.358915][ T5166] __kvmalloc_node_noprof+0x3a0/0x590 [ 776.358950][ T5166] ? futex_hash_allocate+0x192/0x920 [ 776.358976][ T5166] ? futex_hash_allocate+0x192/0x920 [ 776.359001][ T5166] ? futex_hash_allocate+0x192/0x920 [ 776.359052][ T5166] futex_hash_allocate+0x192/0x920 [ 776.359075][ T5166] ? cap_task_prctl+0x13f/0x6b0 [ 776.359133][ T5166] futex_hash_prctl+0xd8/0xf0 [ 776.359160][ T5166] __se_sys_prctl+0x4f4/0x13b0 [ 776.359194][ T5166] __x64_sys_prctl+0x67/0x80 [ 776.359224][ T5166] x64_sys_call+0x2533/0x3020 [ 776.359255][ T5166] do_syscall_64+0x136/0x3c0 [ 776.359277][ T5166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.359293][ T5166] RIP: 0033:0x7fc17cf8de99 [ 776.359307][ T5166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.359370][ T5166] RSP: 002b:00007fc17b9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 776.359388][ T5166] RAX: ffffffffffffffda RBX: 00007fc17d215fa0 RCX: 00007fc17cf8de99 [ 776.359399][ T5166] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 776.359412][ T5166] RBP: 00007fc17d023eaf R08: 0000000000000000 R09: 0000000000000000 [ 776.359422][ T5166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.359554][ T5166] R13: 00007fc17d216038 R14: 00007fc17d215fa0 R15: 00007ffea571c9b8 [ 776.359569][ T5166] [ 776.590028][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 776.680421][ T5166] memory: usage 12360kB, limit 307200kB, failcnt 1629 [ 776.687327][ T5166] memory+swap: usage 14180kB, limit 9007199254740988kB, failcnt 0 [ 776.695418][ T5166] kmem: usage 6136kB, limit 9007199254740988kB, failcnt 0 [ 776.703387][ T5166] Memory cgroup stats for /syz3: [ 776.703597][ T5166] cache 5169152 [ 776.712465][ T5166] rss 1081344 [ 776.717638][ T5166] shmem 5160960 [ 776.721131][ T5166] mapped_file 0 [ 776.724959][ T5166] dirty 0 [ 776.728556][ T5166] writeback 0 [ 776.731885][ T5166] workingset_refault_anon 5240 [ 776.743311][ T5166] workingset_refault_file 9795 [ 776.748489][ T5166] swap 1863680 [ 776.752127][ T5166] swapcached 51486720 [ 776.757519][ T5166] pgpgin 820347 [ 776.761146][ T5166] pgpgout 818809 [ 776.765379][ T5166] pgfault 724429 [ 776.767325][ T5179] team0: Device bond0 is already an upper device of the team interface [ 776.769032][ T5166] pgmajfault 2344 [ 776.780885][ T5166] inactive_anon 2400256 [ 776.785072][ T5166] active_anon 3891200 [ 776.789270][ T5166] inactive_file 0 [ 776.792944][ T5166] active_file 0 [ 776.797072][ T5166] unevictable 8192 [ 776.800845][ T5166] hierarchical_memory_limit 314572800 [ 776.806413][ T5166] hierarchical_memsw_limit 9223372036854771712 [ 776.813473][ T5166] total_cache 5169152 [ 776.817523][ T5166] total_rss 1081344 [ 776.821381][ T5166] total_shmem 5160960 [ 776.825409][ T5166] total_mapped_file 0 [ 776.829862][ T5166] total_dirty 0 [ 776.833321][ T5166] total_writeback 0 [ 776.837116][ T5166] total_workingset_refault_anon 5240 [ 776.842449][ T5166] total_workingset_refault_file 9795 [ 776.847745][ T5166] total_swap 1863680 [ 776.851697][ T5166] total_swapcached 51486720 [ 776.856216][ T5166] total_pgpgin 820347 [ 776.860192][ T5166] total_pgpgout 818809 [ 776.864722][ T5166] total_pgfault 724429 [ 776.868840][ T5166] total_pgmajfault 2344 [ 776.873014][ T5166] total_inactive_anon 2400256 [ 776.877699][ T5166] total_active_anon 3891200 [ 776.882253][ T5166] total_inactive_file 0 [ 776.886528][ T5166] total_active_file 0 [ 776.890585][ T5166] total_unevictable 8192 [ 776.896044][ T5166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10650,pid=5165,uid=0 [ 776.918110][ T5166] Memory cgroup out of memory: Killed process 5165 (syz.3.10650) total-vm:96360kB, anon-rss:1432kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 777.036353][ T28] audit: type=1326 audit(1785101292.602:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5182 comm="syz.3.10645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc17cf8de99 code=0x0 [ 777.778356][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10649'. [ 777.809334][ T5196] netlink: 'syz.1.10652': attribute type 16 has an invalid length. [ 777.817709][ T5196] netlink: 'syz.1.10652': attribute type 17 has an invalid length. [ 777.867916][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.875328][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.054184][ T28] audit: type=1400 audit(1785101293.548:8517): avc: denied { lock } for pid=5201 comm="syz.3.10654" path="socket:[109896]" dev="sockfs" ino=109896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 778.216419][ T5196] bond1: left allmulticast mode [ 778.282167][ T5207] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 778.503446][ T5207] bond2 (unregistering): Released all slaves [ 778.970224][ T5138] syz0: Port: 1 Link DOWN [ 778.974685][ T360] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.983543][ T360] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.002021][ T360] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.014690][ T360] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.075719][ T5222] loop8: detected capacity change from 0 to 512 [ 779.124711][ T360] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.160041][ T5222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 779.169499][ T5222] System zones: 0-2, 18-18, 34-34 [ 779.175140][ T360] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.297244][ T360] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.315160][ T360] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.333777][ T360] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.440343][ T360] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.493206][ T360] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.581146][ T360] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.687741][ T5222] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10661: bg 0: block 248: padding at end of block bitmap is not set [ 779.708415][ T5222] loop8: lost filesystem error report for type 5 error -117 [ 779.708774][ T5222] Quota error (device loop8): write_blk: dquota write failed [ 779.716667][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 779.716705][ C1] EXT4-fs (loop8): last error at time 1785101295: ext4_validate_block_bitmap:441 [ 779.754801][ T5222] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 779.769524][ T5222] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.10661: Failed to acquire dquot type 1 [ 779.782129][ T5222] loop8: lost filesystem error report for type 5 error -117 [ 779.797179][ T5222] EXT4-fs (loop8): 1 truncate cleaned up [ 779.805166][ T5222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.916982][ T5222] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.197847][ T5243] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.10666'. [ 780.220977][ T5243] netlink: 'syz.3.10666': attribute type 1 has an invalid length. [ 780.228835][ T5243] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10666'. [ 780.820138][ T30] net_ratelimit: 13 callbacks suppressed [ 780.820196][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 780.918165][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.933580][ T5253] netlink: 'syz.3.10670': attribute type 30 has an invalid length. [ 780.977395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.985716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.993963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.002256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.173474][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10676'. [ 781.198326][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 781.226992][ T5276] loop8: detected capacity change from 0 to 512 [ 781.237546][ T5276] EXT4-fs: test_dummy_encryption option not supported [ 781.409213][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 781.493443][ T5287] loop8: detected capacity change from 0 to 512 [ 781.501880][ T5287] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 781.562250][ T5281] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 781.627002][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 781.826061][ T5297] syzkaller0: entered promiscuous mode [ 781.831591][ T5297] syzkaller0: entered allmulticast mode [ 781.873759][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 781.993558][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 782.063098][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 783.319374][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10714'. [ 783.422769][ T5343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 783.494866][ T5343] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 783.534021][ T5343] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10714'. [ 783.544146][ T5343] bond2: entered promiscuous mode [ 783.549533][ T5343] macvlan1: entered promiscuous mode [ 783.749350][ T5357] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.10706'. [ 783.758612][ T5357] netlink: 'syz.4.10706': attribute type 1 has an invalid length. [ 783.766461][ T5357] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.10706'. [ 783.802447][ T5343] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 783.816220][ T5343] macvlan1: left promiscuous mode [ 783.831430][ T5343] bond2 (unregistering): Released all slaves [ 783.938816][ T5367] tipc: Enabling of bearer rejected, failed to enable media [ 784.010356][ T5371] macsec0: entered promiscuous mode [ 784.022421][ T5371] macsec0: entered allmulticast mode [ 784.045364][ T5371] veth1_macvtap: entered allmulticast mode [ 784.189305][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10715'. [ 784.246552][ T5380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 784.348555][ T5380] macvlan2: entered promiscuous mode [ 784.353933][ T5380] macvlan2: entered allmulticast mode [ 784.360243][ T5380] bond2: entered promiscuous mode [ 784.365569][ T5380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 784.431061][ T5380] bond2: left promiscuous mode [ 784.490525][ T5391] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 784.505153][ T5388] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10719'. [ 784.690843][ T5398] loop8: detected capacity change from 0 to 1024 [ 784.701356][ T5398] EXT4-fs: Ignoring removed orlov option [ 784.708941][ T5398] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 784.736813][ T5398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.896980][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.049667][ T28] audit: type=1400 audit(1785101300.105:8518): avc: denied { getopt } for pid=5419 comm="syz.4.10731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 785.091267][ T28] audit: type=1400 audit(1785101300.124:8519): avc: denied { ioctl } for pid=5419 comm="syz.4.10731" path="socket:[111148]" dev="sockfs" ino=111148 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 785.361985][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10739'. [ 785.468812][ T5451] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 785.602490][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10739'. [ 785.866711][ T28] audit: type=1400 audit(1785101300.863:8520): avc: denied { ioctl } for pid=5459 comm="syz.1.10753" path="socket:[111199]" dev="sockfs" ino=111199 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 786.266391][T20346] net_ratelimit: 22 callbacks suppressed [ 786.266412][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 786.404569][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 786.596964][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 786.714686][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 786.830640][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 786.948756][T20350] bond1: (slave gretap1): failed to get link speed/duplex [ 787.065802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.074115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.082402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.092574][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 789.801460][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 792.099304][ T30] net_ratelimit: 17 callbacks suppressed [ 792.099345][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 792.227254][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 792.365936][T20378] bond1: (slave gretap1): failed to get link speed/duplex [ 792.678123][ T5520] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 792.729326][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 792.858186][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 793.082042][ T30] bond1: (slave gretap1): failed to get link speed/duplex [ 793.115122][ T5539] syzkaller0: entered promiscuous mode [ 793.136618][ T5539] syzkaller0: entered allmulticast mode [ 793.197473][ T5539] tipc: Enabled bearer , priority 0 [ 793.258331][ T5538] tipc: Resetting bearer [ 793.305234][ T5538] tipc: Disabling bearer [ 793.370565][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 793.488048][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 793.624130][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 793.817153][ T5565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10776'. [ 793.832962][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10776'. [ 793.868927][ T5556] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.995844][ T5556] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.208839][ T5556] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.379978][ T5556] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.173573][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.212573][T20346] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.265208][ C1] net_ratelimit: 8 callbacks suppressed [ 807.265247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.279115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.392226][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 807.439148][T20346] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.447448][T20346] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.604013][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 807.622566][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10796'. [ 807.683915][ T5625] bridge12: port 1(veth15) entered blocking state [ 807.690397][ T5625] bridge12: port 1(veth15) entered disabled state [ 807.697043][ T5625] veth15: entered allmulticast mode [ 807.893072][ T5625] veth15: entered promiscuous mode [ 807.936847][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 807.975441][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10800'. [ 808.063753][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 808.181364][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 808.266831][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 808.266847][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 808.458808][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 808.587729][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 808.600141][ T5635] bridge12: port 2(veth0_to_bond) entered blocking state [ 808.615954][ T5635] bridge12: port 2(veth0_to_bond) entered disabled state [ 808.634241][ T5635] veth0_to_bond: entered allmulticast mode [ 808.655940][ T5635] veth0_to_bond: entered promiscuous mode [ 808.704878][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 808.953033][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10808'. [ 809.017641][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10809'. [ 809.049141][ T5671] hsr_slave_1 (unregistering): left promiscuous mode [ 809.286199][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10813'. [ 809.288943][ T28] audit: type=1400 audit(1785101578.778:8521): avc: denied { unmount } for pid=5684 comm="syz.4.10814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 809.295184][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10813'. [ 809.854516][ T5701] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10821'. [ 810.630238][ T5719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10826'. [ 810.639330][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10826'. [ 810.648451][ T5719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10826'. [ 811.911524][ T5744] loop8: detected capacity change from 0 to 128 [ 811.918416][ T5744] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.961761][ T5744] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 812.217228][T20346] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 812.385108][ T5758] sctp: [Deprecated]: syz.4.10841 (pid 5758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.385108][ T5758] Use struct sctp_sack_info instead [ 812.618033][ T5764] net_ratelimit: 1563 callbacks suppressed [ 812.618055][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.633300][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.642583][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.651698][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.660828][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.669924][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.679038][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.688216][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.697389][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 812.706517][ T5764] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 813.591580][ T5786] : port 1(ip6gretap0) entered blocking state [ 813.601111][ T5786] : port 1(ip6gretap0) entered disabled state [ 813.639804][ T5786] ip6gretap0: entered allmulticast mode [ 813.669673][ T5786] ip6gretap0: entered promiscuous mode [ 813.692094][ T5788] ip6gretap0: left allmulticast mode [ 813.710612][ T5788] ip6gretap0: left promiscuous mode [ 813.730212][ T5788] : port 1(ip6gretap0) entered disabled state [ 813.849375][ T3383] kernel read not supported for file [fscontext] (pid: 3383 comm: kworker/0:5) [ 813.895245][ T28] audit: type=1400 audit(1785101583.092:8522): avc: denied { execute_no_trans } for pid=5810 comm="syz.4.10861" path="/file0" dev="ramfs" ino=111868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 814.171992][ T5838] __nla_validate_parse: 1 callbacks suppressed [ 814.172029][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10869'. [ 814.218039][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10869'. [ 816.340138][ T5872] loop8: detected capacity change from 0 to 2048 [ 816.411835][ T5872] loop8: p3 p4 < > [ 816.424216][ T5872] loop8: p3 size 201326592 extends beyond EOD, truncated [ 816.532623][ T5875] udevd[5875]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 816.535709][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 816.644767][ T5876] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 816.691869][ T5876] SELinux: failed to load policy [ 817.536072][ T5907] netlink: 'syz.1.10891': attribute type 10 has an invalid length. [ 817.545667][ T5907] ipvlan0: entered promiscuous mode [ 817.560320][ T5907] ipvlan0: entered allmulticast mode [ 817.566675][ T5907] veth0_vlan: entered allmulticast mode [ 817.572527][ T5907] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 817.591785][ T5907] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 817.614982][ T5907] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 817.674478][ T28] audit: type=1400 audit(1785101586.620:8523): avc: denied { relabelfrom } for pid=5918 comm="syz.3.10895" name="NETLINK" dev="sockfs" ino=112908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 817.701435][ T28] audit: type=1400 audit(1785101586.620:8524): avc: denied { relabelto } for pid=5918 comm="syz.3.10895" name="NETLINK" dev="sockfs" ino=112908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 817.971607][T20346] net_ratelimit: 1816 callbacks suppressed [ 817.971636][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 818.098199][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 818.215477][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 818.333788][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 818.450584][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 818.968636][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 819.511943][T20357] bond1: (slave gretap1): failed to get link speed/duplex [ 819.749087][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 819.904383][T20342] bond1: (slave gretap1): failed to get link speed/duplex [ 820.085914][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 820.832058][ T5978] loop8: detected capacity change from 0 to 512 [ 820.843306][ T5980] No source specified [ 820.936575][ T5978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.949312][ T5978] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.025741][ T28] audit: type=1326 audit(1785101589.764:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5987 comm="syz.4.10917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2249dde99 code=0x0 [ 821.060905][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.094664][ T5990] loop8: detected capacity change from 0 to 512 [ 821.107698][ T5990] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 821.128443][ T5990] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.10918: bad orphan inode 15 [ 821.138608][ T5990] loop8: lost filesystem error report for type 5 error -117 [ 821.138880][ T5990] ext4_test_bit(bit=14, block=18) = 1 [ 821.151523][ T5990] is_bad_inode(inode)=0 [ 821.155668][ T5990] NEXT_ORPHAN(inode)=1023 [ 821.160203][ T5990] max_ino=32 [ 821.163388][ T5990] i_nlink=0 [ 821.166981][ T5990] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10918: bg 0: block 161: padding at end of block bitmap is not set [ 821.181400][ T5990] loop8: lost filesystem error report for type 5 error -117 [ 821.181605][ T5990] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 821.204099][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 821.204143][ C1] EXT4-fs (loop8): initial error at time 1785101589: ext4_orphan_get:1425 [ 821.204216][ C1] EXT4-fs (loop8): last error at time 1785101589: ext4_validate_block_bitmap:441 [ 821.234358][ T5990] loop8: lost filesystem error report for type 5 error -117 [ 821.234917][ T5990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.254368][ T5990] ext2 filesystem being mounted at /297/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 821.281814][ T5990] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 3: comm syz.8.10918: path /297/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 821.316187][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.334098][ T5998] netlink: 'syz.8.10920': attribute type 1 has an invalid length. [ 821.350829][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10920'. [ 822.611875][ T6048] team0: Failed to send options change via netlink (err -105) [ 822.619471][ T6048] team0: Port device bridge0 added [ 822.628517][ T6048] ipvlan0: left promiscuous mode [ 822.642918][ T6028] loop8: detected capacity change from 0 to 1024 [ 822.662100][ T6028] EXT4-fs: inline encryption not supported [ 822.707478][ T6028] EXT4-fs: Ignoring removed bh option [ 822.718852][ T6028] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 822.749208][ T6028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.774429][ T28] audit: type=1400 audit(1785101591.402:8526): avc: denied { write } for pid=6027 comm="syz.8.10932" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 823.040238][ T6044] ================================================================== [ 823.048379][ T6044] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 823.057015][ T6044] [ 823.059353][ T6044] write to 0xffff88810ce59ca0 of 8 bytes by task 6041 on cpu 1: [ 823.067000][ T6044] shmem_file_splice_read+0x401/0x590 [ 823.072413][ T6044] splice_direct_to_actor+0x261/0x680 [ 823.077814][ T6044] do_splice_direct+0x119/0x1a0 [ 823.082719][ T6044] do_sendfile+0x37d/0x640 [ 823.087160][ T6044] __x64_sys_sendfile64+0x105/0x150 [ 823.092385][ T6044] x64_sys_call+0x2dc4/0x3020 [ 823.097100][ T6044] do_syscall_64+0x136/0x3c0 [ 823.101713][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.107634][ T6044] [ 823.109972][ T6044] write to 0xffff88810ce59ca0 of 8 bytes by task 6044 on cpu 0: [ 823.117630][ T6044] shmem_file_splice_read+0x401/0x590 [ 823.123045][ T6044] splice_direct_to_actor+0x261/0x680 [ 823.128444][ T6044] do_splice_direct+0x119/0x1a0 [ 823.133316][ T6044] do_sendfile+0x37d/0x640 [ 823.137748][ T6044] __x64_sys_sendfile64+0x105/0x150 [ 823.142980][ T6044] x64_sys_call+0x2dc4/0x3020 [ 823.147682][ T6044] do_syscall_64+0x136/0x3c0 [ 823.152292][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.158203][ T6044] [ 823.160552][ T6044] value changed: 0x00000000000040c6 -> 0x00000000000040cb [ 823.167705][ T6044] [ 823.170039][ T6044] Reported by Kernel Concurrency Sanitizer on: [ 823.176201][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.9.10935 Not tainted syzkaller #0 PREEMPT(lazy) [ 823.185592][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 823.195664][ T6044] ================================================================== [ 823.250009][T32284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.357809][T20348] net_ratelimit: 28 callbacks suppressed [ 823.357846][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 823.495091][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 823.612458][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 823.729449][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 823.847053][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 823.965072][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 824.082413][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 824.210398][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 824.328066][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 824.445960][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 824.691395][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 828.762605][T20346] net_ratelimit: 39 callbacks suppressed [ 828.762778][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 828.901981][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 829.019072][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 829.136580][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 829.255085][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 829.371716][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 829.489235][T20348] bond1: (slave gretap1): failed to get link speed/duplex [ 829.607881][ T360] bond1: (slave gretap1): failed to get link speed/duplex [ 829.735506][T20346] bond1: (slave gretap1): failed to get link speed/duplex [ 829.852580][T20346] bond1: (slave gretap1): failed to get link speed/duplex