last executing test programs: 16m50.872497319s ago: executing program 32 (id=197): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 16m18.710681279s ago: executing program 33 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 15m59.722319058s ago: executing program 34 (id=1223): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@bsdgroups}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") 15m29.340489985s ago: executing program 35 (id=2011): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4810, 0x10000, 0xfffffffe, 0x0, 0x5, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) 15m17.2086226s ago: executing program 36 (id=2254): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@dstopts={{0x18, 0x29, 0x37, {0x33}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x1, 0x80}}}], 0x30}}], 0x2, 0x4001c00) 14m57.793028379s ago: executing program 37 (id=2306): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 14m21.432437993s ago: executing program 38 (id=3446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 14m12.64689706s ago: executing program 39 (id=3609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x81, 0x10}, 0x90) 14m6.046155726s ago: executing program 40 (id=3454): socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m49.67667158s ago: executing program 41 (id=5006): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) syz_io_uring_setup(0x2f70, &(0x7f00000000c0)={0x0, 0xc866, 0x2, 0x3, 0x34}, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r1, 0x0, 0x0) close(0x3) 9m38.804695046s ago: executing program 42 (id=8028): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 9m17.231301373s ago: executing program 43 (id=8350): gettid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4dd, 0x20004, 0xfffffffffffffffb, 0x4800, 0xfffffffffffffffa, 0x34}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket(0x1e, 0xa, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) 9m10.496636681s ago: executing program 44 (id=8448): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x7000000, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m5.345090693s ago: executing program 45 (id=8495): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 9m0.194901613s ago: executing program 46 (id=8389): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x85f6, 0x0, 0x0, 0x3ffffffffffff, 0xffffffffffbffffe, 0x7f, 0xfffffe06}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x20a, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x9c, 0x71, 0x10, 0x1d, 0x3}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m44.882045354s ago: executing program 47 (id=8786): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 8m29.465397816s ago: executing program 48 (id=8796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x200008, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f00000004c0)) 7m31.491564048s ago: executing program 2 (id=9636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d382e23", "ecba06893bcdc493"}, 0x28) 7m31.390270881s ago: executing program 2 (id=9637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1b, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x8000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 7m30.501001312s ago: executing program 2 (id=9643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 7m30.261580047s ago: executing program 2 (id=9645): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 7m29.576876773s ago: executing program 2 (id=9649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000004c0)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m28.352754502s ago: executing program 2 (id=9667): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB=')\v\x00\x00'], 0x1c}}, 0x2404c044) 7m28.347916672s ago: executing program 49 (id=9667): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB=')\v\x00\x00'], 0x1c}}, 0x2404c044) 6m29.652588361s ago: executing program 7 (id=10454): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 6m28.643402825s ago: executing program 7 (id=10470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6m28.482409519s ago: executing program 7 (id=10474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r5, &(0x7f00000004c0)="027512f4984bba4856c1a8f99015b83e2da6985d5e222db0b8a9838d1be6"}, 0x20) 6m28.305666543s ago: executing program 7 (id=10477): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "0000366834c0a20000b7aac63a0100000000005cc6040700000000770060e000002021e9000000000000000040000000000000d000000000000000000000000f", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 6m26.920255256s ago: executing program 7 (id=10483): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000003c0)) 6m26.472858336s ago: executing program 7 (id=10492): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 6m26.472752656s ago: executing program 50 (id=10492): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 5m58.704419739s ago: executing program 0 (id=10873): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m58.638098801s ago: executing program 0 (id=10874): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r0, r2, 0x80000) 5m58.565422952s ago: executing program 0 (id=10875): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x884) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sigaltstack(&(0x7f0000000080)={0x0, 0x5}, 0x0) syz_clone3(&(0x7f000000dd80)={0x40000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m58.354607197s ago: executing program 0 (id=10876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 5m58.309931578s ago: executing program 0 (id=10877): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x1}, 0x0, 0x0, 0x6, 0x2, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r1, 0x1, 0xfffffffe, 0x25dfdbff, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xc}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x30}, 0x1, 0xffffffff00000003, 0x0, 0x64000}, 0x20000090) epoll_create1(0x0) syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 5m57.420864079s ago: executing program 0 (id=10890): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@allocspi={0x124, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x29}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in=@multicast1, {0x9, 0x100000001, 0x6, 0x4, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x7, 0x2}, {0x7, 0x5, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xa}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x221a, 0x7720, 0x16, 0x0, 0x0) 5m57.420678819s ago: executing program 51 (id=10890): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000000)='./file1\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@allocspi={0x124, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x29}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in=@multicast1, {0x9, 0x100000001, 0x6, 0x4, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x7, 0x2}, {0x7, 0x5, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xa}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x221a, 0x7720, 0x16, 0x0, 0x0) 5m39.52533315s ago: executing program 9 (id=11153): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)={0x28, 0x19, 0x1, 0xfffffffc, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x14e, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4000041}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) 5m39.349548324s ago: executing program 9 (id=11158): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000000)="b9ff0300600d698dff062cf008", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 5m38.978814063s ago: executing program 9 (id=11163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 5m38.910308224s ago: executing program 9 (id=11165): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x14cf, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 5m38.496057024s ago: executing program 9 (id=11170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x20}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 5m38.129421803s ago: executing program 9 (id=11181): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m38.089738013s ago: executing program 52 (id=11181): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m55.892684576s ago: executing program 6 (id=12517): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7e, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) read(r0, &(0x7f0000000400)=""/198, 0xc6) 3m55.6863337s ago: executing program 6 (id=12523): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x102, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x80000003, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 3m55.574509923s ago: executing program 6 (id=12526): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/partitions\x00', 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES32=r0], 0xfdef) 3m55.427482516s ago: executing program 6 (id=12529): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002bc0), 0x2a0, 0x20004840) 3m54.501887268s ago: executing program 6 (id=12537): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m54.350186442s ago: executing program 6 (id=12541): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300021100000027bd7000000000000200080008000000a30000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000002000100000004d4070003000000004005000500003000000a00000000000000fe8000000000000000000000000900000000000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000c40), 0x1, 0xb9e, &(0x7f0000000c80)="$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") 3m39.298088955s ago: executing program 53 (id=12541): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300021100000027bd7000000000000200080008000000a30000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000002000100000004d4070003000000004005000500003000000a00000000000000fe8000000000000000000000000900000000000000000000010014"], 0x88}, 0x1, 0x7}, 0x0) syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, &(0x7f0000000c40), 0x1, 0xb9e, &(0x7f0000000c80)="$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") 3.316909341s ago: executing program 1 (id=14824): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe6c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 3.298064942s ago: executing program 3 (id=14815): socket$kcm(0x10, 0x2, 0x0) socketpair(0x2c, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0xd000, 0x80, 0x4, 0x7, 0x6c8, 0x800000a, 0x4, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) 3.117030016s ago: executing program 1 (id=14816): socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.116445306s ago: executing program 3 (id=14827): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="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", 0x100}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99df928e46e25366db886525ab80ef54836d05b03d0b4bfe7a6a614713", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000008c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320e", 0xce}], 0x5}, 0xc0d0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 2.93518233s ago: executing program 5 (id=14817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x404, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7ffb}, 0x0, 0x6, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000015e000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.848947152s ago: executing program 1 (id=14818): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 2.848504063s ago: executing program 8 (id=14830): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) socket$inet_udp(0x2, 0x2, 0x0) 1.998006993s ago: executing program 8 (id=14819): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.997825753s ago: executing program 3 (id=14820): semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x400000000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x100805, 0x1, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) 1.997638533s ago: executing program 5 (id=14821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r4}, 0xc) 1.991244443s ago: executing program 4 (id=14832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f00000002c0)=""/108, 0x6c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x9, 0x3, 0x1, 0xf8c, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 1.884608135s ago: executing program 1 (id=14822): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7ffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007eb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00001ed000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006ee000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000946000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.884381335s ago: executing program 5 (id=14823): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x20002800) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0/subsystem_vendor\x00', 0x41, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file2\x00'}) read(r1, 0x0, 0x0) socket(0x8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) syz_emit_ethernet(0xf5, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)={0x0, 0x3, [0x6b2, 0xfa8, 0x6de, 0x782]}) 1.784650467s ago: executing program 4 (id=14825): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1.784294427s ago: executing program 5 (id=14826): mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) 958.846797ms ago: executing program 8 (id=14828): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe6c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 958.650437ms ago: executing program 1 (id=14829): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, r1, 0x711, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}}, 0x4000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20004080) setrlimit(0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r2, 0x0, 0x0) 954.965417ms ago: executing program 3 (id=14831): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000040)='%%\x00', 0x2000, &(0x7f00000000c0)={@_ha_fsid={[0x7fffffff, 0xfffffffb]}, {0x7, 0x8001, 0x4, 0x5}}, 0xfffff801, 0x0, 0x0}, {[0x3, 0x40000000, 0xb, 0x9]}, 0x1, 0x0, 0x0}) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfd}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104}, {@private=0x4}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, 0x0) 954.462557ms ago: executing program 5 (id=14840): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 740.606792ms ago: executing program 8 (id=14833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b0000"], 0x48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @loopback, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e23, 0x49d2b8f2, @local, 0x4}}, 0x0, 0x0, 0x2e, 0x0, "85a560063c18da85d2c8eb6ae847792028066b9ac1e92625296a2d98a57b031c75323b9e741c9c2fd7d2538cb1403ab04ee80cc599c052735cf86ebcc94804c7b8692e6df7af0d179c45834596dfa1c5"}, 0xd8) sendto$inet6(r0, 0x0, 0x11, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xc}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x80, 0x81, 0xfffff034}, {0x9, 0xb7, 0x2, 0xb}]}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x40107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x2, 0x1, 0x1, 0x7, 0x7f, 0x1000, 0xc, 0xf, 0x3, 0x80000005, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0x100005, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x20000a, 0x42, 0x8, 0x9, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x41, 0x7f, 0x4, 0xa, 0x7, 0x9, 0x101, 0xa, 0x1fa08607, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x5, 0x1, 0xb, 0x4, 0x7, 0xd, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3fa, 0x8001, 0x6, 0x6, 0x49, 0x80000000, 0xfdffbfff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0x2000b, 0x101, 0x2000a, 0xc50, 0x101, 0x7, 0xf91, 0xd9a, 0xc8, 0x2a4, 0xfffffff9, 0x3, 0x2, 0x5aa, 0x8, 0x0, 0x9, 0x0, 0x1ff, 0x0, 0x8001, 0x4, 0x400, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xfffffffd]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@usrquota}, {@noload}]}, 0x4, 0x530, &(0x7f0000000a80)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 740.384802ms ago: executing program 1 (id=14834): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae, 0x2, @perf_config_ext={0x0, 0x8}, 0x10d51d, 0xb6a0, 0x0, 0x0, 0x4, 0xf22, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x5, 0xa, 0x40, &(0x7f0000000040)) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 740.234882ms ago: executing program 5 (id=14835): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 703.419593ms ago: executing program 4 (id=14836): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004000b008e9f"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x20000080}, 0x80) 369.10691ms ago: executing program 3 (id=14837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xf5e543ecd220f989, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7, 0x0, 0x2, 0x7fff, 0x3, 0xfffffffd}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1d47, 0x41, 0x81}}]}}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 257.120243ms ago: executing program 4 (id=14838): r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x10531c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000200)=@assoc_value, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmmsg$inet(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4040090) 252.657163ms ago: executing program 3 (id=14839): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 208.602925ms ago: executing program 4 (id=14841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 70.551868ms ago: executing program 8 (id=14842): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) 753.56µs ago: executing program 4 (id=14843): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_pidfd_open(0x0, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000a80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x56a9, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10048000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=14853): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40d4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0x4d, "0d3ee53c7a840a7221a8cdb26ddb47814feb528b7e3f87a6429451acd7d7dbf5be802985d5029ef1ffeb55546c91d189b1dd3d0876a9810e69395f5af183f0131b0a898cae4cf3139e28df0499"}, &(0x7f0000000640)=0x55) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000080)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="25ec59481cdcb76fa41899010ddeaa83ef9a52d85aea3becc8ed28812a91498dd7000cff5456db81ceb71c3bf9ea35f743", 0x31}, {&(0x7f0000000340)}, {&(0x7f0000000400)="a1ca917ff82d2e2ccf7ec2421515ffb4b7ddc08523e55de1073915b7d6f940f9e5f50a593c33e35103a18c8c8b8289415bb731c8386df0b8d6270b23565c5901189f02e0b7ccf26a0056a38571b3febdb513", 0x52}, {&(0x7f0000000480)="b29f52759a555380221bb049c7812ee5022641719a31f83ffb896c191f6522cc6d3b7541f1bed44735f33febf78890f725670d1dbd9027872be25812b82e336794ac6b2f02603a1dcf3b6b2d356f26b38753786fee6f62e753d086db28641a5112aa2ee48a6fe40b3f32cdbb9f0feaf1fcae02666090d63cf9474d5e30a7808bd0ea772483103f150973c2be007607eecc2604eb80e43988f4011ee16ca9c1ad484de1", 0xa3}], 0x4, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0x800, 0x800, 0x4, 0x8}}, @init={0x18, 0x84, 0x0, {0x7fff, 0x5, 0x3, 0x4}}], 0x30, 0x200480c1}, 0x20008040) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x7, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000740)) ioctl$TIOCOUTQ(r1, 0x4bfa, &(0x7f0000000000)) kernel console output (not intermixed with test programs): fo: Block with free entry 1 out of range (1, 6). [ 954.591182][T22204] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 954.654964][T22204] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 954.681737][T22204] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.14013: inode has both inline data and extents flags [ 954.695547][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 954.705044][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14020'. [ 954.771409][T22204] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 954.772314][T22204] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14013: couldn't read orphan inode 16 (err -117) [ 954.781672][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 954.781692][ C0] EXT4-fs (loop1): initial error at time 1785403827: ext4_orphan_get:1399: inode 16 [ 954.781724][ C0] EXT4-fs (loop1): last error at time 1785403827: ext4_orphan_get:1399: inode 16 [ 954.881281][T22204] loop1: lost filesystem error report for type 5 error -117 [ 954.895604][T22204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 954.964556][T22204] batadv_slave_0: Caught tx_queue_len zero misconfig [ 955.121442][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.813377][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14039'. [ 955.870418][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14040'. [ 955.891720][T22280] bond0: (slave syz_tun): Releasing backup interface [ 957.435387][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14051'. [ 957.645929][T22342] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 957.713958][T22342] bond5 (unregistering): Released all slaves [ 958.062483][ T28] audit: type=1326 audit(1785403830.954:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.14061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 958.181245][ T28] audit: type=1326 audit(1785403830.984:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.14061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 958.272459][ T28] audit: type=1326 audit(1785403831.154:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.14061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 958.352766][ T28] audit: type=1326 audit(1785403831.154:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.14061" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 958.583155][ T28] audit: type=1326 audit(1785403831.474:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.14076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 958.734449][ T28] audit: type=1326 audit(1785403831.514:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.14076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 958.874601][ T28] audit: type=1326 audit(1785403831.734:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.14076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 958.989272][ T28] audit: type=1326 audit(1785403831.814:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22429 comm="syz.5.14076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 960.792028][T22497] syzkaller0: entered promiscuous mode [ 960.807348][T22497] syzkaller0: entered allmulticast mode [ 960.830247][T22497] tipc: Enabled bearer , priority 0 [ 960.854055][T22495] tipc: Resetting bearer [ 960.885417][T22495] tipc: Disabling bearer [ 961.857746][T22544] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 962.206382][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 962.589813][T22563] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 962.684672][T22563] bond11 (unregistering): Released all slaves [ 963.575402][T22659] futex_wake_op: syz.1.14119 tries to shift op by 144; fix this program [ 963.722690][T22668] loop1: detected capacity change from 0 to 1764 [ 965.004192][T22692] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 965.025806][T22692] bond16 (unregistering): Released all slaves [ 966.884894][T22791] loop1: detected capacity change from 0 to 512 [ 966.978523][T22791] EXT4-fs: Ignoring removed bh option [ 967.005741][T22791] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 967.078423][T22791] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.14136: iget: bad i_size value: 3298534883338 [ 967.115023][T22791] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 967.116328][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 967.131902][ C1] EXT4-fs (loop1): initial error at time 1785403840: ext4_orphan_get:1399: inode 15 [ 967.141339][ C1] EXT4-fs (loop1): last error at time 1785403840: ext4_orphan_get:1399: inode 15 [ 967.158536][T22791] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14136: couldn't read orphan inode 15 (err -117) [ 967.208105][T22791] loop1: lost filesystem error report for type 5 error -117 [ 967.231481][T22791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.296362][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.671809][T22824] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 968.695202][T22824] bond5 (unregistering): Released all slaves [ 969.119663][ T28] audit: type=1400 audit(1785403842.014:4786): avc: denied { create } for pid=22907 comm="syz.4.14150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 969.186734][ T28] audit: type=1400 audit(1785403842.014:4787): avc: denied { create } for pid=22907 comm="syz.4.14150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 969.244363][T22910] xt_hashlimit: size too large, truncated to 1048576 [ 969.253288][ T28] audit: type=1400 audit(1785403842.014:4788): avc: denied { bind } for pid=22907 comm="syz.4.14150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 969.301796][ T28] audit: type=1400 audit(1785403842.014:4789): avc: denied { name_bind } for pid=22907 comm="syz.4.14150" src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 969.359657][ T28] audit: type=1400 audit(1785403842.014:4790): avc: denied { node_bind } for pid=22907 comm="syz.4.14150" saddr=::ffff:127.0.0.1 src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 969.397902][ T28] audit: type=1400 audit(1785403842.014:4791): avc: denied { setopt } for pid=22907 comm="syz.4.14150" laddr=::ffff:127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 969.473072][ T28] audit: type=1400 audit(1785403842.014:4792): avc: denied { connect } for pid=22907 comm="syz.4.14150" laddr=::ffff:127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 969.535933][ T28] audit: type=1400 audit(1785403842.014:4793): avc: denied { name_connect } for pid=22907 comm="syz.4.14150" dest=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 970.567563][T22950] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 970.593203][T22950] bond14 (unregistering): Released all slaves [ 970.712785][T23024] loop1: detected capacity change from 0 to 1764 [ 971.548033][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14171'. [ 971.974227][T23054] netlink: 'syz.4.14171': attribute type 10 has an invalid length. [ 971.982264][T23054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14171'. [ 972.033838][T23054] geneve2: entered promiscuous mode [ 972.054738][T23054] geneve2: entered allmulticast mode [ 972.064278][ T310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.087552][ T310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.164576][ T310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.181461][ T310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.705122][T23076] xt_connbytes: Forcing CT accounting to be enabled [ 972.757368][T23076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 973.814164][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14185'. [ 973.833864][T23108] netlink: 'syz.1.14185': attribute type 10 has an invalid length. [ 973.855777][T23108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14185'. [ 973.885575][T23108] geneve4: entered promiscuous mode [ 973.895437][T23108] geneve4: entered allmulticast mode [ 973.910224][T29340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.930161][T29340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.946616][T29340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.955444][T29340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.023433][T23147] blktrace: Concurrent blktraces are not allowed on loop7 [ 975.970146][T23170] tipc: Failed to remove unknown binding: 66,0,0/11578026:2370495261/2370495262 [ 975.998915][T23170] tipc: Failed to remove unknown binding: 66,0,0/11578026:2370495261/2370495262 [ 976.171572][T23168] loop1: detected capacity change from 0 to 512 [ 976.210282][T23168] EXT4-fs: Ignoring removed bh option [ 976.227650][T23168] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 976.249248][T23168] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.14216: iget: bad i_size value: 3298534883338 [ 976.321926][T23168] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 976.326356][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 976.341981][ C0] EXT4-fs (loop1): initial error at time 1785403849: ext4_orphan_get:1399: inode 15 [ 976.351407][ C0] EXT4-fs (loop1): last error at time 1785403849: ext4_orphan_get:1399: inode 15 [ 976.375442][T23168] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14216: couldn't read orphan inode 15 (err -117) [ 976.397093][T23168] loop1: lost filesystem error report for type 5 error -117 [ 976.403440][T23168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.474673][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.509882][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14206'. [ 976.526971][T23186] netlink: 'syz.8.14206': attribute type 10 has an invalid length. [ 976.535093][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14206'. [ 977.373544][T23191] loop1: detected capacity change from 0 to 512 [ 977.461103][T23191] EXT4-fs: Ignoring removed bh option [ 977.507757][T23191] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 977.570674][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 977.670852][T23191] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.14220: iget: bad i_size value: 3298534883338 [ 977.684803][T23191] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 977.686336][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 977.701913][ C0] EXT4-fs (loop1): initial error at time 1785403850: ext4_orphan_get:1399: inode 15 [ 977.711369][ C0] EXT4-fs (loop1): last error at time 1785403850: ext4_orphan_get:1399: inode 15 [ 977.722021][T23191] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14220: couldn't read orphan inode 15 (err -117) [ 977.734467][T23191] loop1: lost filesystem error report for type 5 error -117 [ 977.741641][T23191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.049428][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.393214][T23241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14224'. [ 978.820425][T23251] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 979.486804][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 980.412209][T23277] loop1: detected capacity change from 0 to 512 [ 980.431103][T23277] EXT4-fs: Ignoring removed nobh option [ 980.906844][T23277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.177905][T23277] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 981.336952][ T28] audit: type=1400 audit(1785403854.214:4794): avc: denied { write } for pid=23276 comm="syz.1.14234" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 981.365921][T23277] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 3: comm syz.1.14234: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 981.454217][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.488342][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.506871][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.556523][T23299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14239'. [ 981.604239][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.656329][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.461036][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.476944][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.527204][T23323] netlink: 'syz.8.14240': attribute type 13 has an invalid length. [ 982.552811][T23323] netlink: 'syz.8.14240': attribute type 17 has an invalid length. [ 982.565960][T23325] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14242'. [ 982.580339][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.603351][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.226876][ T3385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 983.238494][T23323] 8021q: adding VLAN 0 to HW filter on device bond12 [ 983.258824][T23333] tipc: Enabling of bearer rejected, failed to enable media [ 983.367724][ T3385] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 983.668611][ T30] bridge_slave_1: left allmulticast mode [ 983.680316][ T30] bridge_slave_1: left promiscuous mode [ 983.720654][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.737013][ T30] bridge_slave_0: left allmulticast mode [ 983.744285][ T30] bridge_slave_0: left promiscuous mode [ 983.755633][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.957750][T23384] netlink: 'syz.1.14266': attribute type 13 has an invalid length. [ 983.966160][ T30] bond1 (unregistering): (slave vti0): Releasing backup interface [ 983.978031][T23384] netlink: 'syz.1.14266': attribute type 17 has an invalid length. [ 983.984343][ T30] vti0 (unregistering): left promiscuous mode [ 984.602664][ T30] bond4 (unregistering): (slave geneve2): Releasing active interface [ 984.630692][ T30] bond0 (unregistering): left promiscuous mode [ 984.637479][ T30] bond_slave_0: left promiscuous mode [ 984.644188][ T30] bond_slave_1: left promiscuous mode [ 984.696961][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.707322][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.717700][ T30] bond0 (unregistering): Released all slaves [ 984.725836][ T30] bond1 (unregistering): Released all slaves [ 984.735785][ T30] bond2 (unregistering): (slave dummy0): Releasing active interface [ 984.747275][ T30] bond2 (unregistering): Released all slaves [ 984.758837][ T30] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 984.767992][ T30] veth0_to_bond: left promiscuous mode [ 984.773635][ T30] veth0_to_bond: left allmulticast mode [ 984.803315][ T30] bond3 (unregistering): Released all slaves [ 984.826907][ T30] bond4 (unregistering): Released all slaves [ 984.860467][ T30] bond5 (unregistering): Released all slaves [ 984.887026][ T30] bond6 (unregistering): (slave veth11): Releasing backup interface [ 984.903278][ T30] veth11: left promiscuous mode [ 984.930245][ T30] bond6 (unregistering): Released all slaves [ 985.075550][T23384] bridge0: port 3(macvlan4) entered blocking state [ 985.082141][T23384] bridge0: port 3(macvlan4) entered forwarding state [ 985.122890][T23384] bridge0: left promiscuous mode [ 985.137909][T23384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.147171][T23384] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.155296][T23384] tipc: Resetting bearer [ 985.162413][T23384] tipc: Resetting bearer [ 985.193550][T23384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.297582][T23384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.388076][T23384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.412256][T23384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 985.424413][T23384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.456081][T23384] veth1_vlan: left promiscuous mode [ 985.483749][T23384] veth0_vlan: left promiscuous mode [ 985.494895][T23384] veth0_vlan: entered promiscuous mode [ 985.503286][T23384] veth1_vlan: entered promiscuous mode [ 985.513765][T23384] veth1_macvtap: left promiscuous mode [ 985.539574][T23384] veth0_macvtap: left promiscuous mode [ 985.547977][T23384] veth0_macvtap: entered promiscuous mode [ 985.584827][T23384] veth1_macvtap: entered promiscuous mode [ 985.594573][T23384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.654651][T23384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.668146][T23384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.704853][T23384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 985.718816][T23384] veth0_to_team: entered promiscuous mode [ 985.725977][T23384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.360762][T23384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 986.458802][T23384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.493996][T23384] geneve4: left promiscuous mode [ 986.525341][T23384] geneve4: left allmulticast mode [ 986.547983][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.555088][T17946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.576204][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.583311][T17946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.659364][ T9] bridge0: entered promiscuous mode [ 986.668506][T23406] tipc: Enabling of bearer rejected, failed to enable media [ 986.678287][ T2274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.694200][ T2274] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 986.707750][ T310] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.725856][ T310] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 986.756013][ T310] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.775853][ T310] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 986.809309][ T310] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.830193][ T310] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 986.850494][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 986.861228][ T12] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 986.872537][ T30] batadv0: left promiscuous mode [ 986.883902][ T30] hsr_slave_0: left promiscuous mode [ 986.895691][ T30] hsr_slave_1: left promiscuous mode [ 986.905761][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.923018][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.935381][T23449] netlink: 'syz.1.14290': attribute type 1 has an invalid length. [ 986.956546][ T9] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 986.964221][ T30] veth1_macvtap: left promiscuous mode [ 986.978462][ T30] veth0_macvtap: left promiscuous mode [ 986.984094][ T30] veth1_vlan: left promiscuous mode [ 986.995616][ T30] veth0_vlan: left promiscuous mode [ 987.122076][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14282'. [ 987.187422][ T30] team0 (unregistering): Port device team_slave_1 removed [ 987.199164][ T30] team0 (unregistering): Port device team_slave_0 removed [ 987.235331][T17495] smc: removing ib device sz1 [ 987.389743][T23456] bond5: (slave bridge3): making interface the new active one [ 987.401108][T23456] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 987.422396][ T9] lo speed is unknown, defaulting to 1000 [ 987.451751][ T9] sz1: Port: 1 Link DOWN [ 987.532242][T23525] loop1: detected capacity change from 0 to 1764 [ 987.550939][ T28] audit: type=1400 audit(1785403860.444:4795): avc: denied { write } for pid=23498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.639160][ T28] audit: type=1400 audit(1785403860.524:4796): avc: denied { write } for pid=23536 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 987.698881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 987.747136][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 987.948939][T23548] netlink: 'syz.4.14289': attribute type 13 has an invalid length. [ 987.973726][T23548] netlink: 'syz.4.14289': attribute type 17 has an invalid length. [ 988.025360][T23548] 0ªî{X¹¦: left allmulticast mode [ 988.044692][ T28] audit: type=1400 audit(1785403860.934:4797): avc: denied { write } for pid=23543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.122248][ T28] audit: type=1400 audit(1785403861.014:4798): avc: denied { write } for pid=23558 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.171360][T23548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.198964][T23548] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.233572][T23548] tipc: Resetting bearer [ 988.253163][T23548] tipc: Resetting bearer [ 988.270417][T23548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.335298][T23548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.348449][T23548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.370917][T23548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 988.388591][T23548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 988.404508][T23548] veth1_vlan: left promiscuous mode [ 988.420369][T23548] veth0_vlan: left promiscuous mode [ 988.439004][T23548] veth0_vlan: entered promiscuous mode [ 988.464215][T23548] veth1_vlan: entered promiscuous mode [ 988.477366][T23548] veth1_macvtap: left promiscuous mode [ 988.486711][T23548] veth0_macvtap: left promiscuous mode [ 988.493124][T23548] veth0_macvtap: entered promiscuous mode [ 988.534840][T23548] veth1_macvtap: entered promiscuous mode [ 988.553091][T23548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.595766][T23548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.634373][T23548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.674696][T23548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.739681][T23548] vlan2: left allmulticast mode [ 988.761383][T23548] batadv_slave_0: left allmulticast mode [ 988.805774][T23548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 988.835199][T23548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 988.879886][T23548] geneve2: left promiscuous mode [ 988.897331][T23548] geneve2: left allmulticast mode [ 988.917349][ T310] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 988.934206][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 988.968200][T17495] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.975329][T17495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.992065][T17495] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.999177][T17495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.115606][T18035] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.124486][T18035] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.138850][T23567] tipc: Enabling of bearer rejected, failed to enable media [ 989.154935][T18035] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.176004][T18035] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 989.439243][ T28] audit: type=1400 audit(1785403862.334:4799): avc: denied { write } for pid=23587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.518422][ T28] audit: type=1400 audit(1785403862.414:4800): avc: denied { write } for pid=23611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.617188][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 989.914999][ T28] audit: type=1400 audit(1785403862.804:4801): avc: denied { write } for pid=23633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 989.975254][ T28] audit: type=1400 audit(1785403862.864:4802): avc: denied { write } for pid=23645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.027620][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 990.100414][T23652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14302'. [ 990.128924][T23652] tipc: Disabling bearer [ 990.467244][T13333] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 846 sec [ 990.484528][T23678] netlink: 'syz.3.14308': attribute type 13 has an invalid length. [ 990.497422][T23678] netlink: 'syz.3.14308': attribute type 17 has an invalid length. [ 990.510814][T23678] 1ªî{X¹¦: left allmulticast mode [ 990.549611][T23678] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.566204][T23678] dummy0: left promiscuous mode [ 990.726003][T23678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 990.761563][T23678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 990.789287][T23678] veth1_virt_wifi: left promiscuous mode [ 990.800958][T23678] veth1_macvtap: left promiscuous mode [ 990.807768][T23678] veth0_macvtap: left promiscuous mode [ 990.820961][T23678] veth0_macvtap: entered promiscuous mode [ 990.835139][T23678] veth1_macvtap: entered promiscuous mode [ 990.846587][T23678] 1ªî{X¹¦: entered promiscuous mode [ 990.885067][T23678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.896069][T23678] veth1_virt_wifi: entered promiscuous mode [ 990.920729][T23678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 990.940192][T23678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 990.991350][T23678] 8021q: adding VLAN 0 to HW filter on device team1 [ 991.002475][T23678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 991.034043][T23678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 991.050174][T23678] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check. [ 991.086499][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 991.115401][T23689] syzkaller0: entered promiscuous mode [ 991.121103][T23689] syzkaller0: entered allmulticast mode [ 991.131108][T23687] tipc: Enabling of bearer rejected, failed to enable media [ 991.147770][ T30] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.171829][ T30] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 991.192930][ T30] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 58523 - 0 [ 991.212466][ T30] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.229569][ T30] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 991.272888][ T30] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 58523 - 0 [ 991.632265][ T30] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.654976][ T30] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 991.656886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 991.685871][ T30] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 58523 - 0 [ 991.700487][ T30] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.716948][ T30] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 991.744251][ T30] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 58523 - 0 [ 991.827363][T17946] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 992.341069][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14321'. [ 992.387694][T23765] tipc: Resetting bearer [ 992.429465][T23765] tipc: Disabling bearer [ 992.469299][T23753] tipc: Enabling of bearer rejected, failed to enable media [ 992.616395][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 992.655964][T23783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14325'. [ 992.720064][T23783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23783 comm=syz.5.14325 [ 992.862295][T23798] netlink: 'syz.4.14326': attribute type 13 has an invalid length. [ 992.882139][T23798] netlink: 'syz.4.14326': attribute type 17 has an invalid length. [ 994.002744][T23815] netlink: 'syz.1.14329': attribute type 322 has an invalid length. [ 994.019694][T23815] loop1: detected capacity change from 0 to 512 [ 994.054389][T23815] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.14329: corrupted inode contents [ 994.078083][T23815] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.086372][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 994.102006][ C1] EXT4-fs (loop1): initial error at time 1785403866: ext4_do_update_inode:5742: inode 15 [ 994.111875][ C1] EXT4-fs (loop1): last error at time 1785403866: ext4_do_update_inode:5742: inode 15 [ 994.121739][T23815] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 994.130407][T23815] loop1: lost filesystem error report for type 5 error -117 [ 994.130840][T23815] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.14329: corrupted inode contents [ 994.150140][T23815] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.153371][T23815] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.14329: mark_inode_dirty error [ 994.174094][T23815] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.175276][T23815] EXT4-fs (loop1): 1 orphan inode deleted [ 994.192402][T23815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.270012][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.845406][T23856] tipc: Enabling of bearer rejected, failed to enable media [ 994.860048][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14338'. [ 995.052328][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14344'. [ 995.081102][T23898] netlink: 'syz.5.14342': attribute type 13 has an invalid length. [ 995.091718][T23898] netlink: 'syz.5.14342': attribute type 17 has an invalid length. [ 995.104905][T23880] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23880 comm=syz.1.14344 [ 995.131746][T23898] tipc: Resetting bearer [ 995.272716][T23898] 8021q: adding VLAN 0 to HW filter on device bond9 [ 996.136496][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 996.274924][ T28] audit: type=1326 audit(1785403869.164:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.5.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 996.345766][ T28] audit: type=1326 audit(1785403869.164:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.5.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 996.399963][ T28] audit: type=1326 audit(1785403869.164:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.5.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b309df99 code=0x7ffc0000 [ 997.442303][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14361'. [ 997.459524][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14361'. [ 997.555912][T23971] netlink: 'syz.4.14363': attribute type 10 has an invalid length. [ 997.590903][T23971] team0: Device nlmon0 is of different type [ 997.602159][T23978] netlink: 'syz.3.14362': attribute type 13 has an invalid length. [ 997.646358][T23978] netlink: 'syz.3.14362': attribute type 17 has an invalid length. [ 997.795483][T23978] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check. [ 998.234409][T24000] netlink: 'syz.5.14366': attribute type 322 has an invalid length. [ 998.529878][T24010] tipc: Enabling of bearer rejected, failed to enable media [ 999.038463][T24027] IPVS: Unknown mcast interface: vcan0 [ 999.054147][T24027] netlink: 'syz.5.14375': attribute type 2 has an invalid length. [ 999.089460][T24027] 0: entered promiscuous mode [ 999.326382][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 999.517713][T24058] tipc: Resetting bearer [ 999.553857][T24070] netlink: 'syz.1.14382': attribute type 13 has an invalid length. [ 999.563140][T24070] netlink: 'syz.1.14382': attribute type 17 has an invalid length. [ 999.792317][T24058] macvlan4: left promiscuous mode [ 999.810397][T24058] vlan0: left allmulticast mode [ 999.818737][T24058] bond13: left allmulticast mode [ 999.825360][T24058] geneve5: left allmulticast mode [ 999.838004][T24058] bond15: left promiscuous mode [ 999.843905][T24058] bond15: left allmulticast mode [ 999.966577][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 999.976389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1000.066840][T24070] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1000.089615][ T30] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.098202][ T30] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.118529][ T30] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1000.146439][ T30] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 58523 - 0 [ 1000.167245][ T30] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.182995][ T30] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.192349][ T30] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1000.201505][ T30] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 58523 - 0 [ 1000.216978][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.225437][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.234025][ T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1000.242898][ T12] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 58523 - 0 [ 1000.251491][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.260098][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.269185][ T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1000.277699][ T12] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 58523 - 0 [ 1000.919524][T24087] syz.5.14385 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1000.934172][T24087] CPU: 0 UID: 0 PID: 24087 Comm: syz.5.14385 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1000.934207][T24087] Tainted: [W]=WARN [ 1000.934215][T24087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.934231][T24087] Call Trace: [ 1000.934254][T24087] [ 1000.934263][T24087] __dump_stack+0x1d/0x30 [ 1000.934287][T24087] dump_stack_lvl+0x95/0xd0 [ 1000.934381][T24087] dump_stack+0x15/0x1b [ 1000.934403][T24087] dump_header+0x80/0x240 [ 1000.934428][T24087] oom_kill_process+0x295/0x350 [ 1000.934467][T24087] out_of_memory+0x981/0xbc0 [ 1000.934576][T24087] try_charge_memcg+0x621/0xa00 [ 1000.934598][T24087] ? __rcu_read_unlock+0x4e/0x70 [ 1000.934634][T24087] __memcg_kmem_charge_page+0x199/0x3a0 [ 1000.934666][T24087] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1000.934732][T24087] alloc_pages_mpol+0xa9/0x1d0 [ 1000.934787][T24087] alloc_pages_noprof+0x8f/0x140 [ 1000.934901][T24087] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1000.934944][T24087] __kvmalloc_node_noprof+0x3a0/0x590 [ 1000.934975][T24087] ? futex_hash_allocate+0x192/0x920 [ 1000.934998][T24087] ? futex_hash_allocate+0x192/0x920 [ 1000.935020][T24087] ? futex_hash_allocate+0x192/0x920 [ 1000.935079][T24087] futex_hash_allocate+0x192/0x920 [ 1000.935114][T24087] ? cap_task_prctl+0x13f/0x6b0 [ 1000.935157][T24087] futex_hash_prctl+0xd8/0xf0 [ 1000.935247][T24087] __se_sys_prctl+0x4f4/0x13b0 [ 1000.935297][T24087] __x64_sys_prctl+0x67/0x80 [ 1000.935368][T24087] x64_sys_call+0x2533/0x3020 [ 1000.935398][T24087] do_syscall_64+0x136/0x3c0 [ 1000.935429][T24087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.935451][T24087] RIP: 0033:0x7fb9b309df99 [ 1000.935518][T24087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.935592][T24087] RSP: 002b:00007fb9b1af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1000.935625][T24087] RAX: ffffffffffffffda RBX: 00007fb9b3325fa0 RCX: 00007fb9b309df99 [ 1000.935639][T24087] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1000.935652][T24087] RBP: 00007fb9b3134ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1000.935737][T24087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.935750][T24087] R13: 00007fb9b3326038 R14: 00007fb9b3325fa0 R15: 00007ffda4779238 [ 1000.935771][T24087] [ 1000.935849][T24087] memory: usage 307200kB, limit 307200kB, failcnt 136 [ 1001.181221][T24087] memory+swap: usage 77404kB, limit 9007199254740988kB, failcnt 0 [ 1001.189210][T24087] kmem: usage 10808kB, limit 9007199254740988kB, failcnt 0 [ 1001.196621][T24087] Memory cgroup stats for /syz5: [ 1001.196825][T24087] cache 10502144 [ 1001.205281][T24087] rss 212992 [ 1001.208523][T24087] shmem 9961472 [ 1001.212033][T24087] mapped_file 12288 [ 1001.215813][T24087] dirty 12288 [ 1001.219564][T24087] writeback 0 [ 1001.222940][T24087] workingset_refault_anon 7066 [ 1001.227735][T24087] workingset_refault_file 305 [ 1001.232397][T24087] swap 55697408 [ 1001.235837][T24087] swapcached 95121408 [ 1001.239926][T24087] pgpgin 745005 [ 1001.243443][T24087] pgpgout 741972 [ 1001.249105][T24087] pgfault 620130 [ 1001.252722][T24087] pgmajfault 5811 [ 1001.256445][T24087] inactive_anon 8232960 [ 1001.260785][T24087] active_anon 3649536 [ 1001.264832][T24087] inactive_file 425984 [ 1001.269008][T24087] active_file 40960 [ 1001.272837][T24087] unevictable 0 [ 1001.277152][T24087] hierarchical_memory_limit 314572800 [ 1001.282749][T24087] hierarchical_memsw_limit 9223372036854771712 [ 1001.289440][T24087] total_cache 10502144 [ 1001.293576][T24087] total_rss 212992 [ 1001.297639][T24087] total_shmem 9961472 [ 1001.301661][T24087] total_mapped_file 12288 [ 1001.305988][T24087] total_dirty 12288 [ 1001.310763][T24087] total_writeback 0 [ 1001.314591][T24087] total_workingset_refault_anon 7066 [ 1001.321239][T24087] total_workingset_refault_file 305 [ 1001.333257][ T28] audit: type=1400 audit(1785403874.224:4806): avc: denied { write } for pid=24091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.365157][T24087] total_swap 55697408 [ 1001.369343][T24087] total_swapcached 95121408 [ 1001.373891][T24087] total_pgpgin 745005 [ 1001.378962][T24087] total_pgpgout 741972 [ 1001.379229][ T28] audit: type=1400 audit(1785403874.224:4807): avc: denied { write } for pid=24102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1001.383123][T24087] total_pgfault 620133 [ 1001.409818][T24087] total_pgmajfault 5811 [ 1001.413971][T24087] total_inactive_anon 8232960 [ 1001.418670][T24087] total_active_anon 3649536 [ 1001.423217][T24087] total_inactive_file 425984 [ 1001.428480][T24087] total_active_file 40960 [ 1001.432832][T24087] total_unevictable 0 [ 1001.436932][T24087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.14385,pid=24086,uid=0 [ 1001.451819][T24087] Memory cgroup out of memory: Killed process 24087 (syz.5.14385) total-vm:96316kB, anon-rss:1432kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1002.055807][T24029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.108824][T24113] netlink: 'syz.5.14389': attribute type 21 has an invalid length. [ 1002.158636][T24118] IPVS: Unknown mcast interface: vcan0 [ 1002.158654][T24120] netlink: 'syz.5.14389': attribute type 21 has an invalid length. [ 1002.168079][T24113] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.191703][T24118] netlink: 'syz.3.14390': attribute type 2 has an invalid length. [ 1002.221919][T24120] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.233621][T24113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.240937][T24113] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.248292][T24113] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.255668][T24113] IPv6: NLM_F_CREATE should be set when creating new route [ 1002.263110][T24120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1002.267195][T24118] 0: entered promiscuous mode [ 1002.376369][ T28] audit: type=1400 audit(1785403875.264:4808): avc: denied { write } for pid=24116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.462061][ T28] audit: type=1400 audit(1785403875.354:4809): avc: denied { write } for pid=24143 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.496750][T24113] vlan3: entered promiscuous mode [ 1002.506830][T24113] bridge0: entered promiscuous mode [ 1002.804199][T24170] netlink: 'syz.5.14397': attribute type 13 has an invalid length. [ 1002.818454][T24170] netlink: 'syz.5.14397': attribute type 17 has an invalid length. [ 1002.911558][T24170] tipc: Resetting bearer [ 1002.970496][ T28] audit: type=1400 audit(1785403875.864:4810): avc: denied { write } for pid=24165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.028862][ T28] audit: type=1400 audit(1785403875.894:4811): avc: denied { write } for pid=24182 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.113959][ T28] audit: type=1326 audit(1785403876.004:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24186 comm="syz.1.14399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb922a3df99 code=0x7ffc0000 [ 1003.140267][T24170] vlan3: left promiscuous mode [ 1003.149447][T24170] bridge0: left promiscuous mode [ 1003.169463][ T28] audit: type=1326 audit(1785403876.034:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24186 comm="syz.1.14399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb922a3df99 code=0x7ffc0000 [ 1003.211370][ T28] audit: type=1326 audit(1785403876.034:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24186 comm="syz.1.14399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb922a3df99 code=0x7ffc0000 [ 1003.308766][ T28] audit: type=1326 audit(1785403876.034:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24186 comm="syz.1.14399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb922a3df99 code=0x7ffc0000 [ 1003.437020][T24202] netlink: 'syz.8.14401': attribute type 322 has an invalid length. [ 1003.857562][T24209] tipc: Enabling of bearer rejected, failed to enable media [ 1004.696755][T24223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.703997][T24223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.996889][T24231] netlink: 'syz.1.14405': attribute type 2 has an invalid length. [ 1005.193675][T24219] syz.3.14403 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1005.218648][T24233] netlink: 'syz.4.14406': attribute type 21 has an invalid length. [ 1005.227332][T24233] IPv6: NLM_F_CREATE should be specified when creating new route [ 1005.235289][T24219] CPU: 1 UID: 0 PID: 24219 Comm: syz.3.14403 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1005.235325][T24219] Tainted: [W]=WARN [ 1005.235334][T24219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.235347][T24219] Call Trace: [ 1005.235355][T24219] [ 1005.235365][T24219] __dump_stack+0x1d/0x30 [ 1005.235488][T24219] dump_stack_lvl+0x95/0xd0 [ 1005.235511][T24219] dump_stack+0x15/0x1b [ 1005.235568][T24219] dump_header+0x80/0x240 [ 1005.235592][T24219] oom_kill_process+0x295/0x350 [ 1005.235650][T24219] out_of_memory+0x981/0xbc0 [ 1005.235763][T24219] try_charge_memcg+0x621/0xa00 [ 1005.235788][T24219] ? should_fail_ex+0x30/0x270 [ 1005.235826][T24219] charge_memcg+0x6d/0x120 [ 1005.235869][T24219] __mem_cgroup_charge+0x28/0xb0 [ 1005.235950][T24219] filemap_add_folio+0x110/0x350 [ 1005.235985][T24219] __filemap_get_folio_mpol+0x32e/0x840 [ 1005.236024][T24219] filemap_fault+0x458/0xb60 [ 1005.236069][T24219] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1005.236099][T24219] ? __pfx_filemap_fault+0x10/0x10 [ 1005.236180][T24219] handle_mm_fault+0x19a1/0x2da0 [ 1005.236224][T24219] do_user_addr_fault+0x634/0x1060 [ 1005.236255][T24219] ? arch_exit_work+0x30/0x40 [ 1005.236284][T24219] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1005.236333][T24219] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1005.236361][T24219] ? trace_page_fault_user+0x1f/0xa0 [ 1005.236392][T24219] exc_page_fault+0x62/0xa0 [ 1005.236427][T24219] asm_exc_page_fault+0x26/0x30 [ 1005.236531][T24219] RIP: 0033:0x7f54c8962dd2 [ 1005.236556][T24219] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 d3 8b fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 1005.236586][T24219] RSP: 002b:00007ffd9fec3840 EFLAGS: 00010202 [ 1005.236652][T24219] RAX: 000000000000f008 RBX: 00007f54c9845720 RCX: 0000000000000000 [ 1005.236668][T24219] RDX: 0000001b33015000 RSI: 0000000000000008 RDI: 00007f54c9845720 [ 1005.236684][T24219] RBP: 00000000000004df R08: 00007f54c8d00000 R09: 00007f54c8d16038 [ 1005.236705][T24219] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff818bf921 [ 1005.236720][T24219] R13: 00007f54c8d16038 R14: 00000000000001ab R15: ffffffffffff1000 [ 1005.236738][T24219] ? __walk_page_range+0xc1/0x340 [ 1005.236811][T24219] [ 1005.444504][T24233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1005.465930][T24233] IPv6: NLM_F_CREATE should be set when creating new route [ 1005.466425][T24234] netlink: 'syz.4.14406': attribute type 21 has an invalid length. [ 1005.473247][T24233] IPv6: NLM_F_CREATE should be set when creating new route [ 1005.488364][T24233] IPv6: NLM_F_CREATE should be set when creating new route [ 1005.495711][T24234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1005.538048][T24219] memory: usage 307200kB, limit 307200kB, failcnt 465 [ 1005.549630][T24219] memory+swap: usage 309296kB, limit 9007199254740988kB, failcnt 0 [ 1005.563115][T24219] kmem: usage 306896kB, limit 9007199254740988kB, failcnt 0 [ 1005.572087][T24219] Memory cgroup stats for /syz3: [ 1005.572490][T24219] cache 86016 [ 1005.581154][T24219] rss 208896 [ 1005.584428][T24219] shmem 0 [ 1005.587587][T24219] mapped_file 0 [ 1005.591108][T24219] dirty 0 [ 1005.594073][T24219] writeback 0 [ 1005.597853][T24219] workingset_refault_anon 6350 [ 1005.602673][T24219] workingset_refault_file 2941 [ 1005.616318][T24219] swap 2146304 [ 1005.621537][T24219] swapcached 60596224 [ 1005.641774][T24219] pgpgin 717607 [ 1005.648656][T24219] pgpgout 717531 [ 1005.653331][T24219] pgfault 812308 [ 1005.663950][T24219] pgmajfault 3678 [ 1005.667915][T24219] inactive_anon 94208 [ 1005.671958][T24219] active_anon 131072 [ 1005.675939][T24219] inactive_file 77824 [ 1005.680289][T24219] active_file 8192 [ 1005.684149][T24219] unevictable 0 [ 1005.687933][T24219] hierarchical_memory_limit 314572800 [ 1005.693385][T24219] hierarchical_memsw_limit 9223372036854771712 [ 1005.700030][T24219] total_cache 86016 [ 1005.703911][T24219] total_rss 208896 [ 1005.708003][T24219] total_shmem 0 [ 1005.711570][T24219] total_mapped_file 0 [ 1005.715642][T24219] total_dirty 0 [ 1005.720157][T24219] total_writeback 0 [ 1005.724057][T24219] total_workingset_refault_anon 6350 [ 1005.732373][T24219] total_workingset_refault_file 2941 [ 1005.737965][T24219] total_swap 2146304 [ 1005.742755][T24219] total_swapcached 60596224 [ 1005.748508][T24219] total_pgpgin 717607 [ 1005.752619][T24219] total_pgpgout 717531 [ 1005.757048][T24219] total_pgfault 812308 [ 1005.761184][T24219] total_pgmajfault 3678 [ 1005.765423][T24219] total_inactive_anon 94208 [ 1005.782385][T24219] total_active_anon 131072 [ 1005.787114][T24219] total_inactive_file 77824 [ 1005.791683][T24219] total_active_file 8192 [ 1005.795988][T24219] total_unevictable 0 [ 1005.800594][T24219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.464,pid=4730,uid=0 [ 1005.815385][T24219] Memory cgroup out of memory: Killed process 4730 (syz.3.464) total-vm:96100kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 1005.850973][T24220] syz.3.14403 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1005.868084][T24220] CPU: 1 UID: 0 PID: 24220 Comm: syz.3.14403 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1005.868126][T24220] Tainted: [W]=WARN [ 1005.868135][T24220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.868149][T24220] Call Trace: [ 1005.868156][T24220] [ 1005.868165][T24220] __dump_stack+0x1d/0x30 [ 1005.868242][T24220] dump_stack_lvl+0x95/0xd0 [ 1005.868328][T24220] dump_stack+0x15/0x1b [ 1005.868395][T24220] dump_header+0x80/0x240 [ 1005.868507][T24220] oom_kill_process+0x295/0x350 [ 1005.868538][T24220] out_of_memory+0x981/0xbc0 [ 1005.868627][T24220] try_charge_memcg+0x621/0xa00 [ 1005.868715][T24220] __memcg_kmem_charge_page+0x199/0x3a0 [ 1005.868745][T24220] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1005.868779][T24220] alloc_pages_mpol+0xa9/0x1d0 [ 1005.868808][T24220] alloc_pages_noprof+0x8f/0x140 [ 1005.868836][T24220] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1005.868874][T24220] __kvmalloc_node_noprof+0x3a0/0x590 [ 1005.868899][T24220] ? futex_hash_allocate+0x192/0x920 [ 1005.868919][T24220] ? futex_hash_allocate+0x192/0x920 [ 1005.868938][T24220] ? futex_hash_allocate+0x192/0x920 [ 1005.869041][T24220] futex_hash_allocate+0x192/0x920 [ 1005.869062][T24220] ? cap_task_prctl+0x13f/0x6b0 [ 1005.869173][T24220] futex_hash_prctl+0xd8/0xf0 [ 1005.869237][T24220] __se_sys_prctl+0x4f4/0x13b0 [ 1005.869338][T24220] __x64_sys_prctl+0x67/0x80 [ 1005.869386][T24220] x64_sys_call+0x2533/0x3020 [ 1005.869463][T24220] do_syscall_64+0x136/0x3c0 [ 1005.869484][T24220] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 1005.869565][T24220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.869586][T24220] RIP: 0033:0x7f54c8a8df99 [ 1005.869602][T24220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.869730][T24220] RSP: 002b:00007f54c74e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1005.869778][T24220] RAX: ffffffffffffffda RBX: 00007f54c8d15fa0 RCX: 00007f54c8a8df99 [ 1005.869802][T24220] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1005.869814][T24220] RBP: 00007f54c8b24ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1005.869827][T24220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.869839][T24220] R13: 00007f54c8d16038 R14: 00007f54c8d15fa0 R15: 00007ffd9fec3798 [ 1005.869866][T24220] [ 1005.869886][T24220] memory: usage 307200kB, limit 307200kB, failcnt 468 [ 1006.109888][T24220] memory+swap: usage 309064kB, limit 9007199254740988kB, failcnt 0 [ 1006.117845][T24220] kmem: usage 306780kB, limit 9007199254740988kB, failcnt 0 [ 1006.125169][T24220] Memory cgroup stats for /syz3: [ 1006.125336][T24220] cache 110592 [ 1006.133786][T24220] rss 208896 [ 1006.137028][T24220] shmem 0 [ 1006.139961][T24220] mapped_file 0 [ 1006.143418][T24220] dirty 0 [ 1006.146466][T24220] writeback 0 [ 1006.149853][T24220] workingset_refault_anon 6350 [ 1006.154626][T24220] workingset_refault_file 2959 [ 1006.159488][T24220] swap 2002944 [ 1006.162862][T24220] swapcached 60596224 [ 1006.166909][T24220] pgpgin 717625 [ 1006.176801][T24220] pgpgout 717543 [ 1006.184885][T24220] pgfault 812311 [ 1006.191771][T24220] pgmajfault 3680 [ 1006.195534][T24220] inactive_anon 114688 [ 1006.200383][T24220] active_anon 110592 [ 1006.204290][T24220] inactive_file 77824 [ 1006.214323][T24220] active_file 32768 [ 1006.218340][T24220] unevictable 0 [ 1006.221884][T24220] hierarchical_memory_limit 314572800 [ 1006.227538][T24220] hierarchical_memsw_limit 9223372036854771712 [ 1006.233725][T24220] total_cache 110592 [ 1006.237938][T24220] total_rss 208896 [ 1006.241687][T24220] total_shmem 0 [ 1006.245192][T24220] total_mapped_file 0 [ 1006.249626][T24220] total_dirty 0 [ 1006.253163][T24220] total_writeback 0 [ 1006.257312][T24220] total_workingset_refault_anon 6350 [ 1006.262609][T24220] total_workingset_refault_file 2959 [ 1006.268207][T24220] total_swap 2002944 [ 1006.272145][T24220] total_swapcached 60596224 [ 1006.276879][T24220] total_pgpgin 717625 [ 1006.280897][T24220] total_pgpgout 717543 [ 1006.284979][T24220] total_pgfault 812311 [ 1006.289949][T24220] total_pgmajfault 3680 [ 1006.294180][T24220] total_inactive_anon 114688 [ 1006.299581][T24220] total_active_anon 110592 [ 1006.310123][T24220] total_inactive_file 77824 [ 1006.318368][T24220] total_active_file 32768 [ 1006.322729][T24220] total_unevictable 0 [ 1006.327123][T24220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.14403,pid=24219,uid=0 [ 1006.342179][T24220] Memory cgroup out of memory: Killed process 24219 (syz.3.14403) total-vm:96316kB, anon-rss:1436kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 1006.559631][T24077] syz1: Port: 1 Link DOWN [ 1006.565306][T24228] IPVS: Unknown mcast interface: vcan0 [ 1006.578345][T24231] 0: entered promiscuous mode [ 1006.583460][ T3377] syz0: Port: 1 Link DOWN [ 1006.588010][T24234] vlan3: entered promiscuous mode [ 1006.598695][T24234] bridge0: entered promiscuous mode [ 1006.617751][ T2274] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.632976][ T2274] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.654690][ T2274] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.665719][ T2274] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.681345][ T2274] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.702071][ T2274] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.712932][T24253] netlink: 'syz.8.14413': attribute type 13 has an invalid length. [ 1006.726143][ T2274] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.740392][T24253] netlink: 'syz.8.14413': attribute type 17 has an invalid length. [ 1006.748882][ T2274] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.788199][T24253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.813982][T24253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.884196][T24253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.894759][T24253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.908535][T24253] veth1_vlan: left promiscuous mode [ 1006.914784][T24253] veth0_vlan: left promiscuous mode [ 1006.921973][T24253] veth0_vlan: entered promiscuous mode [ 1006.938425][T24253] veth1_vlan: entered promiscuous mode [ 1006.951835][T24253] veth1_macvtap: left promiscuous mode [ 1006.958177][T24253] veth0_macvtap: left promiscuous mode [ 1006.964379][T24253] veth0_macvtap: entered promiscuous mode [ 1006.972050][T24253] veth1_macvtap: entered promiscuous mode [ 1006.981095][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.993011][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.001800][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.011029][T24253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.020006][T24253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.032326][T24253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1007.042763][T24253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1007.051007][T24253] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1007.063151][T24253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1007.074000][T24253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1007.088859][T24253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1007.107066][T24253] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1007.129140][T24253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1007.139563][T24253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1007.164124][T24253] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1007.198345][T24253] 8021q: adding VLAN 0 to HW filter on device team1 [ 1007.211605][T24253] 8021q: adding VLAN 0 to HW filter on device team2 [ 1007.280043][T24253] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1007.290555][T24253] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1007.301470][T24253] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1007.316185][T24067] syz1: Port: 1 Link ACTIVE [ 1007.322102][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.329264][T17946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.340546][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.347637][T17946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.404187][T24262] netlink: 'syz.3.14416': attribute type 322 has an invalid length. [ 1007.414386][T24256] tipc: Enabling of bearer rejected, failed to enable media [ 1007.429464][T24077] syz0: Port: 1 Link ACTIVE [ 1007.429936][T18035] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.473656][T18035] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.484228][T18035] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.497619][T18035] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.514282][T18035] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.536115][T18035] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.547613][T18035] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.557342][T18035] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1008.050301][T17946] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1008.116181][T24303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14425'. [ 1008.269746][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.276970][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.295065][T24319] tipc: Resetting bearer [ 1008.335445][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.361016][T24319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.402281][T24324] netlink: 'syz.8.14430': attribute type 21 has an invalid length. [ 1008.432233][T24324] IPv6: NLM_F_CREATE should be specified when creating new route [ 1008.453865][T24324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1008.461301][T24324] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.468636][T24324] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.475956][T24324] IPv6: NLM_F_CREATE should be set when creating new route [ 1008.515387][T24319] vlan3: left promiscuous mode [ 1008.520698][T24319] bridge0: left promiscuous mode [ 1008.523910][T24329] netlink: 'syz.8.14430': attribute type 21 has an invalid length. [ 1008.535421][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.545169][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.557960][T24329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1008.566423][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.596881][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.625900][T24328] netlink: 'syz.5.14431': attribute type 322 has an invalid length. [ 1008.692029][T24324] vlan4: entered promiscuous mode [ 1008.704591][T24335] tipc: Failed to remove unknown binding: 66,0,0/3835390525:1846795962/1846795964 [ 1008.707431][T24324] bridge0: entered promiscuous mode [ 1008.721773][T24335] tipc: Failed to remove unknown binding: 66,0,0/3835390525:1846795962/1846795963 [ 1008.749873][ T49] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.759124][T24335] tipc: Failed to remove unknown binding: 66,0,0/3835390525:1846795962/1846795964 [ 1008.792607][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.820231][ T49] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.823355][T24342] netlink: 'syz.3.14434': attribute type 13 has an invalid length. [ 1008.829230][T24335] tipc: Failed to remove unknown binding: 66,0,0/3835390525:1846795962/1846795963 [ 1008.853205][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.875120][T24342] 1ªî{X¹¦: left promiscuous mode [ 1008.916713][T24342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.939376][T24342] tipc: Resetting bearer [ 1008.949799][T24342] tipc: Resetting bearer [ 1008.977736][T24342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1008.988276][T24342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.000650][T24342] veth1_virt_wifi: left promiscuous mode [ 1009.008291][T24342] veth1_macvtap: left promiscuous mode [ 1009.021919][T24342] veth0_macvtap: left promiscuous mode [ 1009.028957][T24342] veth0_macvtap: entered promiscuous mode [ 1009.035443][T24342] veth1_macvtap: entered promiscuous mode [ 1009.046051][T24342] 1ªî{X¹¦: entered promiscuous mode [ 1009.069076][T24342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1009.079488][T24342] veth1_virt_wifi: entered promiscuous mode [ 1009.093795][T24342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1009.108269][T24342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.144610][T24342] 8021q: adding VLAN 0 to HW filter on device team1 [ 1009.154077][T24342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1009.164676][T24342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1009.175867][T24342] A link change request failed with some changes committed already. Interface > may have been left with an inconsistent configuration, please check. [ 1009.192626][T24336] tipc: Enabling of bearer rejected, failed to enable media [ 1009.233618][T17946] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.241963][T17946] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.254428][T17946] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1009.262674][T17946] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 37190 - 0 [ 1009.271098][T17946] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.279830][T17946] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.288100][T17946] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1009.296261][T17946] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 37190 - 0 [ 1009.307716][T17946] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.315939][T17946] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.324183][T17946] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1009.332729][T17946] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 37190 - 0 [ 1009.341643][T17946] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.349984][T17946] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.358287][T17946] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1009.366892][T17946] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 37190 - 0 [ 1009.392217][T17946] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1010.409080][T24383] bridge0: port 3(macvlan4) entered disabled state [ 1010.415722][T24383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.422977][T24383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.453437][T24383] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1010.505118][T24385] validate_nla: 1 callbacks suppressed [ 1010.505141][T24385] netlink: 'syz.8.14447': attribute type 322 has an invalid length. [ 1010.779955][T24389] tipc: Enabling of bearer rejected, failed to enable media [ 1011.045241][T24398] tipc: Resetting bearer [ 1011.065823][T24403] netlink: 'syz.1.14450': attribute type 13 has an invalid length. [ 1011.074131][T24403] netlink: 'syz.1.14450': attribute type 17 has an invalid length. [ 1011.259854][T24395] netlink: 'syz.4.14461': attribute type 322 has an invalid length. [ 1011.291358][T24403] bridge0: port 3(macvlan4) entered blocking state [ 1011.298032][T24403] bridge0: port 3(macvlan4) entered forwarding state [ 1011.304910][T24403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.311991][T24403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.319398][T24403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.326566][T24403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.412314][T17946] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.422355][T17946] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.433011][T17946] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.442384][T17946] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.456257][T17946] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.465231][T17946] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.474314][T17946] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1011.484354][T17946] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.859258][T24414] netlink: 'syz.1.14451': attribute type 21 has an invalid length. [ 1011.880635][T24414] IPv6: NLM_F_CREATE should be specified when creating new route [ 1011.906420][T24415] netlink: 'syz.8.14463': attribute type 322 has an invalid length. [ 1011.914616][T24414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1011.921972][T24414] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.929290][T24414] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.936545][T24414] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.975083][T24419] netlink: 'syz.1.14451': attribute type 21 has an invalid length. [ 1011.993279][T24419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.021663][T24413] tipc: Enabling of bearer rejected, failed to enable media [ 1012.042331][T24414] vlan3: entered promiscuous mode [ 1012.047650][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1012.744313][T24467] netlink: 'syz.3.14470': attribute type 21 has an invalid length. [ 1012.765895][T24467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.773312][T24467] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.780735][T24467] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.788071][T24467] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.819159][T24467] netlink: 'syz.3.14470': attribute type 21 has an invalid length. [ 1012.828312][T24467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1013.044930][T24462] bridge0: port 3(macvlan4) entered disabled state [ 1013.051714][T24462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.058882][T24462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.095081][T24462] tipc: Resetting bearer [ 1013.166342][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1013.455208][T24462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.490994][T24462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.689271][T24479] 9pnet_fd: p9_fd_create_unix (24479): problem connecting socket: ./file0: -111 [ 1013.714843][T24479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14482'. [ 1013.862888][T24462] vlan3: left promiscuous mode [ 1013.876047][T24470] vlan1: entered promiscuous mode [ 1013.891213][T24468] tipc: Enabling of bearer rejected, failed to enable media [ 1013.908326][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.917991][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.934997][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.944757][ T49] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.956975][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.966064][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1013.976135][ T49] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.005061][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.014211][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1014.023437][ T49] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1014.033285][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.071157][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1014.085985][T24500] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1014.191744][T24521] netlink: 'syz.8.14479': attribute type 322 has an invalid length. [ 1015.219700][T24543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1015.326241][T24557] 9pnet_fd: p9_fd_create_unix (24557): problem connecting socket: ./file0: -111 [ 1015.454035][T24565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14492'. [ 1015.857587][T24594] netlink: 'syz.3.14499': attribute type 21 has an invalid length. [ 1015.868893][T24594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.882118][T24594] netlink: 'syz.3.14499': attribute type 21 has an invalid length. [ 1015.915667][T24594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1016.002102][T24594] vlan1: entered promiscuous mode [ 1016.198879][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14503'. [ 1016.284101][T24611] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1016.684322][T24617] loop1: detected capacity change from 0 to 512 [ 1016.725410][T24617] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1016.803497][T24617] EXT4-fs (loop1): 1 truncate cleaned up [ 1016.842374][T24617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.964048][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.135660][T24678] loop1: detected capacity change from 0 to 512 [ 1017.191366][T24678] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.14510: corrupted inode contents [ 1017.221750][T24678] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1017.221970][T24678] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1017.231404][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1017.231426][ C0] EXT4-fs (loop1): initial error at time 1785403890: ext4_do_update_inode:5742: inode 15 [ 1017.231461][ C0] EXT4-fs (loop1): last error at time 1785403890: ext4_do_update_inode:5742: inode 15 [ 1017.346366][T24678] loop1: lost filesystem error report for type 5 error -117 [ 1017.360862][T24678] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.14510: corrupted inode contents [ 1017.422587][T24678] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1017.422950][T24678] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.14510: mark_inode_dirty error [ 1017.465173][T24678] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1017.465450][T24678] EXT4-fs (loop1): 1 orphan inode deleted [ 1017.508495][T24678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.543490][T24691] netlink: 'syz.8.14513': attribute type 21 has an invalid length. [ 1017.568155][T24691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.595277][T24691] netlink: 'syz.8.14513': attribute type 21 has an invalid length. [ 1017.611811][T24691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.630190][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.734639][T24707] 9pnet_fd: p9_fd_create_unix (24707): problem connecting socket: ./file0: -111 [ 1017.814467][T24708] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1017.871673][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14518'. [ 1017.872725][T24717] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14516'. [ 1018.006040][T24724] syzkaller0: entered promiscuous mode [ 1018.017925][T24724] syzkaller0: entered allmulticast mode [ 1018.124199][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14525'. [ 1018.283112][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1018.294398][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1018.294434][ T3297] Tainted: [W]=WARN [ 1018.294442][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.294463][ T3297] Call Trace: [ 1018.294469][ T3297] [ 1018.294477][ T3297] __dump_stack+0x1d/0x30 [ 1018.294500][ T3297] dump_stack_lvl+0x95/0xd0 [ 1018.294522][ T3297] dump_stack+0x15/0x1b [ 1018.294623][ T3297] dump_header+0x80/0x240 [ 1018.294644][ T3297] oom_kill_process+0x295/0x350 [ 1018.294672][ T3297] out_of_memory+0x981/0xbc0 [ 1018.294709][ T3297] try_charge_memcg+0x621/0xa00 [ 1018.294731][ T3297] ? should_fail_ex+0x30/0x270 [ 1018.294779][ T3297] charge_memcg+0x6d/0x120 [ 1018.294825][ T3297] __mem_cgroup_charge+0x28/0xb0 [ 1018.294855][ T3297] filemap_add_folio+0x110/0x350 [ 1018.294956][ T3297] __filemap_get_folio_mpol+0x32e/0x840 [ 1018.294991][ T3297] filemap_fault+0x458/0xb60 [ 1018.295013][ T3297] handle_mm_fault+0x167a/0x2da0 [ 1018.295082][ T3297] do_user_addr_fault+0x634/0x1060 [ 1018.295108][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 1018.295215][ T3297] exc_page_fault+0x62/0xa0 [ 1018.295247][ T3297] asm_exc_page_fault+0x26/0x30 [ 1018.295352][ T3297] RIP: 0033:0x7f54c895bed4 [ 1018.295371][ T3297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e0 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 97 ee 00 48 01 d1 [ 1018.295391][ T3297] RSP: 002b:00007ffd9fec3b00 EFLAGS: 00010206 [ 1018.295410][ T3297] RAX: 0000001b32a24000 RBX: 0000000000001f1e RCX: 00000000000f8890 [ 1018.295426][ T3297] RDX: 000000000e14e486 RSI: 00007ffd9fec3b90 RDI: 0000000000000001 [ 1018.295441][ T3297] RBP: 00007ffd9fec3b3c R08: 0000000035b79303 R09: 3fffffffffffffff [ 1018.295454][ T3297] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1018.295545][ T3297] R13: 00000000000927c0 R14: 00000000000f8b64 R15: 00007ffd9fec3b90 [ 1018.295568][ T3297] [ 1018.295600][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 849 [ 1018.498306][ T3297] memory+swap: usage 141456kB, limit 9007199254740988kB, failcnt 0 [ 1018.506386][ T3297] kmem: usage 139060kB, limit 9007199254740988kB, failcnt 0 [ 1018.514125][ T3297] Memory cgroup stats for /syz3: [ 1018.514435][ T3297] cache 0 [ 1018.522626][ T3297] rss 192512 [ 1018.531029][ T3297] shmem 0 [ 1018.534171][ T3297] mapped_file 0 [ 1018.538167][ T3297] dirty 0 [ 1018.541647][ T3297] writeback 0 [ 1018.568343][ T3297] workingset_refault_anon 6350 [ 1018.582389][ T3297] workingset_refault_file 3182 [ 1018.592713][ T3297] swap 2002944 [ 1018.600343][ T3297] swapcached 60596224 [ 1018.614925][ T3297] pgpgin 725137 [ 1018.623144][ T3297] pgpgout 725086 [ 1018.631662][ T3297] pgfault 822612 [ 1018.642469][ T3297] pgmajfault 3685 [ 1018.650652][ T3297] inactive_anon 159744 [ 1018.656972][ T3297] active_anon 49152 [ 1018.661593][ T3297] inactive_file 0 [ 1018.671315][ T3297] active_file 0 [ 1018.679705][ T3297] unevictable 0 [ 1018.683778][ T3297] hierarchical_memory_limit 314572800 [ 1018.703448][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 1018.726971][ T3297] total_cache 0 [ 1018.733581][ T3297] total_rss 192512 [ 1018.740713][ T3297] total_shmem 0 [ 1018.749780][ T3297] total_mapped_file 0 [ 1018.756880][ T3297] total_dirty 0 [ 1018.766020][ T3297] total_writeback 0 [ 1018.776907][ T3297] total_workingset_refault_anon 6350 [ 1018.787452][ T3297] total_workingset_refault_file 3182 [ 1018.796441][ T3297] total_swap 2002944 [ 1018.802233][ T3297] total_swapcached 60596224 [ 1018.812623][ T3297] total_pgpgin 725137 [ 1018.820313][ T3297] total_pgpgout 725086 [ 1018.827906][ T3297] total_pgfault 822612 [ 1018.836158][ T3297] total_pgmajfault 3685 [ 1018.842577][ T3297] total_inactive_anon 159744 [ 1018.850093][ T3297] total_active_anon 49152 [ 1018.861204][ T3297] total_inactive_file 0 [ 1018.869467][ T3297] total_active_file 0 [ 1018.879126][ T3297] total_unevictable 0 [ 1018.886024][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.14524,pid=24729,uid=0 [ 1018.940031][ T3297] Memory cgroup out of memory: Killed process 24729 (syz.3.14524) total-vm:96100kB, anon-rss:1420kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1019.250969][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1019.251064][ T28] audit: type=1400 audit(1785403892.144:4845): avc: denied { write } for pid=24777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.348128][ T28] audit: type=1400 audit(1785403892.244:4846): avc: denied { write } for pid=24801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.506546][ T28] audit: type=1400 audit(1785403892.404:4847): avc: denied { write } for pid=24808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.613369][ T28] audit: type=1400 audit(1785403892.504:4848): avc: denied { write } for pid=24825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.806360][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1020.689639][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14552'. [ 1020.702747][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14552'. [ 1021.054556][T24886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.151904][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1021.193636][T24886] team0: Device bond0 is of different type [ 1021.343438][T24901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14565'. [ 1021.361434][T24899] usb usb8: usbfs: process 24899 (syz.4.14564) did not claim interface 0 before use [ 1021.393278][T24901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24901 comm=syz.5.14565 [ 1021.450654][T24923] ip6t_REJECT: ECHOREPLY is not supported [ 1021.945329][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14573'. [ 1022.034951][T24943] bond11: entered promiscuous mode [ 1022.059614][T24943] bond11: entered allmulticast mode [ 1022.330184][T24993] netlink: 'syz.4.14583': attribute type 322 has an invalid length. [ 1022.455823][T25010] 9pnet_fd: p9_fd_create_unix (25010): problem connecting socket: ./file0: -111 [ 1022.558070][T25016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14587'. [ 1022.604497][T25020] netlink: 'syz.8.14589': attribute type 4 has an invalid length. [ 1022.655721][T25021] netlink: 'syz.8.14589': attribute type 4 has an invalid length. [ 1023.498700][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1023.509628][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1023.509728][ T3297] Tainted: [W]=WARN [ 1023.509755][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.509767][ T3297] Call Trace: [ 1023.509775][ T3297] [ 1023.509784][ T3297] __dump_stack+0x1d/0x30 [ 1023.509809][ T3297] dump_stack_lvl+0x95/0xd0 [ 1023.509906][ T3297] dump_stack+0x15/0x1b [ 1023.509929][ T3297] dump_header+0x80/0x240 [ 1023.510022][ T3297] oom_kill_process+0x295/0x350 [ 1023.510099][ T3297] out_of_memory+0x981/0xbc0 [ 1023.510126][ T3297] try_charge_memcg+0x621/0xa00 [ 1023.510145][ T3297] ? should_fail_ex+0x30/0x270 [ 1023.510234][ T3297] charge_memcg+0x6d/0x120 [ 1023.510335][ T3297] __mem_cgroup_charge+0x28/0xb0 [ 1023.510378][ T3297] filemap_add_folio+0x110/0x350 [ 1023.510409][ T3297] __filemap_get_folio_mpol+0x32e/0x840 [ 1023.510457][ T3297] filemap_fault+0x458/0xb60 [ 1023.510478][ T3297] handle_mm_fault+0x167a/0x2da0 [ 1023.510538][ T3297] do_user_addr_fault+0x634/0x1060 [ 1023.510564][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 1023.510595][ T3297] exc_page_fault+0x62/0xa0 [ 1023.510709][ T3297] asm_exc_page_fault+0x26/0x30 [ 1023.510729][ T3297] RIP: 0033:0x7f54c895bed4 [ 1023.510744][ T3297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e0 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 97 ee 00 48 01 d1 [ 1023.510760][ T3297] RSP: 002b:00007ffd9fec3b00 EFLAGS: 00010206 [ 1023.510777][ T3297] RAX: 0000001b32a24000 RBX: 0000000000001f45 RCX: 00000000000fa000 [ 1023.510863][ T3297] RDX: 0000000001a7b809 RSI: 00007ffd9fec3b90 RDI: 0000000000000001 [ 1023.510876][ T3297] RBP: 00007ffd9fec3b3c R08: 0000000006505bfd R09: 3fffffffffffffff [ 1023.510894][ T3297] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1023.510909][ T3297] R13: 00000000000927c0 R14: 00000000000f9fe0 R15: 00007ffd9fec3b90 [ 1023.510930][ T3297] [ 1023.510939][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 1060 [ 1023.794356][ T3297] memory+swap: usage 141456kB, limit 9007199254740988kB, failcnt 0 [ 1023.836739][T25020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.843912][T25020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.846836][ T3297] kmem: usage 138404kB, limit 9007199254740988kB, failcnt 0 [ 1023.871972][ T3297] Memory cgroup stats for /syz3: [ 1023.872201][ T3297] cache 499712 [ 1023.918096][ T3297] rss 204800 [ 1023.923674][ T3297] shmem 499712 [ 1023.929138][ T3297] mapped_file 0 [ 1023.934158][ T3297] dirty 0 [ 1023.938972][ T3297] writeback 0 [ 1023.943755][ T3297] workingset_refault_anon 6350 [ 1023.951962][ T3297] workingset_refault_file 3567 [ 1023.965373][ T3297] swap 2002944 [ 1023.970416][ T3297] swapcached 60596224 [ 1023.974826][ T3297] pgpgin 727634 [ 1023.979480][ T3297] pgpgout 727458 [ 1023.988835][ T3297] pgfault 825783 [ 1023.992494][ T3297] pgmajfault 3689 [ 1023.996601][ T3297] inactive_anon 327680 [ 1024.000843][ T3297] active_anon 393216 [ 1024.004790][ T3297] inactive_file 0 [ 1024.009578][ T3297] active_file 0 [ 1024.013141][ T3297] unevictable 0 [ 1024.016905][ T3297] hierarchical_memory_limit 314572800 [ 1024.022480][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 1024.079336][ T3297] total_cache 499712 [ 1024.105065][ T3297] total_rss 204800 [ 1024.127013][ T3297] total_shmem 499712 [ 1024.147067][ T3297] total_mapped_file 0 [ 1024.165119][ T3297] total_dirty 0 [ 1024.199821][ T3297] total_writeback 0 [ 1024.236987][ T3297] total_workingset_refault_anon 6350 [ 1024.243000][ T3297] total_workingset_refault_file 3567 [ 1024.248484][ T3297] total_swap 2002944 [ 1024.253867][ T3297] total_swapcached 60596224 [ 1024.268288][ T3297] total_pgpgin 727634 [ 1024.275334][ T3297] total_pgpgout 727458 [ 1024.283578][ T3297] total_pgfault 825783 [ 1024.291449][ T3297] total_pgmajfault 3689 [ 1024.300594][ T3297] total_inactive_anon 327680 [ 1024.309460][ T3297] total_active_anon 393216 [ 1024.334028][ T3297] total_inactive_file 0 [ 1024.338380][ T3297] total_active_file 0 [ 1024.342370][ T3297] total_unevictable 0 [ 1024.346505][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.14591,pid=25023,uid=0 [ 1024.373400][ T3297] Memory cgroup out of memory: OOM victim 25023 (syz.3.14591) is already exiting. Skip killing the task [ 1024.815367][T24488] syz1: Port: 1 Link DOWN [ 1024.823961][ T957] syz0: Port: 1 Link DOWN [ 1024.825009][T18035] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.882057][T18035] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1024.893233][T25051] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14599'. [ 1024.958781][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.968211][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1024.986020][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.004772][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1025.014924][T25049] netlink: 'syz.5.14610': attribute type 4 has an invalid length. [ 1025.027174][T25051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25051 comm=syz.8.14599 [ 1025.044878][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.045037][T25049] netlink: 'syz.5.14610': attribute type 4 has an invalid length. [ 1025.063872][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1025.084508][T25075] ip6t_REJECT: ECHOREPLY is not supported [ 1025.199203][T25084] 9pnet_fd: p9_fd_create_unix (25084): problem connecting socket: ./file0: -111 [ 1025.244651][T25077] netlink: 'syz.3.14603': attribute type 322 has an invalid length. [ 1025.294994][T25086] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14606'. [ 1025.412297][T25088] netlink: 'syz.5.14609': attribute type 21 has an invalid length. [ 1025.429842][T25088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1025.437151][T25088] IPv6: NLM_F_CREATE should be set when creating new route [ 1025.444500][T25088] IPv6: NLM_F_CREATE should be set when creating new route [ 1025.451807][T25088] IPv6: NLM_F_CREATE should be set when creating new route [ 1025.463307][T25092] netlink: 'syz.5.14609': attribute type 21 has an invalid length. [ 1025.471610][T25092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1025.995194][T25102] netlink: 'syz.5.14624': attribute type 21 has an invalid length. [ 1026.005538][T25102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.028849][T25102] netlink: 'syz.5.14624': attribute type 21 has an invalid length. [ 1026.040402][T25102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.149344][T25118] ip6t_REJECT: ECHOREPLY is not supported [ 1026.177411][T25120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14618'. [ 1026.251600][T25120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25120 comm=syz.3.14618 [ 1026.617494][T25157] 9pnet_fd: p9_fd_create_unix (25157): problem connecting socket: ./file0: -111 [ 1026.676223][T25157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14627'. [ 1027.015998][T25167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.023339][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.030691][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.037945][T25167] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.063384][T25167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1027.481269][T25180] syz.8.14635 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1027.545912][T25180] CPU: 1 UID: 0 PID: 25180 Comm: syz.8.14635 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1027.545952][T25180] Tainted: [W]=WARN [ 1027.545961][T25180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.545977][T25180] Call Trace: [ 1027.545986][T25180] [ 1027.545996][T25180] __dump_stack+0x1d/0x30 [ 1027.546025][T25180] dump_stack_lvl+0x95/0xd0 [ 1027.546078][T25180] dump_stack+0x15/0x1b [ 1027.546165][T25180] dump_header+0x80/0x240 [ 1027.546192][T25180] oom_kill_process+0x295/0x350 [ 1027.546237][T25180] out_of_memory+0x981/0xbc0 [ 1027.546349][T25180] try_charge_memcg+0x621/0xa00 [ 1027.546374][T25180] ? __rcu_read_unlock+0x4e/0x70 [ 1027.546491][T25180] __memcg_kmem_charge_page+0x199/0x3a0 [ 1027.546529][T25180] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1027.546612][T25180] alloc_pages_mpol+0xa9/0x1d0 [ 1027.546707][T25180] alloc_pages_noprof+0x8f/0x140 [ 1027.546800][T25180] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 1027.546843][T25180] __kvmalloc_node_noprof+0x3a0/0x590 [ 1027.546930][T25180] ? futex_hash_allocate+0x192/0x920 [ 1027.546954][T25180] ? futex_hash_allocate+0x192/0x920 [ 1027.546980][T25180] ? futex_hash_allocate+0x192/0x920 [ 1027.547012][T25180] futex_hash_allocate+0x192/0x920 [ 1027.547039][T25180] ? cap_task_prctl+0x13f/0x6b0 [ 1027.547139][T25180] futex_hash_prctl+0xd8/0xf0 [ 1027.547164][T25180] __se_sys_prctl+0x4f4/0x13b0 [ 1027.547198][T25180] __x64_sys_prctl+0x67/0x80 [ 1027.547388][T25180] x64_sys_call+0x2533/0x3020 [ 1027.547418][T25180] do_syscall_64+0x136/0x3c0 [ 1027.547449][T25180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.547521][T25180] RIP: 0033:0x7fa35d37df99 [ 1027.547616][T25180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.547639][T25180] RSP: 002b:00007fa35bdd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1027.547665][T25180] RAX: ffffffffffffffda RBX: 00007fa35d605fa0 RCX: 00007fa35d37df99 [ 1027.547683][T25180] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1027.547747][T25180] RBP: 00007fa35d414ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1027.547764][T25180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.547780][T25180] R13: 00007fa35d606038 R14: 00007fa35d605fa0 R15: 00007fffcd2fdae8 [ 1027.547806][T25180] [ 1027.803047][T25180] memory: usage 307200kB, limit 307200kB, failcnt 174 [ 1027.843755][T25180] memory+swap: usage 303424kB, limit 9007199254740988kB, failcnt 0 [ 1027.866751][T25180] kmem: usage 187984kB, limit 9007199254740988kB, failcnt 0 [ 1027.880573][T25180] Memory cgroup stats for /syz8: [ 1027.880832][T25180] cache 48529408 [ 1027.923395][T25180] rss 372736 [ 1027.927233][T25180] shmem 48529408 [ 1027.934929][T25180] mapped_file 0 [ 1027.942249][T25180] dirty 0 [ 1027.948394][T25180] writeback 0 [ 1027.956343][T25180] workingset_refault_anon 2841 [ 1027.970904][T25190] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1027.972854][T25180] workingset_refault_file 0 [ 1027.991048][T25180] swap 22491136 [ 1027.994561][T25180] swapcached 40493056 [ 1028.002567][T25180] pgpgin 373416 [ 1028.006362][T25180] pgpgout 361475 [ 1028.014234][T25180] pgfault 420810 [ 1028.017913][T25180] pgmajfault 2293 [ 1028.024330][T25180] inactive_anon 48214016 [ 1028.049160][T25180] active_anon 696320 [ 1028.067663][T25180] inactive_file 0 [ 1028.071368][T25180] active_file 0 [ 1028.074891][T25180] unevictable 0 [ 1028.095068][T25180] hierarchical_memory_limit 314572800 [ 1028.101534][T25180] hierarchical_memsw_limit 9223372036854771712 [ 1028.125854][T25180] total_cache 48529408 [ 1028.144505][T25180] total_rss 372736 [ 1028.162711][T25180] total_shmem 48529408 [ 1028.173963][T25180] total_mapped_file 0 [ 1028.187607][T25180] total_dirty 0 [ 1028.191171][T25180] total_writeback 0 [ 1028.195244][T25180] total_workingset_refault_anon 2841 [ 1028.201441][T25180] total_workingset_refault_file 0 [ 1028.208450][T25180] total_swap 22491136 [ 1028.212825][T25180] total_swapcached 40493056 [ 1028.225724][T25180] total_pgpgin 373416 [ 1028.230045][T25180] total_pgpgout 361475 [ 1028.234122][T25180] total_pgfault 420810 [ 1028.238938][T25180] total_pgmajfault 2293 [ 1028.243214][T25180] total_inactive_anon 48214016 [ 1028.262792][T25214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.269702][T25180] total_active_anon 696320 [ 1028.269716][T25180] total_inactive_file 0 [ 1028.269726][T25180] total_active_file 0 [ 1028.269735][T25180] total_unevictable 0 [ 1028.269746][T25180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.14635,pid=25179,uid=0 [ 1028.269894][T25180] Memory cgroup out of memory: Killed process 25180 (syz.8.14635) total-vm:96232kB, anon-rss:1428kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 1028.512669][T25214] team0: Port device bond0 added [ 1028.532392][T25224] bridge0: port 1(team0) entered blocking state [ 1028.557046][T25224] bridge0: port 1(team0) entered disabled state [ 1028.575298][T25224] team0: entered allmulticast mode [ 1028.588391][T25224] bond5: entered allmulticast mode [ 1028.595124][T25224] bond0: entered allmulticast mode [ 1028.624966][T25224] team0: entered promiscuous mode [ 1028.657574][T25224] bond5: entered promiscuous mode [ 1028.670194][T25224] bond0: entered promiscuous mode [ 1028.709200][T25230] validate_nla: 2 callbacks suppressed [ 1028.709216][T25230] netlink: 'syz.3.14645': attribute type 4 has an invalid length. [ 1028.778801][T25238] netlink: 'syz.3.14645': attribute type 4 has an invalid length. [ 1029.098572][T25230] tipc: Resetting bearer [ 1030.419279][T25244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1030.477766][T18035] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.496152][T18035] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.515770][T18035] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1030.518521][T25277] loop1: detected capacity change from 0 to 512 [ 1030.525779][T18035] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 37190 - 0 [ 1030.569872][T18035] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.590393][T18035] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.622356][T18035] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1030.638205][T18035] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 37190 - 0 [ 1030.655773][T18035] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.664907][T25277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.677513][T18035] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.686006][T25277] ext4 filesystem being mounted at /675/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.696954][T18035] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1030.708979][T18035] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 37190 - 0 [ 1030.717723][T18035] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.726202][T18035] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.735109][T18035] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1030.736568][T25292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14662'. [ 1030.743519][T18035] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 37190 - 0 [ 1030.763579][T25284] 9pnet_fd: p9_fd_create_unix (25284): problem connecting socket: ./file0: -111 [ 1030.765193][T25291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.807760][ T28] audit: type=1400 audit(1785403903.704:4849): avc: denied { write } for pid=25276 comm="syz.1.14660" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1030.837020][T25291] team0: Port device bond0 added [ 1030.856740][T25293] bridge0: port 3(team0) entered blocking state [ 1030.869104][ T28] audit: type=1400 audit(1785403903.754:4850): avc: denied { write } for pid=25276 comm="syz.1.14660" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1030.934433][T25293] bridge0: port 3(team0) entered disabled state [ 1030.972129][T25293] team0: entered allmulticast mode [ 1030.983490][T25293] team_slave_0: entered allmulticast mode [ 1030.999350][T25293] team_slave_1: entered allmulticast mode [ 1031.018362][T25293] bond0: entered allmulticast mode [ 1031.026608][T25293] bond_slave_0: entered allmulticast mode [ 1031.038964][T25293] bond_slave_1: entered allmulticast mode [ 1031.070067][T25293] team0: entered promiscuous mode [ 1031.085899][T25293] team_slave_0: entered promiscuous mode [ 1031.111062][T25293] team_slave_1: entered promiscuous mode [ 1031.127917][T25293] bond0: entered promiscuous mode [ 1031.168991][T25293] bond_slave_0: entered promiscuous mode [ 1031.191188][T25293] bond_slave_1: entered promiscuous mode [ 1031.275912][ T7695] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1031.297246][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1031.297276][ T7695] Tainted: [W]=WARN [ 1031.297355][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1031.297368][ T7695] Call Trace: [ 1031.297375][ T7695] [ 1031.297384][ T7695] __dump_stack+0x1d/0x30 [ 1031.297408][ T7695] dump_stack_lvl+0x95/0xd0 [ 1031.297429][ T7695] dump_stack+0x15/0x1b [ 1031.297486][ T7695] dump_header+0x80/0x240 [ 1031.297509][ T7695] oom_kill_process+0x295/0x350 [ 1031.297540][ T7695] out_of_memory+0x981/0xbc0 [ 1031.297646][ T7695] try_charge_memcg+0x621/0xa00 [ 1031.297666][ T7695] ? should_fail_ex+0x30/0x270 [ 1031.297699][ T7695] charge_memcg+0x6d/0x120 [ 1031.297730][ T7695] __mem_cgroup_charge+0x28/0xb0 [ 1031.297824][ T7695] filemap_add_folio+0x110/0x350 [ 1031.297851][ T7695] __filemap_get_folio_mpol+0x32e/0x840 [ 1031.297893][ T7695] filemap_fault+0x458/0xb60 [ 1031.297917][ T7695] handle_mm_fault+0x167a/0x2da0 [ 1031.298033][ T7695] do_user_addr_fault+0x634/0x1060 [ 1031.298060][ T7695] ? trace_page_fault_user+0x1f/0xa0 [ 1031.298085][ T7695] exc_page_fault+0x62/0xa0 [ 1031.298119][ T7695] asm_exc_page_fault+0x26/0x30 [ 1031.298141][ T7695] RIP: 0033:0x7fb92290bed4 [ 1031.298157][ T7695] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e0 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 97 ee 00 48 01 d1 [ 1031.298239][ T7695] RSP: 002b:00007ffefb893020 EFLAGS: 00010202 [ 1031.298256][ T7695] RAX: 0000001b2d624000 RBX: 0000000000000697 RCX: 00000000000fbb58 [ 1031.298269][ T7695] RDX: 000000000d144ea3 RSI: 00007ffefb8930b0 RDI: 0000000000000001 [ 1031.298281][ T7695] RBP: 00007ffefb89305c R08: 0000000031e4c73a R09: 3fffffffffffffff [ 1031.298357][ T7695] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1031.298369][ T7695] R13: 00000000000927c0 R14: 00000000000fbdaf R15: 00007ffefb8930b0 [ 1031.298518][ T7695] [ 1031.298544][ T7695] memory: usage 269440kB, limit 307200kB, failcnt 299 [ 1031.654351][ T7695] memory+swap: usage 179680kB, limit 9007199254740988kB, failcnt 0 [ 1031.677799][ T7695] kmem: usage 122852kB, limit 9007199254740988kB, failcnt 0 [ 1032.172368][ T7695] Memory cgroup stats for /syz1: [ 1032.172614][ T7695] cache 70184960 [ 1032.217484][ T7695] rss 585728 [ 1032.220754][ T7695] shmem 69730304 [ 1032.224327][ T7695] mapped_file 24576 [ 1032.232484][ T7695] dirty 24576 [ 1032.463276][ T7695] writeback 0 [ 1032.617304][ T7695] workingset_refault_anon 1410 [ 1032.873278][ T7695] workingset_refault_file 2154 [ 1032.885596][ T7695] swap 0 [ 1032.891544][ T7695] swapcached 12124160 [ 1032.902195][ T7695] pgpgin 326616 [ 1032.917467][ T7695] pgpgout 309337 [ 1032.924083][ T7695] pgfault 360693 [ 1032.938042][ T7695] pgmajfault 94 [ 1032.945983][ T7695] inactive_anon 0 [ 1032.959283][ T7695] active_anon 70320128 [ 1032.963374][ T7695] inactive_file 442368 [ 1032.986321][ T7695] active_file 12288 [ 1032.990157][ T7695] unevictable 0 [ 1032.993596][ T7695] hierarchical_memory_limit 314572800 [ 1032.998977][ T7695] hierarchical_memsw_limit 9223372036854771712 [ 1033.005130][ T7695] total_cache 70184960 [ 1033.014684][ T7695] total_rss 585728 [ 1033.018641][ T7695] total_shmem 69730304 [ 1033.022712][ T7695] total_mapped_file 24576 [ 1033.027164][ T7695] total_dirty 24576 [ 1033.030967][ T7695] total_writeback 0 [ 1033.034781][ T7695] total_workingset_refault_anon 1410 [ 1033.040536][ T7695] total_workingset_refault_file 2154 [ 1033.045831][ T7695] total_swap 0 [ 1033.049243][ T7695] total_swapcached 12124160 [ 1033.053736][ T7695] total_pgpgin 326616 [ 1033.057721][ T7695] total_pgpgout 309337 [ 1033.061779][ T7695] total_pgfault 360693 [ 1033.065840][ T7695] total_pgmajfault 94 [ 1033.070347][ T7695] total_inactive_anon 0 [ 1033.074554][ T7695] total_active_anon 70320128 [ 1033.079161][ T7695] total_inactive_file 442368 [ 1033.083786][ T7695] total_active_file 12288 [ 1033.088133][ T7695] total_unevictable 0 [ 1033.092242][ T7695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.14660,pid=25276,uid=0 [ 1033.107534][ T7695] Memory cgroup out of memory: OOM victim 25276 (syz.1.14660) is already exiting. Skip killing the task [ 1033.129984][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.199867][T25331] netlink: 'syz.5.14674': attribute type 21 has an invalid length. [ 1033.209891][T25331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1033.219089][T25331] netlink: 'syz.5.14674': attribute type 21 has an invalid length. [ 1033.227408][T25331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1033.292018][T25336] netlink: 'syz.1.14672': attribute type 4 has an invalid length. [ 1033.302504][T25336] netlink: 'syz.1.14672': attribute type 4 has an invalid length. [ 1034.294299][T25365] netlink: 1 bytes leftover after parsing attributes in process `syz.8.14687'. [ 1034.382272][T25358] syz.5.14685 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1034.407432][T25370] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14689'. [ 1034.427603][T25358] CPU: 0 UID: 0 PID: 25358 Comm: syz.5.14685 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1034.427674][T25358] Tainted: [W]=WARN [ 1034.427683][T25358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.427698][T25358] Call Trace: [ 1034.427706][T25358] [ 1034.427716][T25358] __dump_stack+0x1d/0x30 [ 1034.427746][T25358] dump_stack_lvl+0x95/0xd0 [ 1034.427825][T25358] dump_stack+0x15/0x1b [ 1034.427848][T25358] dump_header+0x80/0x240 [ 1034.427877][T25358] oom_kill_process+0x295/0x350 [ 1034.427917][T25358] out_of_memory+0x981/0xbc0 [ 1034.428002][T25358] try_charge_memcg+0x621/0xa00 [ 1034.428033][T25358] __memcg_kmem_charge_page+0x199/0x3a0 [ 1034.428202][T25358] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1034.428313][T25358] alloc_pages_bulk_noprof+0x4c3/0x550 [ 1034.428346][T25358] ? policy_nodemask+0x417/0x5e0 [ 1034.428437][T25358] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 1034.428536][T25358] ? alloc_pages_mpol+0xd9/0x1d0 [ 1034.428568][T25358] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 1034.428682][T25358] __kvmalloc_node_noprof+0x3a0/0x590 [ 1034.428857][T25358] ? futex_hash_allocate+0x192/0x920 [ 1034.428883][T25358] ? futex_hash_allocate+0x192/0x920 [ 1034.428933][T25358] ? futex_hash_allocate+0x192/0x920 [ 1034.428959][T25358] futex_hash_allocate+0x192/0x920 [ 1034.429045][T25358] ? cap_task_prctl+0x13f/0x6b0 [ 1034.429123][T25358] futex_hash_prctl+0xd8/0xf0 [ 1034.429285][T25358] __se_sys_prctl+0x4f4/0x13b0 [ 1034.429331][T25358] __x64_sys_prctl+0x67/0x80 [ 1034.429421][T25358] x64_sys_call+0x2533/0x3020 [ 1034.429450][T25358] do_syscall_64+0x136/0x3c0 [ 1034.429479][T25358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.429505][T25358] RIP: 0033:0x7fb9b309df99 [ 1034.429521][T25358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.429574][T25358] RSP: 002b:00007fb9b1af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1034.429599][T25358] RAX: ffffffffffffffda RBX: 00007fb9b3325fa0 RCX: 00007fb9b309df99 [ 1034.429616][T25358] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1034.429633][T25358] RBP: 00007fb9b3134ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1034.429720][T25358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.429733][T25358] R13: 00007fb9b3326038 R14: 00007fb9b3325fa0 R15: 00007ffda4779238 [ 1034.429801][T25358] [ 1034.429872][T25358] memory: usage 307200kB, limit 307200kB, failcnt 194 [ 1034.599818][T25375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14689'. [ 1034.655266][T25358] memory+swap: usage 361592kB, limit 9007199254740988kB, failcnt 0 [ 1034.714194][T25370] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1034.719089][T25358] kmem: usage 295112kB, limit 9007199254740988kB, failcnt 0 [ 1034.734025][T25375] bond14: entered promiscuous mode [ 1034.771611][T25358] Memory cgroup stats for /syz5: [ 1034.771862][T25358] cache 10461184 [ 1034.812718][T25358] rss 208896 [ 1034.815976][T25358] shmem 10461184 [ 1034.819894][T25358] mapped_file 0 [ 1034.823459][T25358] dirty 0 [ 1034.826782][T25370] bond14 (unregistering): Released all slaves [ 1034.826879][T25358] writeback 0 [ 1034.836243][T25358] workingset_refault_anon 7066 [ 1034.841570][T25358] workingset_refault_file 2736 [ 1034.846596][T25358] swap 55697408 [ 1034.850170][T25358] swapcached 95121408 [ 1034.854147][T25358] pgpgin 822235 [ 1034.858153][T25358] pgpgout 819213 [ 1034.861714][T25358] pgfault 647860 [ 1034.865279][T25358] pgmajfault 5813 [ 1034.869325][T25358] inactive_anon 4173824 [ 1034.873486][T25358] active_anon 8204288 [ 1034.878842][T25358] inactive_file 0 [ 1034.883754][T25358] active_file 0 [ 1034.887912][T25358] unevictable 0 [ 1034.891404][T25358] hierarchical_memory_limit 314572800 [ 1034.897114][T25358] hierarchical_memsw_limit 9223372036854771712 [ 1034.903317][T25358] total_cache 10461184 [ 1034.907733][T25358] total_rss 208896 [ 1034.916435][T25358] total_shmem 10461184 [ 1034.926915][T25358] total_mapped_file 0 [ 1034.953580][T25358] total_dirty 0 [ 1034.967749][T25358] total_writeback 0 [ 1034.979515][T25358] total_workingset_refault_anon 7066 [ 1034.984878][T25358] total_workingset_refault_file 2736 [ 1034.990462][T25358] total_swap 55697408 [ 1034.994478][T25358] total_swapcached 95121408 [ 1034.999186][T25358] total_pgpgin 822235 [ 1035.003175][T25358] total_pgpgout 819213 [ 1035.012909][T25358] total_pgfault 647863 [ 1035.022099][T25358] total_pgmajfault 5813 [ 1035.027267][T25358] total_inactive_anon 4173824 [ 1035.032110][T25358] total_active_anon 8204288 [ 1035.037324][T25358] total_inactive_file 0 [ 1035.042652][T25358] total_active_file 0 [ 1035.047493][T25358] total_unevictable 0 [ 1035.051516][T25358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.14685,pid=25356,uid=0 [ 1035.066946][T25358] Memory cgroup out of memory: Killed process 25356 (syz.5.14685) total-vm:96232kB, anon-rss:1428kB, file-rss:22160kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 1035.655034][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14693'. [ 1035.943107][T25481] 9pnet_fd: p9_fd_create_unix (25481): problem connecting socket: ./file0: -111 [ 1035.993424][T25481] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14700'. [ 1036.622817][T25497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14709'. [ 1037.452152][T25508] netlink: 'syz.4.14713': attribute type 30 has an invalid length. [ 1038.211978][T25574] loop1: detected capacity change from 0 to 164 [ 1038.324621][T25574] rock: directory entry would overflow storage [ 1038.363280][T25574] rock: sig=0x5252, size=5, remaining=3 [ 1038.441736][T25574] netlink: 'syz.1.14732': attribute type 30 has an invalid length. [ 1038.927811][T25627] netlink: 'syz.5.14731': attribute type 4 has an invalid length. [ 1038.965899][T25627] netlink: 'syz.5.14731': attribute type 4 has an invalid length. [ 1039.042667][ T28] audit: type=1326 audit(1785403911.934:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d55df99 code=0x7ffc0000 [ 1039.114758][ T28] audit: type=1326 audit(1785403911.964:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d55df99 code=0x7ffc0000 [ 1039.143271][ T28] audit: type=1326 audit(1785403911.964:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921d55df99 code=0x7ffc0000 [ 1039.213413][ T28] audit: type=1326 audit(1785403911.964:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f921d55df99 code=0x7ffc0000 [ 1039.243848][ T28] audit: type=1326 audit(1785403912.014:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.279962][ T28] audit: type=1326 audit(1785403912.014:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.306234][ T28] audit: type=1326 audit(1785403912.014:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.335181][ T28] audit: type=1326 audit(1785403912.014:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.361664][ T28] audit: type=1326 audit(1785403912.024:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.395695][ T28] audit: type=1326 audit(1785403912.024:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25630 comm="syz.4.14729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f921d51e7ce code=0x7ffc0000 [ 1039.880754][T25659] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.14741'. [ 1039.954811][T25663] syzkaller0: entered promiscuous mode [ 1039.969945][T25663] syzkaller0: entered allmulticast mode [ 1040.227462][T25684] netlink: 'syz.5.14745': attribute type 30 has an invalid length. [ 1041.497829][T25743] loop1: detected capacity change from 0 to 1024 [ 1041.663340][T25743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.708213][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.814566][T25775] netlink: 'syz.3.14766': attribute type 30 has an invalid length. [ 1042.005805][T25818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.117100][T25818] team0: Port device bond0 added [ 1042.179589][T25773] bridge0: port 4(team0) entered blocking state [ 1042.209625][T25773] bridge0: port 4(team0) entered disabled state [ 1042.270182][T25773] team0: entered allmulticast mode [ 1042.283782][T25773] team_slave_0: entered allmulticast mode [ 1042.298487][T25773] team_slave_1: entered allmulticast mode [ 1042.316609][T25773] bond2: entered allmulticast mode [ 1042.325483][T25773] bond0: entered allmulticast mode [ 1042.350878][T25773] bond_slave_0: entered allmulticast mode [ 1042.359320][T25773] bond_slave_1: entered allmulticast mode [ 1042.393534][T25773] team0: entered promiscuous mode [ 1042.431689][T25773] team_slave_0: entered promiscuous mode [ 1042.476439][T25773] team_slave_1: entered promiscuous mode [ 1042.485158][T25773] bond2: entered promiscuous mode [ 1042.499516][T25773] bond0: entered promiscuous mode [ 1042.505926][T25773] bond_slave_0: entered promiscuous mode [ 1042.516774][T25773] bond_slave_1: entered promiscuous mode [ 1042.872447][T25849] loop1: detected capacity change from 0 to 1024 [ 1042.899248][T25849] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1042.914589][T25849] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 5: comm syz.1.14779: lblock 5 mapped to illegal pblock 5 (length 1) [ 1042.935544][T25849] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1042.935760][T25849] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.14779: Failed to acquire dquot type 0 [ 1042.945018][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1042.945039][ C0] EXT4-fs (loop1): initial error at time 1785403915: ext4_map_blocks:833: inode 3: block 5 [ 1042.945081][ C0] EXT4-fs (loop1): last error at time 1785403915: ext4_map_blocks:833: inode 3: block 5 [ 1043.022717][T25849] loop1: lost filesystem error report for type 5 error -117 [ 1043.022935][T25849] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.14779: lblock 5 mapped to illegal pblock 5 (length 1) [ 1043.066870][T25849] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1043.066986][T25849] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.14779: Failed to acquire dquot type 0 [ 1043.097158][T25849] loop1: lost filesystem error report for type 5 error -117 [ 1043.097443][T25849] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.14779: Freeing blocks not in datazone - block = 0, count = 4096 [ 1043.136342][T25849] loop1: lost filesystem error report for type 5 error -117 [ 1043.136566][T25849] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.14779: lblock 5 mapped to illegal pblock 5 (length 1) [ 1043.197868][T25849] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1043.198018][T25849] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.14779: Failed to acquire dquot type 0 [ 1043.229233][T25849] loop1: lost filesystem error report for type 5 error -117 [ 1043.229507][T25849] EXT4-fs (loop1): 1 orphan inode deleted [ 1043.244404][T25849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.280902][T25845] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 5: comm syz.1.14779: lblock 5 mapped to illegal pblock 5 (length 1) [ 1043.340201][T25845] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.14779: Failed to acquire dquot type 0 [ 1043.377828][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.492492][T25860] netlink: 'syz.8.14791': attribute type 10 has an invalid length. [ 1043.513434][T25860] team0: Device nlmon0 is of different type [ 1044.391077][T25869] loop1: detected capacity change from 0 to 512 [ 1044.454248][T25859] netlink: 'syz.5.14782': attribute type 30 has an invalid length. [ 1044.546803][T25869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.592584][T25869] ext4 filesystem being mounted at /697/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.652440][T25869] __quota_error: 47 callbacks suppressed [ 1044.652464][T25869] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 1044.653202][T25882] team0: Device bond0 is already an upper device of the team interface [ 1044.693489][ T7695] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.203974][ T28] audit: type=1326 audit(1785403918.097:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.330850][ T28] audit: type=1326 audit(1785403918.167:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.394322][ T28] audit: type=1326 audit(1785403918.167:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.443754][ T28] audit: type=1326 audit(1785403918.167:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.470281][ T28] audit: type=1326 audit(1785403918.207:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.506346][ T28] audit: type=1326 audit(1785403918.217:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.604471][T25984] netlink: 'syz.1.14800': attribute type 10 has an invalid length. [ 1045.634544][T25984] nlmon0: entered promiscuous mode [ 1045.641597][ T28] audit: type=1326 audit(1785403918.217:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.651952][T25984] nlmon0: entered allmulticast mode [ 1045.667869][ T28] audit: type=1326 audit(1785403918.217:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1045.699483][T25984] team0: Device nlmon0 is of different type [ 1045.706705][ T28] audit: type=1326 audit(1785403918.217:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25966 comm="syz.3.14798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c8a8df99 code=0x7ffc0000 [ 1046.004114][T25998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.090846][T25998] team0: Device bond0 is of different type [ 1046.179536][T25996] loop1: detected capacity change from 0 to 164 [ 1046.216616][T25996] rock: directory entry would overflow storage [ 1046.227929][T25996] rock: sig=0x5252, size=5, remaining=3 [ 1046.303636][T25996] netlink: 'syz.1.14804': attribute type 30 has an invalid length. [ 1046.817272][T26064] netlink: 'syz.3.14815': attribute type 10 has an invalid length. [ 1046.828016][T26064] team0: Device nlmon0 is of different type [ 1049.661852][T26129] netlink: 'syz.4.14836': attribute type 30 has an invalid length. [ 1049.916159][T26175] syzkaller0: entered promiscuous mode [ 1049.924803][T26175] syzkaller0: entered allmulticast mode [ 1050.402338][T26123] ================================================================== [ 1050.410476][T26123] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 1050.419097][T26123] [ 1050.421418][T26123] write to 0xffff88813cc92b20 of 8 bytes by task 26116 on cpu 0: [ 1050.429131][T26123] shmem_file_splice_read+0x401/0x590 [ 1050.434527][T26123] splice_direct_to_actor+0x261/0x680 [ 1050.439905][T26123] do_splice_direct+0x119/0x1a0 [ 1050.444767][T26123] do_sendfile+0x37d/0x640 [ 1050.449197][T26123] __x64_sys_sendfile64+0x105/0x150 [ 1050.454412][T26123] x64_sys_call+0x2dc4/0x3020 [ 1050.459099][T26123] do_syscall_64+0x136/0x3c0 [ 1050.463701][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.469609][T26123] [ 1050.471931][T26123] write to 0xffff88813cc92b20 of 8 bytes by task 26123 on cpu 1: [ 1050.479655][T26123] shmem_file_splice_read+0x401/0x590 [ 1050.485044][T26123] splice_direct_to_actor+0x261/0x680 [ 1050.490420][T26123] do_splice_direct+0x119/0x1a0 [ 1050.495286][T26123] do_sendfile+0x37d/0x640 [ 1050.499709][T26123] __x64_sys_sendfile64+0x105/0x150 [ 1050.504917][T26123] x64_sys_call+0x2dc4/0x3020 [ 1050.509612][T26123] do_syscall_64+0x136/0x3c0 [ 1050.514203][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.520135][T26123] [ 1050.522461][T26123] value changed: 0x00000000000055c2 -> 0x00000000000055c4 [ 1050.529566][T26123] [ 1050.531893][T26123] Reported by Kernel Concurrency Sanitizer on: [ 1050.538044][T26123] CPU: 1 UID: 0 PID: 26123 Comm: syz.5.14835 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1050.549112][T26123] Tainted: [W]=WARN [ 1050.552916][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.562980][T26123] ================================================================== [ 1051.006406][T24067] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 906 sec