last executing test programs: 6m13.418607714s ago: executing program 4 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000003060004"], 0x92) 6m13.117462511s ago: executing program 4 (id=343): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m12.74949229s ago: executing program 4 (id=344): mremap(&(0x7f0000136000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)=""/212, 0xd4}], 0x1}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m11.820227292s ago: executing program 4 (id=358): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) read(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 6m10.607901712s ago: executing program 4 (id=371): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m9.634756965s ago: executing program 4 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m9.612335556s ago: executing program 32 (id=387): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m9.03912746s ago: executing program 2 (id=392): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 6m7.990335346s ago: executing program 2 (id=398): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 6m7.352718721s ago: executing program 2 (id=406): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 6m6.355976055s ago: executing program 2 (id=416): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {'B\x00', "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6m5.682888681s ago: executing program 2 (id=421): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 6m5.410761908s ago: executing program 2 (id=426): r0 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd4000000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x23}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xac0}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x80000001}]}}]}, 0x78}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) 5m50.48058149s ago: executing program 1 (id=615): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000) 5m50.393494773s ago: executing program 1 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f00000005c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\x16\x8dK6\xdd\xdb\xa0G\x99\xa8y\x8d\x87\xde\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLQ\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\b\xcb\x01\xb2B@B\xed\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xdd$\xe9\xb0\x83\xcb\x93\x84\x7f\\x\xa9Eo\x14\n\xc8e\b\xa3\xe5\xd1\x83\xaaO\xdf\x9a.^\x9e\xb4\b\xfaVf\x92\xf7\x17\x06:\x89Ln\x00\xc3\x88P\xa7h\xc9\x8f1\xff\xdd\x81\xf1\xbbSPD\x95{k\xb8\xce\x8a2\x98\xee\x19') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f7404000a74016c053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5m50.343576464s ago: executing program 33 (id=426): r0 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x3, 0x2}}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd4000000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x23}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xac0}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x80000001}]}}]}, 0x78}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000000c0)={0x7033, 0x1, [{0x1, 0x1}]}) 5m50.200909817s ago: executing program 1 (id=618): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m50.07687932s ago: executing program 1 (id=619): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 5m50.007957392s ago: executing program 1 (id=620): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x7, 0x0, 0x0, 0x40e00, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r0, 0x0) mprotect(&(0x7f0000123000/0x2000)=nil, 0x2000, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)='k', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5m48.914708079s ago: executing program 1 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m48.906002319s ago: executing program 34 (id=623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m44.958085402s ago: executing program 6 (id=1478): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000050000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m44.430964294s ago: executing program 6 (id=1486): io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x8, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x2204052, &(0x7f00000001c0), 0x21, 0x4c3, &(0x7f0000000480)="$eJzs3c9vG1kdAPDvTOLmx2Y3WdgDIGDLslBQVTtxd8Oqp3IBoaoSouLEoQ2JG0Wx4yh2ShN6SP8HJCpxggN/AAckDkg9cecGNy7lgFSgAjVIHIxm7LRpY6cpTeJV5vORnmbevKm/71tr3mufE78ACut8ROxExLmIuBUR073rSa/E1W7J7nv65N7i7pN7i0l0Ojf+keTt2bXY92cyb/VeczwifvDdiB8nB+O2trZXF+r12kavXmk31iutre1LK42F5dpyba1anZ+bn/3k8sfVY8v1/cZvHn9n5doPf/+7Lz364843f5p1a6rXtj+P49RNvfQsTmY0Iq6dRLAhGOnlc27YHeH/kkbEZyLig/z5n46R/N0EAM6yTmc6OtP76wDAWZfma2BJWo4odc/TtFzuruG9F5NpvdlqX7zd3Fxb6q6VzUQpvb1Sr8321gpnopRk9bn8/Hm9+lL9ckS8GxE/G5vI6+XFZn1pmP/wAYACe+v5/J9/FvDvse78DwCccePD7gAAcOrM/wBQPOZ/ACge8z8AFI/5HwCKx/wPAMVj/geAQvn+9etZ6ez2vv966c7W5mrzzqWlWmu13NhcLC82N9bLy83mcv6dPY1XvV692Vyf+yg271batVa70travtlobq61b+bf632zVjqVrACAw7z7/sM/JxGxc2UiL7FvLwdzNZxt6bA7AAzNyLA7AAyN3b6guPwfH+izRe8Luj8iNHGw4cHJ9Ac4eRc+b/0fisr6PxSX9X8oLuv/UFydTmLPfwAoGGv8wNE+/+/D5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAU2FRekrTc2wt8KtK0XI54OyJmopTcXqnXZiPinYj401hpLKvPDbvTAMAbSv+W9Pb/ujD94dTLreeS/4zlx4j4yS9u/PzuQru9MZdd/2f3+rcmIh70rleH0X8AKKKR17p7b57em8f3PH1yb3GvHH8fB3v87e7molnc3V7ptozGaH4cj1JETP4r6dW7ktfOvL+d+xHxuX75J/nayExv59OX42ex3z7V+OkL8dO8rXvM/i4+ewx9gaJ5mI0/V/s9f2mcz4/9n//xfIR6c3vj3+6B8S99Nv6NDBj/zh8lwMSvIz76w/cGxr8f8YXRfvGTZ/GTAfE/PGKOf/nilz8Y1Nb5ZcSF6B9/f6xKu7FeaW1tX1ppLCzXlmtr1er83PzsJ5c/rlbyNerK3kr1QX+/cvGdw/KfHBB//BX5f+2I+f/qv7d+9JVD4n/jq/3f//cOiZ/NiV8/YvyFyd8O3L47i7/UzT+757Xe/4tHjP/or9tLR7wVADgFra3t1YV6vbYx7JO9Dn1a+uPESaFPhjsuASfv+UM/7J4AAAAAAAAAAAAAAACDnMavEw07RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wUAAP//8vjSuQ==") r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) 4m44.126453752s ago: executing program 6 (id=1492): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x0, 0x49) lseek(r2, 0x800000000000102, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc00, 0x120) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) 4m44.030257974s ago: executing program 6 (id=1494): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x7, 0x80006) iopl(0x2) clock_getres(0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) 4m43.931649146s ago: executing program 6 (id=1495): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 4m42.924735361s ago: executing program 6 (id=1505): socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m27.832928497s ago: executing program 35 (id=1505): socket$netlink(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.333879561s ago: executing program 0 (id=4509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117b9b27caf0800", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000001340)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c769fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc529ada66a46781bf250c05276c71f695b619a69e654b33dcda258c63413051cc61876108b6277da297ac0eba3a230dc172067b184a61fce2dd55018bfd1d33987bcad57d1bcc8f756be53dafa71eeb44b789a5083d4d20bd278c0b532c74e221b217b45d89d77196a20cb9fc3156d315216edb666dd74bb968d7f1382cd5e43fa919b5da0523aebc03c1f89d3121a70d58cfe224fa98c7de3", 0x126}, {&(0x7f0000001680)="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", 0x171}, {&(0x7f0000001580)="96ddbf24846337201b7bff0000000000000009ef0d2fd92d0a19662ff9b41cb951af66455bb277a5989ca21736410a786e033478823c49fce8ff0f000026a81a67266826fe2c3ccd425faea34f7ae9aa9c95e712e5f705a2149ffaec580e7e5202cf9c9fd4d920fb75606a33328df703f114cde0cc55ea48383884a24c3c8c9416eb534b7a9f53accaf6a7396984c59e6e13ae5721168e31d5d15fc3d6d948340cb3877393f56ab570bfa51cd1212c6a403da62fd4b5bc47853bb49932faf85673e3046c0b985030b8abed3a606f33a0937c786f00000000000000004000"/231, 0xe7}, {&(0x7f0000000540)="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", 0xbed}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.295665616s ago: executing program 0 (id=4528): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000880)=[{}], 0x1, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f00000000c0)={@multicast2, @empty, 0x0, "e4c1be0a3bebcf96bf7ae5b361dc80b3861992ae6dd2193b83d68b6940317202", 0xffff, 0x2, 0x4, 0x5}, 0x3c) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xba, 0x69f, &(0x7f0000000f00)="$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") open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) 4.219467068s ago: executing program 3 (id=4521): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 3.282653921s ago: executing program 0 (id=4524): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) move_pages(r0, 0x6, &(0x7f00000001c0)=[&(0x7f0000920000/0x2000)=nil, &(0x7f00005de000/0x2000)=nil, &(0x7f00000cd000/0xc000)=nil, &(0x7f0000585000/0x2000)=nil, &(0x7f0000380000/0x4000)=nil, &(0x7f0000955000/0x1000)=nil], &(0x7f0000000280)=[0x6, 0x4, 0xee02, 0xff, 0xfffffff7, 0x1fffc000], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.166411683s ago: executing program 5 (id=4525): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 2.098148879s ago: executing program 3 (id=4530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x1ff) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x2, 0x4, 0xc, 0xfffffffffffffffd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.012213591s ago: executing program 8 (id=4531): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.949705803s ago: executing program 7 (id=4532): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0xff9, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, 0x0, &(0x7f00000001c0)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001f200)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x0, 0x9, 0xfffc}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.936374013s ago: executing program 5 (id=4533): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x9b, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) listen(r0, 0xa) socket$kcm(0x29, 0x7, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 1.850439785s ago: executing program 8 (id=4534): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f000008004100727865001400330077673200"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1.771702507s ago: executing program 5 (id=4535): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) fcntl$setlease(r2, 0x400, 0x0) close_range(r0, r1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207a0af8ff000000002fa000000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x90, &(0x7f0000000100)=""/144}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000380)=0xc4, r4, 0x0, 0x0, 0x1}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.746527028s ago: executing program 3 (id=4536): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x6, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) write$vga_arbiter(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000340)={0x400, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=0x0, {0x30}, &(0x7f0000000100)=""/131, 0x83, &(0x7f0000000280)=""/93, &(0x7f0000000300)}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@datasec={0x2, 0x4, 0x0, 0xf, 0x3, [{0x3, 0x4, 0xfff}, {0x4, 0x8, 0x2}, {0x3, 0x8, 0x6}, {0x1, 0x1, 0x404}], "44942d"}, @datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000100)=""/2, 0x68, 0x2, 0x1}, 0x28) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='net/sco\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x10c03, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 1.558591892s ago: executing program 7 (id=4537): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x9, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffe000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.437589505s ago: executing program 3 (id=4538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) recvfrom(r0, &(0x7f0000000140)=""/93, 0x5d, 0x20000, 0x0, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.288362729s ago: executing program 7 (id=4539): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff070000050007"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000400000009848dd0fd09cc"], 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000400)={{0x33, @loopback, 0x4e23, 0x1, 'nq\x00', 0x3b, 0x9, 0x19}, {@rand_addr=0x64010100, 0x4e24, 0x10000, 0x7fff, 0x25, 0x3}}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = gettid() rt_sigqueueinfo(r3, 0x2c, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") 1.257452779s ago: executing program 0 (id=4540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x30a, 0x0, 0x0, &(0x7f00000001c0), 0x0) fsopen(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4, 0x1}]}}]}, 0x3c}}, 0x0) 1.018293746s ago: executing program 5 (id=4541): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfb, 0x8eee98d7a010055a, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4880c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080300000000000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 975.290676ms ago: executing program 8 (id=4542): syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000040)={0x1000, 0x101, 0x6, 0x0, 0xef2b, 0xffffff80}) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000040) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0xc0000) socket$netlink(0x10, 0x3, 0x1) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000200)={{{0x8}}, 0xf5, 0x3, &(0x7f0000000100)="9cfed03d59c16bbeb4514a3c201fee205e0d64099a7ae20bdf33430b26aef1342178a7ddcca4d1b093f99f367dc11325f44dd45ac73f17ef868cb9f8118e78a40341983be3381f2fd774d63789f0ac731c931465dca496dab1170b9f46d2220b12bbc25f029b892ef1f06bdff00045fa35e5587066a0f526fc47b186b851454f6f18c3148de2fecdb6796f4fdc05aa800bed7d398236599bf87f27307eade58c52bd06d7a32ee58167ff03ab490df71f04ddb5f70e29dfe49cee51647c7ff6dc3ef9857db69bd5073e9393fd3c949f457219e31b4b669f096ea0db12353c8e0e6ceedd8255a79f25717cb0bd80a91897f61253597f"}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) lsm_get_self_attr(0x66, &(0x7f00000022c0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000003300)=0x1020, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 812.34293ms ago: executing program 0 (id=4543): socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x107, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x4}, 0x10edc0, 0x1224, 0x0, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 794.836211ms ago: executing program 7 (id=4544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x1ff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000080)={0x2, 0x4, 0xc, 0xfffffffffffffffd, r1}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 764.091001ms ago: executing program 3 (id=4545): io_uring_setup(0x7fc0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x102802, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KDDELIO(r1, 0x7040, 0x6) sync() 763.482961ms ago: executing program 5 (id=4555): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x2, r0) 741.332472ms ago: executing program 7 (id=4546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x1, @perf_bp={0x0}, 0x8000, 0x1, 0x0, 0x3, 0x4, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3e, 0x4, @thr={0x0, 0x0}}) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='chipidea-usb2', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='pcspkr\x00', 0x6) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 740.997642ms ago: executing program 8 (id=4547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x1ff) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x2, 0x4, 0xc, 0xfffffffffffffffd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 721.967553ms ago: executing program 0 (id=4548): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') 553.638687ms ago: executing program 8 (id=4549): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() msgctl$MSG_INFO(0x0, 0xc, 0x0) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r1 = syz_io_uring_setup(0x13e5, &(0x7f00000000c0)={0x0, 0x434b, 0x1000, 0x3, 0x1e2}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, 0x0, 0x1) 463.574449ms ago: executing program 5 (id=4550): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001c80)={0xff, 0x0, &(0x7f0000001c00), 0x0}, 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0442, 0x11) r2 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = eventfd2(0xffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(r5, &(0x7f0000000080)=0xffffffff00000000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0xc, 0x4) 216.483505ms ago: executing program 7 (id=4551): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846}) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d40)=""/197, 0xc5}, {0x0}, {&(0x7f0000000f40)=""/97, 0x61}, {&(0x7f0000000fc0)=""/91, 0x5b}], 0x4) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) socket(0x400000000010, 0x3, 0x0) 216.271225ms ago: executing program 8 (id=4552): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x37) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0xbf14}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@call={0x85, 0x0, 0x0, 0x19}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0x94) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 0s ago: executing program 3 (id=4553): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) kernel console output (not intermixed with test programs): link: 'syz.3.3385': attribute type 10 has an invalid length. [ 301.016226][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3385'. [ 303.488593][ C1] net_ratelimit: 5 callbacks suppressed [ 303.488617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.502834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.511217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.519710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.643563][T13939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 303.662144][T13943] bridge0: entered promiscuous mode [ 303.667861][T13943] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 303.677687][T13946] tipc: Started in network mode [ 303.682907][T13946] tipc: Node identity 924be85c6bd6, cluster identity 4711 [ 303.708617][T13946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.717010][T13946] tipc: Enabled bearer , priority 0 [ 303.725787][T13945] team0: left allmulticast mode [ 303.730920][T13945] team_slave_0: left allmulticast mode [ 303.748223][T13945] team_slave_1: left allmulticast mode [ 303.759786][T13945] team0: left promiscuous mode [ 303.764612][T13945] team_slave_0: left promiscuous mode [ 303.770165][T13945] team_slave_1: left promiscuous mode [ 303.775736][T13945] bridge0: port 3(team0) entered disabled state [ 303.785572][T13945] bridge_slave_1: left allmulticast mode [ 303.792038][T13945] bridge_slave_1: left promiscuous mode [ 303.798287][T13945] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.806240][T13945] bridge_slave_0: left allmulticast mode [ 303.813352][T13945] bridge_slave_0: left promiscuous mode [ 303.819741][T13945] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.838775][T13945] bond0: (slave bridge0): Releasing backup interface [ 303.846077][T13945] bridge0 (unregistering): left promiscuous mode [ 303.853097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.988112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.607325][T14002] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3407'. [ 304.851036][ T9] tipc: Node number set to 4187875420 [ 305.017295][T14028] tunl0: Caught tx_queue_len zero misconfig [ 305.741303][T14048] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3421'. [ 305.801902][T14048] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3421'. [ 305.921115][T14051] tipc: Enabling of bearer rejected, failed to enable media [ 306.463983][ T28] audit: type=1326 audit(1785851987.941:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.616675][ T28] audit: type=1326 audit(1785851987.971:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.667898][ T28] audit: type=1326 audit(1785851987.981:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.705155][ T28] audit: type=1326 audit(1785851987.981:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.742092][ T28] audit: type=1326 audit(1785851987.981:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.764081][ T9] lo speed is unknown, defaulting to 1000 [ 306.778708][ T28] audit: type=1326 audit(1785851987.981:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.847175][ T28] audit: type=1326 audit(1785851987.981:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.924839][ T28] audit: type=1326 audit(1785851987.981:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 306.975350][ T28] audit: type=1326 audit(1785851987.981:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 307.033868][ T28] audit: type=1326 audit(1785851988.261:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.8.3427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 307.549711][T14084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.618186][ T2097] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.904703][T14163] lo speed is unknown, defaulting to 1000 [ 310.257901][T14163] hsr0 speed is unknown, defaulting to 1000 [ 310.915857][T14194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.941182][T14194] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3463'. [ 311.020332][T14200] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3464'. [ 311.024763][T14196] wg2: entered promiscuous mode [ 311.046058][T14196] wg2: entered allmulticast mode [ 311.493932][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 311.493946][ T28] audit: type=1400 audit(1785851992.971:2012): avc: denied { setopt } for pid=14223 comm="syz.7.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.393148][T14243] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 312.565723][T14248] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 312.643948][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'. [ 312.661053][T14251] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3479'. [ 312.685109][ T28] audit: type=1400 audit(1785851994.161:2013): avc: denied { execute } for pid=14237 comm="syz.5.3474" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 313.606051][T14287] netlink: 'syz.8.3490': attribute type 12 has an invalid length. [ 313.810819][T14296] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 313.839715][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3493'. [ 313.903659][T14309] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3498'. [ 314.048077][T14309] batman_adv: batadv0: Removing interface: dummy0 [ 314.259218][T14317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 314.534547][ T28] audit: type=1400 audit(1785851995.991:2014): avc: denied { create } for pid=14320 comm="syz.8.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 314.815418][T14346] netlink: 'syz.8.3509': attribute type 10 has an invalid length. [ 314.854239][T14346] bond5: (slave veth0_to_bond): Releasing active interface [ 314.884816][T14348] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 315.060830][T14353] batadv_slave_0: Caught tx_queue_len zero misconfig [ 315.194571][T14365] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 315.209351][T14365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.223856][T14365] bond7: entered allmulticast mode [ 315.246604][T14365] bond7: (slave ip6gretap2): making interface the new active one [ 315.254695][T14365] ip6gretap2: entered allmulticast mode [ 315.277402][T14365] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 315.419744][T14382] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3520'. [ 315.485407][T14389] : renamed from bond0 [ 315.757264][T14395] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.831956][T14397] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3526'. [ 315.842535][T14397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3526'. [ 317.950664][T14425] batman_adv: batadv0: Interface deactivated: dummy0 [ 317.964566][T14425] batman_adv: batadv0: Removing interface: dummy0 [ 318.016822][T14425] bond10: (slave veth0_to_bond): Releasing active interface [ 318.076439][T14425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.169467][T14444] raw_sendmsg: syz.7.3541 forgot to set AF_INET. Fix it! [ 318.238639][T14450] netlink: 'syz.7.3544': attribute type 1 has an invalid length. [ 318.274526][T14450] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.291396][T14445] lo speed is unknown, defaulting to 1000 [ 318.326260][T14450] veth9: entered allmulticast mode [ 318.343024][T14450] bond6: (slave veth9): Enslaving as an active interface with a down link [ 318.356732][T14445] hsr0 speed is unknown, defaulting to 1000 [ 318.392804][T14450] bond4: (slave veth0_to_bond): Releasing backup interface [ 318.409560][T14450] bond6: (slave veth0_to_bond): making interface the new active one [ 318.419095][T14450] veth0_to_bond: entered promiscuous mode [ 318.425343][T14450] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 318.443705][T14450] bond6: entered promiscuous mode [ 318.458850][T14450] bond6: entered allmulticast mode [ 318.464087][T14450] veth0_to_bond: entered allmulticast mode [ 319.073056][T14490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14490 comm=syz.3.3559 [ 319.249688][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3563'. [ 319.343302][T14508] bond7: entered promiscuous mode [ 319.361746][T14508] bond7: entered allmulticast mode [ 320.884081][ T28] audit: type=1326 audit(1785852002.361:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14552 comm="syz.3.3580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x0 [ 321.161253][T14564] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.3583'. [ 321.507916][T14577] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 321.540281][T14579] x_tables: unsorted underflow at hook 1 [ 321.556479][T14579] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.972988][T14600] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 321.983817][T14598] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3596'. [ 322.126220][T14604] lo speed is unknown, defaulting to 1000 [ 322.196687][T14604] hsr0 speed is unknown, defaulting to 1000 [ 322.385937][T14619] tipc: Enabling of bearer rejected, failed to enable media [ 322.473557][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3605'. [ 322.553554][T14624] ip6gre1: entered promiscuous mode [ 322.593099][T14624] ip6gre1: entered allmulticast mode [ 322.674747][T14624] netlink: 'syz.0.3605': attribute type 6 has an invalid length. [ 322.694167][T14624] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3605'. [ 322.819699][T14637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3611'. [ 322.905037][T14642] tmpfs: Bad value for 'nr_inodes' [ 322.911226][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3612'. [ 322.925061][T14642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.119169][T14655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3616'. [ 323.466330][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3621'. [ 323.563587][T14674] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3623'. [ 323.642024][ T28] audit: type=1400 audit(1785852005.121:2016): avc: denied { create } for pid=14675 comm="syz.8.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 323.855232][T14682] lo speed is unknown, defaulting to 1000 [ 323.945686][T14690] bridge0: left allmulticast mode [ 323.970717][T14682] hsr0 speed is unknown, defaulting to 1000 [ 323.981533][ T28] audit: type=1326 audit(1785852005.461:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 324.066252][ T28] audit: type=1326 audit(1785852005.461:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 324.121374][ T28] audit: type=1326 audit(1785852005.461:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 324.147257][ T28] audit: type=1326 audit(1785852005.461:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 324.231058][T14699] Cannot find del_set index 4 as target [ 324.241645][ T28] audit: type=1326 audit(1785852005.461:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 324.287634][ T28] audit: type=1326 audit(1785852005.511:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f366833e84e code=0x7ffc0000 [ 324.355627][ T28] audit: type=1326 audit(1785852005.521:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f366833e84e code=0x7ffc0000 [ 324.415257][ T28] audit: type=1326 audit(1785852005.521:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14685 comm="syz.5.3628" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f366833e84e code=0x7ffc0000 [ 325.279629][T14719] __nla_validate_parse: 1 callbacks suppressed [ 325.279650][T14719] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3634'. [ 325.294989][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3634'. [ 325.628380][T14741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14741 comm=syz.5.3643 [ 325.684042][T14744] tipc: Enabling of bearer rejected, failed to enable media [ 326.358888][T14770] siw: device registration error -23 [ 326.484561][T14780] nr0: port 1(veth1_virt_wifi) entered blocking state [ 326.503634][T14780] nr0: port 1(veth1_virt_wifi) entered disabled state [ 326.524368][T14780] veth1_virt_wifi: entered allmulticast mode [ 326.555338][T14780] veth1_virt_wifi: entered promiscuous mode [ 326.569030][T14784] veth1_to_bond: entered promiscuous mode [ 326.576434][T14784] veth1_to_bond: entered allmulticast mode [ 326.587764][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3657'. [ 326.598792][T14784] veth1_to_bond (unregistering): left promiscuous mode [ 326.606403][T14784] veth1_to_bond (unregistering): left allmulticast mode [ 326.617562][T14784] bond0: (slave bond_slave_1): Releasing backup interface [ 326.642539][T14785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3657'. [ 326.904982][T14803] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3664'. [ 327.074300][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 327.074333][ T28] audit: type=1400 audit(1785852008.551:2039): avc: denied { setopt } for pid=14810 comm="syz.8.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.136757][T14815] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3669'. [ 328.361266][T14837] netlink: 'syz.7.3677': attribute type 12 has an invalid length. [ 328.396663][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3677'. [ 328.429016][T14837] netlink: 'syz.7.3677': attribute type 12 has an invalid length. [ 328.437779][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3677'. [ 328.452613][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.461965][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.471986][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.385814][ T28] audit: type=1400 audit(1785852010.861:2040): avc: denied { write } for pid=14848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.438797][ T28] audit: type=1400 audit(1785852010.901:2041): avc: denied { write } for pid=14859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.930214][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 330.103495][ T28] audit: type=1326 audit(1785852011.521:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.7.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8696eee019 code=0x7ffc0000 [ 330.178215][ T28] audit: type=1326 audit(1785852011.521:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.7.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8696eee019 code=0x7ffc0000 [ 330.235303][ T28] audit: type=1326 audit(1785852011.521:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.7.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8696eee019 code=0x7ffc0000 [ 330.296022][ T28] audit: type=1326 audit(1785852011.581:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.7.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8696eee019 code=0x7ffc0000 [ 330.353076][ T28] audit: type=1326 audit(1785852011.581:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.7.3686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8696eee019 code=0x7ffc0000 [ 330.717966][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 332.067969][T14923] nfs: Unknown parameter '' [ 332.153237][T14931] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3705'. [ 332.336539][T14938] lo speed is unknown, defaulting to 1000 [ 332.413022][T14938] hsr0 speed is unknown, defaulting to 1000 [ 333.263460][ T28] audit: type=1326 audit(1785852014.741:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14979 comm="syz.3.3719" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x0 [ 333.353682][T14987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14987 comm=syz.0.3733 [ 333.489274][T14999] xt_hl: Unknown Hop Limit match mode: 221 [ 333.540928][ T28] audit: type=1400 audit(1785852015.021:2048): avc: denied { kexec_image_load } for pid=15001 comm="syz.0.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 333.958930][ T28] audit: type=1400 audit(1785852015.441:2049): avc: denied { lock } for pid=15009 comm="syz.0.3728" path="socket:[43655]" dev="sockfs" ino=43655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.075760][T15016] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3730'. [ 334.815876][T15038] 8021q: VLANs not supported on vcan0 [ 335.027467][T15050] syzkaller0: entered promiscuous mode [ 335.033188][T15050] syzkaller0: entered allmulticast mode [ 335.818582][T15059] macvlan1: entered promiscuous mode [ 335.846474][ T28] audit: type=1400 audit(1785852017.321:2050): avc: denied { node_bind } for pid=15068 comm="syz.5.3748" saddr=fec0:ffff:ffff:ffff:a8aa:aaff:feaa:aa1e src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 335.906471][T15059] ip6gretap0: entered promiscuous mode [ 336.025222][T15077] tipc: Started in network mode [ 336.045289][T15077] tipc: Node identity 525d6b3300e9, cluster identity 4711 [ 336.068165][T15077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.102423][T15077] tipc: Enabled bearer , priority 0 [ 336.198680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.338124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.368298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.417091][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3752'. [ 336.478107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.618708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.758088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.898117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.038697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.130721][ T28] audit: type=1400 audit(1785852018.611:2051): avc: denied { ioctl } for pid=15097 comm="syz.8.3758" path="socket:[44226]" dev="sockfs" ino=44226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 337.178180][ T3379] tipc: Node number set to 1387555635 [ 337.288862][T15103] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3761'. [ 337.318096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.872330][T15115] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3765'. [ 339.003198][T15141] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 339.044821][T15147] tipc: Enabling of bearer rejected, already enabled [ 339.224043][T15145] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3777'. [ 339.294041][T15145] netlink: 264 bytes leftover after parsing attributes in process `syz.8.3777'. [ 341.248087][ C1] net_ratelimit: 4 callbacks suppressed [ 341.248109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.172393][T15171] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3783'. [ 342.181543][T15171] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3783'. [ 342.214216][T15170] netlink: 'syz.8.3793': attribute type 12 has an invalid length. [ 342.222399][T15171] veth0: left allmulticast mode [ 342.222422][T15171] veth0: left promiscuous mode [ 342.222550][T15171] bridge0: port 3(veth0) entered disabled state [ 342.239562][T15173] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3785'. [ 342.240472][T15171] veth1: left allmulticast mode [ 342.254606][T15171] veth1: left promiscuous mode [ 342.279005][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3793'. [ 342.288095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.288663][T15171] bridge0: port 4(veth1) entered disabled state [ 342.342760][T15174] netlink: 'syz.5.3783': attribute type 10 has an invalid length. [ 342.355636][T15171] bridge_slave_0: left allmulticast mode [ 342.361583][T15171] bridge_slave_0: left promiscuous mode [ 342.393331][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3783'. [ 342.438841][T15171] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.504779][T15171] bridge_slave_1: left allmulticast mode [ 342.518433][T15171] bridge_slave_1: left promiscuous mode [ 342.567282][T15171] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.619965][T15171] bond12: (slave veth0_to_bond): Releasing backup interface [ 342.638561][T15171] bond0: (slave bond_slave_0): Releasing backup interface [ 342.654116][T15171] team0: Port device team_slave_0 removed [ 342.674701][T15171] team0: Port device team_slave_1 removed [ 342.696251][T15171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.731411][T15171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.328082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.546499][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3790'. [ 343.610350][T15208] netlink: 212 bytes leftover after parsing attributes in process `syz.5.3792'. [ 343.621493][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3792'. [ 343.630883][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3792'. [ 343.640740][T15208] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3792'. [ 344.660192][T15238] team0: left allmulticast mode [ 344.667525][T15238] team_slave_0: left allmulticast mode [ 344.674718][T15238] team_slave_1: left allmulticast mode [ 344.753463][T15240] netlink: 'syz.7.3807': attribute type 10 has an invalid length. [ 344.806692][T15238] team0: left promiscuous mode [ 344.845159][T15238] team_slave_0: left promiscuous mode [ 344.880714][T15238] team_slave_1: left promiscuous mode [ 344.912594][T15238] bridge0: port 3(team0) entered disabled state [ 344.961029][T15238] bridge_slave_0: left allmulticast mode [ 344.975956][T15238] bridge_slave_0: left promiscuous mode [ 345.022567][T15238] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.088157][T15238] bridge_slave_1: left allmulticast mode [ 345.120847][T15238] bridge_slave_1: left promiscuous mode [ 345.174015][T15238] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.204026][T15238] bond6: (slave veth0_to_bond): Releasing active interface [ 345.223252][T15238] veth0_to_bond: left allmulticast mode [ 345.233417][T15238] veth0_to_bond: left promiscuous mode [ 345.241655][T15238] team0: Port device team_slave_0 removed [ 345.248384][T15238] team0: Port device team_slave_1 removed [ 345.254850][T15238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.263411][T15238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.272285][T15238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.411589][T15246] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 345.503522][ T28] audit: type=1400 audit(1785852026.951:2052): avc: denied { write } for pid=15243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.569388][ T28] audit: type=1400 audit(1785852026.981:2053): avc: denied { write } for pid=15258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.587196][T15265] netlink: 'syz.5.3811': attribute type 13 has an invalid length. [ 345.686117][T15276] syzkaller0: Caught tx_queue_len zero misconfig [ 345.703717][ T28] audit: type=1400 audit(1785852027.181:2054): avc: denied { write } for pid=15260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.795184][ T28] audit: type=1400 audit(1785852027.271:2055): avc: denied { write } for pid=15280 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.820429][T15282] tipc: Enabling of bearer rejected, already enabled [ 346.086233][ T28] audit: type=1400 audit(1785852027.561:2056): avc: denied { write } for pid=15288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.171856][ T28] audit: type=1400 audit(1785852027.651:2057): avc: denied { write } for pid=15311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.260840][T15316] lo: Caught tx_queue_len zero misconfig [ 346.333456][T15319] tipc: Started in network mode [ 346.357582][T15319] tipc: Node identity 3ef3ed3cfd48, cluster identity 4711 [ 346.390267][T15319] tipc: Enabled bearer , priority 0 [ 346.413045][T15319] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 346.448089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.456281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.625565][T15328] batadv_slave_0: Caught tx_queue_len zero misconfig [ 346.855944][T15345] netlink: 'syz.8.3829': attribute type 10 has an invalid length. [ 346.937951][T15339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.111458][T15342] tipc: Enabled bearer , priority 0 [ 347.215109][T15345] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 347.399904][T15350] bond0: (slave bridge0): Releasing backup interface [ 347.456839][T15357] netlink: 'syz.0.3836': attribute type 12 has an invalid length. [ 347.488087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.496259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.555515][ T3407] tipc: Node number set to 3283873084 [ 347.557475][T15360] __nla_validate_parse: 13 callbacks suppressed [ 347.557515][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3835'. [ 347.622871][T15333] lo speed is unknown, defaulting to 1000 [ 347.683557][T15366] bridge0: port 1(macvlan2) entered disabled state [ 347.736669][T15366] veth1_macvtap: left allmulticast mode [ 347.762987][T15366] tipc: Resetting bearer [ 347.792933][T15333] hsr0 speed is unknown, defaulting to 1000 [ 347.799287][ T4311] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.888858][ T4309] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.908304][ T4309] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.942216][ T4309] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.019484][T15384] wg1: Caught tx_queue_len zero misconfig [ 348.123636][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3846'. [ 348.188712][ T4622] tipc: Node number set to 3646694440 [ 348.529216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.838222][T15411] netlink: 'syz.7.3852': attribute type 1 has an invalid length. [ 348.975796][T15411] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.190885][T15412] bond8: (slave veth11): Enslaving as an active interface with a down link [ 349.215066][T15411] netlink: 'syz.7.3852': attribute type 10 has an invalid length. [ 349.261803][T15411] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3852'. [ 349.568086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.576252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.608112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.745781][T15437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3860'. [ 350.755558][T15437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3860'. [ 350.768375][T15437] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 350.785530][T15437] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 350.795136][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 350.805558][T15437] macvlan2: left allmulticast mode [ 350.812336][T15437] macvlan2: left promiscuous mode [ 350.817602][T15437] bridge0: port 1(macvlan2) entered disabled state [ 351.545409][T15398] Set syz1 is full, maxelem 65536 reached [ 351.612032][T15458] netlink: 'syz.3.3867': attribute type 1 has an invalid length. [ 351.635127][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.856860][T15458] veth15: entered allmulticast mode [ 351.926242][T15458] bond0: (slave veth15): Enslaving as an active interface with a down link [ 352.016506][T15463] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 352.228074][T15466] bond0: entered promiscuous mode [ 352.233215][T15466] bond0: entered allmulticast mode [ 352.241527][T15468] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3869'. [ 352.252244][T15468] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3869'. [ 352.517885][T15479] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3872'. [ 352.851056][T15496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.960693][T15498] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3876'. [ 353.457172][ T28] audit: type=1400 audit(1785852034.931:2058): avc: denied { mount } for pid=15502 comm="syz.8.3888" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 353.803099][T15517] vlan0: entered promiscuous mode [ 353.808944][T15517] hsr0: entered promiscuous mode [ 353.816741][T15517] vlan0: entered allmulticast mode [ 353.822258][T15517] hsr0: entered allmulticast mode [ 353.827389][T15517] hsr_slave_0: entered allmulticast mode [ 353.833465][T15517] hsr_slave_1: entered allmulticast mode [ 353.845206][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3882'. [ 353.857382][T15517] hsr_slave_0: left promiscuous mode [ 353.870661][T15517] hsr_slave_1: left promiscuous mode [ 353.877099][ T28] audit: type=1326 audit(1785852035.351:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 353.965877][ T28] audit: type=1326 audit(1785852035.351:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.015895][T15514] lo speed is unknown, defaulting to 1000 [ 354.038565][ T28] audit: type=1326 audit(1785852035.411:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.077447][T15514] hsr0 speed is unknown, defaulting to 1000 [ 354.109487][ T28] audit: type=1326 audit(1785852035.411:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.137309][ T28] audit: type=1326 audit(1785852035.411:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.184145][ T28] audit: type=1326 audit(1785852035.411:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.211294][ T28] audit: type=1326 audit(1785852035.411:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.244411][ T28] audit: type=1326 audit(1785852035.411:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.273613][ T28] audit: type=1326 audit(1785852035.411:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15521 comm="syz.3.3883" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 354.529297][T15542] lo speed is unknown, defaulting to 1000 [ 354.587241][T15542] hsr0 speed is unknown, defaulting to 1000 [ 355.124598][T15547] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 355.286901][T15551] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.3897'. [ 356.539146][T15576] netlink: 'syz.5.3902': attribute type 8 has an invalid length. [ 356.547022][T15576] sch_fq: defrate 0 ignored. [ 356.632132][T15584] netlink: 'syz.7.3907': attribute type 1 has an invalid length. [ 356.868922][T15584] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.305448][T15586] bond9: (slave veth13): Enslaving as an active interface with a down link [ 357.582891][T15584] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 357.592741][T15584] bond9: (slave batadv1): making interface the new active one [ 357.601989][T15584] batadv1: entered promiscuous mode [ 357.607522][T15584] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 357.653078][T15584] bond9 (unregistering): (slave veth13): Releasing active interface [ 357.679057][T15584] bond9 (unregistering): (slave batadv1): Releasing active interface [ 357.687971][T15584] bond9 (unregistering): Released all slaves [ 358.518942][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 358.518969][ T28] audit: type=1326 audit(1785852040.001:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.5.3912" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f366833e84e code=0x7ffc0000 [ 358.566856][T15622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15622 comm=syz.8.3918 [ 358.776468][ T28] audit: type=1326 audit(1785852040.061:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.5.3912" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 358.961170][ T28] audit: type=1326 audit(1785852040.441:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15597 comm="syz.5.3912" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.101100][T15632] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 359.178418][T15634] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 359.209777][ T28] audit: type=1326 audit(1785852040.691:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.242897][ T28] audit: type=1326 audit(1785852040.691:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.269371][ T28] audit: type=1326 audit(1785852040.711:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.296217][ T28] audit: type=1326 audit(1785852040.711:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.322568][ T28] audit: type=1326 audit(1785852040.711:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.348727][ T28] audit: type=1326 audit(1785852040.711:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.374257][ T28] audit: type=1326 audit(1785852040.711:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15637 comm="syz.5.3922" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 359.428915][T15634] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 359.496253][T15634] macvlan3: entered promiscuous mode [ 359.511154][T15634] macvlan3: entered allmulticast mode [ 359.527006][T15634] bond12: entered promiscuous mode [ 359.544505][T15634] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 359.564919][T15634] bond12: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 359.608923][T15634] bond12: left promiscuous mode [ 360.610434][T15660] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3928'. [ 360.853353][T15667] netlink: 'syz.3.3930': attribute type 29 has an invalid length. [ 361.361925][T15667] netlink: 'syz.3.3930': attribute type 28 has an invalid length. [ 361.982236][T15686] netlink: 'syz.7.3938': attribute type 10 has an invalid length. [ 362.763089][T15695] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 363.176803][T15695] bond8 (unregistering): Released all slaves [ 363.615286][ T28] kauditd_printk_skb: 1012 callbacks suppressed [ 363.615305][ T28] audit: type=1326 audit(1785852045.091:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15720 comm="syz.0.3959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x0 [ 363.645417][T15718] lo speed is unknown, defaulting to 1000 [ 363.816553][T15718] hsr0 speed is unknown, defaulting to 1000 [ 364.343354][ T28] audit: type=1400 audit(1785852045.811:3555): avc: denied { lock } for pid=15737 comm="syz.3.3952" path="socket:[45947]" dev="sockfs" ino=45947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.409417][T15741] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 364.978676][T15766] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3963'. [ 364.988696][T15766] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3963'. [ 365.665002][T15786] lo speed is unknown, defaulting to 1000 [ 365.742956][T15786] hsr0 speed is unknown, defaulting to 1000 [ 365.861708][T15795] lo speed is unknown, defaulting to 1000 [ 365.936894][T15795] hsr0 speed is unknown, defaulting to 1000 [ 366.199632][T15820] netlink: 'syz.5.3985': attribute type 29 has an invalid length. [ 366.207840][T15820] netlink: 'syz.5.3985': attribute type 28 has an invalid length. [ 366.372545][T15836] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4000'. [ 366.393572][T15833] netlink: 'syz.0.3999': attribute type 29 has an invalid length. [ 366.408336][T15833] netlink: 'syz.0.3999': attribute type 28 has an invalid length. [ 366.664470][T15842] lo speed is unknown, defaulting to 1000 [ 366.960033][T15842] hsr0 speed is unknown, defaulting to 1000 [ 367.234965][T15847] lo speed is unknown, defaulting to 1000 [ 367.448526][T15847] hsr0 speed is unknown, defaulting to 1000 [ 367.853974][T15878] netlink: 'syz.8.4002': attribute type 29 has an invalid length. [ 367.881083][T15878] netlink: 'syz.8.4002': attribute type 28 has an invalid length. [ 367.941257][T15880] 8021q: adding VLAN 0 to HW filter on device  [ 367.952489][T15880] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.986764][T15880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.025981][T15880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.040338][T15880] veth0_virt_wifi: left promiscuous mode [ 368.046503][T15880] veth1_vlan: left promiscuous mode [ 368.052946][T15880] veth0_vlan: left promiscuous mode [ 368.059977][T15880] veth0_vlan: entered promiscuous mode [ 368.066748][T15880] veth1_vlan: entered promiscuous mode [ 368.079310][T15880] veth0_macvtap: left promiscuous mode [ 368.086907][T15880] veth0_macvtap: entered promiscuous mode [ 368.095234][T15880] macsec0: left promiscuous mode [ 368.103815][T15880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.114959][T15880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.125895][T15880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.135461][T15880] 8021q: adding VLAN 0 to HW filter on device eth0 [ 368.144790][T15880] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.153782][T15880] 8021q: adding VLAN 0 to HW filter on device eth2 [ 368.162366][T15880] 8021q: adding VLAN 0 to HW filter on device eth3 [ 368.172522][T15880] 8021q: adding VLAN 0 to HW filter on device team1 [ 368.186297][T15880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.199453][T15880] ip6gre1: left promiscuous mode [ 368.212978][T15880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.221846][T15880] bridge2: left promiscuous mode [ 368.230038][T15880] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 368.243369][T15880] 8021q: adding VLAN 0 to HW filter on device bond7 [ 368.261774][T15880] syzkaller0: left promiscuous mode [ 368.270517][T15880] bond0: left promiscuous mode [ 368.275912][T15880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.323031][ T3379] hsr0 speed is unknown, defaulting to 1000 [ 368.329543][ T3379] syz2: Port: 1 Link ACTIVE [ 368.334109][ T2097] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.359500][ T2097] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 368.369385][ T2097] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.388325][ T2097] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 368.429540][ T2097] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.448164][ T2097] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 368.456630][ T2097] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.466053][ T2097] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 368.498436][ T68] bond0: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 368.507240][ T68] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 368.517241][ T68] bond0: (slave veth15): making interface the new active one [ 368.533480][ T68] bond0: active interface up! [ 368.541289][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'. [ 368.589256][T15895] lo speed is unknown, defaulting to 1000 [ 368.665023][T15895] hsr0 speed is unknown, defaulting to 1000 [ 368.804455][T15905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15905 comm=syz.8.4011 [ 368.868724][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4012'. [ 369.334709][T15922] syz.7.4015: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 369.350892][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.7.4015 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 369.350947][T15922] Tainted: [W]=WARN [ 369.350954][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.350968][T15922] Call Trace: [ 369.350977][T15922] [ 369.350986][T15922] __dump_stack+0x1d/0x30 [ 369.351016][T15922] dump_stack_lvl+0x95/0xd0 [ 369.351037][T15922] dump_stack+0x15/0x1b [ 369.351071][T15922] warn_alloc+0x145/0x1c0 [ 369.351181][T15922] ? ktime_get+0x212/0x240 [ 369.351224][T15922] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 369.351273][T15922] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 369.351375][T15922] ? _raw_spin_unlock+0x9/0x30 [ 369.351470][T15922] ? __hrtimer_rearm_deferred+0x571/0x650 [ 369.351534][T15922] ? preempt_schedule_common+0x11/0x30 [ 369.351570][T15922] ? should_fail_ex+0x30/0x270 [ 369.351656][T15922] ? xskq_create+0x36/0xe0 [ 369.351688][T15922] ? should_failslab+0x8c/0xb0 [ 369.351728][T15922] vmalloc_user_noprof+0x7d/0xb0 [ 369.351756][T15922] ? xskq_create+0x80/0xe0 [ 369.351800][T15922] xskq_create+0x80/0xe0 [ 369.351826][T15922] xsk_init_queue+0x70/0xb0 [ 369.351850][T15922] xsk_setsockopt+0x471/0x640 [ 369.351879][T15922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 369.352026][T15922] __sys_setsockopt+0x184/0x200 [ 369.352098][T15922] __x64_sys_setsockopt+0x64/0x80 [ 369.352138][T15922] x64_sys_call+0x2327/0x3020 [ 369.352162][T15922] do_syscall_64+0x136/0x3c0 [ 369.352271][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.352373][T15922] RIP: 0033:0x7f8696eee019 [ 369.352393][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.352417][T15922] RSP: 002b:00007f8695947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.352457][T15922] RAX: ffffffffffffffda RBX: 00007f8697175fa0 RCX: 00007f8696eee019 [ 369.352471][T15922] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 369.352547][T15922] RBP: 00007f8696f8500c R08: 0000000000000004 R09: 0000000000000000 [ 369.352642][T15922] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 369.352656][T15922] R13: 00007f8697176038 R14: 00007f8697175fa0 R15: 00007fffd36eff08 [ 369.352684][T15922] [ 369.352766][T15922] Mem-Info: [ 369.397707][T15924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.400987][T15922] active_anon:64784 inactive_anon:14720 isolated_anon:0 [ 369.400987][T15922] active_file:149 inactive_file:30164 isolated_file:0 [ 369.400987][T15922] unevictable:0 dirty:215 writeback:0 [ 369.400987][T15922] slab_reclaimable:4341 slab_unreclaimable:79323 [ 369.400987][T15922] mapped:34933 shmem:64752 pagetables:3823 [ 369.400987][T15922] sec_pagetables:0 bounce:0 [ 369.400987][T15922] kernel_misc_reclaimable:0 [ 369.400987][T15922] free:1736795 free_pcp:5740 free_cma:0 [ 369.610200][T15930] Cannot find del_set index 4 as target [ 369.655363][T15922] Node 0 active_anon:259252kB inactive_anon:58880kB active_file:596kB inactive_file:120656kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139732kB dirty:860kB writeback:0kB shmem:259124kB kernel_stack:5648kB pagetables:15872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 369.655575][T15922] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.655716][T15922] lowmem_reserve[]: 0 2878 7857 7857 [ 369.655817][T15922] Node 0 DMA32 free:2944108kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947632kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 369.656028][T15922] lowmem_reserve[]: 0 0 4978 4978 [ 369.656135][T15922] Node 0 Normal free:3987248kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:259252kB inactive_anon:58880kB active_file:596kB inactive_file:120656kB unevictable:0kB writepending:860kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:19276kB local_pcp:7192kB free_cma:0kB [ 369.656406][T15922] lowmem_reserve[]: 0 0 0 0 [ 369.656549][T15922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.657063][T15922] Node 0 DMA32: 1*4kB (M) 3*8kB (M) 5*16kB (M) 6*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944108kB [ 369.657631][T15922] Node 0 Normal: 6*4kB (UE) 334*8kB (U) 406*16kB (UM) 636*32kB (UME) 388*64kB (UME) 218*128kB (UME) 93*256kB (UM) 56*512kB (UME) 42*1024kB (UM) 30*2048kB (UME) 915*4096kB (UM) = 3987048kB [ 369.658363][T15922] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 369.658396][T15922] 95938 total pagecache pages [ 369.658406][T15922] 850 pages in swap cache [ 369.658427][T15922] Free swap = 6876kB [ 369.658465][T15922] Total swap = 124996kB [ 369.658518][T15922] 2097051 pages RAM [ 369.658539][T15922] 0 pages HighMem/MovableOnly [ 369.658559][T15922] 81744 pages reserved [ 370.731133][ T28] audit: type=1400 audit(1785852052.211:3556): avc: denied { connect } for pid=15938 comm="syz.7.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 370.768243][ T28] audit: type=1400 audit(1785852052.231:3557): avc: denied { read } for pid=15938 comm="syz.7.4022" lport=30266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 370.886931][T15944] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4025'. [ 371.914201][T15966] netlink: 'syz.7.4030': attribute type 29 has an invalid length. [ 371.934096][T15970] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 371.946752][ T28] audit: type=1326 audit(1785852053.401:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 371.973671][T15966] netlink: 'syz.7.4030': attribute type 28 has an invalid length. [ 371.987254][ T28] audit: type=1326 audit(1785852053.401:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.016709][ T28] audit: type=1326 audit(1785852053.411:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.106157][ T28] audit: type=1326 audit(1785852053.411:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.132918][ T28] audit: type=1326 audit(1785852053.411:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.210228][ T28] audit: type=1326 audit(1785852053.411:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.243395][ T28] audit: type=1326 audit(1785852053.411:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.327220][ T28] audit: type=1326 audit(1785852053.411:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15969 comm="syz.8.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 372.769823][T16014] lo speed is unknown, defaulting to 1000 [ 372.963865][T16026] tipc: Enabling of bearer rejected, failed to enable media [ 373.085221][T16014] hsr0 speed is unknown, defaulting to 1000 [ 373.265684][T16036] lo speed is unknown, defaulting to 1000 [ 373.588684][T16036] hsr0 speed is unknown, defaulting to 1000 [ 373.595136][T16061] netlink: 'syz.7.4051': attribute type 1 has an invalid length. [ 373.653319][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4052'. [ 373.665862][T16061] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.795102][T16061] veth15: entered allmulticast mode [ 373.824202][T16061] bond9: (slave veth15): Enslaving as an active interface with a down link [ 373.927962][T16067] bond9: (slave veth0_to_bond): making interface the new active one [ 373.959738][T16067] veth0_to_bond: entered promiscuous mode [ 373.983476][T16067] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 374.039324][T16072] macvlan2: entered promiscuous mode [ 374.058799][T16072] macvlan2: entered allmulticast mode [ 374.079499][T16072] bond9: entered promiscuous mode [ 374.100460][T16072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.112978][T16072] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 374.156941][T16072] bond9: left promiscuous mode [ 374.314326][T16100] tipc: Failed to remove unknown binding: 66,0,0/4187875420:2837541937/2837541939 [ 374.343832][T16100] tipc: Failed to remove unknown binding: 66,0,0/4187875420:2837541937/2837541938 [ 374.384898][T16100] tipc: Failed to remove unknown binding: 66,0,0/4187875420:2837541937/2837541939 [ 374.420108][T16100] tipc: Failed to remove unknown binding: 66,0,0/4187875420:2837541937/2837541938 [ 375.040490][T16143] tipc: Enabling of bearer rejected, already enabled [ 375.164963][T16148] netlink: 108 bytes leftover after parsing attributes in process `syz.8.4067'. [ 375.217626][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4069'. [ 375.225983][T16148] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4067'. [ 375.993008][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 375.993024][ T28] audit: type=1326 audit(1785852057.471:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 376.051484][ T28] audit: type=1326 audit(1785852057.501:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 376.102703][ T28] audit: type=1326 audit(1785852057.501:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 376.142931][ T28] audit: type=1326 audit(1785852057.501:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 376.206775][ T28] audit: type=1326 audit(1785852057.501:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f313ad2dd82 code=0x7ffc0000 [ 376.336372][ T28] audit: type=1326 audit(1785852057.501:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f313acee84e code=0x7ffc0000 [ 376.467854][ T28] audit: type=1326 audit(1785852057.511:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f313ad2de47 code=0x7ffc0000 [ 376.553715][ T28] audit: type=1326 audit(1785852057.511:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f313acee84e code=0x7ffc0000 [ 376.657986][ T28] audit: type=1326 audit(1785852057.511:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f313acee84e code=0x7ffc0000 [ 376.708507][ T28] audit: type=1326 audit(1785852057.511:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16176 comm="syz.8.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 376.761721][T16189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16189 comm=syz.0.4081 [ 376.802591][T16193] tipc: Enabling of bearer rejected, already enabled [ 376.811840][T16193] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4084'. [ 376.916341][T16194] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 377.047629][T16207] syzkaller0: entered promiscuous mode [ 377.086443][T16207] syzkaller0: entered allmulticast mode [ 377.214314][T16209] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 377.625654][T16219] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4091'. [ 377.636206][T16219] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4091'. [ 377.656131][T16217] lo speed is unknown, defaulting to 1000 [ 377.714503][T16217] hsr0 speed is unknown, defaulting to 1000 [ 377.781012][T16231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16231 comm=syz.7.4097 [ 377.821756][T16229] lo speed is unknown, defaulting to 1000 [ 377.958287][T16229] hsr0 speed is unknown, defaulting to 1000 [ 378.045931][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4102'. [ 378.270409][T16249] lo speed is unknown, defaulting to 1000 [ 378.334127][T16249] hsr0 speed is unknown, defaulting to 1000 [ 378.518178][T16257] netlink: 420 bytes leftover after parsing attributes in process `syz.0.4116'. [ 379.443940][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4127'. [ 379.465386][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4127'. [ 379.591147][T16309] lo speed is unknown, defaulting to 1000 [ 379.658682][T16318] netlink: 199824 bytes leftover after parsing attributes in process `syz.7.4130'. [ 379.711934][T16309] hsr0 speed is unknown, defaulting to 1000 [ 380.524652][T16332] macvlan1: entered promiscuous mode [ 380.536911][T16332] ip6gretap0: entered promiscuous mode [ 380.547939][T16332] debugfs: 'hsr1' already exists in 'hsr' [ 380.554593][T16332] Cannot create hsr debugfs directory [ 380.686404][T16345] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4139'. [ 380.698488][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4139'. [ 380.792497][T16356] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 380.937187][T16365] tipc: Enabling of bearer rejected, already enabled [ 381.050896][ T28] kauditd_printk_skb: 442 callbacks suppressed [ 381.050913][ T28] audit: type=1326 audit(1785852062.202:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 381.083870][ T28] audit: type=1326 audit(1785852062.202:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 381.112729][ T28] audit: type=1326 audit(1785852062.202:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 381.139295][ T28] audit: type=1326 audit(1785852062.202:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 381.175672][ T28] audit: type=1326 audit(1785852062.202:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8af24fe019 code=0x7ffc0000 [ 381.201900][ T28] audit: type=1326 audit(1785852062.202:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8af24fdd82 code=0x7ffc0000 [ 381.227400][ T28] audit: type=1326 audit(1785852062.212:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8af24be84e code=0x7ffc0000 [ 381.254341][ T28] audit: type=1326 audit(1785852062.212:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8af24fde47 code=0x7ffc0000 [ 381.280545][ T28] audit: type=1326 audit(1785852062.232:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8af24be84e code=0x7ffc0000 [ 381.306846][ T28] audit: type=1326 audit(1785852062.232:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16372 comm="syz.3.4148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8af24be84e code=0x7ffc0000 [ 381.500751][T16385] 0: reclassify loop, rule prio 0, protocol 700 [ 382.183748][T16417] lo speed is unknown, defaulting to 1000 [ 382.240205][T16417] hsr0 speed is unknown, defaulting to 1000 [ 383.285428][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4179'. [ 384.369220][T16455] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 385.616065][T16466] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.916378][T16466] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.970420][T16481] tipc: Enabling of bearer rejected, already enabled [ 386.009452][T16481] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 386.043210][T16466] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.074362][T16481] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4178'. [ 386.131765][T16466] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.174009][T16496] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 386.209530][ T30] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.232831][T16496] 8021q: adding VLAN 0 to HW filter on device bond13 [ 386.312213][T16496] veth13: entered allmulticast mode [ 386.320845][T16496] bond13: (slave veth13): Enslaving as an active interface with a down link [ 386.346722][ T28] kauditd_printk_skb: 206 callbacks suppressed [ 386.346736][ T28] audit: type=1400 audit(1785852067.492:4275): avc: denied { write } for pid=16494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.376252][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.376805][ T30] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.376834][ T30] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.448761][T16518] tipc: Resetting bearer [ 386.466692][ T28] audit: type=1400 audit(1785852067.612:4276): avc: denied { write } for pid=16523 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.519884][T16496] bond12: (slave veth0_to_bond): Releasing active interface [ 386.531088][T16496] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 386.544530][T16505] bond13: entered promiscuous mode [ 386.550069][T16505] bond13: entered allmulticast mode [ 386.558216][ T30] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.584876][ T30] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.629264][ T30] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.745665][ T28] audit: type=1400 audit(1785852067.892:4277): avc: denied { write } for pid=16533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.799269][ T28] audit: type=1400 audit(1785852067.952:4278): avc: denied { write } for pid=16555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.007304][ T28] audit: type=1400 audit(1785852068.152:4279): avc: denied { write } for pid=16563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.053838][T16583] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4196'. [ 387.056685][ T28] audit: type=1400 audit(1785852068.202:4280): avc: denied { write } for pid=16584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.338621][ T28] audit: type=1400 audit(1785852068.482:4281): avc: denied { write } for pid=16597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.466336][ T28] audit: type=1400 audit(1785852068.612:4282): avc: denied { write } for pid=16618 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.781892][ T28] audit: type=1400 audit(1785852068.932:4283): avc: denied { write } for pid=16620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.825735][ T28] audit: type=1400 audit(1785852068.972:4284): avc: denied { write } for pid=16631 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.082733][T16669] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 389.485727][T16681] lo speed is unknown, defaulting to 1000 [ 389.581850][T16681] hsr0 speed is unknown, defaulting to 1000 [ 390.770362][T16708] lo speed is unknown, defaulting to 1000 [ 391.020463][T16718] 9pnet_fd: Insufficient options for proto=fd [ 391.061803][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4225'. [ 391.123393][T16708] hsr0 speed is unknown, defaulting to 1000 [ 391.415083][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 391.415098][ T28] audit: type=1326 audit(1785852072.562:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.426975][T16734] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 391.517270][ T28] audit: type=1326 audit(1785852072.562:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.603960][ T28] audit: type=1326 audit(1785852072.562:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.650834][ T28] audit: type=1326 audit(1785852072.562:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.685650][ T28] audit: type=1326 audit(1785852072.562:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.727245][ T28] audit: type=1326 audit(1785852072.562:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.760348][ T28] audit: type=1326 audit(1785852072.562:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.770151][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4235'. [ 391.832366][ T28] audit: type=1326 audit(1785852072.562:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.883994][ T28] audit: type=1326 audit(1785852072.562:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 391.921375][ T28] audit: type=1326 audit(1785852072.572:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.4233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e5fc5e019 code=0x7ffc0000 [ 392.219425][ T30] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.228936][ T30] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.260420][ T30] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.294380][T16728] syz.3.4228 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 392.306545][T16728] CPU: 1 UID: 0 PID: 16728 Comm: syz.3.4228 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 392.306636][T16728] Tainted: [W]=WARN [ 392.306642][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.306654][T16728] Call Trace: [ 392.306659][T16728] [ 392.306683][T16728] __dump_stack+0x1d/0x30 [ 392.306712][T16728] dump_stack_lvl+0x95/0xd0 [ 392.306758][T16728] dump_stack+0x15/0x1b [ 392.306780][T16728] dump_header+0x80/0x240 [ 392.306865][T16728] oom_kill_process+0x295/0x350 [ 392.306900][T16728] out_of_memory+0x981/0xbc0 [ 392.306979][T16728] try_charge_memcg+0x621/0xa00 [ 392.307066][T16728] charge_memcg+0x6d/0x120 [ 392.307106][T16728] __mem_cgroup_charge+0x28/0xb0 [ 392.307147][T16728] do_wp_page+0x71a/0x2030 [ 392.307264][T16728] ? __css_rstat_updated+0xbb/0x280 [ 392.307291][T16728] ? __rcu_read_lock+0x36/0x50 [ 392.307318][T16728] handle_mm_fault+0x8bc/0x2da0 [ 392.307358][T16728] do_user_addr_fault+0x402/0x1060 [ 392.307453][T16728] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 392.307491][T16728] exc_page_fault+0x62/0xa0 [ 392.307510][T16728] asm_exc_page_fault+0x26/0x30 [ 392.307591][T16728] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 392.307621][T16728] Code: 1f 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 392.307695][T16728] RSP: 0018:ffffc900024f7870 EFLAGS: 00050202 [ 392.307710][T16728] RAX: ffff8881049eadb0 RBX: ffff8881314e1000 RCX: 0000000000000180 [ 392.307798][T16728] RDX: 0000000000000000 RSI: ffff8881314e1d40 RDI: 0000200000e5e000 [ 392.307810][T16728] RBP: 0000200000e5d2c0 R08: 0000000000000046 R09: 0000000000000000 [ 392.307822][T16728] R10: 00018881314e1000 R11: 00018881314e1ebf R12: 0000200000e5e180 [ 392.307834][T16728] R13: ffffc900024f7e78 R14: 0000000000000ec0 R15: 00007ffffffff000 [ 392.307851][T16728] _copy_to_iter+0x141/0xea0 [ 392.307935][T16728] ? hrtimer_start_range_ns+0x108/0x120 [ 392.307962][T16728] ? _raw_spin_unlock+0x9/0x30 [ 392.308062][T16728] ? finish_task_switch+0x125/0x340 [ 392.308086][T16728] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 392.308105][T16728] __skb_datagram_iter+0xc6/0x680 [ 392.308123][T16728] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 392.308056][ T30] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.308240][T16728] skb_copy_datagram_iter+0x3f/0xf0 [ 392.308338][T16728] unix_stream_read_actor+0x43/0x70 [ 392.308466][T16728] unix_stream_read_generic+0x6e9/0x15f0 [ 392.308650][T16728] ? __pfx_autoremove_wake_function+0x10/0x10 [ 392.308846][T16728] unix_stream_recvmsg+0xfc/0x130 [ 392.308936][T16728] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 392.309045][T16728] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 392.309129][T16728] sock_recvmsg+0xf5/0x120 [ 392.309220][T16728] ____sys_recvmsg+0xf5/0x280 [ 392.309297][T16728] ___sys_recvmsg+0x11f/0x3a0 [ 392.309399][T16728] __x64_sys_recvmsg+0xd1/0x160 [ 392.309472][T16728] x64_sys_call+0x2b1a/0x3020 [ 392.309550][T16728] do_syscall_64+0x136/0x3c0 [ 392.309627][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.309755][T16728] RIP: 0033:0x7f8af24fe019 [ 392.309807][T16728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.309862][T16728] RSP: 002b:00007f8af0f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 392.309932][T16728] RAX: ffffffffffffffda RBX: 00007f8af2786090 RCX: 00007f8af24fe019 [ 392.309979][T16728] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 392.310048][T16728] RBP: 00007f8af259500c R08: 0000000000000000 R09: 0000000000000000 [ 392.310125][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.310161][T16728] R13: 00007f8af2786128 R14: 00007f8af2786090 R15: 00007ffc63ee8568 [ 392.310231][T16728] [ 392.310322][T16728] memory: usage 307200kB, limit 307200kB, failcnt 10547 [ 392.700774][T16728] memory+swap: usage 347508kB, limit 9007199254740988kB, failcnt 0 [ 392.709302][T16728] kmem: usage 263708kB, limit 9007199254740988kB, failcnt 0 [ 392.716630][T16728] Memory cgroup stats for /syz3: [ 392.716851][T16728] cache 28745728 [ 392.725667][T16728] rss 15769600 [ 392.729280][T16728] shmem 28745728 [ 392.732942][T16728] mapped_file 0 [ 392.736441][T16728] dirty 0 [ 392.750786][T16728] writeback 0 [ 392.754425][T16728] workingset_refault_anon 2716 [ 392.761155][T16728] workingset_refault_file 2938 [ 392.766107][T16728] swap 41275392 [ 392.770615][T16728] swapcached 66342912 [ 392.774860][T16728] pgpgin 401120 [ 392.777475][T16769] tipc: Enabling of bearer rejected, already enabled [ 392.778894][T16728] pgpgout 390247 [ 392.790556][T16728] pgfault 368194 [ 392.794131][T16728] pgmajfault 422 [ 392.797688][T16728] inactive_anon 12275712 [ 392.802826][T16728] active_anon 32260096 [ 392.806938][T16728] inactive_file 0 [ 392.810810][T16728] active_file 0 [ 392.814362][T16728] unevictable 0 [ 392.818006][T16728] hierarchical_memory_limit 314572800 [ 392.823980][T16728] hierarchical_memsw_limit 9223372036854771712 [ 392.830807][T16728] total_cache 28745728 [ 392.834890][T16728] total_rss 15769600 [ 392.838887][T16728] total_shmem 28745728 [ 392.843015][T16728] total_mapped_file 0 [ 392.847015][T16728] total_dirty 0 [ 392.850742][T16728] total_writeback 0 [ 392.854597][T16728] total_workingset_refault_anon 2716 [ 392.860622][T16728] total_workingset_refault_file 2938 [ 392.865963][T16728] total_swap 41275392 [ 392.870738][T16728] total_swapcached 66342912 [ 392.875271][T16728] total_pgpgin 401120 [ 392.879458][T16728] total_pgpgout 390247 [ 392.883572][T16728] total_pgfault 368195 [ 392.887643][T16728] total_pgmajfault 422 [ 392.892566][T16728] total_inactive_anon 12275712 [ 392.897360][T16728] total_active_anon 32260096 [ 392.902113][T16728] total_inactive_file 0 [ 392.906336][T16728] total_active_file 0 [ 392.910456][T16728] total_unevictable 0 [ 392.914491][T16728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1337,pid=7890,uid=0 [ 392.931115][T16728] Memory cgroup out of memory: Killed process 7890 (syz.3.1337) total-vm:96104kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 393.768989][T16728] syz.3.4228 (16728) used greatest stack depth: 8728 bytes left [ 393.811125][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4249'. [ 393.940178][T16794] netlink: 'syz.3.4251': attribute type 1 has an invalid length. [ 394.011945][T16794] 8021q: adding VLAN 0 to HW filter on device bond8 [ 394.053656][T16804] bond8: (slave veth18): Enslaving as an active interface with a down link [ 394.090791][T16794] netlink: 'syz.3.4251': attribute type 10 has an invalid length. [ 394.129069][T16794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4251'. [ 394.224017][T16811] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.4258'. [ 394.235817][T16808] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.253870][T16808] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.278816][T16808] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 394.438494][T16808] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.449010][T16808] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.474148][T16808] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 394.554808][T16808] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.568052][T16808] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.579069][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4261'. [ 394.595410][T16808] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 394.619166][T16816] tipc: Disabling bearer [ 394.651819][T16808] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.662095][T16808] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.674151][T16808] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 394.702587][T16818] lo speed is unknown, defaulting to 1000 [ 394.717148][ T68] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.725525][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 394.733964][ T68] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.752124][ T68] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.760695][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 394.770806][ T68] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.779139][ T68] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.787443][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 394.796340][ T68] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 394.808938][T16818] hsr0 speed is unknown, defaulting to 1000 [ 394.848739][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.857103][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 394.865571][ T68] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 395.798213][T16840] netlink: 'syz.8.4263': attribute type 16 has an invalid length. [ 395.806086][T16840] netlink: 'syz.8.4263': attribute type 17 has an invalid length. [ 395.879749][T16839] netlink: 'syz.5.4267': attribute type 1 has an invalid length. [ 396.285151][T16840] macsec0: left promiscuous mode [ 396.290849][T16840] macsec0: left allmulticast mode [ 396.295888][T16840] veth1_macvtap: left allmulticast mode [ 396.316805][T16840] team1: left promiscuous mode [ 396.322469][T16840] team1: left allmulticast mode [ 396.333276][T16840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.352065][T16840] bond4: left promiscuous mode [ 396.359966][T16840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.419192][T16840] 8021q: adding VLAN 0 to HW filter on device eth0 [ 396.431477][T16840] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.445334][T16840] 8021q: adding VLAN 0 to HW filter on device eth2 [ 396.457955][T16840] 8021q: adding VLAN 0 to HW filter on device eth3 [ 396.476290][ T3415] gretap1: entered promiscuous mode [ 396.560805][T16844] bridge0: entered promiscuous mode [ 396.573615][T16844] bond18: (slave bridge0): Enslaving as an active interface with an up link [ 396.654235][T16842] bridge7: entered promiscuous mode [ 396.677910][T16842] bond18: (slave bridge7): Enslaving as an active interface with an up link [ 396.936040][T16852] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 396.977483][T16852] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.034803][T16855] bond14: (slave veth15): Enslaving as an active interface with a down link [ 397.096757][T16857] tipc: Enabling of bearer rejected, already enabled [ 397.153787][T16852] bond14: (slave dummy0): making interface the new active one [ 397.212648][T16855] netlink: 'syz.0.4268': attribute type 10 has an invalid length. [ 397.243853][T16852] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 397.268089][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4268'. [ 397.302504][T16855] dummy0: entered promiscuous mode [ 397.314538][T16855] bond14: (slave dummy0): Releasing active interface [ 397.591629][T16880] sit0: Caught tx_queue_len zero misconfig [ 397.677098][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 397.677111][ T28] audit: type=1400 audit(1785852078.822:4313): avc: denied { watch } for pid=16882 comm="syz.3.4282" path="/866/file0" dev="tmpfs" ino=4565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 397.921747][T16889] tipc: Enabling of bearer rejected, already enabled [ 398.322474][ T28] audit: type=1326 audit(1785852079.472:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.351546][T16905] lo speed is unknown, defaulting to 1000 [ 398.369616][ T28] audit: type=1326 audit(1785852079.472:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.459197][T16905] lo speed is unknown, defaulting to 1000 [ 398.469083][ T28] audit: type=1326 audit(1785852079.502:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.482216][T16905] lo speed is unknown, defaulting to 1000 [ 398.502873][ T28] audit: type=1326 audit(1785852079.502:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.502912][ T28] audit: type=1326 audit(1785852079.502:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.503026][ T28] audit: type=1326 audit(1785852079.592:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.503122][ T28] audit: type=1326 audit(1785852079.592:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.503186][ T28] audit: type=1326 audit(1785852079.592:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.503236][ T28] audit: type=1326 audit(1785852079.592:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16895 comm="syz.5.4286" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366837e019 code=0x7ffc0000 [ 398.775361][T16918] netlink: 'syz.0.4291': attribute type 12 has an invalid length. [ 398.796451][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 398.826069][T16918] netlink: 'syz.0.4291': attribute type 12 has an invalid length. [ 398.838186][ T2097] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.846497][ T2097] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.864010][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 398.876152][ T2097] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.894488][ T2097] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.173508][T16905] infiniband sz1: set active [ 399.178524][ T4610] lo speed is unknown, defaulting to 1000 [ 399.184448][T16905] infiniband sz1: added lo [ 399.200417][T16905] RDS/IB: sz1: added [ 399.207178][T16905] smc: adding ib device sz1 with port count 1 [ 399.213512][T16905] smc: ib device sz1 port 1 has no pnetid [ 399.220368][T16905] lo speed is unknown, defaulting to 1000 [ 399.227625][ T4610] lo speed is unknown, defaulting to 1000 [ 399.262218][T16905] lo speed is unknown, defaulting to 1000 [ 399.299632][T16905] lo speed is unknown, defaulting to 1000 [ 399.336822][T16905] lo speed is unknown, defaulting to 1000 [ 399.375207][T16905] lo speed is unknown, defaulting to 1000 [ 399.416070][T16905] lo speed is unknown, defaulting to 1000 [ 399.798764][T16948] 9pnet_fd: Insufficient options for proto=fd [ 399.849623][ T3407] lo speed is unknown, defaulting to 1000 [ 401.187480][T16958] netlink: 'syz.8.4303': attribute type 1 has an invalid length. [ 401.219974][T16958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.268586][T16964] bond6: (slave veth1): Enslaving as an active interface with a down link [ 401.352764][T16955] lo speed is unknown, defaulting to 1000 [ 401.430006][T16958] bond6: (slave dummy0): making interface the new active one [ 401.458952][T16958] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 401.459367][T16964] netlink: 'syz.8.4303': attribute type 10 has an invalid length. [ 401.504216][T16964] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4303'. [ 401.526451][T16964] dummy0: entered promiscuous mode [ 401.535723][T16969] syz.5.4304 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 401.559935][T16964] bond6: (slave dummy0): Releasing active interface [ 401.572218][T16969] CPU: 0 UID: 0 PID: 16969 Comm: syz.5.4304 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 401.572265][T16969] Tainted: [W]=WARN [ 401.572272][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.572285][T16969] Call Trace: [ 401.572291][T16969] [ 401.572301][T16969] __dump_stack+0x1d/0x30 [ 401.572331][T16969] dump_stack_lvl+0x95/0xd0 [ 401.572378][T16969] dump_stack+0x15/0x1b [ 401.572403][T16969] dump_header+0x80/0x240 [ 401.572433][T16969] oom_kill_process+0x295/0x350 [ 401.572531][T16969] out_of_memory+0x981/0xbc0 [ 401.572572][T16969] try_charge_memcg+0x621/0xa00 [ 401.572602][T16969] __memcg_kmem_charge_page+0x199/0x3a0 [ 401.572650][T16969] __alloc_frozen_pages_noprof+0x18a/0x350 [ 401.572694][T16969] alloc_pages_mpol+0xa9/0x1d0 [ 401.572754][T16969] alloc_pages_noprof+0x8f/0x140 [ 401.572798][T16969] alloc_skb_with_frags+0x1c9/0x3d0 [ 401.572845][T16969] sock_alloc_send_pskb+0x44d/0x500 [ 401.572869][T16969] ? __rcu_read_unlock+0x4e/0x70 [ 401.572970][T16969] unix_stream_sendmsg+0x3ff/0xbc0 [ 401.573009][T16969] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 401.573110][T16969] sock_write_iter+0x2c5/0x2f0 [ 401.573139][T16969] ? __pfx_sock_write_iter+0x10/0x10 [ 401.573232][T16969] vfs_write+0x57d/0x990 [ 401.573279][T16969] ksys_write+0xdc/0x1a0 [ 401.573321][T16969] __x64_sys_write+0x40/0x50 [ 401.573396][T16969] x64_sys_call+0x27e1/0x3020 [ 401.573427][T16969] do_syscall_64+0x136/0x3c0 [ 401.573462][T16969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.573485][T16969] RIP: 0033:0x7f366837e019 [ 401.573504][T16969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.573522][T16969] RSP: 002b:00007f3666d95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.573540][T16969] RAX: ffffffffffffffda RBX: 00007f3668606180 RCX: 00007f366837e019 [ 401.573553][T16969] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000003 [ 401.573569][T16969] RBP: 00007f366841500c R08: 0000000000000000 R09: 0000000000000000 [ 401.573587][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.573599][T16969] R13: 00007f3668606218 R14: 00007f3668606180 R15: 00007ffc9520b678 [ 401.573618][T16969] [ 401.575149][T16969] memory: usage 307200kB, limit 307200kB, failcnt 123 [ 401.812818][T16955] hsr0 speed is unknown, defaulting to 1000 [ 401.828165][T16969] memory+swap: usage 211000kB, limit 9007199254740988kB, failcnt 0 [ 401.837536][T16969] kmem: usage 130268kB, limit 9007199254740988kB, failcnt 0 [ 401.845706][T16969] Memory cgroup stats for /syz5: [ 401.845921][T16969] cache 79130624 [ 401.862517][T16969] rss 3342336 [ 401.874662][T16969] shmem 79130624 [ 401.884872][T16969] mapped_file 0 [ 401.892096][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.899963][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4308'. [ 401.909608][T16969] dirty 0 [ 401.912646][T16969] writeback 0 [ 401.917964][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.925543][T16969] workingset_refault_anon 3513 [ 401.930948][T16969] workingset_refault_file 0 [ 401.937474][T16969] swap 0 [ 401.940382][T16969] swapcached 22753280 [ 401.946144][T16969] pgpgin 285393 [ 401.950246][T16969] pgpgout 265256 [ 401.954945][T16969] pgfault 306405 [ 401.958556][T16969] pgmajfault 337 [ 401.962177][T16969] inactive_anon 0 [ 401.966725][T16969] active_anon 82481152 [ 401.971085][T16969] inactive_file 0 [ 401.974743][T16969] active_file 0 [ 401.978845][T16969] unevictable 0 [ 401.982432][T16969] hierarchical_memory_limit 314572800 [ 401.987836][T16969] hierarchical_memsw_limit 9223372036854771712 [ 401.994088][T16969] total_cache 79130624 [ 401.998209][T16969] total_rss 3342336 [ 402.002144][T16969] total_shmem 79130624 [ 402.006253][T16969] total_mapped_file 0 [ 402.010969][T16969] total_dirty 0 [ 402.014489][T16969] total_writeback 0 [ 402.020589][T16969] total_workingset_refault_anon 3513 [ 402.025907][T16969] total_workingset_refault_file 0 [ 402.030985][T16969] total_swap 0 [ 402.034384][T16969] total_swapcached 22753280 [ 402.039873][T16975] veth0_virt_wifi: left promiscuous mode [ 402.051454][T16975] veth1_vlan: left promiscuous mode [ 402.061121][T16975] veth0_vlan: left promiscuous mode [ 402.067665][T16975] veth0_vlan: entered promiscuous mode [ 402.068189][T16969] total_pgpgin 285393 [ 402.081062][T16975] veth1_vlan: entered promiscuous mode [ 402.087728][T16969] total_pgpgout 265256 [ 402.095157][T16975] veth1_macvtap: left promiscuous mode [ 402.097898][T16969] total_pgfault 306405 [ 402.105300][T16975] veth0_macvtap: left promiscuous mode [ 402.112272][T16975] veth0_macvtap: entered promiscuous mode [ 402.115295][T16969] total_pgmajfault 337 [ 402.123199][T16969] total_inactive_anon 0 [ 402.123795][T16975] veth1_macvtap: entered promiscuous mode [ 402.127500][T16969] total_active_anon 82481152 [ 402.137899][T16969] total_inactive_file 0 [ 402.142358][T16969] total_active_file 0 [ 402.146953][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.150951][T16969] total_unevictable 0 [ 402.159211][T16969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4304,pid=16954,uid=0 [ 402.161846][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.175448][T16969] Memory cgroup out of memory: Killed process 16954 (syz.5.4304) total-vm:96368kB, anon-rss:3504kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 402.202140][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.212089][T16975] batman_adv: batadv0: Interface activated: gretap1 [ 402.219965][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.230359][T16975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.242057][T16975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.250689][T16975] gretap3: left promiscuous mode [ 402.257627][T16975] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.289869][T16975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 402.319850][T16975] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.329199][T16975] syzkaller0: left promiscuous mode [ 402.335344][T16975] bond6: left promiscuous mode [ 402.340441][T16975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 402.350512][T16975] bond7: left promiscuous mode [ 402.355397][T16975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.366116][T16975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.378260][T16975] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 402.387038][T16975] 8021q: adding VLAN 0 to HW filter on device bond9 [ 402.399967][T16955] lo speed is unknown, defaulting to 1000 [ 402.487808][T16979] veth9: entered allmulticast mode [ 402.502902][T16985] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4310'. [ 402.520578][T16979] bond7: (slave veth9): Enslaving as an active interface with an up link [ 402.535716][ T4627] syz1: Port: 1 Link ACTIVE [ 402.627763][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4311'. [ 402.652043][T16991] tipc: Resetting bearer [ 402.665660][T16991] tipc: Disabling bearer [ 402.748235][ T30] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.757305][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.775220][ T30] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.807316][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.838161][ T68] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.847499][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.879756][ T2097] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 402.914353][ T2097] bond6: (slave veth9): making interface the new active one [ 402.942215][ T2097] bond6: active interface up! [ 402.968456][ T68] bond9: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 402.988551][ T2097] bond8: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 403.010050][ T2097] bond8: (slave veth11): making interface the new active one [ 403.028753][ T2097] bond8: active interface up! [ 403.049980][ T30] veth0_to_bond: left promiscuous mode [ 403.390237][T17034] rdma_rxe: rxe_newlink: failed to add lo [ 403.803707][T17050] lo speed is unknown, defaulting to 1000 [ 403.883470][T17050] hsr0 speed is unknown, defaulting to 1000 [ 403.890367][T17050] lo speed is unknown, defaulting to 1000 [ 404.343734][T17054] netlink: 'syz.3.4335': attribute type 1 has an invalid length. [ 404.421961][T17054] 8021q: adding VLAN 0 to HW filter on device bond9 [ 404.485390][T17058] bond9: (slave gretap2): making interface the new active one [ 404.495188][T17058] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 404.505804][T17061] tipc: Enabling of bearer rejected, failed to enable media [ 404.518541][T17054] netlink: 'syz.3.4335': attribute type 10 has an invalid length. [ 404.528447][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4335'. [ 404.597697][T17066] xt_CONNSECMARK: invalid mode: 66 [ 404.685039][T17073] tipc: Enabling of bearer rejected, failed to enable media [ 404.817553][T17069] lo speed is unknown, defaulting to 1000 [ 404.954139][T17069] hsr0 speed is unknown, defaulting to 1000 [ 404.961104][T17069] lo speed is unknown, defaulting to 1000 [ 405.136646][T17077] rdma_rxe: rxe_newlink: failed to add lo [ 405.287212][T17089] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4344'. [ 405.396229][T17095] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 407.004068][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 407.004154][ T28] audit: type=1326 audit(1785852088.152:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.057026][T17114] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 407.143013][ T28] audit: type=1326 audit(1785852088.192:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.261627][ T28] audit: type=1326 audit(1785852088.192:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.306419][ T28] audit: type=1326 audit(1785852088.192:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.340535][ T28] audit: type=1326 audit(1785852088.192:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.367913][ T28] audit: type=1326 audit(1785852088.192:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.942333][ T28] audit: type=1326 audit(1785852088.192:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 407.987718][ T28] audit: type=1326 audit(1785852088.192:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 408.044498][ T28] audit: type=1326 audit(1785852088.192:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 408.210404][ T28] audit: type=1326 audit(1785852088.192:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17113 comm="syz.8.4352" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 408.738678][T17132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.761696][T17112] lo speed is unknown, defaulting to 1000 [ 408.863341][T17112] hsr0 speed is unknown, defaulting to 1000 [ 408.870048][T17112] lo speed is unknown, defaulting to 1000 [ 409.311804][T17172] tipc: Enabling of bearer rejected, failed to enable media [ 410.495996][T17224] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4380'. [ 410.536181][T17231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4383'. [ 410.726538][T17243] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4385'. [ 410.737499][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'. [ 410.746458][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'. [ 410.758881][T17243] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4385'. [ 412.936040][T17285] dummy0: left promiscuous mode [ 412.943688][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.955847][T17285] wg2: left promiscuous mode [ 412.975119][T17285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.985729][T17285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.999464][T17285] veth0_virt_wifi: left promiscuous mode [ 413.005617][T17285] veth1_vlan: left promiscuous mode [ 413.011673][T17285] veth0_vlan: left promiscuous mode [ 413.019383][T17285] veth0_vlan: entered promiscuous mode [ 413.026260][T17285] veth1_vlan: entered promiscuous mode [ 413.034757][T17285] veth1_macvtap: left promiscuous mode [ 413.041293][T17285] veth0_macvtap: left promiscuous mode [ 413.047401][T17285] veth0_macvtap: entered promiscuous mode [ 413.054425][T17285] veth1_macvtap: entered promiscuous mode [ 413.060231][T17285] veth1_macvtap: entered allmulticast mode [ 413.066169][T17285] macsec0: left promiscuous mode [ 413.074930][T17285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.087966][T17285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.097286][T17285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.110106][T17285] syzkaller0: left promiscuous mode [ 413.121496][T17285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.132104][T17285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.141313][T17285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.179893][T17293] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4406'. [ 413.194832][T17293] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4406'. [ 413.208448][T17285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 413.218947][T17285] bond8: left promiscuous mode [ 413.224045][T17285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 413.234026][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.243036][T17285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.251931][T17285] 8021q: adding VLAN 0 to HW filter on device bond10 [ 413.261180][T17285] bond11: left promiscuous mode [ 413.266272][T17285] 8021q: adding VLAN 0 to HW filter on device bond11 [ 413.274369][T17285] ip6gre1: left promiscuous mode [ 413.283497][T17285] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 413.295891][T17285] 8021q: adding VLAN 0 to HW filter on device bond12 [ 413.305146][T17285] bond13: left promiscuous mode [ 413.310428][T17285] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.323062][T17285] 8021q: adding VLAN 0 to HW filter on device eth0 [ 413.332038][T17285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 413.341363][T17285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 413.350963][T17285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 413.380020][ T30] nr0: port 1(veth1_virt_wifi) entered blocking state [ 413.386879][ T30] nr0: port 1(veth1_virt_wifi) entered forwarding state [ 413.505155][ T4311] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.506757][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 413.506807][ T28] audit: type=1400 audit(1785852094.412:4452): avc: denied { mount } for pid=17298 comm="syz.3.4409" name="/" dev="rpc_pipefs" ino=49146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 413.516051][ T4311] bond13: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 413.599582][ T4311] bond13: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 413.630419][ T4311] bond13: (slave veth13): making interface the new active one [ 413.649505][ T4311] bond13: active interface up! [ 413.669834][ T4311] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.696082][ T4311] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.714736][ T4311] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.738585][ T2097] bond14: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 413.759654][ T2097] bond14: (slave veth15): making interface the new active one [ 413.775409][ T2097] bond14: active interface up! [ 414.706060][T17342] dummy0: left promiscuous mode [ 414.789117][T17342] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.818703][ T4309] bond6: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 414.836676][ T4309] bond6: (slave veth1): making interface the new active one [ 414.847394][ T4309] bond6: active interface up! [ 414.953016][ T28] audit: type=1400 audit(1785852095.862:4453): avc: denied { write } for pid=17356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.030420][ T28] audit: type=1400 audit(1785852095.932:4454): avc: denied { write } for pid=17381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.134013][T17374] tipc: Enabling of bearer rejected, failed to enable media [ 415.324815][T17376] lo speed is unknown, defaulting to 1000 [ 415.362999][T17406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17406 comm=syz.3.4439 [ 415.414654][T17376] hsr0 speed is unknown, defaulting to 1000 [ 415.421927][T17376] lo speed is unknown, defaulting to 1000 [ 416.098106][T17412] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17412 comm=syz.7.4453 [ 416.223083][T17427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17427 comm=syz.3.4457 [ 416.350266][T17435] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4448'. [ 418.065017][ T28] audit: type=1326 audit(1785852098.972:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.100247][T17453] tipc: Failed to remove unknown binding: 66,0,0/1387555635:2861864916/2861864918 [ 418.119919][ T28] audit: type=1326 audit(1785852099.002:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.119970][T17453] tipc: Failed to remove unknown binding: 66,0,0/1387555635:2861864916/2861864917 [ 418.148071][ T28] audit: type=1326 audit(1785852099.002:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.182227][ T28] audit: type=1326 audit(1785852099.012:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.198602][T17453] tipc: Failed to remove unknown binding: 66,0,0/1387555635:2861864916/2861864918 [ 418.210513][ T28] audit: type=1326 audit(1785852099.012:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.231829][T17453] tipc: Failed to remove unknown binding: 66,0,0/1387555635:2861864916/2861864917 [ 418.246645][ T28] audit: type=1326 audit(1785852099.012:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.336943][T17459] 0: reclassify loop, rule prio 0, protocol 700 [ 418.360758][ T28] audit: type=1326 audit(1785852099.012:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17451 comm="syz.8.4455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313ad2e019 code=0x7ffc0000 [ 418.413349][T17463] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 418.577700][T17476] netlink: 264 bytes leftover after parsing attributes in process `syz.5.4462'. [ 418.621094][T17476] netlink: 264 bytes leftover after parsing attributes in process `syz.5.4462'. [ 418.659016][T17480] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4465'. [ 418.994648][T17487] netlink: 'syz.3.4467': attribute type 10 has an invalid length. [ 419.053538][T17487] bond0: (slave veth0_to_bond): Releasing active interface [ 419.104318][T17487] veth15: entered promiscuous mode [ 419.257349][T17487] veth0_to_bond: entered promiscuous mode [ 419.757263][T17511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.912236][T17516] netlink: 'syz.3.4474': attribute type 16 has an invalid length. [ 419.920163][T17516] netlink: 'syz.3.4474': attribute type 17 has an invalid length. [ 420.014331][T17516] macsec0: left allmulticast mode [ 420.019592][T17516] veth1_macvtap: left allmulticast mode [ 420.062962][T17516] ip6gre1: left allmulticast mode [ 420.111034][T17516] bond7: left allmulticast mode [ 420.116003][T17516] ip6gretap2: left allmulticast mode [ 420.126393][T17516] syzkaller0: left allmulticast mode [ 420.134082][T17516] bond0: left allmulticast mode [ 420.143502][T17516] veth15: left allmulticast mode [ 420.173525][T17516] 8021q: adding VLAN 0 to HW filter on device eth0 [ 420.186779][T17516] 8021q: adding VLAN 0 to HW filter on device eth1 [ 420.199691][T17516] 8021q: adding VLAN 0 to HW filter on device eth2 [ 420.214081][T17516] 8021q: adding VLAN 0 to HW filter on device eth3 [ 420.334301][ T4309] bond8: (slave veth18): link status definitely up, 10000 Mbps full duplex [ 421.361331][ T4309] bond8: (slave veth18): making interface the new active one [ 421.381089][ T4309] bond8: active interface up! [ 421.553370][T17522] lo speed is unknown, defaulting to 1000 [ 421.593085][T17522] hsr0 speed is unknown, defaulting to 1000 [ 421.600189][T17522] lo speed is unknown, defaulting to 1000 [ 421.866235][T17528] netlink: 'syz.5.4490': attribute type 10 has an invalid length. [ 422.340631][T17530] lo speed is unknown, defaulting to 1000 [ 422.383522][T17530] hsr0 speed is unknown, defaulting to 1000 [ 422.390015][T17530] lo speed is unknown, defaulting to 1000 [ 422.941770][T17525] Set syz1 is full, maxelem 65536 reached [ 423.023969][T17545] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4482'. [ 423.037134][T17545] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4482'. [ 423.260067][T17561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.268967][T17561] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4489'. [ 423.310216][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4492'. [ 423.789224][T17582] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 423.807271][T17582] 8021q: adding VLAN 0 to HW filter on device bond15 [ 423.838767][T17582] bond15: (slave veth17): Enslaving as an active interface with a down link [ 423.859737][T17582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 423.875649][T17582] bond15: (slave batadv1): making interface the new active one [ 423.885396][T17582] batadv1: entered promiscuous mode [ 423.891432][T17582] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 423.917409][T17582] bond15 (unregistering): (slave veth17): Releasing active interface [ 423.928788][T17582] bond15 (unregistering): (slave batadv1): Releasing active interface [ 423.938774][T17582] bond15 (unregistering): Released all slaves [ 424.125476][T17594] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 424.322722][T17608] netlink: 'syz.8.4511': attribute type 3 has an invalid length. [ 424.330718][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4511'. [ 425.156512][T17626] lo speed is unknown, defaulting to 1000 [ 425.294007][T17626] hsr0 speed is unknown, defaulting to 1000 [ 425.303836][T17626] lo speed is unknown, defaulting to 1000 [ 425.427044][T17639] bond9: (slave veth0_to_bond): Releasing active interface [ 425.456423][T17639] bond9: (slave veth15): making interface the new active one [ 425.583896][T17639] bond3: (slave veth0_virt_wifi): Releasing active interface [ 425.592801][T17639] bond3: (slave veth3): making interface the new active one [ 425.623022][T17639] batman_adv: batadv0: Interface deactivated: gretap1 [ 425.630552][T17639] batman_adv: batadv0: Removing interface: gretap1 [ 425.785463][T17639] bond1: (slave gretap2): Releasing active interface [ 425.889106][T17639] bond2: (slave gretap3): Releasing active interface [ 425.972917][T17639] bond3: (slave veth3): Releasing active interface [ 426.156420][T17639] bond6: (slave veth9): Releasing active interface [ 426.175164][T17639] bond8: (slave veth11): Releasing active interface [ 426.202296][T17639] bond9: (slave veth15): Releasing active interface [ 426.216077][T17634] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 426.344785][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 426.344800][ T28] audit: type=1400 audit(1785852107.242:4537): avc: denied { write } for pid=17647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.429724][ T28] audit: type=1400 audit(1785852107.322:4538): avc: denied { write } for pid=17665 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.638511][T17678] netlink: 'syz.0.4524': attribute type 16 has an invalid length. [ 426.646546][T17678] netlink: 'syz.0.4524': attribute type 17 has an invalid length. [ 426.704718][T17678] wg2: left allmulticast mode [ 426.777878][T17678] macsec0: left allmulticast mode [ 426.783695][T17678] veth1_macvtap: left allmulticast mode [ 426.832619][T17678] syzkaller0: left allmulticast mode [ 426.916916][T17678] bond11: left allmulticast mode [ 426.927402][T17678] ip6gre1: left allmulticast mode [ 426.950190][T17678] bond13: left allmulticast mode [ 426.958863][T17678] veth13: left allmulticast mode [ 427.005956][T17678] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.447504][T17686] netlink: 'syz.7.4529': attribute type 10 has an invalid length. [ 427.469512][ T28] audit: type=1400 audit(1785852108.362:4539): avc: denied { write } for pid=17671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.555796][T17689] tipc: Enabling of bearer rejected, already enabled [ 427.639964][ T28] audit: type=1400 audit(1785852108.512:4540): avc: denied { write } for pid=17693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.955423][T17717] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 428.004237][T17720] tipc: Enabling of bearer rejected, failed to enable media [ 428.095766][T17728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.169958][ T28] audit: type=1400 audit(1785852109.082:4541): avc: denied { write } for pid=17697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.293524][ T28] audit: type=1400 audit(1785852109.202:4542): avc: denied { write } for pid=17738 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.331845][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4539'. [ 428.396408][T17745] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 428.495710][T17707] rdma_rxe: rxe_newlink: failed to add wg2 [ 428.563344][T17740] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 428.691799][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4540'. [ 428.705878][T17746] netlink: 'syz.0.4540': attribute type 1 has an invalid length. [ 428.936644][T17770] tipc: Enabling of bearer rejected, failed to enable media [ 429.084351][T17761] lo speed is unknown, defaulting to 1000 [ 429.219220][T17761] hsr0 speed is unknown, defaulting to 1000 [ 429.237583][T17761] lo speed is unknown, defaulting to 1000 [ 429.583954][T17788] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4553'. [ 429.597676][T17767] ================================================================== [ 429.605877][T17767] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 429.612849][T17767] [ 429.615194][T17767] read-write to 0xffff88813b7a5964 of 4 bytes by task 17769 on cpu 1: [ 429.623364][T17767] fifo_open+0x89/0x5b0 [ 429.627551][T17767] do_dentry_open+0x49f/0xa60 [ 429.632253][T17767] vfs_open+0x37/0x1e0 [ 429.636354][T17767] path_openat+0x1b39/0x2000 [ 429.640988][T17767] do_file_open+0x259/0x290 [ 429.645555][T17767] file_open_name+0xfa/0x120 [ 429.650180][T17767] __se_sys_acct+0x8c/0x500 [ 429.654729][T17767] __x64_sys_acct+0x1f/0x30 [ 429.659271][T17767] x64_sys_call+0x2e7f/0x3020 [ 429.663985][T17767] do_syscall_64+0x136/0x3c0 [ 429.668646][T17767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.674563][T17767] [ 429.676895][T17767] read to 0xffff88813b7a5964 of 4 bytes by task 17767 on cpu 0: [ 429.684537][T17767] wait_for_partner+0x109/0x1d0 [ 429.689439][T17767] fifo_open+0x491/0x5b0 [ 429.693728][T17767] do_dentry_open+0x49f/0xa60 [ 429.698437][T17767] vfs_open+0x37/0x1e0 [ 429.702541][T17767] path_openat+0x1b39/0x2000 [ 429.707174][T17767] do_file_open+0x16c/0x290 [ 429.711716][T17767] do_sys_openat2+0xa0/0x130 [ 429.716337][T17767] __x64_sys_creat+0x65/0x90 [ 429.720956][T17767] x64_sys_call+0x2ea0/0x3020 [ 429.725658][T17767] do_syscall_64+0x136/0x3c0 [ 429.730264][T17767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.736180][T17767] [ 429.738516][T17767] value changed: 0x00000001 -> 0x00000002 [ 429.744241][T17767] [ 429.746572][T17767] Reported by Kernel Concurrency Sanitizer on: [ 429.752741][T17767] CPU: 0 UID: 0 PID: 17767 Comm: syz.0.4548 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 429.763716][T17767] Tainted: [W]=WARN [ 429.767537][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.777633][T17767] ================================================================== [ 429.790999][T17788] dummy0 (unregistering): left promiscuous mode [ 432.558455][ T4309] veth15: left promiscuous mode