last executing test programs: 2m6.661249333s ago: executing program 4 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10, 0x0, 0x5, 0x3b0}, 0x62}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 2m5.225906759s ago: executing program 4 (id=257): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff0700000500070000000000050026"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m4.700310256s ago: executing program 4 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m4.641365048s ago: executing program 4 (id=266): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r6, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 2m4.551724531s ago: executing program 4 (id=268): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x7b1dc735d166a256) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) 2m4.491325272s ago: executing program 4 (id=269): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m49.366355272s ago: executing program 32 (id=269): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.557408016s ago: executing program 2 (id=1343): socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x61, 0x0, 0x0, 0x0, 0x0, 0x4fce, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc095, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x45, 0x0, 0xfff, 0x0, 0x80000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r2, 0x6) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.543759647s ago: executing program 5 (id=1345): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000100)={[{@numtail}, {@fat=@tz_utc}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@tz_utc}, {@fat=@gid}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@fat=@discard}, {@shortname_mixed}, {@fat=@check_strict}, {@fat=@dmask={'dmask', 0x3d, 0x7}}, {@shortname_lower}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@rodir}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000"/47, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.950693036s ago: executing program 5 (id=1351): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x28) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{}, {0xb5, 0x400, 0x3, 0x400, 0xab, 0x3ff}}}, 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.931881547s ago: executing program 5 (id=1352): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000600)=0x82, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) mlockall(0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) io_submit(0x0, 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) 2.681256795s ago: executing program 1 (id=1353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) pselect6(0x40, &(0x7f0000000040)={0x8, 0x3, 0x4, 0x4, 0x6, 0x7, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shutdown(r0, 0x1) 2.594851038s ago: executing program 2 (id=1354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000fc010000000000000000000000000000fc020000000000000000000000000000000000000000000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCFLSH(r0, 0x8910, 0xffffffffffff7ffe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mq_open(0x0, 0xc1, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000200)=""/123, 0x7b}], 0x1, 0xc0029d, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000180)={0x9, 0xfffffeff}) 2.594615727s ago: executing program 2 (id=1355): io_uring_setup(0x620b, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) sigaltstack(0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.359493235s ago: executing program 1 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.251386058s ago: executing program 1 (id=1360): socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x8a, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4000) 2.239022169s ago: executing program 3 (id=1361): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x60004080) r3 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read(r3, &(0x7f0000000000)=""/28, 0x1c) pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 2.123645022s ago: executing program 5 (id=1363): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) dup(r0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x5, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f000301000000090400000001"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f3, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f00000002c0)={0xd}) sendto$inet6(r1, 0x0, 0x0, 0x44004, 0x0, 0x0) 1.994856667s ago: executing program 0 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r2) ioprio_set$uid(0x3, 0x0, 0x4004) shmctl$IPC_SET(0x0, 0x1, 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [], {0x4, 0x7}, [], {0x10, 0x1}}, 0x24, 0x2) 1.708451485s ago: executing program 2 (id=1365): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0xa4b4, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x8926, 0x16, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.620154648s ago: executing program 0 (id=1366): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x40004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 1.608508019s ago: executing program 2 (id=1367): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r2 = io_uring_setup(0x1683, &(0x7f0000000200)={0x0, 0x6f5d, 0x100, 0x1, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.602268149s ago: executing program 1 (id=1368): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) readlink(0x0, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40c40, &(0x7f0000000100)={@align=0xb7d2, {0x1ff, 0x8, 0x3, 0x1000}}, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x400}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, &(0x7f0000000280)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) io_setup(0x20fe, &(0x7f0000000540)) 1.57512492s ago: executing program 0 (id=1369): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xd00, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4000}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x3e}, @call={0x85, 0x0, 0x0, 0x9c}], &(0x7f0000000040)='GPL\x00', 0x9b, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x1, 0xb, 0x6, 0x3a85}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x3, 0x3, 0xc, 0x3}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x4b) setreuid(0x0, r1) pipe2(0x0, 0x10080) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, r1, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x10}, 0x9, 0xcc24, 0xfffffffffffff0cb, 0x2, 0x0, 0x0, 0x42}) 1.539932571s ago: executing program 1 (id=1370): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffe) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x8a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) flock(r1, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) 1.482939562s ago: executing program 5 (id=1371): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.482691012s ago: executing program 0 (id=1372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000780)={[{@journal_checksum}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@bsdgroups}]}, 0x0, 0x60b, &(0x7f0000000140)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x8c0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 1.356644397s ago: executing program 3 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x189400fd, 0x0, 0x0, 0x0, 0x172}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000700)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x4a3c, 0xffffffffffffffff, 0x0, &(0x7f0000000800), 0x0, 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) 989.697409ms ago: executing program 3 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1e, &(0x7f0000000200)=0x10000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400001, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x53881400, 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 479.926174ms ago: executing program 0 (id=1375): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07e05606000043fe0000140600000ee60000bf050000000000006e6500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35003d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a406c5119761d5aabb51c5175461f8b0aa7265c380317f08775d8a8a8bda64ada2c6b3599f548d6272937e4d89ef6ebcecf84fa856024b55dd057056bbae005f0fba858f3abdd9c115064000000000000000000070b0bb28fd1eca97a90864863235d415379d1bdb3d35015f85be2ae802455d3b079f12aa837996ca1ce7280cb394b4c13ca623c30b19887d41eab495f698284a1bc17ff100000000000000000000dac089bdf7984e3300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8004b707, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 364.350588ms ago: executing program 1 (id=1376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x7, 0x7}, 0x8) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000500)=""/26, &(0x7f0000000080)=0x1a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 364.098408ms ago: executing program 5 (id=1377): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usbip_server_init(0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x567, &(0x7f0000000540)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_open_dev$tty1(0xc, 0x4, 0x1) 363.672048ms ago: executing program 0 (id=1378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900"], 0xcc}}, 0x0) 354.312689ms ago: executing program 2 (id=1379): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 104.987926ms ago: executing program 3 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[], 0x14) 6.91258ms ago: executing program 3 (id=1381): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 0s ago: executing program 3 (id=1382): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) fcntl$setstatus(r3, 0x4, 0x40800) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) kernel console output (not intermixed with test programs): on dev loop1, logical block 70, lost async page write [ 93.771249][ T5288] syz.1.521: attempt to access beyond end of device [ 93.771249][ T5288] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 93.786220][ T5288] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 93.796984][ T5328] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 93.858006][ T5288] syz.1.521: attempt to access beyond end of device [ 93.858006][ T5288] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 93.884458][ T5288] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 93.887015][ T5328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 93.911775][ T5331] bond4: (slave veth0_to_bond): making interface the new active one [ 93.921332][ T5331] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 93.951446][ T5328] bond4: entered promiscuous mode [ 93.956599][ T5328] veth0_to_bond: entered promiscuous mode [ 93.963101][ T5328] bond4: entered allmulticast mode [ 93.968592][ T5328] veth0_to_bond: entered allmulticast mode [ 93.994452][ T5328] macvlan2: entered promiscuous mode [ 94.000265][ T5328] macvlan2: entered allmulticast mode [ 94.006472][ T5328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.017969][ T5328] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 94.091841][ T5349] syzkaller0: entered promiscuous mode [ 94.097391][ T5349] syzkaller0: entered allmulticast mode [ 94.112990][ T5351] netlink: 'syz.3.537': attribute type 4 has an invalid length. [ 94.122422][ T5351] netlink: 'syz.3.537': attribute type 4 has an invalid length. [ 94.140529][ T5353] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 94.163858][ T5353] bond5: (slave bridge1): making interface the new active one [ 94.172567][ T5353] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 94.186482][ T5353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.538'. [ 94.196229][ T5353] bond5: entered promiscuous mode [ 94.201412][ T5353] bridge1: entered promiscuous mode [ 94.208664][ T5353] bond5: entered allmulticast mode [ 94.214557][ T5353] bridge1: entered allmulticast mode [ 94.220765][ T5353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.362439][ T5370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 94.380339][ T5370] vlan4: entered promiscuous mode [ 94.385896][ T5370] geneve1: entered promiscuous mode [ 94.393712][ T5370] vlan4: entered allmulticast mode [ 94.399753][ T5370] geneve1: entered allmulticast mode [ 95.143138][ T5401] Invalid argument reading file caps for ./file0 [ 95.190773][ T5405] syzkaller0: entered promiscuous mode [ 95.196363][ T5405] syzkaller0: entered allmulticast mode [ 95.406092][ T28] audit: type=1400 audit(4147483706.412:779): avc: denied { ioctl } for pid=5407 comm="syz.1.557" path="socket:[10068]" dev="sockfs" ino=10068 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.467462][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 95.487097][ T5414] bond2 (unregistering): Released all slaves [ 95.525344][ T5412] syzkaller0: entered promiscuous mode [ 95.532155][ T5412] syzkaller0: entered allmulticast mode [ 95.813003][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.833770][ T5432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.834115][ T28] audit: type=1400 audit(4147483706.832:780): avc: denied { wake_alarm } for pid=5435 comm="syz.1.568" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.863058][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.870626][ T5432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.891061][ T5430] xfrm0 speed is unknown, defaulting to 1000 [ 96.045817][ T5449] loop1: detected capacity change from 0 to 512 [ 96.065495][ T5449] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.573: missing EA_INODE flag [ 96.097441][ T5449] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 96.097565][ T5449] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.573: error while reading EA inode 12 err=-117 [ 96.106829][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.106860][ C1] EXT4-fs (loop1): initial error at time 4147483707: ext4_xattr_inode_iget:441: inode 12 [ 96.106925][ C1] EXT4-fs (loop1): last error at time 4147483707: ext4_xattr_inode_iget:441: inode 12 [ 96.155174][ T5449] loop1: lost filesystem error report for type 5 error -117 [ 96.155359][ T5449] EXT4-fs (loop1): 1 orphan inode deleted [ 96.179659][ T5449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.238330][ T28] audit: type=1400 audit(4147483707.242:781): avc: denied { write } for pid=5448 comm="syz.1.573" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.281571][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.388023][ T5472] loop1: detected capacity change from 0 to 128 [ 96.424925][ T5472] vfat filesystem being mounted at /106/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 96.669946][ T28] audit: type=1400 audit(4147483707.672:782): avc: denied { nlmsg_read } for pid=5484 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.766202][ T5488] loop1: detected capacity change from 0 to 512 [ 96.783851][ T5488] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 96.984167][ T5494] xfrm0 speed is unknown, defaulting to 1000 [ 97.507752][ T5508] xfrm0 speed is unknown, defaulting to 1000 [ 98.269898][ T5511] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.385683][ T5511] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.460254][ T5519] netlink: 'syz.0.596': attribute type 39 has an invalid length. [ 98.474038][ T5520] tipc: Cannot configure node identity twice [ 98.501785][ T5511] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.554561][ T28] audit: type=1400 audit(4147483709.562:783): avc: denied { cmd } for pid=5523 comm="syz.2.598" path="socket:[10915]" dev="sockfs" ino=10915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.603637][ T5511] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.732780][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.761755][ T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.826798][ T4540] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.842278][ T28] audit: type=1400 audit(4147483709.852:784): avc: denied { watch watch_reads } for pid=5532 comm="syz.0.601" path="/" dev="ramfs" ino=11043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 98.893819][ T4540] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.913697][ T28] audit: type=1400 audit(4147483709.882:785): avc: denied { execute } for pid=5532 comm="syz.0.601" name="file1" dev="ramfs" ino=11044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 98.958893][ T28] audit: type=1400 audit(4147483709.882:786): avc: denied { execute_no_trans } for pid=5532 comm="syz.0.601" path="/file1" dev="ramfs" ino=11044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 98.987526][ T28] audit: type=1400 audit(4147483709.992:787): avc: denied { write } for pid=5535 comm="syz.0.602" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.066640][ T5540] xfrm0 speed is unknown, defaulting to 1000 [ 99.111328][ T28] audit: type=1400 audit(4147483710.122:788): avc: denied { write } for pid=5539 comm="syz.5.605" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.136350][ T5544] program syz.5.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.147540][ T5544] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 99.159564][ T28] audit: type=1400 audit(4147483710.142:789): avc: denied { mount } for pid=5539 comm="syz.5.605" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 99.456194][ T5552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.609'. [ 99.755521][ T5568] loop1: detected capacity change from 0 to 128 [ 99.762395][ T28] audit: type=1400 audit(4147483710.772:790): avc: denied { create } for pid=5563 comm="syz.3.614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.824052][ T5568] vfat filesystem being mounted at /114/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 99.866531][ T28] audit: type=1400 audit(4147483710.832:791): avc: denied { unlink } for pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.032727][ T5579] netlink: 'syz.3.620': attribute type 17 has an invalid length. [ 100.087791][ T5558] syz.1.611: attempt to access beyond end of device [ 100.087791][ T5558] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 100.143199][ T5558] syz.1.611: attempt to access beyond end of device [ 100.143199][ T5558] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 100.170996][ T5558] syz.1.611: attempt to access beyond end of device [ 100.170996][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.210114][ T5558] syz.1.611: attempt to access beyond end of device [ 100.210114][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.225620][ T5558] syz.1.611: attempt to access beyond end of device [ 100.225620][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.252010][ T5558] syz.1.611: attempt to access beyond end of device [ 100.252010][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.277212][ T5558] syz.1.611: attempt to access beyond end of device [ 100.277212][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.303052][ T5558] syz.1.611: attempt to access beyond end of device [ 100.303052][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.328408][ T5558] syz.1.611: attempt to access beyond end of device [ 100.328408][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.353936][ T5558] syz.1.611: attempt to access beyond end of device [ 100.353936][ T5558] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.366954][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.373198][ T5579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.443908][ T5579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.470140][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.486573][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 100.520255][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 100.558962][ T4542] bond1: (slave bridge1): link status up again after 0 ms [ 100.576576][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 100.654171][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.677604][ T5584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.678850][ T5586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.622'. [ 100.703032][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 100.727771][ T5584] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.830496][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 100.865108][ T5591] xfrm0 speed is unknown, defaulting to 1000 [ 101.030493][ T5594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5594 comm=syz.1.632 [ 101.043441][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 101.172857][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 101.326569][ T5615] loop1: detected capacity change from 0 to 512 [ 101.410284][ T5615] msdos filesystem being mounted at /116/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 102.446999][ T5640] syz_tun: entered allmulticast mode [ 102.465203][ T5639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.635'. [ 102.525161][ T5643] xfrm0 speed is unknown, defaulting to 1000 [ 102.701022][ T5646] raw_sendmsg: syz.2.639 forgot to set AF_INET. Fix it! [ 103.140025][ T28] audit: type=1400 audit(4147483714.152:792): avc: denied { ioctl } for pid=5666 comm="syz.5.649" path="socket:[11458]" dev="sockfs" ino=11458 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.221546][ T5672] xfrm0 speed is unknown, defaulting to 1000 [ 104.203098][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 104.273612][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 104.294320][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 104.320237][ T5696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.659'. [ 104.424962][ T5698] batadv0: entered promiscuous mode [ 104.438298][ T5698] macvlan2: entered allmulticast mode [ 104.465607][ T5698] batadv0: entered allmulticast mode [ 104.477017][ T5698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.507512][ T5698] batadv0: left allmulticast mode [ 104.514497][ T5698] batadv0: left promiscuous mode [ 105.019560][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 105.019574][ T28] audit: type=1400 audit(4147483716.022:794): avc: denied { create } for pid=5721 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.046151][ T28] audit: type=1400 audit(4147483716.022:795): avc: denied { connect } for pid=5721 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.065791][ T28] audit: type=1400 audit(4147483716.022:796): avc: denied { bind } for pid=5721 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 105.104014][ T28] audit: type=1400 audit(4147483716.092:797): avc: denied { ioctl } for pid=5726 comm="syz.3.668" path="socket:[12375]" dev="sockfs" ino=12375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.104802][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.668'. [ 105.411626][ T4554] net_ratelimit: 30 callbacks suppressed [ 105.411718][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 105.549945][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 105.678875][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 105.789078][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 105.958855][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 106.018507][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 106.046247][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 106.068891][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 106.085236][ T5743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 106.126304][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 106.217732][ T5752] batadv0: entered promiscuous mode [ 106.231140][ T5746] loop1: detected capacity change from 0 to 2048 [ 106.242564][ T5752] macvlan2: entered allmulticast mode [ 106.250174][ T5752] batadv0: entered allmulticast mode [ 106.273175][ T5752] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.327408][ T5752] batadv0: left allmulticast mode [ 106.332467][ T5752] batadv0: left promiscuous mode [ 106.390640][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 106.432167][ T5756] bond2: entered promiscuous mode [ 106.437731][ T5756] bond2: entered allmulticast mode [ 106.451342][ T5746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.490396][ T5755] xfrm0 speed is unknown, defaulting to 1000 [ 106.510450][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 106.629365][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 106.780336][ T28] audit: type=1400 audit(4147483717.792:798): avc: denied { remount } for pid=5773 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.803441][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 106.825773][ T5779] xfrm0 speed is unknown, defaulting to 1000 [ 107.842061][ T5798] batadv0: entered promiscuous mode [ 107.847570][ T5798] macvlan0: entered allmulticast mode [ 107.853057][ T5798] batadv0: entered allmulticast mode [ 107.950216][ T5798] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 107.967349][ T5798] batadv0: left allmulticast mode [ 107.972475][ T5798] batadv0: left promiscuous mode [ 108.419680][ T5817] xfrm0 speed is unknown, defaulting to 1000 [ 108.441316][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 108.830718][ T5827] xfrm0 speed is unknown, defaulting to 1000 [ 108.840250][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.296939][ T5864] netlink: 'syz.1.721': attribute type 4 has an invalid length. [ 110.331493][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 110.509270][ T4544] net_ratelimit: 30 callbacks suppressed [ 110.509294][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 110.638882][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 110.748864][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 110.859063][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 110.878379][ T5877] geneve2: entered promiscuous mode [ 110.885104][ T5877] geneve2: entered allmulticast mode [ 110.978929][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 111.109308][ T4544] bond1: (slave bridge1): failed to get link speed/duplex [ 111.708624][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 111.819467][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 111.948997][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 111.993109][ T5915] xfrm0 speed is unknown, defaulting to 1000 [ 112.105338][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 112.773572][ T5929] syzkaller0: entered promiscuous mode [ 112.781050][ T5929] syzkaller0: entered allmulticast mode [ 112.799168][ T5930] geneve2: entered promiscuous mode [ 112.859893][ T5930] geneve2: entered allmulticast mode [ 113.721023][ T5940] syz.2.746 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 113.734955][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.2.746 Not tainted syzkaller #0 PREEMPT(full) [ 113.734971][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.734984][ T5940] Call Trace: [ 113.734989][ T5940] [ 113.734995][ T5940] __dump_stack+0x1d/0x30 [ 113.735011][ T5940] dump_stack_lvl+0x95/0xd0 [ 113.735023][ T5940] dump_stack+0x15/0x1b [ 113.735055][ T5940] dump_header+0x80/0x240 [ 113.735104][ T5940] oom_kill_process+0x295/0x350 [ 113.735122][ T5940] out_of_memory+0x97d/0xb80 [ 113.735157][ T5940] try_charge_memcg+0x62f/0xa10 [ 113.735178][ T5940] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 113.735192][ T5940] __alloc_frozen_pages_noprof+0x18a/0x350 [ 113.735239][ T5940] alloc_pages_mpol+0xb3/0x260 [ 113.735253][ T5940] alloc_pages_noprof+0x8f/0x140 [ 113.735266][ T5940] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 113.735286][ T5940] __kvmalloc_node_noprof+0x3d4/0x640 [ 113.735298][ T5940] ? futex_hash_allocate+0x190/0x9a0 [ 113.735331][ T5940] ? futex_hash_allocate+0x190/0x9a0 [ 113.735349][ T5940] futex_hash_allocate+0x190/0x9a0 [ 113.735453][ T5940] ? cap_task_prctl+0x13f/0x6b0 [ 113.735492][ T5940] futex_hash_prctl+0xd8/0xf0 [ 113.735510][ T5940] __se_sys_prctl+0x4f4/0x1400 [ 113.735526][ T5940] __x64_sys_prctl+0x67/0x80 [ 113.735546][ T5940] x64_sys_call+0x2533/0x3020 [ 113.735561][ T5940] do_syscall_64+0x12c/0x3b0 [ 113.735598][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.735612][ T5940] RIP: 0033:0x7fb85db2ce59 [ 113.735624][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.735634][ T5940] RSP: 002b:00007fb85c545028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 113.735648][ T5940] RAX: ffffffffffffffda RBX: 00007fb85dda6180 RCX: 00007fb85db2ce59 [ 113.735737][ T5940] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 113.735744][ T5940] RBP: 00007fb85dbc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 113.735766][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.735773][ T5940] R13: 00007fb85dda6218 R14: 00007fb85dda6180 R15: 00007ffc5b6b8ad8 [ 113.735784][ T5940] [ 113.735788][ T5940] memory: usage 307200kB, limit 307200kB, failcnt 241 [ 113.957619][ T5940] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 113.966103][ T5940] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 113.973418][ T5940] Memory cgroup stats for /syz2: [ 113.973688][ T5940] cache 4096 [ 113.981816][ T5940] rss 4096 [ 113.984893][ T5940] shmem 0 [ 113.987805][ T5940] mapped_file 4096 [ 113.991577][ T5940] dirty 0 [ 113.994508][ T5940] writeback 0 [ 113.997912][ T5940] workingset_refault_anon 131 [ 114.002610][ T5940] workingset_refault_file 1730 [ 114.007366][ T5940] swap 208896 [ 114.010667][ T5940] swapcached 7438336 [ 114.014546][ T5940] pgpgin 111444 [ 114.018043][ T5940] pgpgout 111442 [ 114.021750][ T5940] pgfault 90967 [ 114.025262][ T5940] pgmajfault 74 [ 114.028722][ T5940] inactive_anon 4096 [ 114.032641][ T5940] active_anon 0 [ 114.036088][ T5940] inactive_file 4096 [ 114.040196][ T5940] active_file 0 [ 114.043672][ T5940] unevictable 0 [ 114.047123][ T5940] hierarchical_memory_limit 314572800 [ 114.052829][ T5940] hierarchical_memsw_limit 9223372036854771712 [ 114.059242][ T5940] total_cache 4096 [ 114.063304][ T5940] total_rss 4096 [ 114.067045][ T5940] total_shmem 0 [ 114.074011][ T5940] total_mapped_file 4096 [ 114.078487][ T5940] total_dirty 0 [ 114.084216][ T5940] total_writeback 0 [ 114.089248][ T5940] total_workingset_refault_anon 131 [ 114.094660][ T5940] total_workingset_refault_file 1730 [ 114.100245][ T5940] total_swap 208896 [ 114.104393][ T5940] total_swapcached 7438336 [ 114.109080][ T5940] total_pgpgin 111444 [ 114.113068][ T5940] total_pgpgout 111442 [ 114.117132][ T5940] total_pgfault 90967 [ 114.121567][ T5940] total_pgmajfault 74 [ 114.125856][ T5940] total_inactive_anon 4096 [ 114.130474][ T5940] total_active_anon 0 [ 114.134516][ T5940] total_inactive_file 4096 [ 114.139126][ T5940] total_active_file 0 [ 114.143125][ T5940] total_unevictable 0 [ 114.146554][ T5954] loop1: detected capacity change from 0 to 512 [ 114.147090][ T5940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.746,pid=5934,uid=0 [ 114.168656][ T5940] Memory cgroup out of memory: Killed process 5934 (syz.2.746) total-vm:96348kB, anon-rss:1232kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 114.186724][ T5954] ext4: Unknown parameter 'nouser_xattr' [ 114.252135][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 114.300920][ T5959] vlan5: entered promiscuous mode [ 114.313066][ T5959] bond0: entered promiscuous mode [ 114.326589][ T5959] bond_slave_0: entered promiscuous mode [ 114.336405][ T5959] bond_slave_1: entered promiscuous mode [ 114.514893][ T5963] tipc: Failed to remove unknown binding: 66,0,0/0:3974178801/3974178802 [ 114.524028][ T5963] tipc: Failed to remove unknown binding: 66,0,0/0:3974178801/3974178802 [ 114.609512][ T5965] loop1: detected capacity change from 0 to 256 [ 114.643691][ T5965] msdos filesystem being mounted at /133/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 114.950624][ T5974] loop1: detected capacity change from 0 to 512 [ 115.092691][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.151174][ T5974] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.565025][ T4548] net_ratelimit: 27 callbacks suppressed [ 115.565042][ T4548] bond1: (slave bridge1): failed to get link speed/duplex [ 115.680332][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 115.808892][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 115.865719][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.011365][ T5992] IPVS: Unknown mcast interface: vcan0 [ 116.078897][ T4548] bond1: (slave bridge1): failed to get link speed/duplex [ 117.020763][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 117.092817][ T6002] xfrm0 speed is unknown, defaulting to 1000 [ 117.181316][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 117.671769][ T4548] bond1: (slave bridge1): failed to get link speed/duplex [ 117.820788][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 117.934978][ T6002] loop1: detected capacity change from 0 to 2048 [ 117.950224][ T4540] bond1: (slave bridge1): failed to get link speed/duplex [ 117.997627][ T6002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.069823][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 118.805750][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 118.826505][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 118.864350][ T6056] xfrm0 speed is unknown, defaulting to 1000 [ 119.405160][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.463228][ T28] audit: type=1326 audit(4147483730.472:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.498242][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 119.524435][ T28] audit: type=1326 audit(4147483730.472:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.586079][ T28] audit: type=1326 audit(4147483730.472:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.609060][ T6130] xfrm0 speed is unknown, defaulting to 1000 [ 119.650257][ T28] audit: type=1326 audit(4147483730.472:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.714679][ T28] audit: type=1326 audit(4147483730.472:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.792529][ T28] audit: type=1326 audit(4147483730.482:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.870884][ T28] audit: type=1326 audit(4147483730.482:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.927913][ T28] audit: type=1326 audit(4147483730.482:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.954701][ T28] audit: type=1326 audit(4147483730.482:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 119.981399][ T28] audit: type=1326 audit(4147483730.482:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6118 comm="syz.5.781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 120.306664][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 120.603171][ T6159] xfrm0 speed is unknown, defaulting to 1000 [ 120.609281][ T4528] net_ratelimit: 21 callbacks suppressed [ 120.609297][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 120.758262][ T6155] netlink: 84 bytes leftover after parsing attributes in process `syz.2.793'. [ 120.769817][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 120.889302][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 121.019550][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 121.128972][ T4526] bond1: (slave bridge1): failed to get link speed/duplex [ 121.278897][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 121.494133][ T4555] bond1: (slave bridge1): failed to get link speed/duplex [ 121.643506][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 122.222712][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 122.769396][ T4536] bond1: (slave bridge1): failed to get link speed/duplex [ 122.844551][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 122.870211][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'. [ 122.898306][ T6242] netlink: 75 bytes leftover after parsing attributes in process `syz.2.803'. [ 123.029959][ T6245] xfrm0 speed is unknown, defaulting to 1000 [ 124.092312][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 124.182894][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.809'. [ 124.187203][ T6263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6263 comm=syz.2.820 [ 124.274077][ T6263] veth5: entered allmulticast mode [ 124.287391][ T6263] bond3: (slave veth5): Enslaving as an active interface with an up link [ 124.302474][ T6267] bond3 (unregistering): (slave veth5): Releasing backup interface [ 124.313348][ T6267] bond3 (unregistering): Released all slaves [ 124.377986][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 124.407449][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'. [ 124.427336][ T6285] syz_tun: entered promiscuous mode [ 124.432847][ T6285] macsec1: entered allmulticast mode [ 124.438311][ T6285] syz_tun: entered allmulticast mode [ 124.445314][ T6285] syz_tun: left allmulticast mode [ 124.450672][ T6285] syz_tun: left promiscuous mode [ 125.192731][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 125.231260][ T6313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6313 comm=syz.0.827 [ 125.393950][ T6315] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 125.541516][ T6329] loop1: detected capacity change from 0 to 512 [ 125.557840][ T6329] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.828: inode has both inline data and extents flags [ 125.590867][ T6329] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.591052][ T6329] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.828: couldn't read orphan inode 15 (err -117) [ 125.600229][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.600249][ C1] EXT4-fs (loop1): initial error at time 4147483736: ext4_orphan_get:1397: inode 15 [ 125.600292][ C1] EXT4-fs (loop1): last error at time 4147483736: ext4_orphan_get:1397: inode 15 [ 125.655957][ T6329] loop1: lost filesystem error report for type 5 error -117 [ 125.657512][ T6329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.690896][ T6326] netlink: 'syz.1.828': attribute type 12 has an invalid length. [ 125.718055][ T6326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.828'. [ 125.770274][ T3436] net_ratelimit: 22 callbacks suppressed [ 125.770290][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 125.877645][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.899445][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 126.008913][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 126.146141][ T6342] batadv1: entered promiscuous mode [ 126.188840][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 126.299548][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 126.324440][ T6349] loop1: detected capacity change from 0 to 128 [ 126.332474][ T6349] vfat filesystem being mounted at /148/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 126.353034][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 126.353049][ T28] audit: type=1400 audit(4147483737.362:848): avc: denied { write } for pid=6347 comm="syz.1.837" name="igmp" dev="proc" ino=4026532454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 126.429469][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 126.497309][ T6349] bio_check_eod: 1421 callbacks suppressed [ 126.497327][ T6349] syz.1.837: attempt to access beyond end of device [ 126.497327][ T6349] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 126.518317][ T6349] syz.1.837: attempt to access beyond end of device [ 126.518317][ T6349] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 126.533184][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 126.542770][ T6349] syz.1.837: attempt to access beyond end of device [ 126.542770][ T6349] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 126.557390][ T6349] syz.1.837: attempt to access beyond end of device [ 126.557390][ T6349] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 126.578398][ T6361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.595403][ T6349] syz.1.837: attempt to access beyond end of device [ 126.595403][ T6349] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 126.610864][ T6361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.631743][ T6349] syz.1.837: attempt to access beyond end of device [ 126.631743][ T6349] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 126.648564][ T6349] syz.1.837: attempt to access beyond end of device [ 126.648564][ T6349] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 126.649386][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 126.663762][ T6349] syz.1.837: attempt to access beyond end of device [ 126.663762][ T6349] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 126.702285][ T6349] syz.1.837: attempt to access beyond end of device [ 126.702285][ T6349] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 126.718700][ T6349] syz.1.837: attempt to access beyond end of device [ 126.718700][ T6349] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 126.734326][ T6361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.745254][ T6361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.819083][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 126.829547][ T6361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.848896][ T6361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.906540][ T6368] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 126.915894][ T6361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.941194][ T6361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.989464][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 127.033628][ T3436] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.048434][ T3436] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.081972][ T3436] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.091964][ T3436] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.106669][ T3436] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.123178][ T3436] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.148979][ T3436] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.174021][ T3436] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.561545][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 127.589318][ T6384] gretap0: entered promiscuous mode [ 127.596429][ T6384] macvlan2: entered allmulticast mode [ 127.607459][ T6384] gretap0: entered allmulticast mode [ 127.791283][ T6397] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 127.836766][ T6397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.933915][ T6397] bond2: (slave veth3): Enslaving as an active interface with a down link [ 127.993402][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.014884][ T6397] bond2: (slave batadv1): making interface the new active one [ 128.034277][ T6397] batadv1: entered promiscuous mode [ 128.050715][ T6397] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 128.084233][ T6400] bond2 (unregistering): (slave veth3): Releasing active interface [ 128.141253][ T6400] bond2 (unregistering): (slave batadv1): Releasing active interface [ 128.160059][ T6400] bond2 (unregistering): Released all slaves [ 128.622619][ T6416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.790766][ T6416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.814030][ T6422] futex_wake_op: syz.5.863 tries to shift op by 36; fix this program [ 129.053551][ T6416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.147364][ T6416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.249828][ T4536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.261179][ T4536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.286301][ T4536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.294501][ T4536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.792678][ T28] audit: type=1326 audit(4147483740.792:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 129.819171][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 129.853551][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 129.878392][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 129.891180][ T28] audit: type=1326 audit(4147483740.792:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 129.926394][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 129.987656][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.021540][ T28] audit: type=1326 audit(4147483740.792:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.120560][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.143263][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.169039][ T28] audit: type=1326 audit(4147483740.792:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.194576][ T28] audit: type=1326 audit(4147483740.792:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.247516][ T28] audit: type=1326 audit(4147483740.802:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.277016][ T28] audit: type=1326 audit(4147483740.802:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.290357][ T6434] __nla_validate_parse: 10 callbacks suppressed [ 130.290391][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.303309][ T28] audit: type=1326 audit(4147483740.832:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.303335][ T28] audit: type=1326 audit(4147483740.832:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283c37ce59 code=0x7ffc0000 [ 130.372510][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.391707][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.402075][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.429802][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.431087][ T6443] netlink: 'syz.5.869': attribute type 1 has an invalid length. [ 130.446570][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.457981][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.469371][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.479173][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.486593][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.500545][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.510379][ T6434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'. [ 130.547425][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.558512][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.762402][ T6434] gretap0: left allmulticast mode [ 130.791126][ T6440] syz_tun: entered promiscuous mode [ 130.801049][ T6440] macsec1: entered allmulticast mode [ 130.823770][ T6440] syz_tun: left promiscuous mode [ 131.058838][ T3436] net_ratelimit: 18 callbacks suppressed [ 131.058855][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 131.077114][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.094934][ T6447] bond1: (slave veth3): Enslaving as an active interface with a down link [ 131.110876][ T6446] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 131.174993][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.183576][ T6449] bond1: (slave batadv0): making interface the new active one [ 131.192118][ T6449] batadv0: entered promiscuous mode [ 131.197498][ T6449] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 131.206229][ T6450] netlink: 'syz.3.881': attribute type 12 has an invalid length. [ 131.215225][ T3390] xfrm0 speed is unknown, defaulting to 1000 [ 131.221303][ T3390] syz0: Port: 1 Link DOWN [ 131.225718][ T3390] xfrm0 speed is unknown, defaulting to 1000 [ 131.231989][ T4530] bond1: (slave bridge1): failed to get link speed/duplex [ 131.244212][ T6455] bond1 (unregistering): (slave veth3): Releasing active interface [ 131.256946][ T6455] bond1 (unregistering): (slave batadv0): Releasing active interface [ 131.267810][ T6455] bond1 (unregistering): Released all slaves [ 131.277154][ T54] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.285583][ T54] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.294136][ T54] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.302655][ T54] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.312710][ T54] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.321221][ T54] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.329908][ T54] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.339682][ T54] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.349023][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 131.506281][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 131.646090][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 131.758917][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 131.928900][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 132.089008][ T4530] bond1: (slave bridge1): failed to get link speed/duplex [ 132.130034][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 132.130048][ T28] audit: type=1400 audit(4147483743.142:922): avc: denied { mounton } for pid=6483 comm="syz.2.879" path="/197/bus" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.208867][ T4530] bond1: (slave bridge1): failed to get link speed/duplex [ 132.341785][ T6495] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 132.417451][ T6491] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 132.614631][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 132.632171][ T6496] netlink: 'syz.5.883': attribute type 12 has an invalid length. [ 132.662770][ T6495] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.725645][ T6497] bond3: (slave veth11): Enslaving as an active interface with a down link [ 132.767651][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.807090][ T6501] bond3: (slave batadv1): making interface the new active one [ 132.837157][ T6501] batadv1: entered promiscuous mode [ 132.854424][ T6501] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 132.916350][ T6506] bond3 (unregistering): (slave veth11): Releasing active interface [ 132.970279][ T6506] bond3 (unregistering): (slave batadv1): Releasing active interface [ 132.987936][ T6506] bond3 (unregistering): Released all slaves [ 133.668613][ T6525] loop1: detected capacity change from 0 to 1024 [ 133.697434][ T6525] EXT4-fs: Mount option(s) incompatible with ext3 [ 133.883489][ T6525] loop1: detected capacity change from 0 to 512 [ 134.651641][ T6525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.689338][ T6525] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.856914][ T6560] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 135.198424][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.656051][ T6574] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 135.672235][ T6577] loop1: detected capacity change from 0 to 128 [ 135.676032][ T6574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.680690][ T6577] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.708144][ T6577] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.724286][ T6577] vfat filesystem being mounted at /166/bus supports timestamps until 2107-12-31 (0x10391447e) [ 135.780608][ T6574] bond6: (slave veth5): Enslaving as an active interface with a down link [ 135.883770][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.902556][ T6574] bond6: (slave batadv1): making interface the new active one [ 135.954236][ T6574] batadv1: entered promiscuous mode [ 135.982482][ T4530] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.994490][ T6584] __nla_validate_parse: 129 callbacks suppressed [ 135.994514][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 136.022894][ T6574] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 136.165160][ T6585] bond6 (unregistering): (slave veth5): Releasing active interface [ 136.221317][ T6585] bond6 (unregistering): (slave batadv1): Releasing active interface [ 136.244291][ T6585] bond6 (unregistering): Released all slaves [ 136.268488][ T4554] net_ratelimit: 22 callbacks suppressed [ 136.268505][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 136.294811][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 136.393310][ T6593] team0 (unregistering): Port device team_slave_1 removed [ 136.413955][ T6600] loop1: detected capacity change from 0 to 512 [ 136.447876][ T6600] Quota error (device loop1): v2_read_file_info: Free block number 1536 out of range (1, 6). [ 136.458536][ T6600] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 136.489787][ T6600] EXT4-fs (loop1): mount failed [ 136.538870][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 136.581255][ T6607] netlink: 9 bytes leftover after parsing attributes in process `syz.0.916'. [ 136.628702][ T6613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 136.636845][ T6607] gretap0: entered promiscuous mode [ 136.661063][ T6609] pim6reg2: entered allmulticast mode [ 136.667410][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 136.677022][ T6607] netlink: 5 bytes leftover after parsing attributes in process `syz.0.916'. [ 136.687503][ T6607] 0ªî{X¹¦: renamed from gretap0 [ 136.705621][ T6607] 0ªî{X¹¦: left promiscuous mode [ 136.711265][ T6607] 0ªî{X¹¦: entered allmulticast mode [ 136.733339][ T28] audit: type=1400 audit(4147483747.732:923): avc: denied { bind } for pid=6619 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.754412][ T6624] netlink: 'syz.2.918': attribute type 16 has an invalid length. [ 136.762845][ T28] audit: type=1400 audit(4147483747.732:924): avc: denied { node_bind } for pid=6619 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 136.783081][ T6624] netlink: 'syz.2.918': attribute type 17 has an invalid length. [ 136.806495][ T6607] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.842202][ T6613] xfrm0 speed is unknown, defaulting to 1000 [ 136.845316][ T6624] gretap0: left promiscuous mode [ 136.898139][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.911342][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.980919][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.991511][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.027923][ T6624] veth1_vlan: left promiscuous mode [ 137.034462][ T6624] veth0_vlan: left promiscuous mode [ 137.040416][ T6624] veth0_vlan: left allmulticast mode [ 137.046108][ T6624] veth0_vlan: entered promiscuous mode [ 137.054288][ T6624] veth1_vlan: entered promiscuous mode [ 137.062947][ T6624] veth1_macvtap: left promiscuous mode [ 137.070053][ T6624] veth0_macvtap: left promiscuous mode [ 137.076312][ T6624] veth0_macvtap: entered promiscuous mode [ 137.082969][ T6624] veth1_macvtap: entered promiscuous mode [ 137.132209][ T6624] bond1: left promiscuous mode [ 137.197390][ T6624] bridge1: left promiscuous mode [ 137.210116][ T6624] bridge2: left promiscuous mode [ 137.221022][ T6624] bridge3: left promiscuous mode [ 137.226858][ T6624] bond1: left allmulticast mode [ 137.234391][ T6624] bridge1: left allmulticast mode [ 137.240737][ T6624] bridge2: left allmulticast mode [ 137.247054][ T6624] bridge3: left allmulticast mode [ 137.260549][ T6624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.319580][ T54] bond1: (slave bridge1): link status up again after 0 ms [ 137.363767][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 137.388973][ T54] bond1: (slave bridge1): link status up again after 0 ms [ 137.419442][ T6624] bond2: left promiscuous mode [ 137.445252][ T6624] bond2: left allmulticast mode [ 137.450609][ T39] bond1: (slave bridge1): link status up again after 0 ms [ 137.482132][ T6624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.491619][ T6624] veth5: left allmulticast mode [ 137.498081][ T6624] 8021q: adding VLAN 0 to HW filter on device eth0 [ 137.506543][ T6624] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.534173][ T6624] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.540758][ T176] bond1: (slave bridge1): link status up again after 0 ms [ 137.551265][ T6624] 8021q: adding VLAN 0 to HW filter on device eth3 [ 137.558856][ T39] bond1: (slave bridge1): link status up again after 0 ms [ 137.563817][ T6624] gretap0: entered promiscuous mode [ 137.571417][ T6624] gretap0: entered allmulticast mode [ 137.576729][ T6624] macvlan2: left allmulticast mode [ 137.582548][ T6624] gretap0: left allmulticast mode [ 137.589224][ T39] bond1: (slave bridge1): link status up again after 0 ms [ 137.607761][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.614856][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.623722][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.630796][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.652681][ T3382] xfrm0 speed is unknown, defaulting to 1000 [ 137.652704][ T3436] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.658686][ T3382] syz0: Port: 1 Link ACTIVE [ 137.666962][ T3436] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.679654][ T3436] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.687814][ T3436] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.702936][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 137.702968][ T3436] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.717163][ T3436] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.725388][ T3436] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.733826][ T3436] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.804568][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.927'. [ 137.837467][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 137.854701][ T6633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6633 comm=syz.5.927 [ 138.061828][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 138.278825][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 138.356361][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 138.754955][ T6659] pim6reg2: entered allmulticast mode [ 139.868454][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 139.906190][ T6678] xt_hashlimit: size too large, truncated to 1048576 [ 139.955376][ T28] audit: type=1400 audit(4147483750.962:925): avc: denied { write } for pid=6679 comm="syz.1.939" path="socket:[14650]" dev="sockfs" ino=14650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.994441][ T6683] –: renamed from vxcan1 (while UP) [ 140.131299][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 140.217807][ T6688] team0 (unregistering): Port device team_slave_0 removed [ 140.289169][ T6688] team0 (unregistering): Port device team_slave_1 removed [ 140.301850][ T6694] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 140.494660][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.501898][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.706261][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.783650][ T176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.811226][ T176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.856236][ T176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.902809][ T176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.159928][ T6733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.205495][ T6737] netlink: 'syz.3.950': attribute type 2 has an invalid length. [ 141.219904][ T6733] bond2: (slave ip6gretap1): making interface the new active one [ 141.234344][ T6691] syz.2.943 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 141.245153][ T6691] CPU: 0 UID: 0 PID: 6691 Comm: syz.2.943 Not tainted syzkaller #0 PREEMPT(full) [ 141.245205][ T6691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.245274][ T6691] Call Trace: [ 141.245282][ T6691] [ 141.245291][ T6691] __dump_stack+0x1d/0x30 [ 141.245328][ T6691] dump_stack_lvl+0x95/0xd0 [ 141.245350][ T6691] dump_stack+0x15/0x1b [ 141.245366][ T6691] dump_header+0x80/0x240 [ 141.245384][ T6691] oom_kill_process+0x295/0x350 [ 141.245416][ T6691] out_of_memory+0x97d/0xb80 [ 141.245449][ T6691] try_charge_memcg+0x62f/0xa10 [ 141.245478][ T6691] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 141.245599][ T6691] charge_memcg+0x6d/0x120 [ 141.245709][ T6691] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 141.245795][ T6691] __swap_cache_prepare_and_add+0x69/0x4a0 [ 141.245816][ T6691] ? alloc_pages_mpol+0x217/0x260 [ 141.245882][ T6691] ? xas_load+0x413/0x430 [ 141.245906][ T6691] swap_cache_alloc_folio+0xa2/0x120 [ 141.245968][ T6691] swap_cluster_readahead+0x25f/0x3c0 [ 141.245993][ T6691] swapin_readahead+0xde/0x840 [ 141.246039][ T6691] ? _raw_spin_unlock+0x9/0x30 [ 141.246061][ T6691] ? __rcu_read_unlock+0x4e/0x70 [ 141.246078][ T6691] ? swap_cache_get_folio+0x1e0/0x1f0 [ 141.246100][ T6691] do_swap_page+0x31e/0x2180 [ 141.246120][ T6691] ? css_rstat_updated+0xbb/0x280 [ 141.246141][ T6691] ? __rcu_read_lock+0x36/0x50 [ 141.246161][ T6691] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 141.246181][ T6691] handle_mm_fault+0xb2e/0x2e70 [ 141.246221][ T6691] ? _raw_spin_lock+0x52/0xa0 [ 141.246262][ T6691] __get_user_pages+0x1290/0x1f10 [ 141.246299][ T6691] __mm_populate+0x242/0x390 [ 141.246339][ T6691] do_mlock+0x47c/0x520 [ 141.246426][ T6691] ? xfd_validate_state+0x45/0xf0 [ 141.246511][ T6691] ? restore_fpregs_from_fpstate+0x61/0x110 [ 141.246534][ T6691] __x64_sys_mlock+0x36/0x50 [ 141.246563][ T6691] x64_sys_call+0x1ab3/0x3020 [ 141.246588][ T6691] do_syscall_64+0x12c/0x3b0 [ 141.246639][ T6691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.246660][ T6691] RIP: 0033:0x7fb85db2ce59 [ 141.246682][ T6691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.246697][ T6691] RSP: 002b:00007fb85c566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 141.246758][ T6691] RAX: ffffffffffffffda RBX: 00007fb85dda6090 RCX: 00007fb85db2ce59 [ 141.246771][ T6691] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 141.246782][ T6691] RBP: 00007fb85dbc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 141.246793][ T6691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.246803][ T6691] R13: 00007fb85dda6128 R14: 00007fb85dda6090 R15: 00007ffc5b6b8ad8 [ 141.246829][ T6691] [ 141.246995][ T6691] memory: usage 300700kB, limit 307200kB, failcnt 565 [ 141.297923][ T6733] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.299480][ T6691] memory+swap: usage 312772kB, limit 9007199254740988kB, failcnt 0 [ 141.299506][ T6691] kmem: usage 299696kB, limit 9007199254740988kB, failcnt 0 [ 141.299518][ T6691] Memory cgroup stats for /syz2: [ 141.299828][ T6691] cache 524288 [ 141.299835][ T6691] rss 3973120 [ 141.299875][ T6691] shmem 0 [ 141.299882][ T6691] mapped_file 65536 [ 141.299890][ T6691] dirty 0 [ 141.299943][ T6691] writeback 0 [ 141.299949][ T6691] workingset_refault_anon 2472 [ 141.299956][ T6691] workingset_refault_file 2008 [ 141.299965][ T6691] swap 8634368 [ 141.299972][ T6691] swapcached 25591808 [ 141.300041][ T6691] pgpgin 133802 [ 141.300049][ T6691] pgpgout 132703 [ 141.300056][ T6691] pgfault 120100 [ 141.300064][ T6691] pgmajfault 455 [ 141.300072][ T6691] inactive_anon 0 [ 141.300080][ T6691] active_anon 8192 [ 141.300086][ T6691] inactive_file 0 [ 141.300093][ T6691] active_file 524288 [ 141.300174][ T6691] unevictable 3969024 [ 141.338842][ T176] net_ratelimit: 31 callbacks suppressed [ 141.338858][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 141.363299][ T6691] hierarchical_memory_limit 314572800 [ 141.648884][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 141.679237][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 141.721583][ T6743] xfrm0 speed is unknown, defaulting to 1000 [ 141.732522][ T6691] hierarchical_memsw_limit 9223372036854771712 [ 141.744531][ T6691] total_cache 524288 [ 141.758985][ T6691] total_rss 3973120 [ 141.768859][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 141.771954][ T6691] total_shmem 0 [ 141.804617][ T6691] total_mapped_file 65536 [ 141.818882][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 141.821885][ T6691] total_dirty 0 [ 141.849676][ T6691] total_writeback 0 [ 141.863921][ T6691] total_workingset_refault_anon 2472 [ 141.880048][ T6691] total_workingset_refault_file 2008 [ 141.898083][ T6691] total_swap 8634368 [ 141.925679][ T6691] total_swapcached 25591808 [ 141.942119][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 141.948822][ T6691] total_pgpgin 133802 [ 141.963261][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 141.966682][ T6691] total_pgpgout 132703 [ 141.981738][ T6691] total_pgfault 120100 [ 141.984051][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 141.986828][ T6691] total_pgmajfault 455 [ 142.000348][ T6691] total_inactive_anon 0 [ 142.004755][ T6691] total_active_anon 8192 [ 142.009457][ T6691] total_inactive_file 0 [ 142.014294][ T6691] total_active_file 524288 [ 142.016187][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.018769][ T6691] total_unevictable 3969024 [ 142.019033][ T6691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.943,pid=6689,uid=0 [ 142.019181][ T6691] Memory cgroup out of memory: Killed process 6689 (syz.2.943) total-vm:96348kB, anon-rss:5108kB, file-rss:22132kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 142.078927][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.105648][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.134478][ T6756] netlink: 277 bytes leftover after parsing attributes in process `syz.3.956'. [ 142.150293][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.170730][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.182003][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.330800][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.343494][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.443305][ T4530] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.451951][ T4530] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.460915][ T3436] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.485359][ T3436] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.529946][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 142.575344][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.582728][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.631495][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.646145][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.799013][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 142.813601][ T6719] xfrm0 speed is unknown, defaulting to 1000 [ 142.813670][ T4554] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.821697][ T6719] syz0: Port: 1 Link DOWN [ 142.830858][ T4554] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.862449][ T6720] xfrm0 speed is unknown, defaulting to 1000 [ 142.862453][ T4554] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.883944][ T4554] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.902888][ T4554] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.914604][ T4554] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.925885][ T4554] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.948865][ T4554] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.968482][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 143.118901][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 143.278984][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 143.345452][ T6788] netlink: 'syz.5.967': attribute type 2 has an invalid length. [ 143.507113][ T6793] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 143.578483][ T6793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.600172][ T6795] bond3: (slave veth7): Enslaving as an active interface with a down link [ 143.682045][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 143.697461][ T6793] bond3: (slave batadv2): making interface the new active one [ 143.706011][ T6793] batadv2: entered promiscuous mode [ 143.711860][ T6793] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 143.733255][ T6793] bond3 (unregistering): (slave veth7): Releasing active interface [ 143.742761][ T6793] bond3 (unregistering): (slave batadv2): Releasing active interface [ 143.751957][ T6793] bond3 (unregistering): Released all slaves [ 143.938159][ T28] audit: type=1400 audit(4147483754.942:926): avc: denied { setopt } for pid=6796 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.270016][ T6808] 0ªî{X¹¦: renamed from gretap0 [ 144.988038][ T6814] loop1: detected capacity change from 0 to 164 [ 145.019066][ T6814] ISOFS: unable to read i-node block [ 145.024377][ T6814] isofs_fill_super: get root inode failed [ 145.092051][ T6814] ipip0: entered promiscuous mode [ 146.993378][ T3436] net_ratelimit: 24 callbacks suppressed [ 146.993395][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 148.049194][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 148.198144][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 148.217313][ T6837] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 148.287815][ T6837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.308092][ T6841] ipvlan2: entered allmulticast mode [ 148.333323][ T6841] bond3: entered allmulticast mode [ 148.361660][ T6837] bond3: (slave bridge1): making interface the new active one [ 148.381348][ T6837] bridge1: entered allmulticast mode [ 148.393474][ T6837] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 148.418961][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 148.453111][ T28] audit: type=1326 audit(4147483759.462:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 148.542028][ T28] audit: type=1326 audit(4147483759.462:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 148.583035][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 148.635057][ T28] audit: type=1326 audit(4147483759.462:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 148.725875][ T28] audit: type=1326 audit(4147483759.462:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 148.752567][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 148.772007][ T28] audit: type=1326 audit(4147483759.492:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.405043][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 149.479519][ T28] audit: type=1326 audit(4147483759.492:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.504861][ T28] audit: type=1326 audit(4147483759.492:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.580707][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 149.599305][ T28] audit: type=1326 audit(4147483759.492:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.625035][ T28] audit: type=1326 audit(4147483759.492:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.651841][ T28] audit: type=1326 audit(4147483759.492:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.988" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 149.697541][ T6846] loop1: detected capacity change from 0 to 2048 [ 149.710381][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 149.833168][ T6846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.848831][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 149.937560][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.344990][ T6877] __nla_validate_parse: 154 callbacks suppressed [ 150.345005][ T6877] netlink: 176 bytes leftover after parsing attributes in process `syz.2.996'. [ 150.465481][ T6879] netlink: 3 bytes leftover after parsing attributes in process `syz.2.997'. [ 151.149753][ T6905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1005'. [ 151.185173][ T6905] netlink: 'syz.3.1005': attribute type 12 has an invalid length. [ 151.198270][ T6905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1005'. [ 151.833506][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.840758][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.977863][ T6923] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1011'. [ 152.055214][ T3436] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.057932][ T6923] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1011'. [ 152.078521][ T176] net_ratelimit: 16 callbacks suppressed [ 152.078548][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 152.109737][ T3436] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.150011][ T3436] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.175892][ T6923] 0ªî{X¹¦: renamed from gretap0 [ 152.221328][ T6923] 0ªî{X¹¦: left promiscuous mode [ 152.227146][ T6923] 0ªî{X¹¦: entered allmulticast mode [ 152.247247][ T6923] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 152.267742][ T3436] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.295797][ T6932] ipip0: entered promiscuous mode [ 152.318882][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 152.370037][ T6940] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 152.429105][ T4530] bond1: (slave bridge1): failed to get link speed/duplex [ 152.588891][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 152.769072][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 152.932850][ T6955] xfrm0 speed is unknown, defaulting to 1000 [ 152.950883][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 153.078926][ T3436] bond1: (slave bridge1): failed to get link speed/duplex [ 153.188971][ T4530] bond1: (slave bridge1): failed to get link speed/duplex [ 153.257282][ T6971] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1036'. [ 153.331010][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 153.416886][ T6971] loop1: detected capacity change from 0 to 512 [ 153.460728][ T6971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 153.473919][ T6971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.619794][ T6971] EXT4-fs (loop1): 1 truncate cleaned up [ 153.629078][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.803403][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 153.803418][ T28] audit: type=1400 audit(4147483764.812:1068): avc: denied { write } for pid=6970 comm="syz.1.1036" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.832435][ T28] audit: type=1400 audit(4147483764.812:1069): avc: denied { open } for pid=6970 comm="syz.1.1036" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.874270][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.912710][ T28] audit: type=1326 audit(4147483764.912:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 153.983932][ T28] audit: type=1326 audit(4147483764.912:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.031608][ T28] audit: type=1326 audit(4147483764.912:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.111459][ T28] audit: type=1326 audit(4147483764.912:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.147230][ T28] audit: type=1326 audit(4147483764.912:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.170916][ T6990] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1030'. [ 154.189300][ T28] audit: type=1326 audit(4147483764.912:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.189331][ T28] audit: type=1326 audit(4147483764.912:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.3.1027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690867ce59 code=0x7ffc0000 [ 154.285033][ T6995] loop1: detected capacity change from 0 to 512 [ 154.292756][ T6995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.301208][ T6992] netlink: 'syz.5.1030': attribute type 12 has an invalid length. [ 154.319733][ T6995] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 154.328715][ T6992] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1030'. [ 154.355136][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 154.562707][ T28] audit: type=1400 audit(4147483765.562:1077): avc: denied { tracepoint } for pid=7004 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.619534][ T7015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7015 comm=syz.1.1039 [ 155.363103][ T7040] __nla_validate_parse: 4 callbacks suppressed [ 155.363144][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 155.422403][ T7040] team0 (unregistering): Port device team_slave_0 removed [ 155.433966][ T7040] team0 (unregistering): Port device team_slave_1 removed [ 155.651263][ T7053] tipc: Started in network mode [ 155.669300][ T7053] tipc: Node identity 2007ff, cluster identity 4711 [ 155.686987][ T7053] tipc: Node number set to 2099199 [ 155.746923][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 156.696484][ T6702] IPVS: starting estimator thread 0... [ 156.808847][ T7076] IPVS: using max 2544 ests per chain, 127200 per kthread [ 156.857180][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 157.118899][ T176] net_ratelimit: 26 callbacks suppressed [ 157.118940][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 157.248823][ T4536] bond1: (slave bridge1): failed to get link speed/duplex [ 157.371665][ T4536] bond1: (slave bridge1): failed to get link speed/duplex [ 157.498840][ T4536] bond1: (slave bridge1): failed to get link speed/duplex [ 157.647998][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 157.758908][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 157.898974][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 158.021821][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 158.139822][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 158.249397][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 158.509831][ T7090] syz.5.1068 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 158.523803][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.5.1068 Not tainted syzkaller #0 PREEMPT(full) [ 158.523910][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.523923][ T7090] Call Trace: [ 158.523990][ T7090] [ 158.523999][ T7090] __dump_stack+0x1d/0x30 [ 158.524022][ T7090] dump_stack_lvl+0x95/0xd0 [ 158.524068][ T7090] dump_stack+0x15/0x1b [ 158.524086][ T7090] dump_header+0x80/0x240 [ 158.524105][ T7090] oom_kill_process+0x295/0x350 [ 158.524199][ T7090] out_of_memory+0x97d/0xb80 [ 158.524231][ T7090] try_charge_memcg+0x62f/0xa10 [ 158.524333][ T7090] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 158.524354][ T7090] __alloc_frozen_pages_noprof+0x18a/0x350 [ 158.524446][ T7090] alloc_pages_mpol+0xb3/0x260 [ 158.524471][ T7090] alloc_pages_noprof+0x8f/0x140 [ 158.524494][ T7090] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 158.524527][ T7090] __kvmalloc_node_noprof+0x3d4/0x640 [ 158.524545][ T7090] ? futex_hash_allocate+0x190/0x9a0 [ 158.524650][ T7090] ? futex_hash_allocate+0x190/0x9a0 [ 158.524724][ T7090] futex_hash_allocate+0x190/0x9a0 [ 158.524813][ T7090] ? cap_task_prctl+0x13f/0x6b0 [ 158.524834][ T7090] futex_hash_prctl+0xd8/0xf0 [ 158.524861][ T7090] __se_sys_prctl+0x4f4/0x1400 [ 158.524957][ T7090] __x64_sys_prctl+0x67/0x80 [ 158.524981][ T7090] x64_sys_call+0x2533/0x3020 [ 158.525003][ T7090] do_syscall_64+0x12c/0x3b0 [ 158.525032][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.525091][ T7090] RIP: 0033:0x7fa3357dce59 [ 158.525105][ T7090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.525125][ T7090] RSP: 002b:00007fa334237028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 158.525143][ T7090] RAX: ffffffffffffffda RBX: 00007fa335a55fa0 RCX: 00007fa3357dce59 [ 158.525175][ T7090] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 158.525193][ T7090] RBP: 00007fa335872d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.525208][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.525286][ T7090] R13: 00007fa335a56038 R14: 00007fa335a55fa0 R15: 00007fffbde72ad8 [ 158.525304][ T7090] [ 158.525329][ T7090] memory: usage 307200kB, limit 307200kB, failcnt 685 [ 158.751408][ T7090] memory+swap: usage 310688kB, limit 9007199254740988kB, failcnt 0 [ 158.759345][ T7090] kmem: usage 299004kB, limit 9007199254740988kB, failcnt 0 [ 158.766615][ T7090] Memory cgroup stats for /syz5: [ 158.766886][ T7090] cache 0 [ 158.774747][ T7090] rss 8388608 [ 158.778092][ T7090] shmem 0 [ 158.781616][ T7090] mapped_file 0 [ 158.785117][ T7090] dirty 0 [ 158.788114][ T7090] writeback 0 [ 158.791462][ T7090] workingset_refault_anon 5009 [ 158.796208][ T7090] workingset_refault_file 109 [ 158.800994][ T7090] swap 3571712 [ 158.804358][ T7090] swapcached 29966336 [ 158.808383][ T7090] pgpgin 145970 [ 158.812317][ T7090] pgpgout 143921 [ 158.815862][ T7090] pgfault 104333 [ 158.819470][ T7090] pgmajfault 721 [ 158.823008][ T7090] inactive_anon 0 [ 158.826619][ T7090] active_anon 4096 [ 158.830422][ T7090] inactive_file 0 [ 158.834092][ T7090] active_file 0 [ 158.837619][ T7090] unevictable 8388608 [ 158.842001][ T7090] hierarchical_memory_limit 314572800 [ 158.847354][ T7090] hierarchical_memsw_limit 9223372036854771712 [ 158.853537][ T7090] total_cache 0 [ 158.856990][ T7090] total_rss 8388608 [ 158.861070][ T7090] total_shmem 0 [ 158.864537][ T7090] total_mapped_file 0 [ 158.868538][ T7090] total_dirty 0 [ 158.872679][ T7090] total_writeback 0 [ 158.876482][ T7090] total_workingset_refault_anon 5009 [ 158.881830][ T7090] total_workingset_refault_file 109 [ 158.887155][ T7090] total_swap 3571712 [ 158.891171][ T7090] total_swapcached 29966336 [ 158.895689][ T7090] total_pgpgin 145970 [ 158.900071][ T7090] total_pgpgout 143921 [ 158.904141][ T7090] total_pgfault 104333 [ 158.908235][ T7090] total_pgmajfault 721 [ 158.912409][ T7090] total_inactive_anon 0 [ 158.916550][ T7090] total_active_anon 4096 [ 158.920804][ T7090] total_inactive_file 0 [ 158.924948][ T7090] total_active_file 0 [ 158.929359][ T7090] total_unevictable 8388608 [ 158.933844][ T7090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1068,pid=7088,uid=0 [ 158.948493][ T7090] Memory cgroup out of memory: Killed process 7088 (syz.5.1068) total-vm:100584kB, anon-rss:9424kB, file-rss:26404kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 159.085881][ T7118] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1073'. [ 159.087438][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 159.087450][ T28] audit: type=1400 audit(4147483770.092:1082): avc: denied { bind } for pid=7111 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.137153][ T7114] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1074'. [ 159.146919][ T7114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1074'. [ 159.376930][ T28] audit: type=1400 audit(4147483770.382:1083): avc: denied { cpu } for pid=7134 comm="syz.0.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.400899][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 159.547489][ T28] audit: type=1400 audit(4147483770.552:1084): avc: denied { view } for pid=7149 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 159.900812][ T7176] syzkaller0: entered promiscuous mode [ 159.906519][ T7176] syzkaller0: entered allmulticast mode [ 160.163116][ T7170] syz.2.1092 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 160.268759][ T7170] CPU: 1 UID: 0 PID: 7170 Comm: syz.2.1092 Not tainted syzkaller #0 PREEMPT(full) [ 160.268787][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.268805][ T7170] Call Trace: [ 160.268810][ T7170] [ 160.268817][ T7170] __dump_stack+0x1d/0x30 [ 160.268843][ T7170] dump_stack_lvl+0x95/0xd0 [ 160.268866][ T7170] dump_stack+0x15/0x1b [ 160.268886][ T7170] dump_header+0x80/0x240 [ 160.268930][ T7170] oom_kill_process+0x295/0x350 [ 160.268966][ T7170] out_of_memory+0x97d/0xb80 [ 160.268991][ T7170] try_charge_memcg+0x62f/0xa10 [ 160.269045][ T7170] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 160.269067][ T7170] __alloc_frozen_pages_noprof+0x18a/0x350 [ 160.269097][ T7170] alloc_pages_mpol+0xb3/0x260 [ 160.269124][ T7170] alloc_pages_noprof+0x8f/0x140 [ 160.269212][ T7170] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 160.269245][ T7170] __kvmalloc_node_noprof+0x3d4/0x640 [ 160.269267][ T7170] ? futex_hash_allocate+0x190/0x9a0 [ 160.269372][ T7170] ? futex_hash_allocate+0x190/0x9a0 [ 160.269397][ T7170] futex_hash_allocate+0x190/0x9a0 [ 160.269424][ T7170] ? cap_task_prctl+0x13f/0x6b0 [ 160.269508][ T7170] futex_hash_prctl+0xd8/0xf0 [ 160.269539][ T7170] __se_sys_prctl+0x4f4/0x1400 [ 160.269680][ T7170] __x64_sys_prctl+0x67/0x80 [ 160.269704][ T7170] x64_sys_call+0x2533/0x3020 [ 160.269724][ T7170] do_syscall_64+0x12c/0x3b0 [ 160.269818][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.269839][ T7170] RIP: 0033:0x7fb85db2ce59 [ 160.269874][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.269890][ T7170] RSP: 002b:00007fb85c587028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 160.269907][ T7170] RAX: ffffffffffffffda RBX: 00007fb85dda5fa0 RCX: 00007fb85db2ce59 [ 160.269921][ T7170] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 160.269933][ T7170] RBP: 00007fb85dbc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 160.269945][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.269966][ T7170] R13: 00007fb85dda6038 R14: 00007fb85dda5fa0 R15: 00007ffc5b6b8ad8 [ 160.270049][ T7170] [ 160.609274][ T7170] memory: usage 86132kB, limit 307200kB, failcnt 1412 [ 160.624466][ T7170] memory+swap: usage 81100kB, limit 9007199254740988kB, failcnt 0 [ 160.635828][ T7185] xfrm0 speed is unknown, defaulting to 1000 [ 160.656973][ T7170] kmem: usage 67336kB, limit 9007199254740988kB, failcnt 0 [ 160.664301][ T7170] Memory cgroup stats for /syz2: [ 160.664593][ T7170] cache 20480 [ 160.672969][ T7170] rss 184320 [ 160.676207][ T7170] shmem 12288 [ 160.680161][ T7170] mapped_file 20480 [ 160.684065][ T7170] dirty 4096 [ 160.687361][ T7170] writeback 0 [ 160.690742][ T7170] workingset_refault_anon 4155 [ 160.695605][ T7170] workingset_refault_file 2264 [ 160.700447][ T7170] swap 438272 [ 160.703761][ T7170] swapcached 35762176 [ 160.752402][ T7170] pgpgin 152617 [ 160.763578][ T7170] pgpgout 152512 [ 160.775480][ T7170] pgfault 130268 [ 160.787803][ T7170] pgmajfault 761 [ 160.835863][ T7170] inactive_anon 413696 [ 160.862157][ T7170] active_anon 8192 [ 160.866102][ T7170] inactive_file 0 [ 160.869775][ T7170] active_file 8192 [ 160.873596][ T7170] unevictable 0 [ 160.877059][ T7170] hierarchical_memory_limit 314572800 [ 160.882465][ T7170] hierarchical_memsw_limit 9223372036854771712 [ 160.888720][ T7170] total_cache 20480 [ 160.898843][ T7170] total_rss 184320 [ 160.902610][ T7170] total_shmem 12288 [ 160.906403][ T7170] total_mapped_file 20480 [ 160.915643][ T7170] total_dirty 4096 [ 160.946428][ T7170] total_writeback 0 [ 160.956550][ T7170] total_workingset_refault_anon 4155 [ 160.961841][ T7170] total_workingset_refault_file 2264 [ 160.967115][ T7170] total_swap 438272 [ 161.008834][ T7170] total_swapcached 35762176 [ 161.019028][ T7170] total_pgpgin 152617 [ 161.023387][ T7170] total_pgpgout 152512 [ 161.039322][ T7170] total_pgfault 130268 [ 161.051500][ T7170] total_pgmajfault 761 [ 161.064475][ T7170] total_inactive_anon 413696 [ 161.079908][ T7170] total_active_anon 8192 [ 161.093633][ T7170] total_inactive_file 0 [ 161.109350][ T7170] total_active_file 8192 [ 161.123820][ T7170] total_unevictable 0 [ 161.160417][ T7170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1092,pid=7169,uid=0 [ 161.194182][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1102'. [ 161.208870][ T28] audit: type=1400 audit(4147483772.202:1085): avc: denied { read } for pid=7200 comm="syz.5.1102" lport=38806 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 161.233819][ T7170] Memory cgroup out of memory: Killed process 7170 (syz.2.1092) total-vm:96216kB, anon-rss:1404kB, file-rss:22256kB, shmem-rss:12kB, UID:0 pgtables:132kB oom_score_adj:0 [ 161.806509][ T7270] loop1: detected capacity change from 0 to 1024 [ 161.826209][ T7270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.867831][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.935897][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 162.158861][ T54] net_ratelimit: 29 callbacks suppressed [ 162.158879][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 162.298864][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 162.314420][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 162.331757][ T7345] macvlan0: entered promiscuous mode [ 162.337118][ T7345] bond0: entered promiscuous mode [ 162.344000][ T7345] bond_slave_0: entered promiscuous mode [ 162.351847][ T7345] bond_slave_1: entered promiscuous mode [ 162.378181][ T7345] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 162.401514][ T7349] netlink: 'syz.5.1116': attribute type 1 has an invalid length. [ 162.419366][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.431638][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 162.454530][ T7349] bond1: (slave veth7): Enslaving as an active interface with a down link [ 162.477498][ T7349] bond1: (slave dummy0): making interface the new active one [ 162.486153][ T7349] dummy0: entered promiscuous mode [ 162.492358][ T7349] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 162.506290][ T7349] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1116'. [ 162.531954][ T7349] bond1: (slave dummy0): Releasing active interface [ 162.538343][ T7352] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1117'. [ 162.538722][ T7349] dummy0 (unregistering): left promiscuous mode [ 162.548010][ T7352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1117'. [ 162.637523][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 162.770962][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 162.890623][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 163.031868][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 163.209435][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 163.272374][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'. [ 163.359486][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 163.415477][ T7390] netlink: 'syz.5.1130': attribute type 1 has an invalid length. [ 163.461639][ T28] audit: type=1400 audit(4147483774.462:1086): avc: denied { bind } for pid=7380 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.486017][ T28] audit: type=1400 audit(4147483774.462:1087): avc: denied { node_bind } for pid=7380 comm="syz.3.1125" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 163.513086][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 163.604170][ T7398] xfrm0 speed is unknown, defaulting to 1000 [ 163.895360][ T7403] syzkaller0: entered promiscuous mode [ 163.920733][ T7403] syzkaller0: entered allmulticast mode [ 165.652915][ T7451] loop1: detected capacity change from 0 to 764 [ 165.687762][ T7451] Symlink component flag not implemented [ 165.695690][ T7451] Symlink component flag not implemented (116) [ 165.989471][ T7463] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 166.003666][ T7463] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.049022][ T7463] bond6: (slave veth7): Enslaving as an active interface with a down link [ 166.068469][ T7463] bond6: (slave dummy0): making interface the new active one [ 166.077490][ T7463] dummy0: entered promiscuous mode [ 166.083151][ T7463] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 166.096192][ T7463] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1156'. [ 166.114034][ T7463] bond6: (slave dummy0): Releasing active interface [ 166.122518][ T7463] dummy0 (unregistering): left promiscuous mode [ 166.353569][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 166.431252][ T28] audit: type=1400 audit(4147483777.442:1088): avc: denied { read } for pid=7482 comm="syz.0.1161" path="socket:[16228]" dev="sockfs" ino=16228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.625110][ T7485] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1162'. [ 167.209018][ T4538] net_ratelimit: 29 callbacks suppressed [ 167.209036][ T4538] bond1: (slave bridge1): failed to get link speed/duplex [ 167.282036][ T7517] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 167.308480][ T7517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.388161][ T7519] bridge_slave_0: left allmulticast mode [ 167.393950][ T7519] bridge_slave_0: left promiscuous mode [ 167.399678][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.419919][ T7519] bridge_slave_1: left allmulticast mode [ 167.452506][ T7519] bridge_slave_1: left promiscuous mode [ 167.461442][ T7527] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1171'. [ 167.477445][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.494078][ T7519] bond0: (slave bond_slave_0): Releasing backup interface [ 167.503328][ T7519] bond_slave_0: left promiscuous mode [ 167.524511][ T7519] bond0: (slave bond_slave_1): Releasing backup interface [ 167.542238][ T7519] bond_slave_1: left promiscuous mode [ 167.566482][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.585052][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.608603][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.619939][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.635181][ T7519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.660919][ T7517] bond3: (slave veth9): Enslaving as an active interface with a down link [ 167.680280][ T7524] bond3: (slave dummy0): making interface the new active one [ 167.694797][ T7524] dummy0: entered promiscuous mode [ 167.709217][ T7524] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 167.731589][ T7527] bond3: (slave dummy0): Releasing active interface [ 167.738934][ T7527] dummy0 (unregistering): left promiscuous mode [ 167.769940][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 167.879778][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 168.028811][ T176] bond1: (slave bridge1): failed to get link speed/duplex [ 168.190243][ T30] bond1: (slave bridge1): failed to get link speed/duplex [ 168.369585][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 168.437409][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.447967][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.481345][ T28] audit: type=1400 audit(4147483779.492:1089): avc: denied { watch watch_reads } for pid=7558 comm="syz.5.1184" path="/148/file1" dev="tmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 168.538864][ T30] bond1: (slave bridge1): failed to get link speed/duplex [ 168.658817][ T30] bond1: (slave bridge1): failed to get link speed/duplex [ 168.763849][ T7575] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1190'. [ 168.783473][ T7572] xt_hashlimit: size too large, truncated to 1048576 [ 168.791300][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 168.821465][ T7584] xt_connbytes: Forcing CT accounting to be enabled [ 169.175209][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.262792][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.193159][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 170.213370][ T7624] xfrm0 speed is unknown, defaulting to 1000 [ 170.340271][ T7644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 170.383820][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 171.728215][ T7728] xt_hashlimit: size too large, truncated to 1048576 [ 171.811232][ T7731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.185213][ T7738] capability: warning: `syz.1.1218' uses deprecated v2 capabilities in a way that may be insecure [ 172.207377][ T7731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.218414][ T7731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.231507][ T7731] veth1_macvtap: left promiscuous mode [ 172.243478][ T7731] veth0_macvtap: left promiscuous mode [ 172.250061][ T7731] veth0_macvtap: entered promiscuous mode [ 172.256775][ T7731] veth1_macvtap: entered promiscuous mode [ 172.266887][ T7731] 8021q: adding VLAN 0 to HW filter on device eth0 [ 172.275062][ T7731] 8021q: adding VLAN 0 to HW filter on device eth1 [ 172.285584][ T7731] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.295746][ T7731] 8021q: adding VLAN 0 to HW filter on device eth3 [ 172.320523][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 172.320553][ T7731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.343464][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.350549][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.389436][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.396566][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.417756][ T7741] tipc: Enabling of bearer rejected, failed to enable media [ 172.426850][ T54] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.472925][ T7748] macvlan2: entered promiscuous mode [ 172.492334][ T7748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.516217][ T54] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.536436][ T54] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.561245][ T54] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.590634][ T4554] net_ratelimit: 19 callbacks suppressed [ 172.590651][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 172.758807][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 172.779220][ T54] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 172.792427][ T54] bond1: (slave veth7): making interface the new active one [ 172.812170][ T54] bond1: active interface up! [ 172.879351][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 173.043652][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 173.221647][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 173.369604][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 173.522238][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 173.581996][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 173.663620][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 173.699647][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 173.734392][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 173.778837][ T4542] bond1: (slave bridge1): failed to get link speed/duplex [ 173.913353][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 174.038853][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 174.732761][ T28] audit: type=1400 audit(4147483785.742:1090): avc: denied { create } for pid=7790 comm="syz.1.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 174.804702][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 174.934340][ T28] audit: type=1400 audit(4147483785.942:1091): avc: denied { firmware_load } for pid=7800 comm="syz.1.1238" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 175.169115][ T7814] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 175.220279][ T7814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.272920][ T7814] vlan2: entered promiscuous mode [ 175.289909][ T7814] bond4: entered promiscuous mode [ 175.306546][ T7814] vlan2: entered allmulticast mode [ 175.325561][ T7814] bond4: entered allmulticast mode [ 175.370982][ T7821] bond4: (slave bridge2): making interface the new active one [ 175.397946][ T7821] bridge2: entered promiscuous mode [ 175.417141][ T7821] bridge2: entered allmulticast mode [ 175.434842][ T7821] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 175.504327][ T28] audit: type=1326 audit(4147483786.512:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.559172][ T28] audit: type=1326 audit(4147483786.512:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.586329][ T7833] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1249'. [ 175.600734][ T28] audit: type=1326 audit(4147483786.512:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.631606][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 175.641594][ T28] audit: type=1326 audit(4147483786.512:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.670211][ T28] audit: type=1326 audit(4147483786.512:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.696478][ T28] audit: type=1326 audit(4147483786.512:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.772965][ T28] audit: type=1326 audit(4147483786.512:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.806433][ T28] audit: type=1326 audit(4147483786.512:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.5.1245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3357dce59 code=0x7ffc0000 [ 175.923256][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.932631][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.957566][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.982155][ T7846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.994937][ T7846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.035258][ T7846] veth1_macvtap: left promiscuous mode [ 176.055311][ T7846] veth0_macvtap: left promiscuous mode [ 176.074544][ T7846] veth0_macvtap: entered promiscuous mode [ 176.086498][ T7846] veth1_macvtap: entered promiscuous mode [ 176.095204][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.103866][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.112271][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.120789][ T7846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.130158][ T7846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.137709][ T7846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.145872][ T7846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.154446][ T7846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.162804][ T7846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.176004][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.190838][ T4554] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 176.200158][ T4554] bond6: (slave veth7): making interface the new active one [ 176.210913][ T4554] bond6: active interface up! [ 176.573953][ T4528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.596923][ T4528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.641847][ T4528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.757898][ T7843] xfrm0 speed is unknown, defaulting to 1000 [ 176.766566][ T4528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.934770][ T7863] netlink: 'syz.1.1268': attribute type 3 has an invalid length. [ 176.943277][ T7863] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 176.951056][ T7863] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1268'. [ 177.505831][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 177.523524][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 177.587860][ T7871] loop1: detected capacity change from 0 to 2048 [ 177.703862][ T4528] net_ratelimit: 22 callbacks suppressed [ 177.703878][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 177.761552][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 177.778921][ T7889] hsr_slave_1 (unregistering): left promiscuous mode [ 177.828833][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 177.850090][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 177.907300][ T7897] bridge_slave_0: left allmulticast mode [ 177.913116][ T7897] bridge_slave_0: left promiscuous mode [ 177.922524][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.930791][ T7897] bridge_slave_1: left allmulticast mode [ 177.936422][ T7897] bridge_slave_1: left promiscuous mode [ 177.942602][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.951155][ T7897] bond4: (slave veth0_to_bond): Releasing active interface [ 177.958339][ T7897] veth0_to_bond: left promiscuous mode [ 177.963922][ T7897] veth0_to_bond: left allmulticast mode [ 177.978509][ T7897] bond0: (slave bond_slave_0): Releasing backup interface [ 178.016375][ T7897] bond0: (slave bond_slave_1): Releasing backup interface [ 178.030908][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.038352][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.049133][ T7897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.114202][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 178.241277][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 178.361249][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 178.839835][ T7915] xfrm0 speed is unknown, defaulting to 1000 [ 179.099268][ T7929] xfrm0 speed is unknown, defaulting to 1000 [ 179.110076][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 179.288803][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 179.399078][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 179.445346][ T7937] ------------[ cut here ]------------ [ 179.450843][ T7937] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.1283/7937 [ 179.460620][ T7937] Modules linked in: [ 179.464496][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.3.1283 Not tainted syzkaller #0 PREEMPT(full) [ 179.473835][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.483948][ T7937] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 179.489577][ T7937] Code: 8b 05 c1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9e 1a 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 90 1a 1e 00 90 0f 0b 90 e9 af fa ff ff [ 179.509254][ T7937] RSP: 0018:ffffc90003013dd8 EFLAGS: 00010093 [ 179.515303][ T7937] RAX: ffffffff813b1682 RBX: ffff888104de8000 RCX: ffff888104de8000 [ 179.523262][ T7937] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 179.531221][ T7937] RBP: 0000000000000080 R08: ffff888104de8b00 R09: 0000000000000000 [ 179.539196][ T7937] R10: ffffc90003013df0 R11: 0001c90003013df0 R12: ffff888104de8000 [ 179.547154][ T7937] R13: ffff888104de8828 R14: ffff888104e35690 R15: 0000000000000080 [ 179.555113][ T7937] FS: 0000000000000000(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 179.564080][ T7937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.570647][ T7937] CR2: 00007f69070cf990 CR3: 000000010cfd4000 CR4: 00000000003506f0 [ 179.578622][ T7937] DR0: 0000000000007ffb DR1: 0000000000000000 DR2: 0000000000000000 [ 179.586579][ T7937] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 179.594638][ T7937] Call Trace: [ 179.597970][ T7937] [ 179.600883][ T7937] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 179.606330][ T7937] ? __list_add_valid_or_report+0x38/0xe0 [ 179.612034][ T7937] do_exit+0xc13/0x1530 [ 179.616234][ T7937] ? switch_fpu_return+0xe7/0x1b0 [ 179.621383][ T7937] __x64_sys_exit+0x1f/0x20 [ 179.625875][ T7937] x64_sys_call+0x301d/0x3020 [ 179.630575][ T7937] do_syscall_64+0x12c/0x3b0 [ 179.635156][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.641084][ T7937] RIP: 0033:0x7f690867ce59 [ 179.645481][ T7937] Code: Unable to access opcode bytes at 0x7f690867ce2f. [ 179.652476][ T7937] RSP: 002b:00007f69070cefd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 179.660934][ T7937] RAX: ffffffffffffffda RBX: 00007f69088f5fa0 RCX: 00007f690867ce59 [ 179.668945][ T7937] RDX: 00007f69070cf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.677090][ T7937] RBP: 00007f6908712d6f R08: 0000000000000000 R09: 0000000000000000 [ 179.685086][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.693049][ T7937] R13: 00007f69088f6038 R14: 00007f69088f5fa0 R15: 00007ffd0e240728 [ 179.701015][ T7937] [ 179.704021][ T7937] ---[ end trace 0000000000000000 ]--- [ 179.716970][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 180.154333][ T7958] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 180.174206][ T7958] netlink: 'syz.5.1293': attribute type 2 has an invalid length. [ 180.427055][ T7981] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1299'. [ 180.742878][ T7990] xfrm0 speed is unknown, defaulting to 1000 [ 180.766374][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 180.766390][ T28] audit: type=1400 audit(4147484047.766:1156): avc: denied { ioctl } for pid=7991 comm="syz.3.1305" path="socket:[18043]" dev="sockfs" ino=18043 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 180.769288][ T7992] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 180.832623][ T7992] syz_tun: entered promiscuous mode [ 180.871481][ T7992] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 181.268225][ T8006] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 181.286779][ T8006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.309485][ T8006] vlan0: entered promiscuous mode [ 181.473912][ T8006] bond2: entered promiscuous mode [ 181.495911][ T8006] vlan0: entered allmulticast mode [ 181.516868][ T8006] bond2: entered allmulticast mode [ 181.591361][ T8015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.598623][ T8015] IPv6: NLM_F_CREATE should be set when creating new route [ 181.613081][ T8011] bond2: (slave bridge2): making interface the new active one [ 181.630940][ T8011] bridge2: entered promiscuous mode [ 181.643651][ T8011] bridge2: entered allmulticast mode [ 181.658047][ T8011] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 181.749417][ T28] audit: type=1400 audit(4147484048.762:1157): avc: denied { sys_module } for pid=8007 comm="syz.3.1310" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 181.855335][ T4554] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.877519][ T4554] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.911190][ T4554] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.967409][ T4554] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.056198][ T8028] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1316'. [ 182.085329][ T8029] netlink: 'syz.0.1315': attribute type 2 has an invalid length. [ 182.247106][ T8044] bridge_slave_0: left allmulticast mode [ 182.247125][ T8044] bridge_slave_0: left promiscuous mode [ 182.247247][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.262132][ T8044] bridge_slave_1: left allmulticast mode [ 182.262150][ T8044] bridge_slave_1: left promiscuous mode [ 182.262383][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.281025][ T8044] bond0: (slave bond_slave_0): Releasing backup interface [ 182.281236][ T8044] bond_slave_0: left promiscuous mode [ 182.281996][ T8044] bond0: (slave bond_slave_1): Releasing backup interface [ 182.282369][ T8044] bond_slave_1: left promiscuous mode [ 182.282710][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.282972][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.283899][ T8044] bond1: (slave bridge1): Releasing backup interface [ 182.283917][ T8044] bond1: (slave bridge1): the permanent HWaddr of slave - aa:c7:87:dd:d8:80 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 182.292166][ T8044] bond1: (slave bridge2): Releasing backup interface [ 182.293214][ T8044] bond1: (slave bridge3): Releasing backup interface [ 182.294771][ T8044] bond3: (slave veth9): Releasing active interface [ 182.514731][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 182.523448][ T8062] xfrm1: entered promiscuous mode [ 182.523513][ T8062] xfrm1: entered allmulticast mode [ 182.523822][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 182.696011][ T54] net_ratelimit: 17 callbacks suppressed [ 182.696028][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 182.719959][ T8078] netlink: 'syz.2.1332': attribute type 5 has an invalid length. [ 182.944695][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 183.055195][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 183.162302][ T39] bond1: (slave bridge1): failed to get link speed/duplex [ 183.272394][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 183.390416][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 183.518705][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 183.634952][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 183.748318][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 183.866234][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 184.310508][ T8106] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 184.337384][ T8106] syz_tun: entered promiscuous mode [ 184.374103][ T8106] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 184.459932][ T8110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8110 comm=syz.5.1345 [ 184.909908][ T8126] xfrm0 speed is unknown, defaulting to 1000 [ 185.391347][ T28] audit: type=1326 audit(4147484052.429:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8144 comm="syz.2.1355" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb85db2ce59 code=0x0 [ 185.696044][ T28] audit: type=1400 audit(4147484052.742:1159): avc: denied { create } for pid=8154 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 185.708000][ T8155] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1359'. [ 185.728156][ T8155] netlink: 'syz.3.1359': attribute type 49 has an invalid length. [ 185.875089][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 185.898575][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1362'. [ 186.021460][ T28] audit: type=1326 audit(4147484053.074:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.056210][ T28] audit: type=1326 audit(4147484053.094:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.086978][ T28] audit: type=1326 audit(4147484053.094:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.126622][ T28] audit: type=1326 audit(4147484053.094:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.153960][ T28] audit: type=1326 audit(4147484053.094:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.181246][ T28] audit: type=1326 audit(4147484053.094:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.208077][ T28] audit: type=1326 audit(4147484053.094:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.254183][ T28] audit: type=1326 audit(4147484053.094:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.279770][ T28] audit: type=1326 audit(4147484053.094:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 186.305385][ T28] audit: type=1326 audit(4147484053.104:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.0.1364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51817ce59 code=0x7ffc0000 [ 187.124868][ T8204] xfrm0 speed is unknown, defaulting to 1000 [ 187.651704][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 187.666139][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 187.719524][ T4528] net_ratelimit: 29 callbacks suppressed [ 187.719541][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 187.857693][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 187.996822][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 188.125761][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 188.150733][ T8218] ================================================================== [ 188.158850][ T8218] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 188.165812][ T8218] [ 188.168131][ T8218] read-write to 0xffff888119b5ade4 of 4 bytes by task 8217 on cpu 0: [ 188.176189][ T8218] fifo_open+0x86/0x5d0 [ 188.180352][ T8218] do_dentry_open+0x4be/0xa90 [ 188.185022][ T8218] vfs_open+0x37/0x1e0 [ 188.189088][ T8218] path_openat+0x1b70/0x2050 [ 188.193682][ T8218] do_file_open+0x16c/0x290 [ 188.198190][ T8218] do_sys_openat2+0x94/0x130 [ 188.202783][ T8218] __se_sys_openat2+0x193/0x1f0 [ 188.207636][ T8218] __x64_sys_openat2+0x55/0x70 [ 188.212400][ T8218] x64_sys_call+0x2170/0x3020 [ 188.217083][ T8218] do_syscall_64+0x12c/0x3b0 [ 188.221677][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.227567][ T8218] [ 188.229887][ T8218] read to 0xffff888119b5ade4 of 4 bytes by task 8218 on cpu 1: [ 188.237431][ T8218] wait_for_partner+0x117/0x1e0 [ 188.242296][ T8218] fifo_open+0x462/0x5d0 [ 188.245059][ T4538] bond1: (slave bridge1): failed to get link speed/duplex [ 188.246626][ T8218] do_dentry_open+0x4be/0xa90 [ 188.246650][ T8218] vfs_open+0x37/0x1e0 [ 188.262450][ T8218] path_openat+0x1b70/0x2050 [ 188.267056][ T8218] do_file_open+0x16c/0x290 [ 188.271573][ T8218] do_sys_openat2+0x94/0x130 [ 188.276167][ T8218] __x64_sys_openat+0xf2/0x120 [ 188.280924][ T8218] x64_sys_call+0x1e39/0x3020 [ 188.285604][ T8218] do_syscall_64+0x12c/0x3b0 [ 188.290207][ T8218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.296097][ T8218] [ 188.298409][ T8218] value changed: 0x00000001 -> 0x00000002 [ 188.304114][ T8218] [ 188.306422][ T8218] Reported by Kernel Concurrency Sanitizer on: [ 188.312564][ T8218] CPU: 1 UID: 0 PID: 8218 Comm: syz.2.1379 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.323429][ T8218] Tainted: [W]=WARN [ 188.327227][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.337277][ T8218] ================================================================== [ 188.364172][ T54] bond1: (slave bridge1): failed to get link speed/duplex [ 188.483449][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 188.602442][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 188.653586][ T8211] syz.5.1377 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 188.684065][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.5.1377 Tainted: G W syzkaller #0 PREEMPT(full) [ 188.684103][ T8211] Tainted: [W]=WARN [ 188.684111][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.684123][ T8211] Call Trace: [ 188.684131][ T8211] [ 188.684140][ T8211] __dump_stack+0x1d/0x30 [ 188.684166][ T8211] dump_stack_lvl+0x95/0xd0 [ 188.684301][ T8211] dump_stack+0x15/0x1b [ 188.684321][ T8211] dump_header+0x80/0x240 [ 188.684392][ T8211] oom_kill_process+0x295/0x350 [ 188.684419][ T8211] out_of_memory+0x97d/0xb80 [ 188.684473][ T8211] try_charge_memcg+0x62f/0xa10 [ 188.684506][ T8211] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 188.684529][ T8211] __alloc_frozen_pages_noprof+0x18a/0x350 [ 188.684557][ T8211] alloc_pages_mpol+0xb3/0x260 [ 188.684629][ T8211] alloc_pages_noprof+0x8f/0x140 [ 188.684709][ T8211] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 188.684742][ T8211] __kvmalloc_node_noprof+0x3d4/0x640 [ 188.684764][ T8211] ? futex_hash_allocate+0x190/0x9a0 [ 188.684793][ T8211] ? futex_hash_allocate+0x190/0x9a0 [ 188.684829][ T8211] futex_hash_allocate+0x190/0x9a0 [ 188.684861][ T8211] ? cap_task_prctl+0x13f/0x6b0 [ 188.684893][ T8211] futex_hash_prctl+0xd8/0xf0 [ 188.684923][ T8211] __se_sys_prctl+0x4f4/0x1400 [ 188.685019][ T8211] __x64_sys_prctl+0x67/0x80 [ 188.685109][ T8211] x64_sys_call+0x2533/0x3020 [ 188.685134][ T8211] do_syscall_64+0x12c/0x3b0 [ 188.685164][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.685219][ T8211] RIP: 0033:0x7fa3357dce59 [ 188.685235][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.685255][ T8211] RSP: 002b:00007fa334237028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 188.685277][ T8211] RAX: ffffffffffffffda RBX: 00007fa335a55fa0 RCX: 00007fa3357dce59 [ 188.685339][ T8211] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 188.685354][ T8211] RBP: 00007fa335872d6f R08: 0000000000000000 R09: 0000000000000000 [ 188.685368][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.685458][ T8211] R13: 00007fa335a56038 R14: 00007fa335a55fa0 R15: 00007fffbde72ad8 [ 188.685519][ T8211] [ 188.687093][ T8211] memory: usage 307200kB, limit 307200kB, failcnt 1036 [ 188.794123][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 188.804845][ T8211] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 188.920273][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 188.973309][ T8211] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 188.980663][ T8211] Memory cgroup stats for /syz5: [ 188.980869][ T8211] cache 0 [ 188.988741][ T8211] rss 28672 [ 188.991873][ T8211] shmem 0 [ 188.994804][ T8211] mapped_file 0 [ 188.998259][ T8211] dirty 0 [ 189.001216][ T8211] writeback 0 [ 189.004496][ T8211] workingset_refault_anon 5066 [ 189.009257][ T8211] workingset_refault_file 237 [ 189.013959][ T8211] swap 167936 [ 189.017234][ T8211] swapcached 30322688 [ 189.021229][ T8211] pgpgin 166300 [ 189.024694][ T8211] pgpgout 166292 [ 189.028260][ T8211] pgfault 128808 [ 189.031824][ T8211] pgmajfault 746 [ 189.035383][ T8211] inactive_anon 0 [ 189.039003][ T8211] active_anon 32768 [ 189.042860][ T8211] inactive_file 0 [ 189.046486][ T8211] active_file 0 [ 189.049968][ T8211] unevictable 0 [ 189.053496][ T8211] hierarchical_memory_limit 314572800 [ 189.058930][ T8211] hierarchical_memsw_limit 9223372036854771712 [ 189.065223][ T8211] total_cache 0 [ 189.068719][ T8211] total_rss 28672 [ 189.072476][ T8211] total_shmem 0 [ 189.075941][ T8211] total_mapped_file 0 [ 189.080410][ T8211] total_dirty 0 [ 189.083950][ T8211] total_writeback 0 [ 189.087748][ T8211] total_workingset_refault_anon 5066 [ 189.093227][ T8211] total_workingset_refault_file 237 [ 189.098688][ T8211] total_swap 167936 [ 189.102706][ T8211] total_swapcached 30322688 [ 189.107216][ T8211] total_pgpgin 166300 [ 189.111349][ T8211] total_pgpgout 166292 [ 189.115416][ T8211] total_pgfault 128808 [ 189.119606][ T8211] total_pgmajfault 746 [ 189.123675][ T8211] total_inactive_anon 0 [ 189.127820][ T8211] total_active_anon 32768 [ 189.132351][ T8211] total_inactive_file 0 [ 189.136591][ T8211] total_active_file 0 [ 189.140708][ T8211] total_unevictable 0 [ 189.144695][ T8211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1377,pid=8210,uid=0 [ 189.159781][ T8211] Memory cgroup out of memory: Killed process 8210 (syz.5.1377) total-vm:96216kB, anon-rss:1252kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 192.714692][ T12] net_ratelimit: 33 callbacks suppressed [ 192.714710][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 192.834020][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 192.943239][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 193.052475][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 193.172026][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 193.280954][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 193.390597][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 193.499602][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 193.609237][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 193.718221][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 197.733181][ T12] net_ratelimit: 35 callbacks suppressed [ 197.733194][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 197.852425][ T4554] bond1: (slave bridge1): failed to get link speed/duplex [ 197.972114][ T4528] bond1: (slave bridge1): failed to get link speed/duplex [ 198.081407][ T4554] bond1: (slave bridge1): failed to get link speed/duplex