last executing test programs: 11m9.499113304s ago: executing program 32 (id=52): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x3, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x8, @empty, 0x5}}, 0xf3ad, 0x8001}, &(0x7f00000001c0)=0x90) 10m32.061565115s ago: executing program 33 (id=839): timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffe, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, @perf_bp={0x0}, 0x800, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x200488c0) 10m26.333674185s ago: executing program 34 (id=983): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xf69, &(0x7f0000000400)={0x0, 0x1889, 0x400, 0x5, 0x108}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r0, &(0x7f0000000180)=""/109, 0x6d, 0x1f5) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m13.071630166s ago: executing program 35 (id=2851): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)=""/111, 0x6f}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 8m30.231557007s ago: executing program 36 (id=3891): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x26}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8m13.97982772s ago: executing program 37 (id=4322): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7m49.620367949s ago: executing program 38 (id=4864): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 7m25.125395902s ago: executing program 39 (id=5364): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x201}, {r1, 0x960e}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x20000) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 7m20.119238651s ago: executing program 40 (id=5433): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m10.510616194s ago: executing program 41 (id=5361): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m48.362887222s ago: executing program 42 (id=5828): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 6m21.498800721s ago: executing program 43 (id=6277): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x5ab2, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x1, 0x18}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 6m0.488421474s ago: executing program 44 (id=6681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000007c0)=""/164, 0xa4}], 0x2, 0xe, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m48.912162119s ago: executing program 45 (id=6979): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5m37.522955148s ago: executing program 46 (id=7204): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/40, 0x28}], 0x1, 0x0, 0x31}, 0x10040) 5m2.039268108s ago: executing program 47 (id=7672): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) creat(&(0x7f0000000240)='./file0/file0\x00', 0x100) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) 4m52.203675629s ago: executing program 48 (id=7921): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4m31.905012269s ago: executing program 49 (id=8271): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x3, 0x17, "b88fb70d7d2a45c1580ddf01df8db8ffa1cfc93cd6d13f"}, 0x1f) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 4m22.876546734s ago: executing program 50 (id=8445): syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf51, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) gettid() sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x40060) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff028}, {0x6, 0x9, 0x0, 0xfffffffd}]}, 0x10) 4m15.134930929s ago: executing program 51 (id=8586): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4m8.233851226s ago: executing program 52 (id=8693): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x7, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8287, 0x2, 0xffffffff, 0x7, 0x7f, 0x9, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 3m50.312322361s ago: executing program 53 (id=8990): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 3m28.036412575s ago: executing program 0 (id=9420): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) fsopen(0x0, 0x1) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m26.60454462s ago: executing program 0 (id=9440): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m23.513552158s ago: executing program 0 (id=9453): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@user_xattr}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xf}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000040)='./file1\x00', 0x8102, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) 3m23.11864296s ago: executing program 0 (id=9463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 3m23.017325363s ago: executing program 0 (id=9465): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 3m22.815210939s ago: executing program 0 (id=9469): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) execve(0x0, 0x0, 0x0) 3m22.778637331s ago: executing program 54 (id=9469): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) execve(0x0, 0x0, 0x0) 2m59.853143834s ago: executing program 2 (id=9878): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001a00)="5ba0", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 2m58.875002385s ago: executing program 2 (id=9883): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) 2m58.623141443s ago: executing program 2 (id=9885): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 2m58.607762714s ago: executing program 2 (id=9886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m58.158988947s ago: executing program 2 (id=9890): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 2m57.43269917s ago: executing program 2 (id=9905): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2m42.364744836s ago: executing program 55 (id=9905): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2m12.246805006s ago: executing program 9 (id=10490): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m11.344633915s ago: executing program 9 (id=10507): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m11.297605747s ago: executing program 9 (id=10508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f00000001c0)="259a53f271a76d2688ca4c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 2m11.134947832s ago: executing program 9 (id=10514): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m11.091792613s ago: executing program 9 (id=10517): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000f1"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x0, 0x1, 0xc, 0xb}, {0x2, 0x5, 0x8, 0x3}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x3ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 2m10.707493505s ago: executing program 9 (id=10535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m10.693272145s ago: executing program 56 (id=10535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m1.302083402s ago: executing program 7 (id=10757): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2m1.236152204s ago: executing program 7 (id=10759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0xa, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m1.146774337s ago: executing program 7 (id=10762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) 2m0.858149866s ago: executing program 7 (id=10766): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m0.804116168s ago: executing program 7 (id=10768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xfbc, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf8c, 0x2, [@TCA_CGROUP_ACT={0xf88, 0x1, [@m_connmark={0xb0, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x29, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0x8, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x5, 0x40008d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x5, 0x7, 0x8, 0x8, 0xad38, 0x8001}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x7}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xd}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0xc01, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x45, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x88, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x0, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e8, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x2, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.590525464s ago: executing program 7 (id=10774): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f00000002c0)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) read(r2, &(0x7f00000001c0)=""/69, 0x45) 2m0.574964005s ago: executing program 57 (id=10774): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x9}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f00000002c0)=""/95, 0x5f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) read(r2, &(0x7f00000001c0)=""/69, 0x45) 1m52.324446785s ago: executing program 1 (id=10914): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m52.18720875s ago: executing program 1 (id=10917): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m52.088372572s ago: executing program 1 (id=10919): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x10, 0x5, 0x801, 0x0, &(0x7f0000000280), 0x2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000496000/0x1000)=nil, 0x2) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 1m51.041790146s ago: executing program 1 (id=10933): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m51.008932677s ago: executing program 1 (id=10935): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) accept4(r0, 0x0, 0x0, 0x0) 1m50.739081405s ago: executing program 1 (id=10938): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m50.738968995s ago: executing program 58 (id=10938): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3.230402768s ago: executing program 3 (id=12626): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x4000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x20040000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x138) socket(0x10, 0x80002, 0x0) 3.17992903s ago: executing program 3 (id=12629): socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.827034561s ago: executing program 6 (id=12630): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd26, 0x25dfdbed, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.604191688s ago: executing program 6 (id=12633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(0x0, 0x0, 0xb8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.597085868s ago: executing program 3 (id=12634): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x5f2, 0x11000, 0x7, 0x40, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.459764863s ago: executing program 5 (id=12641): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) 2.440831563s ago: executing program 5 (id=12643): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.340938596s ago: executing program 6 (id=12645): socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.340598056s ago: executing program 4 (id=12647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {0xffe0}, {0xc}}}, 0x24}}, 0x41814) 1.181301723s ago: executing program 4 (id=12649): bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xffffffff, 0x6, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="580100001000130428bd700040000000ffffffff000000000000000000000000e0000001000000000000000000000000462000084e2300040a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d43200000000000000000000000000ffff7f00000100080000000800007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002002000000000000000000000000000fd2100020000000004000000010000000100000000000000f6000000040000000800000000000000ff3400000200047f330000000000000067001200726663343330392863636d2861657329290000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804) 1.176410303s ago: executing program 6 (id=12650): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/pid\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000080)=r0, 0x4) 1.139189114s ago: executing program 6 (id=12652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x102240, 0x0, 0x0, 0x9, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.138592634s ago: executing program 4 (id=12653): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffff2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.080359706s ago: executing program 5 (id=12655): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 1.079963926s ago: executing program 5 (id=12656): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 1.079764366s ago: executing program 4 (id=12657): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x7) 980.064659ms ago: executing program 5 (id=12658): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 979.968039ms ago: executing program 8 (id=12659): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 979.551909ms ago: executing program 3 (id=12660): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) 961.98809ms ago: executing program 8 (id=12661): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r1, 0x1) 867.074133ms ago: executing program 6 (id=12662): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000, 0x8}, 0x1048a, 0x4000, 0x8010ffe, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x100000000000000) splice(r1, 0x0, r4, 0x0, 0x100035ab, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 847.924813ms ago: executing program 8 (id=12663): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x3be}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 808.046875ms ago: executing program 8 (id=12664): socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 807.930175ms ago: executing program 3 (id=12665): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/pid\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000080)=r0, 0x4) 791.498425ms ago: executing program 3 (id=12666): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x38e38e3, 0x44, r0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 689.999608ms ago: executing program 8 (id=12667): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 64.614128ms ago: executing program 4 (id=12668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x10, 0x0, 0x4}}, 0x14) 61.260428ms ago: executing program 8 (id=12678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 122.74µs ago: executing program 5 (id=12669): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0xa1) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4, 0xfffffe01, 0x3}, &(0x7f00000000c0)=0x10) 0s ago: executing program 4 (id=12670): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x7}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) kernel console output (not intermixed with test programs): T3636] active_anon 0 [ 628.282269][ T3636] inactive_file 0 [ 628.285975][ T3636] active_file 0 [ 628.289718][ T3636] unevictable 0 [ 628.293185][ T3636] hierarchical_memory_limit 314572800 [ 628.298812][ T3636] hierarchical_memsw_limit 9223372036854771712 [ 628.305003][ T3636] total_cache 0 [ 628.308811][ T3636] total_rss 0 [ 628.312185][ T3636] total_shmem 0 [ 628.312208][ T7652] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 628.315645][ T3636] total_mapped_file 0 [ 628.315656][ T3636] total_dirty 0 [ 628.332936][ T3636] total_writeback 0 [ 628.336929][ T3636] total_workingset_refault_anon 2771 [ 628.340736][ T7655] dummy0: entered promiscuous mode [ 628.342211][ T3636] total_workingset_refault_file 2541 [ 628.342222][ T3636] total_swap 71086080 [ 628.356988][ T3636] total_swapcached 143519744 [ 628.361586][ T3636] total_pgpgin 875758 [ 628.365608][ T3636] total_pgpgout 875631 [ 628.369948][ T3636] total_pgfault 723887 [ 628.374045][ T3636] total_pgmajfault 2427 [ 628.378583][ T3636] total_inactive_anon 0 [ 628.382013][ T7655] bond2: (slave dummy0): Releasing active interface [ 628.382747][ T3636] total_active_anon 0 [ 628.393840][ T3636] total_inactive_file 0 [ 628.398441][ T3636] total_active_file 0 [ 628.402433][ T3636] total_unevictable 0 [ 628.406419][ T3636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.240,pid=4190,uid=0 [ 628.422823][ T3636] Memory cgroup out of memory: Killed process 4190 (syz.5.240) total-vm:96084kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 628.473728][ T28] audit: type=1326 audit(1782155895.891:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83fe2ce59 code=0x0 [ 628.508925][ T7667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.530251][ T7667] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 628.584832][ T28] audit: type=1326 audit(1782155896.001:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83fe2ce59 code=0x7ffc0000 [ 628.702341][ T28] audit: type=1326 audit(1782155896.001:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83fe2ce59 code=0x7ffc0000 [ 628.734951][ T7679] bond0: entered allmulticast mode [ 628.753360][ T7679] macvlan0: entered promiscuous mode [ 628.766010][ T28] audit: type=1326 audit(1782155896.001:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83fe2ce59 code=0x7ffc0000 [ 628.791521][ T7679] macvlan0: entered allmulticast mode [ 628.804425][ T7679] bond0: (slave macvlan0): Opening slave failed [ 628.861937][ T28] audit: type=1326 audit(1782155896.001:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa83fe2ce59 code=0x7ffc0000 [ 628.956306][ T28] audit: type=1326 audit(1782155896.071:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa83fded68e code=0x7ffc0000 [ 628.985186][ T28] audit: type=1326 audit(1782155896.071:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa83fded68e code=0x7ffc0000 [ 629.013452][ T28] audit: type=1326 audit(1782155896.081:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa83fded68e code=0x7ffc0000 [ 629.039958][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11435'. [ 629.041473][ T28] audit: type=1326 audit(1782155896.091:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.6.11436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa83fded68e code=0x7ffc0000 [ 629.116596][ T296] net_ratelimit: 11 callbacks suppressed [ 629.116612][ T296] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.236659][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.246782][ T7689] loop3: detected capacity change from 0 to 512 [ 629.356583][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.395478][ T7689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.432600][ T7689] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.466866][ T296] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.494550][ T7689] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.11434: corrupted inode contents [ 629.544801][ T7689] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.11434: mark_inode_dirty error [ 629.566677][ T7689] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.11434: corrupted inode contents [ 629.578919][ T7689] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.11434: mark_inode_dirty error [ 629.593966][ T7689] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.11434: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 629.593966][ T7689] [ 629.614450][ T28] kauditd_printk_skb: 178 callbacks suppressed [ 629.614466][ T28] audit: type=1400 audit(1782155896.991:4238): avc: denied { write } for pid=7688 comm="syz.3.11434" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 629.629575][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.654703][ T7689] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.11434: corrupted inode contents [ 629.668721][ T7689] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.11434: mark_inode_dirty error [ 629.692417][ T7689] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 629.747049][ T3029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.758948][ T7403] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.810302][ T7733] loop3: detected capacity change from 0 to 512 [ 629.833228][ T7733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.847487][ T7733] ext4 filesystem being mounted at /303/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.866795][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.960654][ T3029] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.988156][ T296] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.111166][T28136] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.274439][ T296] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.301171][ T28] audit: type=1326 audit(1782155897.721:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.333115][ T28] audit: type=1326 audit(1782155897.721:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.361201][ T28] audit: type=1326 audit(1782155897.721:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.398796][ T7757] netlink: 'syz.6.11459': attribute type 12 has an invalid length. [ 630.400931][ T28] audit: type=1326 audit(1782155897.751:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.410067][ T7757] netlink: 'syz.6.11459': attribute type 29 has an invalid length. [ 630.432614][ T28] audit: type=1326 audit(1782155897.751:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.478347][ T7757] netlink: 148 bytes leftover after parsing attributes in process `syz.6.11459'. [ 630.488061][ T7757] netlink: 'syz.6.11459': attribute type 1 has an invalid length. [ 630.496296][ T28] audit: type=1326 audit(1782155897.751:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.522464][ T7761] netlink: 'syz.6.11459': attribute type 12 has an invalid length. [ 630.530887][ T7761] netlink: 'syz.6.11459': attribute type 29 has an invalid length. [ 630.538995][ T7761] netlink: 148 bytes leftover after parsing attributes in process `syz.6.11459'. [ 630.548312][ T28] audit: type=1326 audit(1782155897.751:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.578053][ T7761] netlink: 'syz.6.11459': attribute type 1 has an invalid length. [ 630.590080][ T28] audit: type=1326 audit(1782155897.751:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 630.615862][ T28] audit: type=1326 audit(1782155897.751:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7750 comm="syz.8.11457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2104fce59 code=0x7ffc0000 [ 631.103104][ T7800] cgroup: fork rejected by pids controller in /syz3 [ 631.289095][ T7807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.330556][ T7807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.356629][ C0] ip6_tnl_xmit_ctl: 14 callbacks suppressed [ 631.356646][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.370520][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 631.405589][ T7807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.441235][ T7811] netlink: 56 bytes leftover after parsing attributes in process `syz.8.11476'. [ 631.497024][ T7807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.580950][ T7403] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.600286][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.619161][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.628424][ T68] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.818217][ T7835] netlink: 'syz.4.11488': attribute type 1 has an invalid length. [ 631.882950][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.917131][ T7841] vlan2: entered allmulticast mode [ 631.922390][ T7841] bond0: entered allmulticast mode [ 631.927919][ T7841] bond_slave_0: entered allmulticast mode [ 631.933773][ T7841] bond_slave_1: entered allmulticast mode [ 631.942831][ T7841] bond1: (slave vlan2): making interface the new active one [ 631.952149][ T7841] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 631.996736][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.004577][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 632.109723][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11496'. [ 632.120145][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11496'. [ 632.155492][ T7855] netlink: 'syz.4.11497': attribute type 1 has an invalid length. [ 632.280145][ T7855] bond2: (slave veth9): Enslaving as an active interface with a down link [ 632.291738][ T7857] bond2: (slave dummy0): making interface the new active one [ 632.296150][ T7855] netlink: 'syz.4.11497': attribute type 10 has an invalid length. [ 632.307117][ T7857] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 632.317136][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11497'. [ 632.326437][ T7855] dummy0: entered promiscuous mode [ 632.332330][ T7855] bond2: (slave dummy0): Releasing active interface [ 632.428996][ T7867] cgroup: fork rejected by pids controller in /syz6 [ 632.555315][ T7871] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 632.721313][ T7894] tipc: Enabling of bearer rejected, failed to enable media [ 632.747994][ T7887] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.757836][ T7887] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.767650][ T7887] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 632.816896][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.824083][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.837161][ T7871] bridge_slave_0: entered allmulticast mode [ 632.843750][ T7871] bridge_slave_0: entered promiscuous mode [ 632.850758][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.857845][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.865197][ T7871] bridge_slave_1: entered allmulticast mode [ 632.871912][ T7871] bridge_slave_1: entered promiscuous mode [ 632.873402][ T7901] sctp: [Deprecated]: syz.5.11508 (pid 7901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.873402][ T7901] Use struct sctp_sack_info instead [ 632.898879][ T7887] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.908672][ T7887] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.918421][ T7887] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 632.942473][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.953690][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.975515][ T7871] team0: Port device team_slave_0 added [ 632.982464][ T7871] team0: Port device team_slave_1 added [ 632.998248][ T7887] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.008206][ T7887] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.018052][ T7887] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 633.039817][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.046775][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.073017][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.084530][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.091585][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.117780][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.135896][ T7887] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.145838][ T7887] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.155580][ T7887] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 633.181834][ T7871] hsr_slave_0: entered promiscuous mode [ 633.189189][ T7871] hsr_slave_1: entered promiscuous mode [ 633.195202][ T7871] debugfs: 'hsr0' already exists in 'hsr' [ 633.200994][ T7871] Cannot create hsr debugfs directory [ 633.256290][ T68] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.264768][ T68] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.272945][ T68] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 50265 - 0 [ 633.281307][ T68] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.328607][ T68] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.355544][ T68] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 50265 - 0 [ 633.372767][ T68] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.396066][ T68] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.404788][ T68] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 50265 - 0 [ 633.420942][ T49] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.429707][ T49] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.438942][ T49] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 50265 - 0 [ 633.477446][ T7871] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.498001][ T7871] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.561007][ T7871] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.571286][ T7871] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.660187][ T7871] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.670228][ T7871] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.694260][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11518'. [ 633.715885][ T7403] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.742733][ T7871] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.758016][ T7871] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.802363][ T7403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.905402][ T7871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 633.912169][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11522'. [ 633.925647][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11522'. [ 633.928360][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.968688][ T7871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 633.992332][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.011159][ T7403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.037007][ T7871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.053892][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.064730][ T7871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.082791][ T7871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 634.104414][ T7403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.134255][ T7923] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 634.157018][ T49] net_ratelimit: 24 callbacks suppressed [ 634.157035][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.211441][ T7871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.264085][ T7871] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.351157][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.358277][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.373593][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.380751][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.400812][ T7403] bridge_slave_1: left allmulticast mode [ 634.408055][ T7403] bridge_slave_1: left promiscuous mode [ 634.414246][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.422251][ T7403] bridge_slave_0: left allmulticast mode [ 634.428040][ T7403] bridge_slave_0: left promiscuous mode [ 634.433867][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.469804][ T7403] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 634.479100][ T7403] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 634.515167][ T7403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.525312][ T7403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.535191][ T7403] bond0 (unregistering): Released all slaves [ 634.544632][ T7403] bond1 (unregistering): Released all slaves [ 634.592075][ T7403] tipc: Left network mode [ 634.602630][ T7968] netlink: 67 bytes leftover after parsing attributes in process `syz.5.11530'. [ 634.685794][ T823] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.689082][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 634.689096][ T28] audit: type=1400 audit(1782155902.111:4328): avc: denied { write } for pid=7971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.737287][ T823] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 634.754075][ T28] audit: type=1400 audit(1782155902.171:4329): avc: denied { write } for pid=7986 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.755732][ T823] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 634.814006][ T28] audit: type=1400 audit(1782155902.231:4330): avc: denied { shutdown } for pid=7988 comm="syz.4.11531" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 634.828124][ T823] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 634.864367][ T823] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.890354][ T7403] hsr_slave_0: left promiscuous mode [ 634.896840][ T7403] hsr_slave_1: left promiscuous mode [ 634.902682][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.910704][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.920341][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.928171][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.939420][ T7403] veth1_macvtap: left promiscuous mode [ 634.944957][ T7403] veth0_macvtap: left promiscuous mode [ 634.950805][ T7403] veth1_vlan: left promiscuous mode [ 634.956058][ T7403] veth0_vlan: left promiscuous mode [ 635.076288][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 635.105461][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.116160][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.123975][ T7923] bridge_slave_0: entered allmulticast mode [ 635.130366][ T8008] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.11536'. [ 635.130879][ T7923] bridge_slave_0: entered promiscuous mode [ 635.140118][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11536'. [ 635.157437][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.164947][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.172359][ T7923] bridge_slave_1: entered allmulticast mode [ 635.179536][ T7923] bridge_slave_1: entered promiscuous mode [ 635.222388][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.236977][T22475] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 635.248585][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.279408][ T28] audit: type=1400 audit(1782155902.701:4331): avc: denied { write } for pid=8010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.322014][ T7923] team0: Port device team_slave_0 added [ 635.342076][ T7923] team0: Port device team_slave_1 added [ 635.348181][ T28] audit: type=1400 audit(1782155902.741:4332): avc: denied { write } for pid=8026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.376374][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 635.390805][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.398484][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.424698][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.436310][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.443389][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.469937][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.486251][ T7871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.509523][ T7923] hsr_slave_0: entered promiscuous mode [ 635.515430][ T7923] hsr_slave_1: entered promiscuous mode [ 635.521518][ T7923] debugfs: 'hsr0' already exists in 'hsr' [ 635.528619][ T7923] Cannot create hsr debugfs directory [ 635.650265][ T28] audit: type=1400 audit(1782155903.071:4333): avc: denied { write } for pid=8039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.676382][ T7871] veth0_vlan: entered promiscuous mode [ 635.684856][ T7871] veth1_vlan: entered promiscuous mode [ 635.709147][ T7871] veth0_macvtap: entered promiscuous mode [ 635.717598][ T7871] veth1_macvtap: entered promiscuous mode [ 635.723384][ T28] audit: type=1400 audit(1782155903.141:4334): avc: denied { write } for pid=8055 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.733480][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.760173][ T7871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.784606][ T7770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.793821][ T7770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.809225][ T7770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.818796][ T7770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.941981][ T7923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 635.971712][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 635.998111][ T7923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 636.028416][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 636.044309][ T7923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 636.055440][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.063881][ T28] audit: type=1400 audit(1782155903.491:4335): avc: denied { write } for pid=8065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.100892][ T7923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 636.108318][ T28] audit: type=1400 audit(1782155903.541:4336): avc: denied { write } for pid=8089 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.132866][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 636.242452][ T8107] netlink: 'syz.4.11547': attribute type 39 has an invalid length. [ 636.266075][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.290915][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.313605][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.320733][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.336924][ T28] audit: type=1400 audit(1782155903.761:4337): avc: denied { write } for pid=8101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.375295][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.382401][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.419754][ T7923] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 636.444103][ T7923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.757701][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.912770][ T8134] loop3: detected capacity change from 0 to 1024 [ 636.933141][ T8134] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 636.951007][ T8134] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 636.968506][ T8134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.032439][ T7923] veth0_vlan: entered promiscuous mode [ 637.078009][ T7923] veth1_vlan: entered promiscuous mode [ 637.099561][ T7923] veth0_macvtap: entered promiscuous mode [ 637.107914][ T7923] veth1_macvtap: entered promiscuous mode [ 637.156887][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.182547][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.202427][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.243496][ T7403] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.260224][ T7403] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.494587][ T7403] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.503423][ T7403] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.682426][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11569'. [ 638.280191][ T8229] loop6: detected capacity change from 0 to 1024 [ 638.290491][ T8229] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 638.300498][ T8229] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 638.308773][ T8229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.403120][ T7923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.307984][ T8298] tipc: Started in network mode [ 639.313109][ T8298] tipc: Node identity 12bf36d57606, cluster identity 4711 [ 639.320794][ T8298] tipc: Enabled bearer , priority 0 [ 639.370193][ T8298] syzkaller0: entered promiscuous mode [ 639.375982][ T8298] syzkaller0: entered allmulticast mode [ 639.382900][ T8298] tipc: Resetting bearer [ 641.955787][ T8297] tipc: Resetting bearer [ 641.965233][ T8310] netlink: 1472 bytes leftover after parsing attributes in process `syz.8.11608'. [ 641.974676][ T8310] netlink: 1472 bytes leftover after parsing attributes in process `syz.8.11608'. [ 642.004530][ T8297] tipc: Disabling bearer [ 642.043855][ T3349] tipc: Node number set to 1689859797 [ 642.597444][ T8341] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 642.906035][ T8344] syz.5.11621 (8344) used greatest stack depth: 7560 bytes left [ 643.039698][ T8355] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.120784][ T8355] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.269322][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11631'. [ 644.025816][ T8355] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.509975][ T8396] tipc: Started in network mode [ 644.515101][ T8396] tipc: Node identity aac8480a6338, cluster identity 4711 [ 644.522428][ T8396] tipc: Enabled bearer , priority 0 [ 644.572422][ T8396] syzkaller0: entered promiscuous mode [ 644.578843][ T8396] tipc: Resetting bearer [ 644.917405][ T8399] netlink: 277 bytes leftover after parsing attributes in process `syz.8.11642'. [ 644.946895][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11643'. [ 644.980080][ T8395] tipc: Resetting bearer [ 645.005145][ T8395] tipc: Disabling bearer [ 645.018040][ T8405] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11645'. [ 645.036334][ T8355] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.126085][ T68] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.134804][ T68] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.151347][ T8414] Set syz1 is full, maxelem 6117 reached [ 645.162958][ T7382] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.178250][ T7382] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.347928][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11658'. [ 645.389918][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11658'. [ 645.436658][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 645.436675][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.527805][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11672'. [ 645.582266][ T8450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.796314][ T8450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.893127][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11670'. [ 645.932067][ T8450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.025898][ T8450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.076808][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 646.145042][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.153260][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.161824][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.170156][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.256266][T22480] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 646.275776][T22480] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 646.717026][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 647.387242][ T8533] loop3: detected capacity change from 0 to 2048 [ 647.414489][ T8533] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 647.428061][ T8533] System zones: 0-7 [ 647.435031][ T8533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.454847][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 647.454863][ T28] audit: type=1400 audit(1782155914.881:4354): avc: denied { write } for pid=8532 comm="syz.3.11697" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.454956][ T8533] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.11697: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 647.499841][ T8533] EXT4-fs (loop3): Remounting filesystem read-only [ 647.513931][ T8533] xt_hashlimit: size too large, truncated to 1048576 [ 647.768884][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.997105][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.121709][ T28] audit: type=1400 audit(1782155915.541:4355): avc: denied { relabelfrom } for pid=8565 comm="syz.8.11709" name="SCTPv6" dev="sockfs" ino=135540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 648.196469][ T28] audit: type=1400 audit(1782155915.541:4356): avc: denied { relabelto } for pid=8565 comm="syz.8.11709" name="SCTPv6" dev="sockfs" ino=135540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sctp_socket permissive=1 [ 648.532059][ T8591] __nla_validate_parse: 2 callbacks suppressed [ 648.532073][ T8591] netlink: 448 bytes leftover after parsing attributes in process `syz.5.11718'. [ 648.680361][ T8605] loop3: detected capacity change from 0 to 512 [ 648.704116][ T8605] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 648.730225][ T8605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 648.740061][ T8605] EXT4-fs (loop3): orphan cleanup on readonly fs [ 648.762262][ T8605] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.11722: Allocating blocks 41-42 which overlap fs metadata [ 648.776704][ T8605] loop3: lost filesystem error report for type 5 error -117 [ 648.777222][ T8605] EXT4-fs (loop3): Remounting filesystem read-only [ 648.791105][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 648.791127][ C1] EXT4-fs (loop3): initial error at time 1782155916: ext4_mb_mark_diskspace_used:4222 [ 648.791171][ C1] EXT4-fs (loop3): last error at time 1782155916: ext4_mb_mark_diskspace_used:4222 [ 648.827214][ T8605] Quota error (device loop3): write_blk: dquota write failed [ 648.834768][ T8605] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 648.845316][ T8605] EXT4-fs (loop3): 1 truncate cleaned up [ 648.859809][ T8605] EXT4-fs (loop3): pa ffff8881059c4a10: logic 1, phys. 41, len 23 [ 648.868731][ T8605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.891543][ T28] audit: type=1400 audit(1782155916.311:4357): avc: denied { write } for pid=8609 comm="syz.6.11723" path="socket:[135609]" dev="sockfs" ino=135609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 648.975534][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.461909][ T8640] netlink: 277 bytes leftover after parsing attributes in process `syz.4.11733'. [ 649.572052][ T8647] loop6: detected capacity change from 0 to 128 [ 649.592928][ T8647] EXT4-fs: Ignoring removed i_version option [ 649.642154][ T8647] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.657506][ T8647] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 649.765744][ T8647] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.6.11735: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 649.897084][ T7923] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 650.187702][ T8682] loop3: detected capacity change from 0 to 128 [ 650.363906][T27811] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 650.390609][T27811] CPU: 0 UID: 0 PID: 27811 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 650.390644][T27811] Tainted: [W]=WARN [ 650.390715][T27811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.390728][T27811] Call Trace: [ 650.390736][T27811] [ 650.390746][T27811] __dump_stack+0x1d/0x30 [ 650.390840][T27811] dump_stack_lvl+0x95/0xd0 [ 650.390862][T27811] dump_stack+0x15/0x1b [ 650.390956][T27811] dump_header+0x80/0x240 [ 650.390980][T27811] oom_kill_process+0x295/0x350 [ 650.391085][T27811] out_of_memory+0x981/0xbc0 [ 650.391117][T27811] try_charge_memcg+0x621/0xa00 [ 650.391228][T27811] charge_memcg+0x6d/0x120 [ 650.391255][T27811] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 650.391306][T27811] swap_cache_alloc_folio+0x47b/0x5e0 [ 650.391340][T27811] swap_cluster_readahead+0x3d2/0x460 [ 650.391439][T27811] swapin_readahead+0xd8/0x8a0 [ 650.391516][T27811] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 650.391545][T27811] ? hrtimer_start_range_ns+0x108/0x120 [ 650.391569][T27811] ? __rcu_read_unlock+0x4e/0x70 [ 650.391594][T27811] ? swap_cache_get_folio+0x1f7/0x200 [ 650.391762][T27811] do_swap_page+0x2a2/0x1ec0 [ 650.391790][T27811] ? __schedule+0x799/0xd10 [ 650.391920][T27811] ? __rcu_read_lock+0x36/0x50 [ 650.391941][T27811] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 650.391967][T27811] handle_mm_fault+0xb3c/0x2da0 [ 650.392021][T27811] do_user_addr_fault+0x634/0x1060 [ 650.392113][T27811] ? trace_page_fault_user+0x1f/0xa0 [ 650.392139][T27811] exc_page_fault+0x62/0xa0 [ 650.392165][T27811] asm_exc_page_fault+0x26/0x30 [ 650.392203][T27811] RIP: 0033:0x7ff2104b7fd7 [ 650.392221][T27811] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 650.392240][T27811] RSP: 002b:00007ffd17c2e360 EFLAGS: 00010202 [ 650.392256][T27811] RAX: 0000000000000000 RBX: 00005555927bc500 RCX: 00007ff2104b7fd7 [ 650.392345][T27811] RDX: 00007ffd17c2e3a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.392432][T27811] RBP: 00007ffd17c2e40c R08: 0000000000000000 R09: 0000000000000000 [ 650.392444][T27811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 650.392464][T27811] R13: 00000000000927c0 R14: 000000000009ebaa R15: 00007ffd17c2e460 [ 650.392481][T27811] [ 650.392500][T27811] memory: usage 307200kB, limit 307200kB, failcnt 1696 [ 650.662125][T27811] memory+swap: usage 4996kB, limit 9007199254740988kB, failcnt 0 [ 650.671569][T27811] kmem: usage 4060kB, limit 9007199254740988kB, failcnt 0 [ 650.678775][T27811] Memory cgroup stats for /syz8: [ 650.679091][T27811] cache 0 [ 650.688928][T27811] rss 0 [ 650.692755][T27811] shmem 0 [ 650.693830][ T8685] Set syz1 is full, maxelem 6117 reached [ 650.695887][T27811] mapped_file 0 [ 650.705335][T27811] dirty 0 [ 650.707031][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.708706][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11754'. [ 650.716887][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.735527][T27811] writeback 0 [ 650.738880][T27811] workingset_refault_anon 3728 [ 650.757171][T27811] workingset_refault_file 0 [ 650.761748][T27811] swap 712704 [ 650.765296][T27811] swapcached 63594496 [ 650.769414][T27811] pgpgin 363966 [ 650.773027][T27811] pgpgout 363961 [ 650.776740][T27811] pgfault 328166 [ 650.780461][T27811] pgmajfault 2919 [ 650.784152][T27811] inactive_anon 16384 [ 650.788248][T27811] active_anon 4096 [ 650.792020][T27811] inactive_file 0 [ 650.795668][T27811] active_file 0 [ 650.799424][T27811] unevictable 0 [ 650.802891][T27811] hierarchical_memory_limit 314572800 [ 650.808883][T27811] hierarchical_memsw_limit 9223372036854771712 [ 650.815605][T27811] total_cache 0 [ 650.819500][T27811] total_rss 0 [ 650.825536][T27811] total_shmem 0 [ 650.829187][T27811] total_mapped_file 0 [ 650.834779][T27811] total_dirty 0 [ 650.839031][T27811] total_writeback 0 [ 650.843040][T27811] total_workingset_refault_anon 3728 [ 650.848717][T27811] total_workingset_refault_file 0 [ 650.853938][T27811] total_swap 712704 [ 650.859401][T27811] total_swapcached 63594496 [ 650.864012][T27811] total_pgpgin 363966 [ 650.868351][T27811] total_pgpgout 363961 [ 650.872511][T27811] total_pgfault 328166 [ 650.889192][T27811] total_pgmajfault 2919 [ 650.893531][T27811] total_inactive_anon 16384 [ 650.898141][T27811] total_active_anon 4096 [ 650.902416][T27811] total_inactive_file 0 [ 650.906816][T27811] total_active_file 0 [ 650.910930][T27811] total_unevictable 0 [ 650.926629][T27811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz8,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.8184,pid=28848,uid=0 [ 650.941721][T27811] Memory cgroup out of memory: Killed process 28848 (syz.8.8184) total-vm:96084kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 651.407092][ T8732] Set syz1 is full, maxelem 6117 reached [ 651.904122][ T8743] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.993570][ T8743] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.059756][ T8743] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.150927][ T8743] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.286648][ T7382] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.295093][ T7382] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.303395][ T7382] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.312075][ T7382] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.415655][ T8762] Set syz1 is full, maxelem 6117 reached [ 652.562637][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11794'. [ 652.679999][ T8790] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.689786][ T8790] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.699515][ T8790] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 652.762097][ T8790] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.771965][ T8790] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.781801][ T8790] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 652.854068][ T8790] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.863915][ T8790] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.873643][ T8790] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 652.932292][ T8790] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.942745][ T8790] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.953105][ T8790] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50265 - 0 [ 653.059623][ T7388] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.068299][ T7388] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.076630][ T7388] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 50265 - 0 [ 653.092778][ T7388] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.101006][ T7388] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.109377][ T7388] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 50265 - 0 [ 653.123435][ T7770] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.132237][ T7770] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.140532][ T7770] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 50265 - 0 [ 653.151992][ T7770] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.160312][ T7770] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.168546][ T7770] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 50265 - 0 [ 653.318056][ T8792] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 653.983513][ T8844] macvlan2: entered promiscuous mode [ 653.989870][ T8844] bridge0: entered promiscuous mode [ 654.648096][ T8869] netlink: 67 bytes leftover after parsing attributes in process `syz.6.11826'. [ 654.814582][ T8869] 8021q: adding VLAN 0 to HW filter on device eth0 [ 654.823563][ T8869] 8021q: adding VLAN 0 to HW filter on device eth1 [ 654.832703][ T8869] 8021q: adding VLAN 0 to HW filter on device eth2 [ 654.841768][ T8869] 8021q: adding VLAN 0 to HW filter on device eth3 [ 654.910728][ T8874] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11828'. [ 654.954669][ T8889] ref_ctr increment failed for inode: 0x155 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811c4c4d00 [ 655.027138][ T8894] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.11847'. [ 655.094461][ T28] audit: type=1400 audit(1782156178.520:4358): avc: denied { accept } for pid=8903 comm="syz.8.11840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 655.130576][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11842'. [ 655.147820][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11842'. [ 655.466916][ T49] bond3: (slave ip6gretap1): link status up again after 0 ms [ 655.474741][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.586773][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.652017][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11852'. [ 655.674580][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11853'. [ 655.716600][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.744122][ T8934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11854'. [ 655.826779][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 655.836117][ T28] audit: type=1326 audit(1782156179.260:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 655.869240][ T28] audit: type=1326 audit(1782156179.300:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 655.895189][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11856'. [ 655.924652][ T28] audit: type=1326 audit(1782156179.300:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 655.950310][ T28] audit: type=1326 audit(1782156179.300:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 655.967140][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.010638][ T28] audit: type=1326 audit(1782156179.300:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 656.044381][ T28] audit: type=1326 audit(1782156179.300:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 656.077851][ T28] audit: type=1326 audit(1782156179.300:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 656.086824][ T8960] netlink: 'syz.6.11865': attribute type 1 has an invalid length. [ 656.103732][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.119350][ T28] audit: type=1326 audit(1782156179.300:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 656.158664][ T28] audit: type=1326 audit(1782156179.300:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.4.11857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f141365d68e code=0x7ffc0000 [ 656.186145][ T8960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.235683][ T8960] bond1: (slave geneve2): making interface the new active one [ 656.246564][ T8960] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 656.276770][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.387426][ T7403] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.467156][ T8998] lo: entered allmulticast mode [ 656.496592][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.617261][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.726582][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 656.822408][ T9035] netlink: 'syz.8.11893': attribute type 1 has an invalid length. [ 656.838213][ T9035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 656.859248][ T9035] bond4: (slave geneve3): making interface the new active one [ 656.868475][ T9035] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 656.879890][ T7403] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 657.549384][ T9087] loop3: detected capacity change from 0 to 512 [ 657.607498][ T9087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 657.644938][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11918'. [ 657.732683][ T9087] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.11914: bad orphan inode 131083 [ 657.765155][ T9087] loop3: lost filesystem error report for type 5 error -117 [ 657.793650][ T9096] team1: entered promiscuous mode [ 657.806018][ T9096] team1: entered allmulticast mode [ 657.811239][ T9096] 8021q: adding VLAN 0 to HW filter on device team1 [ 657.819626][ T9087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.157477][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.745073][ T9142] loop3: detected capacity change from 0 to 512 [ 658.821416][ T9152] loop6: detected capacity change from 0 to 512 [ 658.829291][ T9142] EXT4-fs (loop3): orphan cleanup on readonly fs [ 658.853883][ T9142] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.11936: ea_inode with extended attributes [ 658.906231][ T9142] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 658.911986][ T9142] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.11936: error while reading EA inode 11 err=-117 [ 658.921754][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 658.921838][ C0] EXT4-fs (loop3): initial error at time 1782156182: ext4_xattr_inode_iget:441: inode 11 [ 658.922235][ C0] EXT4-fs (loop3): last error at time 1782156182: ext4_xattr_inode_iget:441: inode 11 [ 658.972785][ T9152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 658.994350][ T9142] loop3: lost filesystem error report for type 5 error -117 [ 658.996336][ T9142] EXT4-fs (loop3): 1 orphan inode deleted [ 659.011395][ T9152] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.027560][ T9142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 659.072425][ T7923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 659.177050][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.388262][ T7388] bridge_slave_1: left allmulticast mode [ 659.394101][ T7388] bridge_slave_1: left promiscuous mode [ 659.407031][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.423201][ T7388] bridge_slave_0: left allmulticast mode [ 659.453028][ T7388] bridge_slave_0: left promiscuous mode [ 659.478377][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.669551][ T7388] hsr_slave_0: left promiscuous mode [ 659.691481][ T7388] hsr_slave_1: left promiscuous mode [ 659.700522][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.726430][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.858256][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 659.881277][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 660.039031][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 660.160964][ T9244] __nla_validate_parse: 2 callbacks suppressed [ 660.160983][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11968'. [ 660.267420][ T9248] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 660.316200][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 660.316216][ T28] audit: type=1400 audit(1782156183.740:4405): avc: denied { write } for pid=9242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.379764][ T7388] IPVS: stop unused estimator thread 0... [ 660.417687][ T28] audit: type=1400 audit(1782156183.820:4406): avc: denied { write } for pid=9270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.458780][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 660.685255][ T28] audit: type=1400 audit(1782156184.110:4407): avc: denied { write } for pid=9282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.690723][ T9297] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11981'. [ 660.743204][ T28] audit: type=1400 audit(1782156184.160:4408): avc: denied { write } for pid=9300 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 660.800212][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 660.816701][ T7770] net_ratelimit: 25 callbacks suppressed [ 660.816719][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 660.936717][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 661.011817][ T28] audit: type=1400 audit(1782156184.440:4409): avc: denied { write } for pid=9317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.056652][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 661.075585][ T28] audit: type=1400 audit(1782156184.500:4410): avc: denied { write } for pid=9328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 661.118519][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 661.176807][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 661.400658][ T9332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.411624][ T9348] netlink: 'syz.5.11989': attribute type 1 has an invalid length. [ 661.448063][ T9348] netlink: 'syz.5.11989': attribute type 1 has an invalid length. [ 661.519479][ T9332] team0: Port device bond0 added [ 661.536182][ T9345] bridge0: port 3(team0) entered blocking state [ 661.562038][ T9345] bridge0: port 3(team0) entered disabled state [ 661.577942][ T9345] team0: entered allmulticast mode [ 661.612717][ T28] audit: type=1326 audit(1782156185.040:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9358 comm="syz.6.11994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0287bce59 code=0x0 [ 661.627287][ T9345] team_slave_0: entered allmulticast mode [ 661.671277][ T9345] team_slave_1: entered allmulticast mode [ 661.689246][ T9345] bond0: entered allmulticast mode [ 661.703405][ T9345] bond_slave_0: entered allmulticast mode [ 661.721858][ T9345] bond_slave_1: entered allmulticast mode [ 661.733380][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11995'. [ 661.743013][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11995'. [ 661.743684][ T9345] team0: entered promiscuous mode [ 661.764116][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11995'. [ 661.776095][ T9345] team_slave_0: entered promiscuous mode [ 661.789326][ T9345] team_slave_1: entered promiscuous mode [ 661.803876][ T9345] bond0: entered promiscuous mode [ 661.819216][ T9345] bond_slave_0: entered promiscuous mode [ 661.835341][ T9345] bond_slave_1: entered promiscuous mode [ 661.856043][ T9345] bridge0: port 3(team0) entered blocking state [ 661.862392][ T9345] bridge0: port 3(team0) entered forwarding state [ 661.933372][ T9284] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 661.947341][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.066675][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.176576][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.363826][ T7382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.497535][ T7388] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 662.575632][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.584155][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.606580][ T7770] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 663.180256][ T7388] bond0: (slave bond_slave_0): interface is now down [ 663.187105][ T7388] bond0: (slave bond_slave_1): interface is now down [ 663.196167][ T9429] netlink: 'syz.6.12022': attribute type 10 has an invalid length. [ 663.207625][ T7388] bond0: now running without any active interface! [ 663.223201][ T9429] syz_tun: entered promiscuous mode [ 663.236584][ T68] bond0: (slave syz_tun): interface is now down [ 663.244207][ T9429] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 663.257720][ T49] bond0: (slave syz_tun): interface is now down [ 663.265205][ T49] bond0: now running without any active interface! [ 663.294374][T22480] IPVS: starting estimator thread 0... [ 663.352555][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12027'. [ 663.386182][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12027'. [ 663.387425][ T9437] IPVS: using max 2064 ests per chain, 103200 per kthread [ 663.413614][ T9442] loop3: detected capacity change from 0 to 512 [ 663.461042][ T9442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.493941][ T9442] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.570970][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.622438][ T9453] netlink: 'syz.3.12031': attribute type 1 has an invalid length. [ 663.637288][ T9453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.657140][ T9453] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 663.680440][ T9453] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 663.695456][ T9453] netlink: 'syz.3.12031': attribute type 10 has an invalid length. [ 663.704044][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12031'. [ 663.713294][ T9453] dummy0: entered promiscuous mode [ 663.720456][ T9453] bond1: (slave dummy0): Releasing backup interface [ 663.843696][ T9458] loop3: detected capacity change from 0 to 512 [ 663.852550][ T9458] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 663.869106][ T9458] EXT4-fs (loop3): orphan cleanup on readonly fs [ 663.875692][ T9458] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12033: Block bitmap for bg 0 marked uninitialized [ 663.889794][ T9458] loop3: lost filesystem error report for type 5 error -117 [ 663.889898][ T9458] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 663.897257][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 663.897274][ C1] EXT4-fs (loop3): initial error at time 1782156187: ext4_read_block_bitmap_nowait:517 [ 663.897297][ C1] EXT4-fs (loop3): last error at time 1782156187: ext4_read_block_bitmap_nowait:517 [ 663.936982][ T9458] loop3: lost filesystem error report for type 5 error -117 [ 663.938436][ T9458] EXT4-fs (loop3): 1 orphan inode deleted [ 663.960461][ T9458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 664.269563][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.324997][ T9473] syzkaller0: entered promiscuous mode [ 664.330511][ T9473] syzkaller0: entered allmulticast mode [ 664.437382][ T9480] vhci_hcd vhci_hcd.2: invalid port number 96 [ 664.449622][ T9480] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 664.585844][ T9496] ªªªªªª: renamed from vlan0 (while UP) [ 665.633552][ T9537] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 665.803308][ T9550] loop3: detected capacity change from 0 to 1024 [ 665.829447][ T9550] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 665.844217][ T9550] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 665.854114][ T9550] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.12071: Failed to acquire dquot type 0 [ 665.856614][ T7382] net_ratelimit: 21 callbacks suppressed [ 665.856629][ T7382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 665.866126][ T9550] loop3: lost filesystem error report for type 5 error -117 [ 665.880250][ T9550] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 665.887572][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 665.887591][ C0] EXT4-fs (loop3): initial error at time 1782156189: ext4_acquire_dquot:7041 [ 665.887626][ C0] EXT4-fs (loop3): last error at time 1782156189: ext4_acquire_dquot:7041 [ 665.919551][ T9550] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 665.929590][ T9550] EXT4-fs (loop3): 1 truncate cleaned up [ 665.935718][ T9550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.986585][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.000354][ T9550] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 666.000523][ T28] audit: type=1400 audit(1782156189.430:4412): avc: denied { write } for pid=9549 comm="syz.3.12071" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.009752][ T9550] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 666.041450][ T9550] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.12071: Failed to acquire dquot type 0 [ 666.095552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4ef800: rx timeout, send abort [ 666.103845][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.112925][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.236671][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.367276][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 666.372775][ T9537] Set syz1 is full, maxelem 65536 reached [ 666.418929][ T9574] netlink: 'syz.3.12081': attribute type 27 has an invalid length. [ 666.526475][ T9574] bridge0: port 3(team0) entered disabled state [ 666.533002][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.540227][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.569487][ T9574] dummy0: left promiscuous mode [ 666.595575][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4ee600: rx timeout, send abort [ 666.603831][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4ef800: abort rx timeout. Force session deactivation [ 666.607930][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.630983][ T9574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.732026][ T9574] macvlan2: left promiscuous mode [ 666.781208][ T9577] bridge0: left promiscuous mode [ 666.823109][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.865961][ T9577] bridge0: port 3(team0) entered blocking state [ 666.872318][ T9577] bridge0: port 3(team0) entered forwarding state [ 666.879239][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.889312][ T9577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.913565][ T9577] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.920766][ T9577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.930404][ T9577] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.937475][ T9577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.961661][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.970690][ T9577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.985502][ T9577] veth1_vlan: left promiscuous mode [ 666.991683][ T9577] veth0_vlan: left promiscuous mode [ 666.997783][ T9577] veth0_vlan: entered promiscuous mode [ 667.040890][ T9577] veth1_vlan: entered promiscuous mode [ 667.062252][ T9577] veth1_macvtap: left promiscuous mode [ 667.074245][ T9577] veth0_macvtap: left promiscuous mode [ 667.082239][ T9577] veth0_macvtap: entered promiscuous mode [ 667.089376][ T9577] veth1_macvtap: entered promiscuous mode [ 667.095271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88815dbf4000: rx timeout, send abort [ 667.099266][ T9577] 8021q: adding VLAN 0 to HW filter on device eth0 [ 667.103568][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88815dbf4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 667.111753][ T9577] 8021q: adding VLAN 0 to HW filter on device eth1 [ 667.124345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c4ee600: abort rx timeout. Force session deactivation [ 667.169334][ T9577] 8021q: adding VLAN 0 to HW filter on device eth2 [ 667.198854][ T9577] 8021q: adding VLAN 0 to HW filter on device eth3 [ 667.211966][ T9577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.269191][ T2902] bridge0: entered promiscuous mode [ 667.299530][ T9596] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.12089'. [ 667.316804][ T7382] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.352803][ T68] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 667.374278][ T68] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 667.401549][ T68] bond1: active interface up! [ 667.421881][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12093'. [ 667.434141][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12093'. [ 667.480023][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.574144][ T9621] syzkaller0: entered promiscuous mode [ 667.580240][ T9621] syzkaller0: entered allmulticast mode [ 667.628047][ T68] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 667.758581][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12099'. [ 667.829113][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12101'. [ 668.158773][ T28] audit: type=1400 audit(1782156191.590:4413): avc: denied { listen } for pid=9650 comm="syz.4.12108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 669.229560][ T9666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.327334][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12125'. [ 669.341307][ T9701] netlink: 'syz.5.12127': attribute type 1 has an invalid length. [ 669.356351][ T28] audit: type=1326 audit(1782156192.770:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.12126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa958ccce59 code=0x7ffc0000 [ 669.422156][ T28] audit: type=1326 audit(1782156192.780:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.12126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa958ccce59 code=0x7ffc0000 [ 669.448095][ T28] audit: type=1326 audit(1782156192.780:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.12126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa958ccce59 code=0x7ffc0000 [ 669.465937][ T9701] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.474677][ T28] audit: type=1326 audit(1782156192.780:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.3.12126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa958ccce59 code=0x7ffc0000 [ 669.570147][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12124'. [ 669.706188][ T9701] bond8: (slave geneve4): making interface the new active one [ 669.762327][ T9701] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 670.107956][ T9732] netlink: 'syz.3.12137': attribute type 1 has an invalid length. [ 670.176418][ T9732] netlink: 'syz.3.12137': attribute type 2 has an invalid length. [ 670.220496][ T9735] netlink: 'syz.3.12138': attribute type 1 has an invalid length. [ 670.465656][ T9741] netlink: 'syz.4.12139': attribute type 1 has an invalid length. [ 670.516752][T22480] page_pool_release_retry() stalled pool shutdown: id 543, 1 inflight 60 sec [ 670.538830][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.546473][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.701494][ T9735] bond2: entered promiscuous mode [ 670.706839][ T9735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 670.732814][ T9739] bond2: (slave bridge1): making interface the new active one [ 670.749284][ T9739] bridge1: entered promiscuous mode [ 670.758162][ T9739] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 670.772864][ T9741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.809091][ T9745] vlan0: entered allmulticast mode [ 670.826457][ T9745] veth0_to_bond: entered allmulticast mode [ 670.865459][ T9745] bond3: (slave vlan0): making interface the new active one [ 670.912208][ T9745] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 670.942317][ T7770] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.951049][ T7770] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.960648][ T7770] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 50265 - 0 [ 670.975994][ T7770] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.995569][ T7770] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.023272][ T7770] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 50265 - 0 [ 671.074749][ T9750] syzkaller0: entered promiscuous mode [ 671.089048][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12146'. [ 671.094861][ T9750] syzkaller0: entered allmulticast mode [ 671.118224][ T7770] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.129567][ T7770] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.142474][ T7770] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 50265 - 0 [ 671.151905][ T7770] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.159240][ T9771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12148'. [ 671.162370][ T7770] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.178431][ T7770] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 50265 - 0 [ 671.200945][ T9763] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 671.220882][ T9772] bridge5: port 1(erspan0) entered blocking state [ 671.231776][ T9772] bridge5: port 1(erspan0) entered disabled state [ 671.248241][ T9772] erspan0: entered allmulticast mode [ 671.260513][ T9772] erspan0: entered promiscuous mode [ 671.275584][ T9772] bridge5: port 1(erspan0) entered blocking state [ 671.282126][ T9772] bridge5: port 1(erspan0) entered forwarding state [ 671.355560][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 671.355573][ T28] audit: type=1400 audit(1782156194.780:4436): avc: denied { write } for pid=9776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.457461][ T28] audit: type=1400 audit(1782156194.880:4437): avc: denied { write } for pid=9802 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.611122][ T28] audit: type=1400 audit(1782156195.040:4438): avc: denied { write } for pid=9808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.695220][ T28] audit: type=1400 audit(1782156195.120:4439): avc: denied { write } for pid=9827 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.028839][ T9841] erspan0: left allmulticast mode [ 672.045932][ T9841] erspan0: left promiscuous mode [ 672.119037][ T9841] bridge5: port 1(erspan0) entered disabled state [ 672.144850][ T9841] bridge_slave_0: left allmulticast mode [ 672.150604][ T9841] bridge_slave_0: left promiscuous mode [ 672.156314][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.176423][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12159'. [ 672.219759][ T9841] bridge_slave_1: left allmulticast mode [ 672.227479][ T9841] bridge_slave_1: left promiscuous mode [ 672.233328][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.271326][ T9841] bond0: (slave bond_slave_0): Releasing backup interface [ 672.302591][ T9841] bond_slave_0: left allmulticast mode [ 672.316877][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 672.352996][ T9841] bond0: (slave bond_slave_1): Releasing backup interface [ 672.377019][ T9841] bond_slave_1: left allmulticast mode [ 672.404201][ T9841] team0: Port device team_slave_0 removed [ 672.430904][ T9841] team0: Port device team_slave_1 removed [ 672.445678][ T9841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.455346][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.465922][ T9841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.477506][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.490207][ T9841] net_ratelimit: 20 callbacks suppressed [ 672.490222][ T9841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 672.568805][ T7382] bond1: (slave vlan2): link status definitely down, disabling slave [ 672.577871][ T7382] bond1: now running without any active interface! [ 672.633723][ T9867] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.648558][ T28] audit: type=1400 audit(1782156196.040:4440): avc: denied { read } for pid=9874 comm="syz.4.12175" path="socket:[140186]" dev="sockfs" ino=140186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 672.738729][ T7403] bond3: (slave vlan0): link status definitely down, disabling slave [ 672.753964][ T7403] bond3: now running without any active interface! [ 672.801187][ T9881] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 672.867520][ T9867] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.901037][ T9885] netlink: 'syz.8.12179': attribute type 1 has an invalid length. [ 672.909202][ T9885] netlink: 'syz.8.12179': attribute type 4 has an invalid length. [ 672.927995][ T9885] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.12179'. [ 672.971299][ T28] audit: type=1400 audit(1782156196.400:4441): avc: denied { getopt } for pid=9887 comm="syz.4.12180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 673.011515][ T9867] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.120103][ T9892] batman_adv: batadv0: Interface deactivated: gretap1 [ 673.172042][ T7403] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.183211][ T7403] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.231809][ T9867] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.243362][ T28] audit: type=1400 audit(1782156196.650:4442): avc: denied { write } for pid=9899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.266545][ T7403] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.275745][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.293030][ T28] audit: type=1400 audit(1782156196.720:4443): avc: denied { write } for pid=9912 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.342581][ T7403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.354251][ T7403] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.365239][ T7403] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.376260][ T7403] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.456165][ T9921] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.12196'. [ 673.466089][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12196'. [ 673.613023][ T28] audit: type=1400 audit(1782156197.040:4444): avc: denied { write } for pid=9922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.671827][ T28] audit: type=1400 audit(1782156197.100:4445): avc: denied { write } for pid=9933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.941077][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12192'. [ 674.047914][ T9951] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 674.175454][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12197'. [ 674.257931][ T9959] netlink: 'syz.4.12199': attribute type 39 has an invalid length. [ 674.876721][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 675.155314][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.162616][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.307771][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.317750][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.354740][ T49] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.363864][ T49] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.372590][ T49] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.382654][ T49] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.431947][T10009] loop3: detected capacity change from 0 to 512 [ 675.447443][T10009] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 675.476154][T10009] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.12216: Invalid block bitmap block 0 in block_group 0 [ 675.492047][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12217'. [ 675.507602][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.510590][T10009] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 675.518194][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 675.518321][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 675.518369][ C0] EXT4-fs (loop3): initial error at time 1782156198: ext4_read_block_bitmap_nowait:483 [ 675.518399][ C0] EXT4-fs (loop3): last error at time 1782156198: ext4_read_block_bitmap_nowait:483 [ 675.571387][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.572931][T10009] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.12216: attempt to clear invalid blocks 983261 len 1 [ 675.577139][T10020] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.12218'. [ 675.582284][T10009] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 675.605871][T10009] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.12216: Invalid inode table block 0 in block_group 0 [ 675.627939][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.628804][T10009] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 675.646674][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.648088][T10009] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 675.680086][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.681604][T10009] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.12216: Invalid inode table block 0 in block_group 0 [ 675.707151][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.712104][T10009] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 675.747294][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.750278][T10009] EXT4-fs error (device loop3): ext4_truncate:4691: inode #11: comm syz.3.12216: mark_inode_dirty error [ 675.780398][T10009] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 675.781198][T10009] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 675.803733][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.808801][T10009] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.12216: Invalid inode table block 0 in block_group 0 [ 675.830234][T10009] loop3: lost filesystem error report for type 5 error -117 [ 675.836150][T10009] EXT4-fs (loop3): 1 truncate cleaned up [ 675.855498][T10009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.929446][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.951515][T10037] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12227'. [ 675.962064][T10037] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12227'. [ 675.972774][T10037] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 676.034146][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12229'. [ 676.062557][T10043] netlink: 'syz.8.12230': attribute type 4 has an invalid length. [ 676.556018][T10066] team1: entered promiscuous mode [ 676.561181][T10066] team1: entered allmulticast mode [ 676.566434][T10066] 8021q: adding VLAN 0 to HW filter on device team1 [ 677.249326][T10102] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 677.281754][T10104] netlink: 'syz.5.12255': attribute type 4 has an invalid length. [ 678.003343][T10127] bridge0: port 3(team0) entered disabled state [ 678.009880][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.017069][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.076596][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.474160][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.510263][T10127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.116736][T10145] netlink: 'syz.6.12268': attribute type 4 has an invalid length. [ 679.126203][ T68] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.167681][ T68] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.180322][ T68] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.222127][ T68] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.310789][T10170] loop3: detected capacity change from 0 to 8192 [ 679.401428][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.409262][T10176] team0: Port device bond0 added [ 679.416850][T10176] bridge0: port 3(team0) entered blocking state [ 679.430296][T10176] bridge0: port 3(team0) entered disabled state [ 679.440654][T10176] team0: entered allmulticast mode [ 679.446212][T10176] team_slave_0: entered allmulticast mode [ 679.454810][T10170] loop3: p2 p3 p4 [ 679.464576][T10170] loop3: p2 size 64053 extends beyond EOD, truncated [ 679.474492][T10170] loop3: p3 start 16775424 is beyond EOD, truncated [ 679.481114][T10170] loop3: p4 size 50331904 extends beyond EOD, truncated [ 679.493519][T10176] team_slave_1: entered allmulticast mode [ 679.500614][T10176] bond0: entered allmulticast mode [ 679.508966][T10176] bond_slave_0: entered allmulticast mode [ 679.518471][T10176] bond_slave_1: entered allmulticast mode [ 679.524304][T10176] syz_tun: entered allmulticast mode [ 679.586786][T10176] team0: entered promiscuous mode [ 679.592929][T10179] __nla_validate_parse: 1 callbacks suppressed [ 679.592943][T10179] netlink: 756 bytes leftover after parsing attributes in process `syz.3.12284'. [ 679.612661][T10176] team_slave_0: entered promiscuous mode [ 679.620559][T10176] team_slave_1: entered promiscuous mode [ 679.627665][T10176] bond0: entered promiscuous mode [ 679.628731][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 679.634739][ T3038] udevd[3038]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 679.655297][T10176] bond_slave_0: entered promiscuous mode [ 679.662696][T10176] bond_slave_1: entered promiscuous mode [ 679.677995][T10178] dummy0: entered promiscuous mode [ 679.697275][T10177] dummy0: left promiscuous mode [ 679.778606][T10186] loop3: detected capacity change from 0 to 512 [ 679.824447][T10186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.861558][T10184] loop6: detected capacity change from 0 to 512 [ 679.887525][T10186] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.915675][ T28] kauditd_printk_skb: 440 callbacks suppressed [ 679.915691][ T28] audit: type=1400 audit(1782156203.340:4886): avc: denied { write } for pid=10185 comm="syz.3.12286" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 679.973240][T10186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.056429][T10184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.069004][T10184] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.196039][ T7923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.219525][T10206] bond0: (slave syz_tun): Releasing backup interface [ 680.239036][T10206] syz_tun: left allmulticast mode [ 680.244645][T10206] bond0: left promiscuous mode [ 680.257945][T10206] bond_slave_0: left promiscuous mode [ 680.267414][T10206] bond_slave_1: left promiscuous mode [ 680.273283][T10206] bond0: left allmulticast mode [ 680.278535][T10206] bond_slave_0: left allmulticast mode [ 680.284532][T10206] bond_slave_1: left allmulticast mode [ 680.297544][T10206] team0: Port device bond0 removed [ 680.303812][T10206] team0: left allmulticast mode [ 680.325918][T10206] team_slave_0: left allmulticast mode [ 680.357321][T10206] team_slave_1: left allmulticast mode [ 680.363233][T10206] team0: left promiscuous mode [ 680.368682][T10206] team_slave_0: left promiscuous mode [ 680.374834][T10206] team_slave_1: left promiscuous mode [ 680.380799][T10206] bridge0: port 3(team0) entered disabled state [ 680.400847][T10206] bridge_slave_0: left allmulticast mode [ 680.406700][T10206] bridge_slave_0: left promiscuous mode [ 680.407499][T10214] netlink: 'syz.4.12296': attribute type 10 has an invalid length. [ 680.418987][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.441352][T10206] bridge_slave_1: left allmulticast mode [ 680.449994][T10206] bridge_slave_1: left promiscuous mode [ 680.461829][T10206] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.484922][T10206] bond0: (slave bond_slave_0): Releasing backup interface [ 680.495194][T10206] bond0: (slave bond_slave_1): Releasing backup interface [ 680.506998][T10206] team0: Port device team_slave_0 removed [ 680.519242][T10206] team0: Port device team_slave_1 removed [ 680.531824][T10206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.545924][T10206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.565561][T10206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 680.581939][T10208] team0: Mode changed to "broadcast" [ 680.607706][T10214] team0: Port device wg2 added [ 680.615394][T10204] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 680.873310][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12300'. [ 681.078521][T10239] ref_ctr increment failed for inode: 0x30c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810006f000 [ 681.113240][T10238] uprobe: syz.3.12306:10238 failed to unregister, leaking uprobe [ 681.176301][T10244] loop3: detected capacity change from 0 to 512 [ 681.207729][T10244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 681.223554][T10244] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 681.249721][T10244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 681.264569][T10244] System zones: 1-12 [ 681.274908][T10244] EXT4-fs (loop3): orphan cleanup on readonly fs [ 681.294886][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.309053][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.310038][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.317687][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 681.317739][ C1] EXT4-fs (loop3): initial error at time 1782156204: ext4_read_block_bitmap_nowait:517 [ 681.317845][ C1] EXT4-fs (loop3): last error at time 1782156204: ext4_read_block_bitmap_nowait:517 [ 681.359643][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.360291][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.381745][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.382934][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.407114][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.408324][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.429973][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.431904][T10244] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.12308: Block bitmap for bg 0 marked uninitialized [ 681.454610][T10244] loop3: lost filesystem error report for type 5 error -117 [ 681.455441][T10244] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 681.478338][T10244] EXT4-fs (loop3): 1 truncate cleaned up [ 681.486069][T10244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.588634][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.773047][T10257] netlink: 'syz.4.12312': attribute type 1 has an invalid length. [ 681.786046][T10257] netlink: 'syz.4.12312': attribute type 2 has an invalid length. [ 681.847082][T10260] loop3: detected capacity change from 0 to 256 [ 681.896799][T10261] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 682.250961][T10284] netlink: 'syz.4.12325': attribute type 1 has an invalid length. [ 682.310572][T10284] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.363919][T10294] netlink: 'syz.6.12328': attribute type 1 has an invalid length. [ 682.380821][T10289] vlan3: entered allmulticast mode [ 682.400506][T10289] bond4: entered allmulticast mode [ 682.436889][T10294] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.462845][T10284] bond4: (slave geneve2): making interface the new active one [ 682.478219][T10284] geneve2: entered allmulticast mode [ 682.485838][T10284] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 682.525577][T10297] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 682.534402][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.542986][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.552238][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.577166][T10294] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 682.598081][T10297] netlink: 'syz.6.12328': attribute type 10 has an invalid length. [ 682.606095][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.615040][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12328'. [ 682.635932][T10297] dummy0: entered promiscuous mode [ 682.662631][ T296] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 682.672604][T10297] bond2: (slave dummy0): Removing an active aggregator [ 682.677550][ T296] bond2: (slave dummy0): link status up again after 0 ms [ 682.700678][T10297] bond2: (slave dummy0): Releasing backup interface [ 683.073914][T10312] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 683.294368][T10318] loop3: detected capacity change from 0 to 512 [ 683.359736][T10318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.372417][T10318] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.519143][ T7871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.615415][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12341'. [ 683.625698][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12341'. [ 684.160876][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12351'. [ 684.637130][T15299] IPVS: starting estimator thread 0... [ 684.737946][T10380] IPVS: using max 2256 ests per chain, 112800 per kthread [ 685.382008][T10422] 9p: Bad value for 'rfdno' [ 685.541179][ T28] audit: type=1400 audit(1782156208.970:4887): avc: denied { write } for pid=10445 comm="syz.3.12385" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 685.625971][ T28] audit: type=1400 audit(1782156209.050:4888): avc: denied { mounton } for pid=10453 comm="syz.8.12389" path="/file0" dev="autofs" ino=143047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 685.688248][T10458] bond3: (slave ip6gretap1): making interface the new active one [ 685.696951][T10458] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 685.705966][T10463] sit0: entered allmulticast mode [ 685.714193][T10463] sit0: entered promiscuous mode [ 686.161189][ T28] audit: type=1400 audit(1782156209.590:4889): avc: denied { listen } for pid=10484 comm="syz.6.12402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 686.332589][T10497] loop6: detected capacity change from 0 to 8192 [ 686.387323][T10497] loop6: p2 p3 p4 [ 686.391366][T10497] loop6: p2 size 64053 extends beyond EOD, truncated [ 686.405009][T10497] loop6: p3 start 16775424 is beyond EOD, truncated [ 686.424973][T10504] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 686.436129][T10497] loop6: p4 size 50331904 extends beyond EOD, truncated [ 686.599980][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 686.605197][ T3038] udevd[3038]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 687.032994][T10530] loop6: detected capacity change from 0 to 512 [ 687.058811][T10530] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 687.085168][T10530] EXT4-fs (loop6): 1 truncate cleaned up [ 687.091879][T10530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.131204][ T28] audit: type=1400 audit(1782156210.560:4890): avc: denied { write } for pid=10529 comm="syz.6.12418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.180402][ T7923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.202852][ T28] audit: type=1400 audit(1782156210.560:4891): avc: denied { write } for pid=10529 comm="syz.6.12418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.262073][ T28] audit: type=1400 audit(1782156210.560:4892): avc: denied { write } for pid=10529 comm="syz.6.12418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.287194][ T28] audit: type=1400 audit(1782156210.560:4893): avc: denied { write } for pid=10529 comm="syz.6.12418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.335302][ T28] audit: type=1400 audit(1782156210.570:4894): avc: denied { write } for pid=10529 comm="syz.6.12418" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 687.359970][T10539] loop6: detected capacity change from 0 to 256 [ 687.380325][T10504] Set syz1 is full, maxelem 65536 reached [ 687.482764][T10541] netlink: 'syz.6.12422': attribute type 1 has an invalid length. [ 687.510540][T10541] 8021q: adding VLAN 0 to HW filter on device bond4 [ 689.605677][T15299] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 689.612362][T15299] syz0: Port: 1 Link DOWN [ 689.636222][ T296] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.644903][ T296] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 689.679346][ T296] netdevsim netdevsim5 eth0: unset [0, 2] type 1 family 0 port 256 - 0 [ 689.691861][ T296] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.701435][ T296] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.710901][ T296] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 689.719655][ T296] netdevsim netdevsim5 eth1: unset [0, 2] type 1 family 0 port 256 - 0 [ 689.728234][ T296] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.737298][T15299] ±ÿ]×0¢ÊÞª speed is unknown, defaulting to 1000 [ 689.744096][ T296] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.753765][ T296] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 689.762825][ T296] netdevsim netdevsim5 eth2: unset [0, 2] type 1 family 0 port 256 - 0 [ 689.773728][ T296] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.783510][ T296] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.793857][ T296] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 689.803943][ T296] netdevsim netdevsim5 eth3: unset [0, 2] type 1 family 0 port 256 - 0 [ 689.813506][ T296] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.030843][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.089589][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.100618][T10607] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 691.205962][T10639] ref_ctr increment failed for inode: 0xb27 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811c4c3f00 [ 691.236449][T10638] uprobe: syz.4.12456:10638 failed to unregister, leaking uprobe [ 691.380660][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12459'. [ 691.380685][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12459'. [ 691.481512][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.485323][T10660] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 691.487129][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.982514][T10665] netlink: 'syz.6.12466': attribute type 1 has an invalid length. [ 692.000718][T10665] bond5: entered promiscuous mode [ 692.006737][T10665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 692.030458][T10665] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 692.045043][T10665] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 692.055751][T10665] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 692.097919][T10673] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 692.116328][T10673] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 692.222986][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12479'. [ 692.234292][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12479'. [ 692.245130][T10675] netlink: 'syz.5.12479': attribute type 7 has an invalid length. [ 692.260082][ T68] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.287916][ T68] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.303932][ T68] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.303949][T10681] netlink: 'syz.4.12471': attribute type 27 has an invalid length. [ 692.314697][ T68] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 692.340310][T10681] dummy0: left promiscuous mode [ 692.348331][T10681] vlan2: left allmulticast mode [ 692.353434][T10681] bond0: left allmulticast mode [ 692.367133][T10681] team1: left promiscuous mode [ 692.386917][T10681] team1: left allmulticast mode [ 692.396783][T10681] vlan0: left allmulticast mode [ 692.402457][T10681] veth0_to_bond: left allmulticast mode [ 692.421840][T10691] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 692.425121][T10681] vlan3: left allmulticast mode [ 692.457018][T10681] bond4: left allmulticast mode [ 692.482006][T10681] geneve2: left allmulticast mode [ 692.504665][ T296] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.571471][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.595749][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.623628][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.676119][T10686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.696788][T10686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.728495][T10686] veth1_vlan: left promiscuous mode [ 692.741091][T10686] veth0_vlan: left promiscuous mode [ 692.757858][T10686] veth0_vlan: entered promiscuous mode [ 692.767598][T10686] veth1_vlan: entered promiscuous mode [ 692.776027][T10686] veth1_macvtap: left promiscuous mode [ 692.782424][T10686] veth0_macvtap: left promiscuous mode [ 692.788871][T10686] veth0_macvtap: entered promiscuous mode [ 692.795339][T10686] veth1_macvtap: entered promiscuous mode [ 692.814214][T10686] batman_adv: batadv0: Interface activated: gretap1 [ 692.847669][T10686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.856890][T10686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 692.868590][T10686] 8021q: adding VLAN 0 to HW filter on device team1 [ 692.877803][T10686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 692.888342][T10686] 8021q: adding VLAN 0 to HW filter on device eth0 [ 692.897204][T10686] 8021q: adding VLAN 0 to HW filter on device eth1 [ 692.905940][T10686] 8021q: adding VLAN 0 to HW filter on device eth2 [ 692.914957][T10686] 8021q: adding VLAN 0 to HW filter on device eth3 [ 692.924762][T10686] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.946653][ T296] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.028284][ T296] bond3: (slave vlan0): link status definitely up, 10000 Mbps full duplex [ 693.044858][ T296] bond3: (slave vlan0): making interface the new active one [ 693.072278][ T296] bond3: active interface up! [ 693.107862][ T68] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 693.128130][ T68] bond2: (slave veth9): making interface the new active one [ 693.159705][ T68] bond2: active interface up! [ 693.198652][T10727] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 694.297809][T10755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.305557][T10755] team0: Port device bond0 added [ 694.379736][T10755] bridge0: port 1(team0) entered blocking state [ 694.407431][T10755] bridge0: port 1(team0) entered disabled state [ 694.421611][T10755] team0: entered allmulticast mode [ 694.434487][T10755] bond0: entered allmulticast mode [ 694.449490][T10755] gretap2: entered allmulticast mode [ 694.485060][T10755] team0: entered promiscuous mode [ 694.490173][T10755] bond0: entered promiscuous mode [ 694.495194][T10755] gretap2: entered promiscuous mode [ 694.751803][T10776] loop6: detected capacity change from 0 to 512 [ 694.777741][T10776] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 695.041991][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12507'. [ 696.843920][T10862] netlink: 'syz.5.12536': attribute type 1 has an invalid length. [ 696.878467][T10862] bond9: entered promiscuous mode [ 696.893167][T10862] 8021q: adding VLAN 0 to HW filter on device bond9 [ 696.924694][T10862] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 696.942109][T10862] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 696.953300][T10862] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 698.037940][T10866] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.079422][T10866] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 698.214975][T10875] loop6: detected capacity change from 0 to 8192 [ 698.270110][T10875] loop6: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 698.534960][ T3090] udevd[3090]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 698.535056][ T3038] udevd[3038]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 698.648535][ T9181] udevd[9181]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 698.667482][ T3063] udevd[3063]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 698.681312][ T9181] udevd[9181]: inotify_add_watch(7, /dev/loop6p14, 10) failed: No such file or directory [ 698.694179][T10889] udevd[10889]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory [ 698.704642][T10892] udevd[10892]: inotify_add_watch(7, /dev/loop6p12, 10) failed: No such file or directory [ 698.731367][ T3063] udevd[3063]: inotify_add_watch(7, /dev/loop6p15, 10) failed: No such file or directory [ 698.754681][T10887] udevd[10887]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 698.764705][T10886] udevd[10886]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 699.978034][T10924] netlink: 'syz.3.12554': attribute type 1 has an invalid length. [ 700.003569][T10924] bond3: entered promiscuous mode [ 700.010577][T10924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 700.045438][T10924] bridge0: Device is already in use. [ 700.051968][T10924] bridge0: Device is already in use. [ 700.876581][T10974] ipvlan2: entered promiscuous mode [ 700.882509][T10974] bridge0: port 1(ipvlan2) entered blocking state [ 700.889175][T10974] bridge0: port 1(ipvlan2) entered disabled state [ 700.895790][T10974] ipvlan2: entered allmulticast mode [ 700.901085][T10974] bridge0: entered allmulticast mode [ 700.906877][T10974] ipvlan2: left allmulticast mode [ 700.914951][T10974] bridge0: left allmulticast mode [ 701.090756][T10989] netlink: 830 bytes leftover after parsing attributes in process `syz.5.12580'. [ 701.194117][ T28] audit: type=1326 audit(1782156224.590:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x0 [ 701.223046][T11001] loop6: detected capacity change from 0 to 128 [ 701.386505][ T28] audit: type=1326 audit(1782156224.810:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 701.684984][ T28] audit: type=1326 audit(1782156224.810:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 701.737007][ T28] audit: type=1326 audit(1782156224.810:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 701.762660][ T28] audit: type=1326 audit(1782156224.810:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 701.790211][ T28] audit: type=1326 audit(1782156224.810:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f141369ce59 code=0x7ffc0000 [ 701.816949][ T28] audit: type=1326 audit(1782156224.870:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141365d68e code=0x7ffc0000 [ 701.853244][ T28] audit: type=1326 audit(1782156224.870:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141365d68e code=0x7ffc0000 [ 701.880542][ T28] audit: type=1326 audit(1782156224.870:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141365d68e code=0x7ffc0000 [ 701.906599][ T28] audit: type=1326 audit(1782156224.880:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.4.12585" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f141365d68e code=0x7ffc0000 [ 702.089336][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12594'. [ 702.365211][T11056] netlink: 'syz.3.12602': attribute type 13 has an invalid length. [ 702.401088][T11033] batman_adv: batadv0: Interface deactivated: gretap1 [ 702.455283][ T7382] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.469235][ T7382] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.479207][ T7382] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.489105][ T7382] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.599726][T11095] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12616'. [ 703.609181][T11095] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12616'. [ 703.631900][T11095] loop6: detected capacity change from 0 to 512 [ 703.663848][T11095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.676899][T11095] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.809243][ T7923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.558410][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12656'. [ 706.772220][T11211] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.901898][T11211] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.022086][T11211] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.140001][T11211] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.178903][T11229] syz.3.12666 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 707.192740][T11229] CPU: 1 UID: 0 PID: 11229 Comm: syz.3.12666 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 707.192773][T11229] Tainted: [W]=WARN [ 707.192824][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.192838][T11229] Call Trace: [ 707.192854][T11229] [ 707.192862][T11229] __dump_stack+0x1d/0x30 [ 707.192883][T11229] dump_stack_lvl+0x95/0xd0 [ 707.192953][T11229] dump_stack+0x15/0x1b [ 707.192970][T11229] dump_header+0x80/0x240 [ 707.192999][T11229] oom_kill_process+0x295/0x350 [ 707.193026][T11229] out_of_memory+0x981/0xbc0 [ 707.193068][T11229] try_charge_memcg+0x621/0xa00 [ 707.193137][T11229] charge_memcg+0x6d/0x120 [ 707.193202][T11229] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 707.193237][T11229] swap_cache_alloc_folio+0x47b/0x5e0 [ 707.193275][T11229] swap_cluster_readahead+0x2b1/0x460 [ 707.193304][T11229] swapin_readahead+0xd8/0x8a0 [ 707.193394][T11229] ? _raw_spin_unlock+0x9/0x30 [ 707.193419][T11229] ? swap_put_entries_cluster+0x49c/0x4c0 [ 707.193455][T11229] ? __rcu_read_unlock+0x4e/0x70 [ 707.193539][T11229] ? swap_cache_get_folio+0x1f7/0x200 [ 707.193569][T11229] do_swap_page+0x2a2/0x1ec0 [ 707.193600][T11229] ? __css_rstat_updated+0xbb/0x280 [ 707.193674][T11229] ? __rcu_read_lock+0x36/0x50 [ 707.193699][T11229] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 707.193728][T11229] handle_mm_fault+0xb3c/0x2da0 [ 707.193831][T11229] do_user_addr_fault+0x634/0x1060 [ 707.193856][T11229] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 707.193928][T11229] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 707.194008][T11229] ? trace_page_fault_user+0x1f/0xa0 [ 707.194039][T11229] exc_page_fault+0x62/0xa0 [ 707.194077][T11229] asm_exc_page_fault+0x26/0x30 [ 707.194096][T11229] RIP: 0033:0x7fa958c87f83 [ 707.194113][T11229] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 707.194129][T11229] RSP: 002b:00007ffcd125f810 EFLAGS: 00010246 [ 707.194212][T11229] RAX: 0000000000000000 RBX: 0000555591d03500 RCX: 0000000000000000 [ 707.194225][T11229] RDX: 00007ffcd125f850 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.194238][T11229] RBP: 00007fa958f47da0 R08: 0000000000000000 R09: 0000000000000000 [ 707.194250][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000acc3b [ 707.194262][T11229] R13: 00007fa958f4609c R14: 00000000000ac983 R15: 00007fa958f46090 [ 707.194285][T11229] [ 707.194302][T11229] memory: usage 307200kB, limit 307200kB, failcnt 3261 [ 707.442933][T11229] memory+swap: usage 3472kB, limit 9007199254740988kB, failcnt 0 [ 707.450703][T11229] kmem: usage 2536kB, limit 9007199254740988kB, failcnt 0 [ 707.457838][T11229] Memory cgroup stats for /syz3: [ 707.458063][T11229] cache 0 [ 707.465911][T11229] rss 4096 [ 707.468963][T11229] shmem 0 [ 707.471899][T11229] mapped_file 0 [ 707.475369][T11229] dirty 0 [ 707.478490][T11229] writeback 0 [ 707.481890][T11229] workingset_refault_anon 2639 [ 707.486816][T11229] workingset_refault_file 32 [ 707.491584][T11229] swap 749568 [ 707.494919][T11229] swapcached 33992704 [ 707.499008][T11229] pgpgin 366893 [ 707.502885][T11229] pgpgout 366892 [ 707.506453][T11229] pgfault 412623 [ 707.510168][T11229] pgmajfault 5996 [ 707.515311][T11229] inactive_anon 0 [ 707.520888][T11229] active_anon 4096 [ 707.524740][ T7403] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.525910][T11229] inactive_file 0 [ 707.541262][ T7770] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.546555][T11229] active_file 0 [ 707.558574][ T7770] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.560084][T11229] unevictable 0 [ 707.571877][ T7770] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.576156][T11229] hierarchical_memory_limit 314572800 [ 707.586492][T11229] hierarchical_memsw_limit 9223372036854771712 [ 707.593180][T11229] total_cache 0 [ 707.597091][T11229] total_rss 4096 [ 707.600671][T11229] total_shmem 0 [ 707.604116][T11229] total_mapped_file 0 [ 707.609932][T11229] total_dirty 0 [ 707.615905][T11229] total_writeback 0 [ 707.619815][T11229] total_workingset_refault_anon 2639 [ 707.625443][T11229] total_workingset_refault_file 32 [ 707.630905][T11229] total_swap 749568 [ 707.631023][ T2966] ================================================================== [ 707.634787][T11229] total_swapcached 33992704 [ 707.642840][ T2966] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 707.642866][ T2966] [ 707.642873][ T2966] write to 0xffffffff86c84d00 of 8 bytes by task 11229 on cpu 0: [ 707.647790][T11229] total_pgpgin 366893 [ 707.654356][ T2966] data_alloc+0x2fc/0x380 [ 707.656734][T11229] total_pgpgout 366892 [ 707.664385][ T2966] prb_reserve+0x8e3/0xaf0 [ 707.664409][ T2966] vprintk_store+0x54a/0x910 [ 707.668515][T11229] total_pgfault 412623 [ 707.672666][ T2966] vprintk_emit+0x1a4/0x600 [ 707.676886][T11229] total_pgmajfault 5996 [ 707.681238][ T2966] vprintk_default+0x26/0x30 [ 707.685853][T11229] total_inactive_anon 0 [ 707.689860][ T2966] vprintk+0x1d/0x30 [ 707.689890][ T2966] _printk+0x79/0xa0 [ 707.689906][ T2966] seq_buf_do_printk+0x113/0x1a0 [ 707.689924][ T2966] mem_cgroup_print_oom_meminfo+0x17d/0x260 [ 707.694434][T11229] total_active_anon 4096 [ 707.698526][ T2966] dump_header+0xa2/0x240 [ 707.698548][ T2966] oom_kill_process+0x295/0x350 [ 707.698576][ T2966] out_of_memory+0x981/0xbc0 [ 707.703267][T11229] total_inactive_file 0 [ 707.707263][ T2966] try_charge_memcg+0x621/0xa00 [ 707.707295][ T2966] charge_memcg+0x6d/0x120 [ 707.707321][ T2966] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 707.763279][ T2966] swap_cache_alloc_folio+0x47b/0x5e0 [ 707.768652][ T2966] swap_cluster_readahead+0x2b1/0x460 [ 707.774198][ T2966] swapin_readahead+0xd8/0x8a0 [ 707.778958][ T2966] do_swap_page+0x2a2/0x1ec0 [ 707.783543][ T2966] handle_mm_fault+0xb3c/0x2da0 [ 707.788394][ T2966] do_user_addr_fault+0x634/0x1060 [ 707.793500][ T2966] exc_page_fault+0x62/0xa0 [ 707.797999][ T2966] asm_exc_page_fault+0x26/0x30 [ 707.802839][ T2966] [ 707.805148][ T2966] read to 0xffffffff86c84d00 of 16 bytes by task 2966 on cpu 1: [ 707.812762][ T2966] _prb_read_valid+0x183/0x930 [ 707.817519][ T2966] prb_read_valid+0x3c/0x60 [ 707.822013][ T2966] syslog_print+0x164/0x560 [ 707.826504][ T2966] do_syslog+0x52b/0x7f0 [ 707.830740][ T2966] __x64_sys_syslog+0x41/0x50 [ 707.835407][ T2966] x64_sys_call+0x2b9e/0x3020 [ 707.840076][ T2966] do_syscall_64+0x136/0x3c0 [ 707.844656][ T2966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.850541][ T2966] [ 707.852851][ T2966] Reported by Kernel Concurrency Sanitizer on: [ 707.858988][ T2966] CPU: 1 UID: 0 PID: 2966 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 707.869412][ T2966] Tainted: [W]=WARN [ 707.873204][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.883427][ T2966] ================================================================== [ 707.903446][T11229] total_active_file 0 [ 707.908090][T11229] total_unevictable 0 [ 707.912272][T11229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.12666,pid=11229,uid=0 [ 707.927563][T11229] Memory cgroup out of memory: Killed process 11229 (syz.3.12666) total-vm:96216kB, anon-rss:1236kB, file-rss:22256kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000