last executing test programs: 3m49.992149355s ago: executing program 4 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m49.729847452s ago: executing program 4 (id=383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) 3m46.963360551s ago: executing program 4 (id=391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000003) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r1, 0x402, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x40000000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) unlink(&(0x7f0000000280)='./file1\x00') 3m46.898755102s ago: executing program 4 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x10, 0x51, 0xfe, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m46.774535685s ago: executing program 4 (id=399): socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m46.730152357s ago: executing program 4 (id=401): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x1e8, 0x310, 0x1e8, 0x0, 0xf0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1a}, @ipv4=@private=0xa010102, 0x3d, 0xa, 0x81}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xd3, 0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@srh={{0x30}, {0x3c, 0x5, 0x3, 0x2, 0x3, 0x240, 0x1002}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x3}}}, {{@ipv6={@loopback, @mcast2, [0xff, 0xff], [0xff, 0xff, 0xffffffff, 0xffffffff], 'bond_slave_0\x00', 'pim6reg\x00', {}, {}, 0x88, 0x80, 0x4, 0x10}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@ipv6={@mcast2, @local, [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xff000000, 0xff], 'geneve0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiXVr5pq5r3tGmYuxpBkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnz07Ut6nbauD2mqy+O9CtZ8T+Vy7qUTrr0neHsd+JfN3UlfXZF5fihrP3/e+f/H3y7WMiXPyGh16FImmGdpSxJY56/3H/ycDDYeTbnRL4CVJghaN3teqHvdex113ihbxpra9W7G63QtLySwu2w73aME7iFvh+YFee2qTUaq8atbPub3fWm3Xbzife/X69W18z7S9mWvft+JXQ2vHbb664nMfHsOOa++fTnaYhrd4zZfTzYWZ2WZBxUmyWoPi2oXq3Xa7V6vbZ2r3HvfrVaHJlQPUYjEXN/0eJrZn4Hb+ANFeL6/3dLaqusrja1JTP2x1FTgXx1JszP5PX/3bvuif0erv95lb80nH1ZSf2/lj67Nqn+T8jFyCQLjJtjTZj+ej/P9VL7eqKHGmigHT2bz3qvzy/Dt/uzLhUlT6F8eerI1rpcmWyKUUNrWlNVH2hDLYUyaslTW65CbStUX646yT4J5MpOWrEVOboto5oaamhVRq4q2pavTXW1rqZs/TuKol09Trb76gk5Kg+qzRJUPyFoUv3/xSdp1lPrvyXq/zdafvyaJQY4d1F2/n9K199ONgAAAAAA4G2wkr++W8l791clRWp5bbd63mkBAAAAAIA5St75vxI/LMatq7ImnP9HZ58bAAAAAACYDyv5jp0laTn5UL81/CbULB8CWDiDFAEAAAAAwBtK3v+/VpKi5Npr12Wd6vwfAAAAAAB8Dfz+0DX2i/k1dqP8bf2CpLC3ZP3ln0sKFq1Xva3vWnt2PMfey2JGPgHQb122LmYX6k0eSpKSZ457xbqaBmUXwbTSC/tKX+5Ou9a/FRxLoLSQ//liWgJrxeyZPtWNNOZG1u+j/YKSOWkvyy2v7VYcv/2gJtu+WOi7W/1fP338Gyk4GOfu48FO5cOPB4+SXF7Fk17txXl8ciSdwrRcXijbFlfHjviCWnmXf+h2lq2k32o+/gXZe4XDHc02/t/qZhpzczl9XN7P90Ay/nI8/lol2WXD0cej+uxPw9HXjo983I6YkEU5yeJWGnNr5Vb6kOeXZfG9BaleOb4PSvFLcLgt6oezmL4trH+NbIspWcTbYjXO4q/xioavhCNZrJ4ui5E9AgDnZXdYhZKLmI9eY/943X2do9z06v6jo728+CxKv3C4IBWz9yZO7KWs+Ii+kqxbJSUH1uLlg6Ps3o38iF7N6kpZE47o1TeobnFffx7eAylLe6Su/CeKoge1pN8/HvSbVtXP4wU+n9hv2K4vxCO8+2Lvl8kF8GMf7Xy087ReX12rvlet3qtrMRlG9kDtAQCMMf0eO1MjrPcOzqof/ePdtHWk4n3r4CMFFX2ojzXQI93JbyFwffxalw99DOHO6FlrHHtBOh5b052JZ3VJLU1jf7Zd+mEalPxeVL7I0Uo9XO/qW90HAACctZuNrDGhDs9S/+8k592SVi4fOu8+OGc/VsuP3yF4Us2tndk2AADgf40bfGkt939nBYHX+6DWaNTs/oZrAt/5iQm85rprvG7fDZwNu7vuml7g933Hb5teoCWv6YYm3Oz1/KBvWn5gen7obZmW13ZNduv30O3Y3b7nhL22a4eucfxu33b6pumFjult/rjthRtukCwc9lzHa3mO3ff8rgn9zcBxK8aErnso0Gu63b7X8uJm1/QCr2MH2+anfnuz45qmGzqB1+v76Qrzvrxuyw86yWorik59o0MAAL6Jnr/cf/JwMNh5NqmRnNFPiRk2SuNWmPfFO84AAHw1jFbpicpnkhAAAAAAAAAAAAAAAAAAAAAAABgx/St9p2wsjvuyoHQw5VcXZ1qPpXkndppG4fUX/9sJMRcOpuSb/3DMq3MYqdJGcf5rvnCar43OofGD3XSLToyJZ46dtXSwL4rz/+8QN55+MWFWFEXRyYsvHd2GpZMGeLRRlPSs9Aa74HyORwDOzn8DAAD//+I0QI0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000100)={0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'ovf\x00', 0x36, 0xbe, 0x37}, 0x2c) fstat(r0, &(0x7f0000000080)) 3m31.32618882s ago: executing program 32 (id=401): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x1e8, 0x310, 0x1e8, 0x0, 0xf0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1a}, @ipv4=@private=0xa010102, 0x3d, 0xa, 0x81}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xd3, 0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@srh={{0x30}, {0x3c, 0x5, 0x3, 0x2, 0x3, 0x240, 0x1002}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x3}}}, {{@ipv6={@loopback, @mcast2, [0xff, 0xff], [0xff, 0xff, 0xffffffff, 0xffffffff], 'bond_slave_0\x00', 'pim6reg\x00', {}, {}, 0x88, 0x80, 0x4, 0x10}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@ipv6={@mcast2, @local, [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xff000000, 0xff], 'geneve0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000a80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e734fdc2da8c998a8700232e5263a04392efa56fc98553afa5a498c8c3a3206f2b25a00c0ec0d1202c822ab708037a4c29a9c81216c73358cda8b1a2532650070aaf77d3ac8e46f2b2b5ed7828c6165514d2f40c6cf8eb2e325f9d2b7750af696145751cdfc7d00f6021f29a689969eadb6a870fb43b3f6badebdc0048aa9956828007502b62", @ANYRES16, @ANYRES64, @ANYBLOB="f47d9d"], 0x1, 0x65c, &(0x7f0000002280)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiXVr5pq5r3tGmYuxpBkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnz07Ut6nbauD2mqy+O9CtZ8T+Vy7qUTrr0neHsd+JfN3UlfXZF5fihrP3/e+f/H3y7WMiXPyGh16FImmGdpSxJY56/3H/ycDDYeTbnRL4CVJghaN3teqHvdex113ihbxpra9W7G63QtLySwu2w73aME7iFvh+YFee2qTUaq8atbPub3fWm3Xbzife/X69W18z7S9mWvft+JXQ2vHbb664nMfHsOOa++fTnaYhrd4zZfTzYWZ2WZBxUmyWoPi2oXq3Xa7V6vbZ2r3HvfrVaHJlQPUYjEXN/0eJrZn4Hb+ANFeL6/3dLaqusrja1JTP2x1FTgXx1JszP5PX/3bvuif0erv95lb80nH1ZSf2/lj67Nqn+T8jFyCQLjJtjTZj+ej/P9VL7eqKHGmigHT2bz3qvzy/Dt/uzLhUlT6F8eerI1rpcmWyKUUNrWlNVH2hDLYUyaslTW65CbStUX646yT4J5MpOWrEVOboto5oaamhVRq4q2pavTXW1rqZs/TuKol09Trb76gk5Kg+qzRJUPyFoUv3/xSdp1lPrvyXq/zdafvyaJQY4d1F2/n9K199ONgAAAAAA4G2wkr++W8l791clRWp5bbd63mkBAAAAAIA5St75vxI/LMatq7ImnP9HZ58bAAAAAACYDyv5jp0laTn5UL81/CbULB8CWDiDFAEAAAAAwBtK3v+/VpKi5Npr12Wd6vwfAAAAAAB8Dfz+0DX2i/k1dqP8bf2CpLC3ZP3ln0sKFq1Xva3vWnt2PMfey2JGPgHQb122LmYX6k0eSpKSZ457xbqaBmUXwbTSC/tKX+5Ou9a/FRxLoLSQ//liWgJrxeyZPtWNNOZG1u+j/YKSOWkvyy2v7VYcv/2gJtu+WOi7W/1fP338Gyk4GOfu48FO5cOPB4+SXF7Fk17txXl8ciSdwrRcXijbFlfHjviCWnmXf+h2lq2k32o+/gXZe4XDHc02/t/qZhpzczl9XN7P90Ay/nI8/lol2WXD0cej+uxPw9HXjo983I6YkEU5yeJWGnNr5Vb6kOeXZfG9BaleOb4PSvFLcLgt6oezmL4trH+NbIspWcTbYjXO4q/xioavhCNZrJ4ui5E9AgDnZXdYhZKLmI9eY/943X2do9z06v6jo728+CxKv3C4IBWz9yZO7KWs+Ii+kqxbJSUH1uLlg6Ps3o38iF7N6kpZE47o1TeobnFffx7eAylLe6Su/CeKoge1pN8/HvSbVtXP4wU+n9hv2K4vxCO8+2Lvl8kF8GMf7Xy087ReX12rvlet3qtrMRlG9kDtAQCMMf0eO1MjrPcOzqof/ePdtHWk4n3r4CMFFX2ojzXQI93JbyFwffxalw99DOHO6FlrHHtBOh5b052JZ3VJLU1jf7Zd+mEalPxeVL7I0Uo9XO/qW90HAACctZuNrDGhDs9S/+8k592SVi4fOu8+OGc/VsuP3yF4Us2tndk2AADgf40bfGkt939nBYHX+6DWaNTs/oZrAt/5iQm85rprvG7fDZwNu7vuml7g933Hb5teoCWv6YYm3Oz1/KBvWn5gen7obZmW13ZNduv30O3Y3b7nhL22a4eucfxu33b6pumFjult/rjthRtukCwc9lzHa3mO3ff8rgn9zcBxK8aErnso0Gu63b7X8uJm1/QCr2MH2+anfnuz45qmGzqB1+v76Qrzvrxuyw86yWorik59o0MAAL6Jnr/cf/JwMNh5NqmRnNFPiRk2SuNWmPfFO84AAHw1jFbpicpnkhAAAAAAAAAAAAAAAAAAAAAAABgx/St9p2wsjvuyoHQw5VcXZ1qPpXkndppG4fUX/9sJMRcOpuSb/3DMq3MYqdJGcf5rvnCar43OofGD3XSLToyJZ46dtXSwL4rz/+8QN55+MWFWFEXRyYsvHd2GpZMGeLRRlPSs9Aa74HyORwDOzn8DAAD//+I0QI0=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000100)={0x3a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x1, 'ovf\x00', 0x36, 0xbe, 0x37}, 0x2c) fstat(r0, &(0x7f0000000080)) 3m0.517848637s ago: executing program 1 (id=795): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x277}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 2m59.645847838s ago: executing program 1 (id=803): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x10000008) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet_nvme(r0, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) 2m58.564000476s ago: executing program 1 (id=820): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000cc0)=0x2, 0x4) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000000)) dup3(r0, r1, 0x0) 2m56.105555926s ago: executing program 1 (id=826): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) unshare(0x400) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 2m55.511969671s ago: executing program 1 (id=835): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0xa00010, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m55.157637s ago: executing program 1 (id=839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/s1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000080)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 2m55.127010841s ago: executing program 33 (id=839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/s1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000080)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 9.148467892s ago: executing program 6 (id=2619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000580)="0e", 0x0, 0xc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.271959484s ago: executing program 6 (id=2618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x10000, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x8, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x7, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) 8.130841958s ago: executing program 6 (id=2621): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x0, 0x7832}, 0x4, 0x0, 0x10004, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7.472058724s ago: executing program 6 (id=2634): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_genetlink_get_family_id$gtp(0x0, r3) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) 7.090941803s ago: executing program 6 (id=2637): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x48043) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 3.60079268s ago: executing program 6 (id=2644): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) getrusage(0x1, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3.038420644s ago: executing program 0 (id=2661): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000dc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x844) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x2, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@orlov}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.879157178s ago: executing program 0 (id=2652): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 2.208054835s ago: executing program 2 (id=2658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010600000000000000000000000000000000000000000c0003006272696467653000180012000b00010062726964676500000800020000000000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001000010600000000000000000000000000000000000000000a00030076657468300000003800120008000100766574682c00020028000100000000000000000000000000000000001400030076657468305f746f5f62726964676500"], 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002e0)=ANY=[@ANYBLOB="640000001000010600000000000000000000000000000000000000000a00030076657468310000003800120008000100766574682c00020028000100000000000000000000000000000000001400030076657468315f746f5f62726964676500"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c00000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000002c001a802800048024000680080001000100000008000200e803000008000300030000000800040010270000"], 0x4c}}, 0x0) 2.207802265s ago: executing program 3 (id=2659): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.099658558s ago: executing program 2 (id=2662): pipe(&(0x7f00000001c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x9, 0x6, 0xc7a0, 0x9, 0x8, 0xb62}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x8, 0x0, 0xc96, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unshare(0x24060400) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x2, 0x2, "e5d5d01bee270008"}) 2.038590979s ago: executing program 3 (id=2663): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.031801809s ago: executing program 5 (id=2664): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd84, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 2.031143409s ago: executing program 2 (id=2665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800004, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.916251712s ago: executing program 3 (id=2666): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) setregid(0x0, r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) 1.819092895s ago: executing program 3 (id=2667): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = timerfd_create(0x0, 0x80000) timerfd_gettime(r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x0, 0x0, 0x0, 0xb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x7, 0x5) 1.803286735s ago: executing program 0 (id=2668): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.765633536s ago: executing program 3 (id=2669): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) 1.743282596s ago: executing program 0 (id=2670): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x5e6) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) 1.501124633s ago: executing program 0 (id=2671): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$eJzs3E1rXFUYB/Bnpmne2ryotdou9IAbcTE0WbgqyCApSAaU2gitINyYiQ4ZZ0ruEBgRU1du/Ryu3Ql+g2z8DO6y6bIL8UrvzJikmRqEvCG/3yL3ufecf845MDNwh3tm/+5P32xt5kWR9aJaqUT1cUR6liJFNUbeWh0cHz5arTcaK/dTuld/sPR+Smn+7d8+/24qIq599sv8r1Oxt/jF/tPlP/Zu7t3a/+vB1608tfLU6fZSlta73Wq23p5PG618q5YmP2k3s7yZWp28uT1s72Xr7WbafC8i+inrbMzNPt5u5nnKOv201eynXjf1tvsp+yprdVKtVktzs8FLXT1ydvfKmC5rPz8riiKiKK7GZBRFUczEbFyL6zEX8/EkIl6JV+O1uBGvx814I96MW7tFmQAAAAAAAAAAAAAAAAAAAABOz2D//2TEmP3/C7F4fP9/2P8PAAAAAAAAAAAAAAAAAAAAp+3Th49W643Gyv2UpiPaP+6s7awNjoP2xed/2tGMO7EQf0a5+39gUN/7qLFyJ5UW44f27jC/u7N2pczXR/ml8ucEhvmJsm2UXxrk09H8VMw+z29Gq8wvx0LcGD/+8tj8dLz7zqF8LRbi9y+jG+3YKMc+yH+/lNKHHzdeyN8u+wEAAMD/QS39Y+z9e632svZBvr5ZGf2rk74feOH+eiJuT1zYshnK+99uZdV2c7ss2qNi+tiVsyviv6amz2liJxYRT4uymDraVD2jQatx4Us+VFQuxzQua3F9+A67LPM5XlQinhxcmYmjfS74g4lzcfB6KE93/6XrzLlNCgAAAAAAAAAAgBOd8ZOGEzF6suyQDy5mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zQ4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//6HG/JQ==") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@tracing={0x0, 0x4000009}}, 0x20) mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.500893463s ago: executing program 3 (id=2672): r0 = socket(0xa, 0x3, 0x3a) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x9, 0xbe, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81, 0x4}}}}}]}}]}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getuid() sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1.090133483s ago: executing program 2 (id=2673): mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86822, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000001c0)={0xfffe, 0x8, 0x8, 0x9, 0xb, "6c06002004dc17a8"}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x7ff, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) flock(r1, 0x1) 1.087065403s ago: executing program 5 (id=2674): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c01000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000fc001a80400002803c0001"], 0x11c}}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000000b0c0)={0x0, 0x0, &(0x7f000000b080)={&(0x7f0000000a80)=@newtaction={0x44, 0x30, 0x1, 0x70bd27, 0x25dfdc01, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) accept(r5, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000606010300000000000000000700000a0900020073797a3100000000e800020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 893.318087ms ago: executing program 2 (id=2675): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x10000008) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet_nvme(r1, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) 841.671429ms ago: executing program 5 (id=2676): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 710.043832ms ago: executing program 5 (id=2677): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, 0x0, 0xf0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r3}, 0x38) 269.189463ms ago: executing program 5 (id=2678): socket(0x400000000010, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x24020400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 140.044066ms ago: executing program 5 (id=2679): ioperm(0x6, 0x9, 0x824) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 40.287479ms ago: executing program 2 (id=2680): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) 0s ago: executing program 0 (id=2681): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) kernel console output (not intermixed with test programs): ort device xfrm0 added [ 231.311554][ T9413] tipc: Started in network mode [ 231.323274][ T9413] tipc: Node identity b24a9ac8ada5, cluster identity 4711 [ 231.342580][ T9413] tipc: Enabled bearer , priority 0 [ 231.379822][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.464566][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1842'. [ 231.562062][ T9425] loop5: detected capacity change from 0 to 256 [ 232.300527][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 232.845038][ T9436] tipc: Failed to remove unknown binding: 66,0,0/0:1142675022/1142675024 [ 232.853857][ T9436] tipc: Failed to remove unknown binding: 66,0,0/0:1142675022/1142675023 [ 232.862829][ T9436] tipc: Failed to remove unknown binding: 66,0,0/0:1142675022/1142675024 [ 232.871574][ T9436] tipc: Failed to remove unknown binding: 66,0,0/0:1142675022/1142675023 [ 234.399274][ T9432] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 234.400488][ T9434] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 234.409234][ T1039] tipc: Node number set to 535796424 [ 234.514813][ T4418] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.539352][ T4418] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.559936][ T9455] loop6: detected capacity change from 0 to 512 [ 234.561920][ T4418] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.602514][ T9455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.625706][ T4418] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.644328][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 234.644348][ T29] audit: type=1400 audit(1785154412.527:9273): avc: denied { bind } for pid=9456 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.742449][ T9455] EXT4-fs (loop6): 1 truncate cleaned up [ 234.748552][ T29] audit: type=1400 audit(1785154412.527:9274): avc: denied { node_bind } for pid=9456 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 234.784867][ T9455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.808119][ T9463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.839813][ T29] audit: type=1400 audit(1785154412.717:9275): avc: denied { write } for pid=9448 comm="syz.6.1850" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.885606][ T9463] team0: Port device xfrm0 added [ 234.908431][ T9463] tipc: Started in network mode [ 234.920821][ T9463] tipc: Node identity a60342da6494, cluster identity 4711 [ 234.937172][ T9463] tipc: Enabled bearer , priority 0 [ 235.118464][ T9469] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1858'. [ 235.283807][ T29] audit: type=1326 audit(1785154413.157:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.2.1859" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 235.360123][ T29] audit: type=1326 audit(1785154413.187:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.2.1859" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 235.492315][ T29] audit: type=1326 audit(1785154413.347:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.2.1859" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 235.547419][ T29] audit: type=1326 audit(1785154413.367:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9470 comm="syz.2.1859" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 235.662903][ T9486] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 235.739903][ T6132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.818684][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1863'. [ 235.973640][ T4466] tipc: Node number set to 3264692954 [ 236.010055][ T9505] syzkaller0: entered promiscuous mode [ 236.015734][ T9505] syzkaller0: entered allmulticast mode [ 236.093904][ T29] audit: type=1400 audit(1785154413.977:9280): avc: denied { listen } for pid=9508 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.321353][ T9518] loop5: detected capacity change from 0 to 512 [ 236.348414][ T9518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 236.366222][ T9518] EXT4-fs (loop5): 1 truncate cleaned up [ 236.383855][ T9518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.409886][ T29] audit: type=1400 audit(1785154414.287:9281): avc: denied { write } for pid=9515 comm="syz.5.1874" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.791678][ T29] audit: type=1400 audit(1785154414.667:9282): avc: denied { connect } for pid=9531 comm="syz.6.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.323051][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.697426][ T9552] netlink: 380 bytes leftover after parsing attributes in process `syz.2.1887'. [ 237.975286][ T9556] tipc: Failed to remove unknown binding: 66,0,0/2099199:354557912/354557914 [ 237.985502][ T9556] tipc: Failed to remove unknown binding: 66,0,0/2099199:354557912/354557913 [ 237.999429][ T9556] tipc: Failed to remove unknown binding: 66,0,0/2099199:354557912/354557914 [ 238.025362][ T9556] tipc: Failed to remove unknown binding: 66,0,0/2099199:354557912/354557913 [ 238.107759][ T9565] loop6: detected capacity change from 0 to 1024 [ 238.448942][ T9588] tipc: Failed to remove unknown binding: 66,0,0/535796424:2359820911/2359820913 [ 238.465384][ T9588] tipc: Failed to remove unknown binding: 66,0,0/535796424:2359820911/2359820912 [ 238.489443][ T9588] tipc: Failed to remove unknown binding: 66,0,0/535796424:2359820911/2359820913 [ 238.518514][ T9588] tipc: Failed to remove unknown binding: 66,0,0/535796424:2359820911/2359820912 [ 238.584208][ T9599] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1905'. [ 238.803633][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1910'. [ 238.846717][ T9608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9608 comm=syz.5.1910 [ 239.153407][ T9614] loop5: detected capacity change from 0 to 128 [ 239.248075][ T9614] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.262975][ T9614] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.417400][ T9627] netlink: 'syz.0.1919': attribute type 21 has an invalid length. [ 239.441631][ T9627] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.449415][ T9627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.456697][ T9627] IPv6: NLM_F_CREATE should be set when creating new route [ 239.464115][ T9627] IPv6: NLM_F_CREATE should be set when creating new route [ 239.471482][ T9627] IPv6: NLM_F_CREATE should be set when creating new route [ 239.474620][ T9628] netlink: 'syz.0.1919': attribute type 21 has an invalid length. [ 239.487273][ T9628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.496673][ T4772] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.590347][ T9627] vlan4: entered promiscuous mode [ 239.608916][ T9627] bridge0: entered promiscuous mode [ 239.722190][ T9637] netlink: 'syz.6.1920': attribute type 13 has an invalid length. [ 239.732201][ T9637] netlink: 'syz.6.1920': attribute type 17 has an invalid length. [ 239.824852][ T9645] netlink: 'syz.0.1924': attribute type 83 has an invalid length. [ 239.848049][ T9637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.875417][ T9637] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.901715][ T9637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.971318][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 239.971344][ T29] audit: type=1326 audit(1785154417.847:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.019397][ T9637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.023833][ T29] audit: type=1326 audit(1785154417.847:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.031693][ T9637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.087664][ T29] audit: type=1326 audit(1785154417.847:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.131311][ T9637] veth1_vlan: left promiscuous mode [ 240.155651][ T9637] veth0_vlan: left promiscuous mode [ 240.170505][ T29] audit: type=1326 audit(1785154417.847:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.182454][ T9637] veth0_vlan: entered promiscuous mode [ 240.239473][ T29] audit: type=1326 audit(1785154417.887:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.266879][ T9653] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1927'. [ 240.269742][ T9637] veth1_vlan: entered promiscuous mode [ 240.288648][ T29] audit: type=1326 audit(1785154417.907:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43af0e6ce code=0x7ffc0000 [ 240.336680][ T9637] veth1_macvtap: left promiscuous mode [ 240.354254][ T9637] veth0_macvtap: left promiscuous mode [ 240.374337][ T9655] SELinux: failed to load policy [ 240.380187][ T29] audit: type=1326 audit(1785154417.947:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43af0e6ce code=0x7ffc0000 [ 240.413407][ T29] audit: type=1326 audit(1785154417.947:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43af0e6ce code=0x7ffc0000 [ 240.449657][ T9637] veth0_macvtap: entered promiscuous mode [ 240.463016][ T9653] loop0: detected capacity change from 0 to 764 [ 240.482310][ T9659] loop5: detected capacity change from 0 to 128 [ 240.500997][ T9659] bio_check_eod: 7740 callbacks suppressed [ 240.501011][ T9659] syz.5.1930: attempt to access beyond end of device [ 240.501011][ T9659] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 240.530445][ T29] audit: type=1326 audit(1785154417.947:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43af0e6ce code=0x7ffc0000 [ 240.540941][ T9637] veth1_macvtap: entered promiscuous mode [ 240.580791][ T9659] syz.5.1930: attempt to access beyond end of device [ 240.580791][ T9659] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 240.599511][ T9659] buffer_io_error: 7739 callbacks suppressed [ 240.599530][ T9659] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 240.605683][ T29] audit: type=1326 audit(1785154417.947:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9635 comm="syz.5.1921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 240.605826][ T9659] syz.5.1930: attempt to access beyond end of device [ 240.605826][ T9659] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 240.605888][ T9659] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 240.638043][ T9637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 240.730910][ T9637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 240.761776][ T9637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.805804][ T9637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.854439][ T9637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.922066][ T9637] bond3: left allmulticast mode [ 240.930233][ T9637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.977514][ T9637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.059787][ T3443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.069269][ T3443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.081641][ T3443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.102968][ T3443] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.112052][ T9659] syz.5.1930: attempt to access beyond end of device [ 241.112052][ T9659] loop5: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 241.133172][ T4434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.172721][ T9659] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 241.191647][ T9659] syz.5.1930: attempt to access beyond end of device [ 241.191647][ T9659] loop5: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 241.209101][ T9659] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 241.218467][ T4434] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.230861][ T4434] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.248149][ T9659] syz.5.1930: attempt to access beyond end of device [ 241.248149][ T9659] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 241.294575][ T9659] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 241.318539][ T9659] syz.5.1930: attempt to access beyond end of device [ 241.318539][ T9659] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 241.357290][ T9659] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 241.391122][ T4434] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.402247][ T4434] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.522832][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.558363][ T4429] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.692637][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.701254][ T4429] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 241.781188][ T3301] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 241.814081][ T4434] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.824906][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 241.824942][ T3301] Tainted: [W]=WARN [ 241.824949][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 241.825018][ T3301] Call Trace: [ 241.825025][ T3301] [ 241.825089][ T3301] __dump_stack+0x1d/0x30 [ 241.825125][ T3301] dump_stack_lvl+0x95/0xd0 [ 241.825153][ T3301] dump_stack+0x15/0x1b [ 241.825172][ T3301] dump_header+0x80/0x240 [ 241.825196][ T3301] oom_kill_process+0x295/0x350 [ 241.825323][ T3301] out_of_memory+0x981/0xbc0 [ 241.825379][ T3301] try_charge_memcg+0x621/0xa00 [ 241.825408][ T3301] ? should_fail_ex+0x30/0x270 [ 241.825457][ T3301] charge_memcg+0x6d/0x120 [ 241.825586][ T3301] __mem_cgroup_charge+0x28/0xb0 [ 241.825655][ T3301] filemap_add_folio+0x110/0x350 [ 241.825702][ T3301] __filemap_get_folio_mpol+0x32e/0x840 [ 241.825748][ T3301] filemap_fault+0x458/0xb60 [ 241.825807][ T3301] handle_mm_fault+0x167a/0x2da0 [ 241.825865][ T3301] do_user_addr_fault+0x634/0x1060 [ 241.825905][ T3301] ? trace_page_fault_user+0x1f/0xa0 [ 241.826004][ T3301] exc_page_fault+0x62/0xa0 [ 241.826041][ T3301] asm_exc_page_fault+0x26/0x30 [ 241.826063][ T3301] RIP: 0033:0x7f25cb9ebe74 [ 241.826121][ T3301] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 99 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 98 ee 00 48 01 d1 [ 241.826146][ T3301] RSP: 002b:00007fffe5a510a0 EFLAGS: 00010202 [ 241.826163][ T3301] RAX: 0000001b32a24000 RBX: 0000000000000448 RCX: 000000000003ad68 [ 241.826242][ T3301] RDX: 000000000ab1d96a RSI: 00007fffe5a51130 RDI: 0000000000000001 [ 241.826256][ T3301] RBP: 00007fffe5a510dc R08: 0000000028cc10f2 R09: 3fffffffffffffff [ 241.826269][ T3301] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 241.826284][ T3301] R13: 00000000000927c0 R14: 000000000003af1c R15: 00007fffe5a51130 [ 241.826343][ T3301] [ 241.964522][ T9696] SELinux: failed to load policy [ 241.975432][ T3301] memory: usage 295232kB, limit 307200kB, failcnt 816 [ 242.038776][ T3301] memory+swap: usage 315952kB, limit 9007199254740988kB, failcnt 0 [ 242.047693][ T3301] kmem: usage 247060kB, limit 9007199254740988kB, failcnt 0 [ 242.061807][ T3301] Memory cgroup stats for /syz2: [ 242.062190][ T3301] cache 27910144 [ 242.087971][ T3301] rss 368640 [ 242.156694][ T3301] shmem 27308032 [ 242.176741][ T3301] mapped_file 16384 [ 242.216471][ T3301] dirty 16384 [ 242.237435][ T3301] writeback 0 [ 242.271932][ T3301] workingset_refault_anon 0 [ 242.280019][ T9717] veth0_vlan: entered allmulticast mode [ 242.310410][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1945'. [ 242.353622][ T3301] workingset_refault_file 3308 [ 242.358420][ T3301] swap 42250240 [ 242.361927][ T3301] swapcached 44273664 [ 242.417528][ T3301] pgpgin 184605 [ 242.424096][ T3301] pgpgout 177697 [ 242.446815][ T3301] pgfault 171572 [ 242.470344][ T3301] pgmajfault 4430 [ 242.474115][ T3301] inactive_anon 27394048 [ 242.483297][ T9717] veth0_vlan (unregistering): left allmulticast mode [ 242.512751][ T3301] active_anon 290816 [ 242.516724][ T3301] inactive_file 356352 [ 242.528633][ T3301] active_file 0 [ 242.536254][ T3301] unevictable 0 [ 242.546557][ T3301] hierarchical_memory_limit 314572800 [ 242.560961][ T3301] hierarchical_memsw_limit 9223372036854771712 [ 242.577366][ T3301] total_cache 27910144 [ 242.591254][ T3301] total_rss 368640 [ 242.597545][ T3301] total_shmem 27308032 [ 242.605253][ T3301] total_mapped_file 16384 [ 242.609667][ T3301] total_dirty 16384 [ 242.622672][ T3301] total_writeback 0 [ 242.633425][ T3301] total_workingset_refault_anon 0 [ 242.650155][ T3301] total_workingset_refault_file 3308 [ 242.659219][ T3301] total_swap 42250240 [ 242.675004][ T3301] total_swapcached 44273664 [ 242.683999][ T3301] total_pgpgin 184605 [ 242.692316][ T3301] total_pgpgout 177697 [ 242.702701][ T3301] total_pgfault 171572 [ 242.712045][ T3301] total_pgmajfault 4430 [ 242.717774][ T3301] total_inactive_anon 27394048 [ 242.722717][ T3301] total_active_anon 290816 [ 242.739225][ T3301] total_inactive_file 356352 [ 242.748521][ T3301] total_active_file 0 [ 242.754501][ T3301] total_unevictable 0 [ 242.762439][ T3301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1933,pid=9668,uid=0 [ 242.781234][ T3301] Memory cgroup out of memory: OOM victim 9668 (syz.2.1933) is already exiting. Skip killing the task [ 243.207228][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 243.212929][ T9794] netlink: 380 bytes leftover after parsing attributes in process `syz.6.1947'. [ 243.233484][ T9792] team2: entered promiscuous mode [ 243.238706][ T9792] team2: entered allmulticast mode [ 243.244242][ T9792] 8021q: adding VLAN 0 to HW filter on device team2 [ 243.265122][ T9794] loop6: detected capacity change from 0 to 764 [ 243.290593][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1957'. [ 243.303915][ T9792] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 243.327409][ T9792] team3: entered promiscuous mode [ 243.332484][ T9792] team3: entered allmulticast mode [ 243.340570][ T9792] 8021q: adding VLAN 0 to HW filter on device team3 [ 243.421395][ C1] sd 0:0:1:0: [sda] tag#4032 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.431837][ C1] sd 0:0:1:0: [sda] tag#4032 CDB: Read(6) 08 00 00 00 00 00 [ 243.472553][ C1] sd 0:0:1:0: [sda] tag#4033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.483034][ C1] sd 0:0:1:0: [sda] tag#4033 CDB: Read(6) 08 00 00 00 00 00 [ 243.524691][ C1] sd 0:0:1:0: [sda] tag#4034 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.535136][ C1] sd 0:0:1:0: [sda] tag#4034 CDB: Read(6) 08 00 00 00 00 00 [ 243.559401][ C1] sd 0:0:1:0: [sda] tag#4035 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.569835][ C1] sd 0:0:1:0: [sda] tag#4035 CDB: Read(6) 08 00 00 00 00 00 [ 243.599315][ C1] sd 0:0:1:0: [sda] tag#4036 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.609734][ C1] sd 0:0:1:0: [sda] tag#4036 CDB: Read(6) 08 00 00 00 00 00 [ 243.617135][ C1] sd 0:0:1:0: [sda] tag#4037 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.627558][ C1] sd 0:0:1:0: [sda] tag#4037 CDB: Read(6) 08 00 00 00 00 00 [ 243.937054][ T9810] loop5: detected capacity change from 0 to 1024 [ 244.017982][ T9816] SELinux: failed to load policy [ 244.088548][ T9810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.205006][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.468722][ T9841] loop5: detected capacity change from 0 to 512 [ 244.476269][ T9841] EXT4-fs: dax option not supported [ 245.088543][ T9879] netlink: 'syz.5.1978': attribute type 13 has an invalid length. [ 245.098887][ T9879] netlink: 'syz.5.1978': attribute type 17 has an invalid length. [ 245.179590][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.190248][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.199069][ T9879] tipc: Resetting bearer [ 245.205924][ T9879] tipc: Resetting bearer [ 245.212002][ T9879] dummy0: left promiscuous mode [ 245.221600][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.279938][ T9879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.290589][ T9879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.305826][ T9879] veth1_vlan: left promiscuous mode [ 245.313262][ T9879] veth0_vlan: left promiscuous mode [ 245.321222][ T9879] veth0_vlan: entered promiscuous mode [ 245.329618][ T9879] veth1_vlan: entered promiscuous mode [ 245.340764][ T9879] veth1_macvtap: left promiscuous mode [ 245.347785][ T9879] veth0_macvtap: left promiscuous mode [ 245.356278][ T9879] veth0_macvtap: entered promiscuous mode [ 245.367429][ T9879] veth1_macvtap: entered promiscuous mode [ 245.378351][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.390480][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.402494][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.415193][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.429745][ T9879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.446747][ T9879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.457536][ T9879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.467671][ T9879] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.514511][ T9879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.529441][ T9879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.623447][ T4429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.632268][ T4429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.652938][ T316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.663692][ T316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.723350][ T4414] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 245.738769][ T4414] bond5: (slave veth3): making interface the new active one [ 245.748661][ T4414] bond5: active interface up! [ 246.043339][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 246.043357][ T29] audit: type=1400 audit(1785154423.917:9304): avc: denied { mounton } for pid=9903 comm="syz.6.1987" path="/" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 246.138725][ T9911] loop6: detected capacity change from 0 to 128 [ 246.185326][ T4429] net_ratelimit: 108 callbacks suppressed [ 246.185346][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 246.210033][ T4429] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 246.323161][ T4418] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 246.335455][ T4418] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 246.521375][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 246.538111][ T4429] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 246.677929][ T4418] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 246.685886][ T4418] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 246.807790][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 246.824117][ T4429] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 246.850065][ T29] audit: type=1400 audit(1785154424.727:9305): avc: denied { create } for pid=9920 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.932276][ T29] audit: type=1400 audit(1785154424.727:9306): avc: denied { read } for pid=9920 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.867540][ T29] audit: type=1326 audit(1785154425.747:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9941 comm="syz.6.2004" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761169de99 code=0x7ffc0000 [ 247.938169][ T29] audit: type=1326 audit(1785154425.777:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9941 comm="syz.6.2004" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f761169de99 code=0x7ffc0000 [ 248.037992][ T29] audit: type=1326 audit(1785154425.847:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9941 comm="syz.6.2004" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761169de99 code=0x7ffc0000 [ 248.116529][ T29] audit: type=1326 audit(1785154425.847:9310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9941 comm="syz.6.2004" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761169de99 code=0x7ffc0000 [ 248.510131][T10000] vhci_hcd vhci_hcd.2: invalid port number 253 [ 248.510589][ T29] audit: type=1400 audit(1785154426.387:9311): avc: denied { append } for pid=9997 comm="syz.6.2020" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 248.539359][T10000] vhci_hcd vhci_hcd.2: default hub control req: 4001 v0008 i00fd l0 [ 248.556248][T10002] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2011'. [ 248.844292][T10042] loop0: detected capacity change from 0 to 1024 [ 248.895630][T10042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.907026][T10042] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 248.918317][T10042] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 248.926897][T10042] EXT4-fs (loop0): orphan cleanup on readonly fs [ 248.935472][T10042] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.2013: Invalid inode table block 0 in block_group 0 [ 248.948546][T10042] loop0: lost filesystem error report for type 5 error -117 [ 248.948804][T10042] EXT4-fs (loop0): Remounting filesystem read-only [ 248.956173][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 248.956228][ C0] EXT4-fs (loop0): initial error at time 1785154426: __ext4_get_inode_loc:4886 [ 248.956278][ C0] EXT4-fs (loop0): last error at time 1785154426: __ext4_get_inode_loc:4886 [ 248.990583][ T29] audit: type=1400 audit(1785154426.867:9312): avc: denied { ioctl } for pid=10049 comm="syz.2.2018" path="socket:[26575]" dev="sockfs" ino=26575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.991475][T10042] Quota error (device loop0): write_blk: dquota write failed [ 249.016066][T10050] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2018'. [ 249.033555][T10042] EXT4-fs (loop0): 1 truncate cleaned up [ 249.040612][T10042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.234876][T10063] uprobe: syz.6.2024:10063 failed to unregister, leaking uprobe [ 249.247359][T10063] uprobe: syz.6.2024:10063 failed to unregister, leaking uprobe [ 249.535600][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.599199][T10094] loop0: detected capacity change from 0 to 128 [ 249.638297][T10094] syz.0.2028: attempt to access beyond end of device [ 249.638297][T10094] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 249.683198][T10094] syz.0.2028: attempt to access beyond end of device [ 249.683198][T10094] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 249.733445][T10094] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 249.754054][T10094] syz.0.2028: attempt to access beyond end of device [ 249.754054][T10094] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 249.769156][T10094] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 249.825047][T10094] syz.0.2028: attempt to access beyond end of device [ 249.825047][T10094] loop0: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 249.861993][T10094] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 249.883053][T10094] syz.0.2028: attempt to access beyond end of device [ 249.883053][T10094] loop0: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 249.919213][T10094] Buffer I/O error on dev loop0, logical block 78, lost async page write [ 249.934120][T10094] syz.0.2028: attempt to access beyond end of device [ 249.934120][T10094] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 249.960501][T10094] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 249.980064][T10094] syz.0.2028: attempt to access beyond end of device [ 249.980064][T10094] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 249.986297][T10110] loop5: detected capacity change from 0 to 1024 [ 250.001479][T10094] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 250.024523][T10110] EXT4-fs: Ignoring removed bh option [ 250.059447][T10110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.283615][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.649717][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2041'. [ 251.158810][T10191] tipc: Resetting bearer [ 251.172479][T10204] netlink: 'syz.5.2045': attribute type 16 has an invalid length. [ 251.193899][T10191] tipc: Resetting bearer [ 251.202900][T10204] netlink: 'syz.5.2045': attribute type 17 has an invalid length. [ 251.204947][ T4429] net_ratelimit: 77 callbacks suppressed [ 251.204989][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.252667][ T4414] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.273688][ T4414] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.333824][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.373430][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.412759][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.436420][ T4414] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.473671][ T4434] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.496234][T10218] SELinux: syz.0.2046 (10218) wrote to user. This is no longer supported. [ 251.506233][ T4429] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.537656][ T4414] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 251.547462][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 251.547478][ T29] audit: type=1400 audit(1785154429.427:9315): avc: denied { write } for pid=10217 comm="syz.0.2046" name="functions" dev="configfs" ino=15176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.664505][ T29] audit: type=1400 audit(1785154429.457:9316): avc: denied { write } for pid=10217 comm="syz.0.2046" name="core" dev="configfs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.785585][ T4424] tipc: Resetting bearer [ 251.862747][ T29] audit: type=1400 audit(1785154429.737:9317): avc: denied { write } for pid=10247 comm="syz.0.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.906124][T10204] tipc: Resetting bearer [ 251.913725][T10204] tipc: Resetting bearer [ 251.928610][ T29] audit: type=1326 audit(1785154429.807:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.2050" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 251.969436][ T29] audit: type=1326 audit(1785154429.807:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.2050" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 252.010127][ T29] audit: type=1326 audit(1785154429.887:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.2050" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 252.040164][ T29] audit: type=1326 audit(1785154429.887:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.2.2050" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 252.098791][T10259] loop6: detected capacity change from 0 to 128 [ 252.160356][T10259] syz.6.2061: attempt to access beyond end of device [ 252.160356][T10259] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 252.175154][T10259] syz.6.2061: attempt to access beyond end of device [ 252.175154][T10259] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 252.189994][T10259] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 252.198763][T10259] syz.6.2061: attempt to access beyond end of device [ 252.198763][T10259] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 252.216074][T10259] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 252.227762][T10259] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 252.237348][T10259] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 252.253450][T10253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2048'. [ 252.391166][T10272] loop5: detected capacity change from 0 to 512 [ 252.446344][T10272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.497071][T10272] EXT4-fs (loop5): 1 truncate cleaned up [ 252.509885][ T29] audit: type=1400 audit(1785154430.387:9322): avc: denied { getopt } for pid=10277 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.535665][T10272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.563003][ T29] audit: type=1400 audit(1785154430.437:9323): avc: denied { write } for pid=10270 comm="syz.5.2053" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.722425][T10271] syz.5.2053 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 252.739778][T10281] infiniband syz1: set active [ 252.749743][T10281] infiniband syz1: added syz_tun [ 252.777794][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.5.2053 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 252.777869][T10271] Tainted: [W]=WARN [ 252.777888][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 252.777906][T10271] Call Trace: [ 252.777914][T10271] [ 252.777925][T10271] __dump_stack+0x1d/0x30 [ 252.777953][T10271] dump_stack_lvl+0x95/0xd0 [ 252.778021][T10271] dump_stack+0x15/0x1b [ 252.778047][T10271] dump_header+0x80/0x240 [ 252.778086][T10271] oom_kill_process+0x295/0x350 [ 252.778128][T10271] out_of_memory+0x981/0xbc0 [ 252.778183][T10271] try_charge_memcg+0x621/0xa00 [ 252.778207][T10271] ? __rcu_read_unlock+0x4e/0x70 [ 252.778268][T10271] __memcg_kmem_charge_page+0x199/0x3a0 [ 252.778343][T10271] __alloc_frozen_pages_noprof+0x18a/0x350 [ 252.778394][T10271] alloc_pages_mpol+0xa9/0x1d0 [ 252.778448][T10271] alloc_pages_noprof+0x8f/0x140 [ 252.778481][T10271] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 252.778530][T10271] __kvmalloc_node_noprof+0x3a0/0x590 [ 252.778567][T10271] ? futex_hash_allocate+0x192/0x920 [ 252.778602][T10271] ? futex_hash_allocate+0x192/0x920 [ 252.778622][T10271] ? futex_hash_allocate+0x192/0x920 [ 252.778645][T10271] futex_hash_allocate+0x192/0x920 [ 252.778681][T10271] ? cap_task_prctl+0x13f/0x6b0 [ 252.778768][T10271] futex_hash_prctl+0xd8/0xf0 [ 252.778797][T10271] __se_sys_prctl+0x4f4/0x13b0 [ 252.778838][T10271] __x64_sys_prctl+0x67/0x80 [ 252.778879][T10271] x64_sys_call+0x2533/0x3020 [ 252.778962][T10271] do_syscall_64+0x136/0x3c0 [ 252.779025][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.779056][T10271] RIP: 0033:0x7fe43af4de99 [ 252.779077][T10271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.779103][T10271] RSP: 002b:00007fe4399a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 252.779210][T10271] RAX: ffffffffffffffda RBX: 00007fe43b1d5fa0 RCX: 00007fe43af4de99 [ 252.779228][T10271] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 252.779292][T10271] RBP: 00007fe43afe3eaf R08: 0000000000000000 R09: 0000000000000000 [ 252.779310][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.779327][T10271] R13: 00007fe43b1d6038 R14: 00007fe43b1d5fa0 R15: 00007ffc13480398 [ 252.779354][T10271] [ 252.779477][T10271] memory: usage 307200kB, limit 307200kB, failcnt 1332 [ 252.801083][T10281] RDS/IB: syz1: added [ 252.964958][T10271] memory+swap: usage 331128kB, limit 9007199254740988kB, failcnt 0 [ 252.983554][T10281] smc: adding ib device syz1 with port count 1 [ 253.015534][T10271] kmem: usage 262764kB, limit 9007199254740988kB, failcnt 0 [ 253.027061][T10281] smc: ib device syz1 port 1 has no pnetid [ 253.056350][T10271] Memory cgroup stats for /syz5: [ 253.056672][T10271] cache 45256704 [ 253.073103][T10271] rss 212992 [ 253.077930][T10271] shmem 45219840 [ 253.082690][T10271] mapped_file 0 [ 253.088117][T10271] dirty 0 [ 253.092559][T10271] writeback 0 [ 253.097684][T10271] workingset_refault_anon 2640 [ 253.109661][T10271] workingset_refault_file 303 [ 253.120446][T10271] swap 24502272 [ 253.125871][T10271] swapcached 49504256 [ 253.133402][T10271] pgpgin 131531 [ 253.138344][T10271] pgpgout 120422 [ 253.145451][T10271] pgfault 112129 [ 253.150529][T10271] pgmajfault 4673 [ 253.176345][T10271] inactive_anon 45408256 [ 253.184114][T10271] active_anon 57344 [ 253.191090][T10271] inactive_file 0 [ 253.200054][T10271] active_file 8192 [ 253.205711][T10271] unevictable 28672 [ 253.215944][T10271] hierarchical_memory_limit 314572800 [ 253.223360][T10271] hierarchical_memsw_limit 9223372036854771712 [ 253.245552][T10271] total_cache 45256704 [ 253.254775][T10271] total_rss 212992 [ 253.264830][T10271] total_shmem 45219840 [ 253.274417][T10271] total_mapped_file 0 [ 253.284302][T10271] total_dirty 0 [ 253.292293][T10271] total_writeback 0 [ 253.302669][T10271] total_workingset_refault_anon 2640 [ 253.326330][T10271] total_workingset_refault_file 303 [ 253.337494][T10271] total_swap 24502272 [ 253.350539][T10271] total_swapcached 49504256 [ 253.359387][T10271] total_pgpgin 131531 [ 253.378421][T10271] total_pgpgout 120422 [ 253.385390][T10271] total_pgfault 112129 [ 253.390962][T10271] total_pgmajfault 4673 [ 253.401737][T10271] total_inactive_anon 45408256 [ 253.413769][T10271] total_active_anon 57344 [ 253.422544][T10271] total_inactive_file 0 [ 253.437218][T10271] total_active_file 8192 [ 253.455725][T10271] total_unevictable 28672 [ 253.468358][T10271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2053,pid=10270,uid=0 [ 253.500052][T10271] Memory cgroup out of memory: Killed process 10270 (syz.5.2053) total-vm:100464kB, anon-rss:1432kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 253.613535][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.459934][T10302] veth0_vlan: entered allmulticast mode [ 254.466545][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 254.543156][ T4438] smc: removing ib device syz0 [ 254.588434][T10302] veth0_vlan (unregistering): left allmulticast mode [ 255.103864][ T29] audit: type=1326 audit(1785154432.987:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10328 comm="syz.2.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 255.593570][T10342] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2081'. [ 256.242812][ T4438] net_ratelimit: 109 callbacks suppressed [ 256.242831][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.334133][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 256.483193][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.495158][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 256.524638][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 256.549351][T10368] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 256.557627][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 256.573401][T10368] geneve2: entered promiscuous mode [ 256.578678][T10368] geneve2: entered allmulticast mode [ 256.622240][T10371] syzkaller0: entered promiscuous mode [ 256.641192][T10371] syzkaller0: entered allmulticast mode [ 256.642760][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.657836][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 256.680251][T10375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2093'. [ 256.782628][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.790663][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 256.801064][T10380] tipc: Enabled bearer , priority 0 [ 256.817469][T10380] syzkaller0: entered promiscuous mode [ 256.830367][T10382] x_tables: duplicate entry at hook 3 [ 256.838948][T10380] syzkaller0: entered allmulticast mode [ 256.869326][T10380] tipc: Resetting bearer [ 256.893769][T10380] tipc: Resetting bearer [ 256.913446][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.914900][T10380] tipc: Disabling bearer [ 256.933266][ T4440] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 256.955445][T10386] syzkaller0: entered promiscuous mode [ 256.961092][T10386] syzkaller0: entered allmulticast mode [ 257.346208][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 257.367998][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 257.378102][T10403] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2104'. [ 257.430276][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2106'. [ 257.572017][T10414] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2109'. [ 257.722111][T10423] loop0: detected capacity change from 0 to 2048 [ 257.731780][T10421] netlink: 'syz.2.2111': attribute type 30 has an invalid length. [ 257.824454][T10423] loop0: p1 < > p3 [ 257.829249][T10423] loop0: p3 size 134217728 extends beyond EOD, truncated [ 257.938134][T10431] netlink: 'syz.6.2113': attribute type 1 has an invalid length. [ 257.942238][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 257.942277][ T29] audit: type=1400 audit(1785154435.817:9399): avc: denied { bind } for pid=10429 comm="syz.0.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.994314][T10428] bond5: (slave veth0_to_bond): making interface the new active one [ 257.999256][ T29] audit: type=1400 audit(1785154435.877:9400): avc: denied { read write } for pid=10435 comm="syz.0.2116" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 258.028729][ T29] audit: type=1400 audit(1785154435.877:9401): avc: denied { open } for pid=10435 comm="syz.0.2116" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 258.052427][T10428] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 258.052756][T10436] loop0: detected capacity change from 0 to 512 [ 258.089510][T10436] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2116: inode has both inline data and extents flags [ 258.112645][T10428] macvlan2: entered promiscuous mode [ 258.118047][T10428] macvlan2: entered allmulticast mode [ 258.120147][T10436] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 258.123712][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 258.124944][T10428] bond5: entered promiscuous mode [ 258.132924][ C0] EXT4-fs (loop0): initial error at time 1785154435: ext4_orphan_get:1399: inode 15 [ 258.132969][ C0] EXT4-fs (loop0): last error at time 1785154435: ext4_orphan_get:1399: inode 15 [ 258.163456][T10428] veth0_to_bond: entered promiscuous mode [ 258.169209][T10436] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2116: couldn't read orphan inode 15 (err -117) [ 258.169951][T10428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.181186][T10436] loop0: lost filesystem error report for type 5 error -117 [ 258.191655][T10436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.323466][T10428] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 258.341821][T10428] bond5: left promiscuous mode [ 258.347461][T10428] veth0_to_bond: left promiscuous mode [ 258.733425][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.928875][T10473] loop6: detected capacity change from 0 to 512 [ 258.948602][T10473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.966947][T10473] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.039030][ T6132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.159588][T10483] syzkaller0: entered promiscuous mode [ 259.172543][T10483] syzkaller0: entered allmulticast mode [ 259.200501][T10488] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 259.402410][T10506] syzkaller0: entered promiscuous mode [ 259.408887][T10506] syzkaller0: entered allmulticast mode [ 259.631832][T10518] loop6: detected capacity change from 0 to 1024 [ 259.680960][T10518] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.703750][T10518] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 5: comm syz.6.2148: lblock 5 mapped to illegal pblock 5 (length 1) [ 259.719616][T10518] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.722459][T10518] Quota error (device loop6): write_blk: dquota write failed [ 259.732662][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 259.732809][ C0] EXT4-fs (loop6): initial error at time 1785154437: ext4_map_blocks:833: inode 3: block 5 [ 259.733379][ C0] EXT4-fs (loop6): last error at time 1785154437: ext4_map_blocks:833: inode 3: block 5 [ 259.842154][T10518] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 259.851697][T10518] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 259.861639][T10518] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2148: Failed to acquire dquot type 0 [ 259.883302][T10518] loop6: lost filesystem error report for type 5 error -117 [ 259.883559][T10518] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2148: lblock 5 mapped to illegal pblock 5 (length 1) [ 259.905511][T10518] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.909281][T10518] Quota error (device loop6): do_insert_tree: Can't read tree quota block 5 [ 259.934500][T10518] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 259.949340][T10518] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2148: Failed to acquire dquot type 0 [ 259.988646][T10518] loop6: lost filesystem error report for type 5 error -117 [ 259.991568][T10518] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.2148: Freeing blocks not in datazone - block = 0, count = 4096 [ 260.016500][T10525] loop5: detected capacity change from 0 to 8192 [ 260.037399][T10518] loop6: lost filesystem error report for type 5 error -117 [ 260.040731][ T29] audit: type=1400 audit(1785154437.917:9402): avc: denied { write } for pid=10524 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 260.041238][T10518] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2148: lblock 5 mapped to illegal pblock 5 (length 1) [ 260.097191][ T29] audit: type=1400 audit(1785154437.977:9403): avc: denied { remount } for pid=10524 comm="syz.5.2150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 260.110979][T10518] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 260.202073][T10518] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2148: Failed to acquire dquot type 0 [ 260.233747][T10518] loop6: lost filesystem error report for type 5 error -117 [ 260.285358][T10518] EXT4-fs (loop6): 1 orphan inode deleted [ 260.300235][T10533] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 260.301045][T10533] tipc: Resetting bearer [ 260.301372][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.303459][T10533] bond0: (slave team0): Enslaving as an active interface with an up link [ 260.354500][T10518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.413513][T10518] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 5: comm syz.6.2148: lblock 5 mapped to illegal pblock 5 (length 1) [ 260.422997][T10439] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 260.460844][T10518] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2148: Failed to acquire dquot type 0 [ 260.564376][ T6132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.577090][T10547] netlink: 'syz.3.2157': attribute type 16 has an invalid length. [ 260.589299][T10546] __nla_validate_parse: 3 callbacks suppressed [ 260.589330][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 260.614419][T10547] netlink: 'syz.3.2157': attribute type 17 has an invalid length. [ 261.101240][T10547] geneve2: left promiscuous mode [ 261.106703][T10547] geneve2: left allmulticast mode [ 261.117301][T10551] bond0: entered promiscuous mode [ 261.124628][T10551] batadv0: entered promiscuous mode [ 261.144493][T10551] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 261.173853][T10551] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 261.204147][T10551] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 261.217631][T10551] bond0: left promiscuous mode [ 261.225024][T10551] batadv0: left promiscuous mode [ 261.336124][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 261.348492][T10572] hsr_slave_1 (unregistering): left promiscuous mode [ 261.357503][ T4438] net_ratelimit: 106 callbacks suppressed [ 261.357521][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.403264][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.411800][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 261.523368][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.531439][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 261.640714][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 261.650770][T10577] loop0: detected capacity change from 0 to 1024 [ 261.654636][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.668958][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 261.677520][T10577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.793417][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 261.801192][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 261.854604][T10596] loop5: detected capacity change from 0 to 1764 [ 261.898101][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.953517][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 262.199763][T10609] syzkaller0: entered promiscuous mode [ 262.211912][T10609] syzkaller0: entered allmulticast mode [ 262.351410][T10615] loop6: detected capacity change from 0 to 512 [ 262.868084][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2180'. [ 263.034551][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 263.051625][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 263.808024][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'. [ 265.448956][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 265.448975][ T29] audit: type=1326 audit(1785154443.327:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 265.505776][ T29] audit: type=1326 audit(1785154443.367:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 265.561028][ T29] audit: type=1326 audit(1785154443.367:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 265.932730][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2220'. [ 265.983430][ T29] audit: type=1326 audit(1785154443.637:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 266.050502][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'. [ 266.149102][T10738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2220'. [ 266.209326][ T29] audit: type=1326 audit(1785154443.807:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10716 comm="syz.3.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 266.280175][T10731] loop5: detected capacity change from 0 to 512 [ 266.423271][ T316] net_ratelimit: 84 callbacks suppressed [ 266.423292][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.438759][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.555815][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.563860][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.663082][T10751] loop6: detected capacity change from 0 to 2048 [ 266.672684][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.680588][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.737080][T10751] loop6: p3 p4 < > [ 266.741088][T10751] loop6: p3 size 201326592 extends beyond EOD, truncated [ 266.802775][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.813061][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.844784][T10758] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 266.875305][T10758] SELinux: failed to load policy [ 266.943862][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 266.964699][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 267.640405][T10775] netlink: 'syz.3.2229': attribute type 10 has an invalid length. [ 267.680180][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.711978][T10775] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.940662][T10782] loop5: detected capacity change from 0 to 1024 [ 268.042850][T10782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.102726][ T29] audit: type=1400 audit(1785154445.977:9416): avc: denied { write } for pid=10781 comm="syz.5.2232" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.233748][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.369401][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2239'. [ 268.418199][T10808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.559235][ T29] audit: type=1400 audit(1785154446.427:9417): avc: denied { write } for pid=10812 comm="syz.5.2240" name="functions" dev="configfs" ino=15176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.618038][ T29] audit: type=1400 audit(1785154446.437:9418): avc: denied { write } for pid=10812 comm="syz.5.2240" name="midi2.usb0" dev="configfs" ino=28423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.644275][ T29] audit: type=1400 audit(1785154446.437:9419): avc: denied { write } for pid=10812 comm="syz.5.2240" name="UDC" dev="configfs" ino=28431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 268.667239][ T29] audit: type=1400 audit(1785154446.437:9420): avc: denied { open } for pid=10812 comm="syz.5.2240" path="/354/config/usb_gadget/g1/UDC" dev="configfs" ino=28431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 270.529106][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 270.529124][ T29] audit: type=1400 audit(1785154448.407:9422): avc: denied { relabelfrom } for pid=10847 comm="syz.0.2251" name="NETLINK" dev="sockfs" ino=28499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.582833][ T29] audit: type=1400 audit(1785154448.407:9423): avc: denied { relabelto } for pid=10847 comm="syz.0.2251" name="NETLINK" dev="sockfs" ino=28499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 270.741216][ T29] audit: type=1400 audit(1785154448.617:9424): avc: denied { audit_read } for pid=10860 comm="syz.3.2255" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.959161][ T29] audit: type=1326 audit(1785154448.837:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 271.014901][ T29] audit: type=1326 audit(1785154448.837:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 271.066790][ T29] audit: type=1326 audit(1785154448.867:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 271.115443][ T29] audit: type=1326 audit(1785154448.867:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 271.168368][ T29] audit: type=1326 audit(1785154448.867:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 271.236996][ T29] audit: type=1326 audit(1785154448.917:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5006c0e6ce code=0x7ffc0000 [ 271.264245][ T29] audit: type=1326 audit(1785154448.927:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.2258" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5006c0e6ce code=0x7ffc0000 [ 271.483754][ T4438] net_ratelimit: 120 callbacks suppressed [ 271.483789][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.497687][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.622756][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.631606][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.752895][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.760755][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.834593][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 271.877703][T10902] 8021q: adding VLAN 0 to HW filter on device bond8 [ 271.885091][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.889469][T10903] random: crng reseeded on system resumption [ 271.916731][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.942629][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 271.959370][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 272.183059][T10910] bond0: entered promiscuous mode [ 272.217907][T10910] batadv0: entered promiscuous mode [ 272.233272][T10910] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 272.272213][T10910] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 272.308466][T10910] bond0: left promiscuous mode [ 272.322081][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 272.326126][T10910] batadv0: left promiscuous mode [ 272.384307][T10919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.424992][T10922] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 272.475532][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2274'. [ 272.490569][T10919] bond6: entered promiscuous mode [ 272.496362][T10919] macvlan1: entered promiscuous mode [ 272.534952][T10919] bond6 (unregistering): (slave macvlan1): Releasing backup interface [ 272.544895][T10919] macvlan1: left promiscuous mode [ 272.551859][T10919] bond6 (unregistering): Released all slaves [ 273.672052][T10959] syzkaller0: entered promiscuous mode [ 273.683401][T10959] syzkaller0: entered allmulticast mode [ 275.547000][T11015] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2300'. [ 275.886741][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 275.886844][ T29] audit: type=1400 audit(1785154453.767:9973): avc: denied { sqpoll } for pid=11026 comm="syz.2.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 276.506386][ T4424] net_ratelimit: 86 callbacks suppressed [ 276.506406][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.525553][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.643372][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.651500][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.762652][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.770599][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.893350][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 276.901221][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 277.023381][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 277.031379][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 277.816465][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2317'. [ 277.858191][T11039] bridge1: port 1(dummy0) entered blocking state [ 277.868964][T11039] bridge1: port 1(dummy0) entered disabled state [ 277.884388][T11039] dummy0: entered allmulticast mode [ 277.894790][T11039] dummy0: entered promiscuous mode [ 277.909177][T11041] netlink: 'syz.0.2317': attribute type 10 has an invalid length. [ 277.932411][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2317'. [ 277.964467][T11041] bridge1: port 1(dummy0) entered blocking state [ 277.971045][T11041] bridge1: port 1(dummy0) entered forwarding state [ 278.006237][T11041] dummy0: left allmulticast mode [ 278.019094][T11041] bridge1: port 1(dummy0) entered disabled state [ 278.076043][T11047] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2310' sets config #-2 [ 278.214073][T11061] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2314'. [ 278.966991][T11093] syzkaller0: entered promiscuous mode [ 278.972767][T11093] syzkaller0: entered allmulticast mode [ 279.103631][T11102] tipc: Started in network mode [ 279.108752][T11102] tipc: Node identity 4, cluster identity 4711 [ 279.135017][T11102] tipc: Node number set to 4 [ 279.369531][ T29] audit: type=1326 audit(1785154457.247:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.3.2337" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5006c4de99 code=0x0 [ 279.405799][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2336'. [ 279.451941][T11121] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.474810][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 279.484228][T11121] bond9: entered promiscuous mode [ 279.519187][T11121] bond9 (unregistering): Released all slaves [ 279.767740][T11132] loop6: detected capacity change from 0 to 8192 [ 279.807195][ T29] audit: type=1400 audit(1785154457.687:9975): avc: denied { mount } for pid=11131 comm="syz.6.2342" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 279.842775][ T29] audit: type=1326 audit(1785154457.717:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.6.2342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f761169de99 code=0x0 [ 280.295018][ T29] audit: type=1326 audit(1785154458.177:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.2346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 280.345551][ T29] audit: type=1326 audit(1785154458.177:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.2346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 280.376506][ T29] audit: type=1326 audit(1785154458.237:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.2346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 280.413951][ T29] audit: type=1326 audit(1785154458.237:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.3.2346" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 280.474662][ T29] audit: type=1400 audit(1785154458.347:9981): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 280.535720][ T29] audit: type=1400 audit(1785154458.417:9982): avc: denied { unmount } for pid=6132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 280.755098][T11163] loop5: detected capacity change from 0 to 1024 [ 280.766849][T11163] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 280.804646][T11163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.022181][T11181] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 281.023146][T11183] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2360'. [ 281.051557][T11183] loop0: detected capacity change from 0 to 512 [ 281.059228][T11183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.084089][T11183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.097045][T11183] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.134697][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.172832][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.522544][ T4427] net_ratelimit: 80 callbacks suppressed [ 281.528775][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.537295][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.652628][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.660894][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.782663][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.790495][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.912629][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 281.921266][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 282.135844][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 282.143795][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 282.377582][T11240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.533149][ T4427] smc: removing ib device syz1 [ 282.549858][ T24] syz1: Port: 1 Link DOWN [ 282.636947][T11240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.881805][T11240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.146773][T11240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.224726][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 283.224744][ T29] audit: type=1400 audit(1785154717.102:9984): avc: denied { mount } for pid=11286 comm="syz.2.2391" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 283.325804][T11290] syzkaller0: entered promiscuous mode [ 283.340590][T11290] syzkaller0: entered allmulticast mode [ 283.401600][ T316] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.428603][ T4427] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.474882][ T4427] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.509935][ T4427] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.558618][T11309] random: crng reseeded on system resumption [ 283.564718][ T29] audit: type=1400 audit(1785154717.432:9985): avc: denied { write } for pid=11308 comm="syz.5.2398" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.864678][T11266] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.885651][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.925089][T11266] bridge_slave_0: entered allmulticast mode [ 283.932008][T11266] bridge_slave_0: entered promiscuous mode [ 283.939174][T11266] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.946372][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.953745][ T29] audit: type=1400 audit(1785154717.832:9986): avc: denied { firmware_load } for pid=11308 comm="syz.5.2398" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 283.979280][T11266] bridge_slave_1: entered allmulticast mode [ 283.985978][T11266] bridge_slave_1: entered promiscuous mode [ 284.020633][T11266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.051414][T11266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.126222][T11266] team0: Port device team_slave_0 added [ 284.147022][T11266] team0: Port device team_slave_1 added [ 284.187539][T11266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.202216][ T29] audit: type=1400 audit(1785154718.072:9987): avc: denied { connect } for pid=11327 comm="syz.5.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.223643][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.297901][ T29] audit: type=1400 audit(1785154718.172:9988): avc: denied { read } for pid=11327 comm="syz.5.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.317630][T11266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.345154][T11266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.352236][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.378524][T11266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.419362][T11266] hsr_slave_0: entered promiscuous mode [ 284.427304][T11266] hsr_slave_1: entered promiscuous mode [ 284.433596][T11266] debugfs: 'hsr0' already exists in 'hsr' [ 284.439390][T11266] Cannot create hsr debugfs directory [ 284.605825][T11266] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.689047][T11266] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.827998][T11266] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.930372][T11266] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.954651][ T29] audit: type=1326 audit(1785154718.832:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11344 comm="syz.2.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 285.002293][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2407'. [ 285.022757][ T29] audit: type=1326 audit(1785154718.832:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11344 comm="syz.2.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 285.096637][T11266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.106128][ T29] audit: type=1326 audit(1785154718.832:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11344 comm="syz.2.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 285.137226][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.156095][T11266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.171937][ T29] audit: type=1326 audit(1785154718.832:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11344 comm="syz.2.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 285.200259][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.219993][T11266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.230623][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.251276][ T29] audit: type=1326 audit(1785154718.832:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11344 comm="syz.2.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f25cbb1de99 code=0x7ffc0000 [ 285.279077][T11266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.319626][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.356709][T11360] syzkaller0: entered promiscuous mode [ 285.362272][T11360] syzkaller0: entered allmulticast mode [ 285.381578][T11360] tipc: Enabled bearer , priority 0 [ 285.396111][T11359] tipc: Resetting bearer [ 285.403436][T11359] tipc: Disabling bearer [ 285.453536][T11266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.480818][T11266] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.509238][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.516452][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.550045][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.557172][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.435236][T11266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.523033][ T4438] net_ratelimit: 114 callbacks suppressed [ 286.523052][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.542631][ T4438] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.662821][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.684396][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'. [ 286.693632][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.703634][T11439] syzkaller0: entered promiscuous mode [ 286.715735][T11439] syzkaller0: entered allmulticast mode [ 286.732413][T11441] bond6: entered promiscuous mode [ 286.738093][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.746408][T11441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.753295][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.764456][T11266] veth0_vlan: entered promiscuous mode [ 286.789972][T11266] veth1_vlan: entered promiscuous mode [ 286.798390][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.847437][ T4438] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.885316][T11266] veth0_macvtap: entered promiscuous mode [ 286.892702][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.912521][T11266] veth1_macvtap: entered promiscuous mode [ 286.932860][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 286.952044][T11266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.973526][T11266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.981241][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 287.000433][ T4424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.014965][ T4424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.031442][ T4424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.043822][ T4424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.139932][T11474] syzkaller0: entered promiscuous mode [ 287.149197][T11474] syzkaller0: entered allmulticast mode [ 287.167625][T11474] tipc: Started in network mode [ 287.177698][T11474] tipc: Node identity 965df06b315a, cluster identity 4711 [ 287.185475][T11474] tipc: Enabled bearer , priority 0 [ 287.209629][T11473] tipc: Resetting bearer [ 287.224772][T11473] tipc: Disabling bearer [ 287.341992][T11491] kernel profiling enabled (shift: 0) [ 287.424606][T11497] tipc: Enabling of bearer rejected, failed to enable media [ 287.869239][T11523] loop6: detected capacity change from 0 to 8192 [ 287.876790][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2453'. [ 287.924438][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2452'. [ 287.936980][T11523] macvlan2: entered promiscuous mode [ 287.942381][T11523] macvlan2: entered allmulticast mode [ 288.273129][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2460'. [ 288.347275][T11545] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 289.230562][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 289.230577][ T29] audit: type=1326 audit(1785154723.102:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 289.278746][T11577] tipc: Enabling of bearer rejected, failed to enable media [ 289.305778][ T29] audit: type=1326 audit(1785154723.142:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 289.370120][ T29] audit: type=1326 audit(1785154723.242:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 289.410656][T11584] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 289.429786][ T29] audit: type=1326 audit(1785154723.242:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11569 comm="syz.5.2469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43af4de99 code=0x7ffc0000 [ 289.484318][T11583] gre0: entered allmulticast mode [ 289.862808][T11603] macsec0: entered promiscuous mode [ 289.891657][T11603] macsec0: entered allmulticast mode [ 289.904416][T11603] veth1_macvtap: entered allmulticast mode [ 289.916037][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 289.931671][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 290.178973][T11614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11614 comm=syz.5.2482 [ 290.626779][T11632] veth1_to_bond: invalid flags given to default FDB implementation [ 290.637277][T11631] loop5: detected capacity change from 0 to 1024 [ 290.681898][T11631] EXT4-fs: Ignoring removed nobh option [ 290.687551][T11631] EXT4-fs: Ignoring removed i_version option [ 290.877297][T11631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.935325][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.139020][T11646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.147891][T11646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.169940][ T29] audit: type=1400 audit(1785154725.042:10016): avc: denied { lock } for pid=11647 comm="syz.3.2497" path="socket:[31477]" dev="sockfs" ino=31477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 291.476646][T11655] syzkaller0: entered promiscuous mode [ 291.482252][T11655] syzkaller0: entered allmulticast mode [ 291.562757][ T4424] net_ratelimit: 97 callbacks suppressed [ 291.562792][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.577572][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.694201][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.702058][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.712943][T11657] loop0: detected capacity change from 0 to 1024 [ 291.765328][T11657] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.824207][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.832296][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.865302][T11657] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 5: comm syz.0.2500: lblock 5 mapped to illegal pblock 5 (length 1) [ 291.894478][T11657] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 291.897506][T11657] Quota error (device loop0): write_blk: dquota write failed [ 291.908447][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 291.908504][ C0] EXT4-fs (loop0): initial error at time 1785154725: ext4_map_blocks:833: inode 3: block 5 [ 291.909456][ C0] EXT4-fs (loop0): last error at time 1785154725: ext4_map_blocks:833: inode 3: block 5 [ 291.962632][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 291.962664][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 292.028466][T11657] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 292.039470][T11657] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 292.051425][T11657] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2500: Failed to acquire dquot type 0 [ 292.072675][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 292.072776][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 292.107486][T11657] loop0: lost filesystem error report for type 5 error -117 [ 292.117030][T11657] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.2500: lblock 5 mapped to illegal pblock 5 (length 1) [ 292.180752][T11657] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.187240][T11657] Quota error (device loop0): do_insert_tree: Can't read tree quota block 5 [ 292.211820][T11657] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 292.231433][ T4466] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 292.241008][ T4466] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.258547][T11657] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2500: Failed to acquire dquot type 0 [ 292.320473][T11657] loop0: lost filesystem error report for type 5 error -117 [ 292.355010][T11657] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.2500: Freeing blocks not in datazone - block = 0, count = 4096 [ 292.396341][T11657] loop0: lost filesystem error report for type 5 error -117 [ 292.406694][T11657] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.2500: lblock 5 mapped to illegal pblock 5 (length 1) [ 292.483240][T11657] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.486097][T11657] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2500: Failed to acquire dquot type 0 [ 292.563134][T11657] loop0: lost filesystem error report for type 5 error -117 [ 292.565831][T11657] EXT4-fs (loop0): 1 orphan inode deleted [ 292.616475][T11657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.656552][T11683] syzkaller0: entered promiscuous mode [ 292.662104][T11683] syzkaller0: entered allmulticast mode [ 292.683761][T11657] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 5: comm syz.0.2500: lblock 5 mapped to illegal pblock 5 (length 1) [ 292.738072][T11657] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2500: Failed to acquire dquot type 0 [ 292.785222][T11637] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 292.838601][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.841826][T11685] loop5: detected capacity change from 0 to 512 [ 292.925662][T11685] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 292.964350][T11697] tipc: Enabling of bearer rejected, failed to enable media [ 293.055046][T11685] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 293.528373][T11711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.536617][T11711] team0: Device bond0 is of different type [ 293.785833][T11726] loop6: detected capacity change from 0 to 512 [ 294.025027][T11726] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 294.275869][T11726] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.2524: bad orphan inode 15 [ 294.289697][T11726] loop6: lost filesystem error report for type 5 error -117 [ 294.295290][T11726] ext4_test_bit(bit=14, block=18) = 1 [ 294.303472][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 294.303886][ C0] EXT4-fs (loop6): initial error at time 1785154728: ext4_orphan_get:1425 [ 294.304023][ C0] EXT4-fs (loop6): last error at time 1785154728: ext4_orphan_get:1425 [ 294.367952][T11737] loop0: detected capacity change from 0 to 512 [ 294.380942][T11737] EXT4-fs: Ignoring removed oldalloc option [ 294.383320][T11737] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 294.390531][T11726] is_bad_inode(inode)=0 [ 294.449249][T11726] NEXT_ORPHAN(inode)=1023 [ 294.498536][T11737] EXT4-fs (loop0): 1 truncate cleaned up [ 294.504852][T11737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.517823][T11726] max_ino=32 [ 294.522766][T11726] i_nlink=0 [ 294.531734][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 294.531752][ T29] audit: type=1400 audit(1785154728.400:10019): avc: denied { create } for pid=11734 comm="syz.2.2525" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 294.534516][T11726] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2524: bg 0: block 161: padding at end of block bitmap is not set [ 294.593873][ T29] audit: type=1326 audit(1785154728.470:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.593975][ T29] audit: type=1326 audit(1785154728.470:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.595805][ T29] audit: type=1326 audit(1785154728.470:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.656551][ T29] audit: type=1326 audit(1785154728.540:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.658168][ T29] audit: type=1326 audit(1785154728.540:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.780048][T11726] loop6: lost filesystem error report for type 5 error -117 [ 294.784075][ T29] audit: type=1326 audit(1785154728.660:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.828953][ T29] audit: type=1326 audit(1785154728.660:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.848227][T11726] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 294.859033][ T29] audit: type=1326 audit(1785154728.660:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2526" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5006c4de99 code=0x7ffc0000 [ 294.895704][T11745] netlink: 'syz.2.2528': attribute type 16 has an invalid length. [ 294.907303][T11726] loop6: lost filesystem error report for type 5 error -117 [ 294.921553][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.922788][T11726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.938263][T11745] netlink: 'syz.2.2528': attribute type 17 has an invalid length. [ 294.961954][T11726] ext2 filesystem being mounted at /17/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 294.993237][T11747] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.011292][T11745] gre0: left allmulticast mode [ 295.037622][T11726] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.2524: path /17/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 295.068866][T11747] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.099455][T11266] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.135121][T11747] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.210279][T11747] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.314391][ T316] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.357177][ T316] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.375479][ T316] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.391908][ T316] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.570242][T11768] syzkaller0: entered promiscuous mode [ 295.582354][T11768] syzkaller0: entered allmulticast mode [ 295.965809][ T29] audit: type=1400 audit(1785154729.840:10028): avc: denied { execute } for pid=11774 comm="syz.3.2542" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 296.612771][ T4427] net_ratelimit: 95 callbacks suppressed [ 296.612790][ T4427] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.618920][T11804] loop0: detected capacity change from 0 to 164 [ 296.645479][ T4427] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.687915][T11804] rock: directory entry would overflow storage [ 296.704581][T11810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.716251][T11804] rock: sig=0x5252, size=5, remaining=3 [ 296.736145][T11804] netlink: 'syz.0.2553': attribute type 30 has an invalid length. [ 296.802709][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.810735][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.923253][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 296.931144][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 297.048793][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 297.057250][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 297.172758][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 297.180622][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 297.267556][T11822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.383639][T11822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.452185][T11827] blktrace: Concurrent blktraces are not allowed on loop12 [ 297.553485][T11822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.761189][T11822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.889907][T11839] ip6erspan0: entered allmulticast mode [ 297.986647][T11848] loop5: detected capacity change from 0 to 164 [ 298.018184][T11848] rock: directory entry would overflow storage [ 298.035059][T11848] rock: sig=0x5252, size=5, remaining=3 [ 298.226668][T11848] netlink: 'syz.5.2569': attribute type 30 has an invalid length. [ 298.234100][ T96] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.243047][ T96] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.251774][ T96] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.260703][ T96] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.618588][T11856] loop5: detected capacity change from 0 to 128 [ 298.737048][T11856] bio_check_eod: 11 callbacks suppressed [ 298.737071][T11856] syz.5.2571: attempt to access beyond end of device [ 298.737071][T11856] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 298.788077][T11856] syz.5.2571: attempt to access beyond end of device [ 298.788077][T11856] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 298.848459][T11856] syz.5.2571: attempt to access beyond end of device [ 298.848459][T11856] loop5: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 298.891930][T11856] buffer_io_error: 8 callbacks suppressed [ 298.891955][T11856] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 298.918424][T11856] syz.5.2571: attempt to access beyond end of device [ 298.918424][T11856] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 298.949314][T11856] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 298.967860][T11856] syz.5.2571: attempt to access beyond end of device [ 298.967860][T11856] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 298.990097][T11856] syz.5.2571: attempt to access beyond end of device [ 298.990097][T11856] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 299.004978][T11856] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 299.014342][T11856] syz.5.2571: attempt to access beyond end of device [ 299.014342][T11856] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 299.046467][T11856] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 299.058849][T11856] syz.5.2571: attempt to access beyond end of device [ 299.058849][T11856] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 299.105421][T11856] syz.5.2571: attempt to access beyond end of device [ 299.105421][T11856] loop5: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 299.133807][T11856] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 299.144375][T11856] syz.5.2571: attempt to access beyond end of device [ 299.144375][T11856] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 299.159890][T11856] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 299.211078][T11856] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 299.223485][T11872] loop0: detected capacity change from 0 to 512 [ 299.234017][T11856] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 299.272501][T11872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.354812][T11872] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.412853][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.873958][T11891] loop6: detected capacity change from 0 to 164 [ 299.897565][T11891] rock: directory entry would overflow storage [ 299.918264][T11891] rock: sig=0x5252, size=5, remaining=3 [ 299.942957][T11891] netlink: 'syz.6.2585': attribute type 30 has an invalid length. [ 300.425780][T11913] loop0: detected capacity change from 0 to 1024 [ 300.444756][T11913] EXT4-fs: Ignoring removed orlov option [ 300.446065][T11916] macsec0: entered promiscuous mode [ 300.457601][T11916] macsec0: entered allmulticast mode [ 300.464815][T11916] veth1_macvtap: entered allmulticast mode [ 300.496176][T11913] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 300.528325][T11913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.619144][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.175438][T11934] netlink: 'syz.3.2600': attribute type 30 has an invalid length. [ 301.505615][T11937] loop5: detected capacity change from 0 to 512 [ 301.566729][T11937] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.658728][T11937] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 301.732607][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 301.739093][ C0] EXT4-fs (loop5): initial error at time 1785154735: ext4_mb_generate_buddy:1317 [ 301.748272][ C0] EXT4-fs (loop5): last error at time 1785154735: ext4_mb_generate_buddy:1317 [ 301.762022][ T316] net_ratelimit: 95 callbacks suppressed [ 301.762036][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.786474][ T316] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.793077][T11937] __quota_error: 22 callbacks suppressed [ 301.793146][T11937] Quota error (device loop5): write_blk: dquota write failed [ 301.819946][T11937] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 301.836773][T11937] Quota error (device loop5): write_blk: dquota write failed [ 301.857975][T11937] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 301.884129][T11937] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2612: Failed to acquire dquot type 1 [ 301.903097][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 301.915466][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.922318][T11937] loop5: lost filesystem error report for type 5 error -28 [ 301.923111][T11937] EXT4-fs (loop5): 1 truncate cleaned up [ 301.942534][T11937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.959825][ T29] audit: type=1400 audit(1785154735.837:10051): avc: denied { remount } for pid=11936 comm="syz.5.2612" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 301.980350][T11937] EXT4-fs error (device loop5): __ext4_remount:6844: comm syz.5.2612: Abort forced by user [ 301.996303][T11937] EXT4-fs (loop5): Remounting filesystem read-only [ 302.004258][T11937] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 302.042067][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.042746][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.058907][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 302.172672][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.180496][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 302.292640][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 302.300422][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 302.817054][T11963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2620'. [ 302.866271][T11977] syzkaller0: entered promiscuous mode [ 302.884836][T11977] syzkaller0: entered allmulticast mode [ 302.898939][T11963] macvlan0: entered promiscuous mode [ 302.910093][T11963] macvlan0: entered allmulticast mode [ 302.917156][T11963] bond9: entered promiscuous mode [ 302.926395][T11963] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 302.952518][T11963] bond9: left promiscuous mode [ 303.078970][T11979] team0: Device bond0 is already an upper device of the team interface [ 303.486118][T11996] syzkaller0: entered promiscuous mode [ 303.513270][T11996] syzkaller0: entered allmulticast mode [ 303.623924][T11999] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 303.660237][T11999] bond8 (unregistering): Released all slaves [ 303.773811][T12001] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.835964][T12001] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.888455][T12001] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.942514][T12001] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.033471][ T316] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.068992][ T316] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.077994][ T316] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.087173][ T316] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.104350][T12030] loop5: detected capacity change from 0 to 512 [ 304.160596][T12030] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 304.212230][T12030] EXT4-fs (loop5): 1 truncate cleaned up [ 304.263689][T12030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.318599][ T29] audit: type=1400 audit(1785154738.197:10052): avc: denied { write } for pid=12025 comm="syz.5.2632" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.557050][T12046] sctp: [Deprecated]: syz.0.2636 (pid 12046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.557050][T12046] Use struct sctp_sack_info instead [ 305.018549][T12049] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.131415][ T4772] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.186573][T12049] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.381555][T12049] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.402498][T12060] syzkaller0: entered promiscuous mode [ 305.408745][T12060] syzkaller0: entered allmulticast mode [ 305.461371][T12049] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.510002][T12064] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 305.543791][T12064] team0: Failed to send options change via netlink (err -105) [ 305.551371][T12064] team0: Port device bridge0 added [ 305.759800][T12066] bond6: left promiscuous mode [ 305.975143][T12058] syz.2.2640 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 305.988724][T12058] CPU: 0 UID: 0 PID: 12058 Comm: syz.2.2640 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 305.988767][T12058] Tainted: [W]=WARN [ 305.988823][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.988839][T12058] Call Trace: [ 305.988845][T12058] [ 305.988853][T12058] __dump_stack+0x1d/0x30 [ 305.988878][T12058] dump_stack_lvl+0x95/0xd0 [ 305.988941][T12058] dump_stack+0x15/0x1b [ 305.988961][T12058] dump_header+0x80/0x240 [ 305.988990][T12058] oom_kill_process+0x295/0x350 [ 305.989095][T12058] out_of_memory+0x981/0xbc0 [ 305.989175][T12058] try_charge_memcg+0x621/0xa00 [ 305.989202][T12058] ? should_fail_ex+0x30/0x270 [ 305.989293][T12058] charge_memcg+0x6d/0x120 [ 305.989362][T12058] __mem_cgroup_charge+0x28/0xb0 [ 305.989396][T12058] filemap_add_folio+0x110/0x350 [ 305.989472][T12058] __filemap_get_folio_mpol+0x32e/0x840 [ 305.989517][T12058] filemap_fault+0x458/0xb60 [ 305.989588][T12058] handle_mm_fault+0x167a/0x2da0 [ 305.989659][T12058] __get_user_pages+0x129c/0x1f10 [ 305.989749][T12058] __mm_populate+0x242/0x390 [ 305.989782][T12058] __se_sys_mlockall+0x35e/0x3c0 [ 305.989865][T12058] __x64_sys_mlockall+0x1f/0x30 [ 305.989939][T12058] x64_sys_call+0xf90/0x3020 [ 305.989965][T12058] do_syscall_64+0x136/0x3c0 [ 305.989998][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.990034][T12058] RIP: 0033:0x7f25cbb1de99 [ 305.990109][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.990135][T12058] RSP: 002b:00007f25ca577028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 305.990161][T12058] RAX: ffffffffffffffda RBX: 00007f25cbda5fa0 RCX: 00007f25cbb1de99 [ 305.990178][T12058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 305.990221][T12058] RBP: 00007f25cbbb3eaf R08: 0000000000000000 R09: 0000000000000000 [ 305.990238][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.990255][T12058] R13: 00007f25cbda6038 R14: 00007f25cbda5fa0 R15: 00007fffe5a50d38 [ 305.990281][T12058] [ 305.990356][T12058] memory: usage 307200kB, limit 307200kB, failcnt 1310 [ 306.215197][T12058] memory+swap: usage 141996kB, limit 9007199254740988kB, failcnt 0 [ 306.224389][T12058] kmem: usage 54132kB, limit 9007199254740988kB, failcnt 0 [ 306.231674][T12058] Memory cgroup stats for /syz2: [ 306.232333][T12058] cache 28778496 [ 306.242503][T12058] rss 9707520 [ 306.246100][T12058] shmem 27062272 [ 306.249720][T12058] mapped_file 1277952 [ 306.255312][T12058] dirty 90112 [ 306.258745][T12058] writeback 0 [ 306.262128][T12058] workingset_refault_anon 126 [ 306.267293][T12058] workingset_refault_file 4416 [ 306.272133][T12058] swap 42500096 [ 306.276439][T12058] swapcached 45035520 [ 306.280678][T12058] pgpgin 251750 [ 306.285821][T12058] pgpgout 242353 [ 306.289701][T12058] pgfault 247179 [ 306.293742][T12058] pgmajfault 4458 [ 306.297468][T12058] inactive_anon 27455488 [ 306.301857][T12058] active_anon 110592 [ 306.306398][T12058] inactive_file 380928 [ 306.310554][T12058] active_file 0 [ 306.315535][T12058] unevictable 10481664 [ 306.319741][T12058] hierarchical_memory_limit 314572800 [ 306.325538][T12058] hierarchical_memsw_limit 9223372036854771712 [ 306.331888][T12058] total_cache 28778496 [ 306.336368][T12058] total_rss 9707520 [ 306.340252][T12058] total_shmem 27062272 [ 306.345723][T12058] total_mapped_file 1277952 [ 306.350346][T12058] total_dirty 90112 [ 306.354552][T12058] total_writeback 0 [ 306.358504][T12058] total_workingset_refault_anon 126 [ 306.364151][T12058] total_workingset_refault_file 4416 [ 306.369577][T12058] total_swap 42500096 [ 306.374974][T12058] total_swapcached 45035520 [ 306.379540][T12058] total_pgpgin 251750 [ 306.384035][T12058] total_pgpgout 242353 [ 306.388193][T12058] total_pgfault 247179 [ 306.392322][T12058] total_pgmajfault 4458 [ 306.397320][T12058] total_inactive_anon 27455488 [ 306.402181][T12058] total_active_anon 110592 [ 306.407821][T12058] total_inactive_file 380928 [ 306.412482][T12058] total_active_file 0 [ 306.416572][T12058] total_unevictable 10481664 [ 306.421224][T12058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2640,pid=12057,uid=0 [ 306.436628][T12058] Memory cgroup out of memory: Killed process 12057 (syz.2.2640) total-vm:96228kB, anon-rss:10556kB, file-rss:56068kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:0 [ 306.822633][ T96] net_ratelimit: 103 callbacks suppressed [ 306.822665][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.836223][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.952654][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 306.960493][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.072729][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.080510][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.192698][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.200625][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 307.313164][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 307.320961][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 308.066747][ T96] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.078453][ T96] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.094907][ T4431] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.106375][ T4431] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.149322][ T29] audit: type=1400 audit(1785154742.027:10053): avc: denied { getopt } for pid=12069 comm="syz.5.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 308.199575][ T29] audit: type=1400 audit(1785154742.067:10054): avc: denied { ioctl } for pid=12069 comm="syz.5.2647" path="socket:[34183]" dev="sockfs" ino=34183 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.277583][T12077] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.334529][T12071] netlink: 'syz.3.2646': attribute type 30 has an invalid length. [ 308.501446][T12077] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.544426][T12082] loop5: detected capacity change from 0 to 8192 [ 308.593596][T12077] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.725314][T12088] netlink: 'syz.3.2651': attribute type 16 has an invalid length. [ 308.745018][T12088] netlink: 'syz.3.2651': attribute type 17 has an invalid length. [ 308.755285][T12087] loop0: detected capacity change from 0 to 512 [ 308.767055][T12087] EXT4-fs: Ignoring removed orlov option [ 308.787058][T12087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.805118][T12087] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.858318][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.285383][T12077] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.301255][ T4427] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.327991][ T4424] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.344448][ T4424] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.378793][ T4424] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.439166][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2656'. [ 309.484384][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.512521][T12111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.523469][T12111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.536535][T12111] bridge0: port 1(veth0) entered blocking state [ 309.543007][T12111] bridge0: port 1(veth0) entered disabled state [ 309.549449][T12111] veth0: entered allmulticast mode [ 309.556082][T12111] veth0: entered promiscuous mode [ 309.562270][T12111] bridge0: port 2(veth1) entered blocking state [ 309.568674][T12111] bridge0: port 2(veth1) entered disabled state [ 309.597292][T12111] veth1: entered allmulticast mode [ 309.603164][T12111] veth1: entered promiscuous mode [ 309.971506][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 309.997140][T12133] 8021q: adding VLAN 0 to HW filter on device bond9 [ 310.016749][T12136] loop0: detected capacity change from 0 to 512 [ 310.023736][T12133] macvlan2: entered promiscuous mode [ 310.029275][T12133] macvlan2: entered allmulticast mode [ 310.034259][T12136] EXT4-fs: test_dummy_encryption option not supported [ 310.038076][T12133] bond9: entered promiscuous mode [ 310.046885][T12133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 310.068403][T12133] bond9: left promiscuous mode [ 310.414220][T12140] loop0: detected capacity change from 0 to 8192 [ 310.421273][T12140] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 310.802344][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2674'. [ 310.907327][T12140] syz.0.2671 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 310.917582][T12140] CPU: 1 UID: 0 PID: 12140 Comm: syz.0.2671 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 310.917619][T12140] Tainted: [W]=WARN [ 310.917701][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.917746][T12140] Call Trace: [ 310.917752][T12140] [ 310.917759][T12140] __dump_stack+0x1d/0x30 [ 310.917784][T12140] dump_stack_lvl+0x95/0xd0 [ 310.917808][T12140] dump_stack+0x15/0x1b [ 310.917826][T12140] dump_header+0x80/0x240 [ 310.917906][T12140] oom_kill_process+0x295/0x350 [ 310.917951][T12140] out_of_memory+0x981/0xbc0 [ 310.918049][T12140] try_charge_memcg+0x621/0xa00 [ 310.918081][T12140] charge_memcg+0x6d/0x120 [ 310.918121][T12140] __mem_cgroup_charge+0x28/0xb0 [ 310.918227][T12140] handle_mm_fault+0x1041/0x2da0 [ 310.918282][T12140] ? _raw_spin_lock+0x52/0xa0 [ 310.918319][T12140] __get_user_pages+0x129c/0x1f10 [ 310.918429][T12140] __mm_populate+0x242/0x390 [ 310.918470][T12140] __se_sys_mlockall+0x35e/0x3c0 [ 310.918493][T12140] __x64_sys_mlockall+0x1f/0x30 [ 310.918546][T12140] x64_sys_call+0xf90/0x3020 [ 310.918575][T12140] do_syscall_64+0x136/0x3c0 [ 310.918621][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.918641][T12140] RIP: 0033:0x7f5351cede99 [ 310.918656][T12140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.918730][T12140] RSP: 002b:00007f5350747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 310.918748][T12140] RAX: ffffffffffffffda RBX: 00007f5351f75fa0 RCX: 00007f5351cede99 [ 310.918761][T12140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 310.918774][T12140] RBP: 00007f5351d83eaf R08: 0000000000000000 R09: 0000000000000000 [ 310.918786][T12140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.918848][T12140] R13: 00007f5351f76038 R14: 00007f5351f75fa0 R15: 00007fffd0259098 [ 310.918872][T12140] [ 310.918921][T12140] memory: usage 307200kB, limit 307200kB, failcnt 367 [ 311.164032][T12140] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 311.187536][T12140] kmem: usage 278104kB, limit 9007199254740988kB, failcnt 0 [ 311.220817][T12140] Memory cgroup stats for /syz0: [ 311.221228][T12140] cache 9961472 [ 311.252805][T12140] rss 15106048 [ 311.260775][T12140] shmem 0 [ 311.266953][T12140] mapped_file 9961472 [ 311.275668][T12140] dirty 90112 [ 311.282088][T12140] writeback 0 [ 311.290106][T12140] workingset_refault_anon 1371 [ 311.299608][T12140] workingset_refault_file 3520 [ 311.311424][T12140] swap 0 [ 311.317418][T12140] swapcached 14266368 [ 311.325468][T12140] pgpgin 182119 [ 311.332779][T12140] pgpgout 175996 [ 311.340399][T12140] pgfault 222857 [ 311.348618][T12140] pgmajfault 1855 [ 311.357587][T12140] inactive_anon 290816 [ 311.366917][T12140] active_anon 12288 [ 311.371103][T12140] inactive_file 0 [ 311.374901][T12140] active_file 0 [ 311.378480][T12140] unevictable 24776704 [ 311.382852][T12140] hierarchical_memory_limit 314572800 [ 311.388360][T12140] hierarchical_memsw_limit 9223372036854771712 [ 311.395335][T12140] total_cache 9961472 [ 311.399408][T12140] total_rss 15106048 [ 311.414701][T12140] total_shmem 0 [ 311.418329][T12140] total_mapped_file 9961472 [ 311.423695][T12140] total_dirty 90112 [ 311.427630][T12140] total_writeback 0 [ 311.431505][T12140] total_workingset_refault_anon 1371 [ 311.449118][T12140] total_workingset_refault_file 3520 [ 311.455635][T12140] total_swap 0 [ 311.459567][T12140] total_swapcached 14266368 [ 311.479983][T12140] total_pgpgin 182119 [ 311.484885][T12140] total_pgpgout 175996 [ 311.488995][T12140] total_pgfault 222857 [ 311.493509][T12140] total_pgmajfault 1855 [ 311.497706][T12140] total_inactive_anon 290816 [ 311.502443][T12140] total_active_anon 12288 [ 311.507072][T12140] total_inactive_file 0 [ 311.511278][T12140] total_active_file 0 [ 311.516061][T12140] total_unevictable 24776704 [ 311.520735][T12140] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2671,pid=12137,uid=0 [ 311.525925][T12156] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2678'. [ 311.535927][T12140] Memory cgroup out of memory: Killed process 12140 (syz.0.2671) total-vm:96228kB, anon-rss:15800kB, file-rss:64648kB, shmem-rss:0kB, UID:0 pgtables:236kB oom_score_adj:1000 [ 311.730834][ T2981] ================================================================== [ 311.738979][ T2981] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 311.746080][ T2981] [ 311.748438][ T2981] read-write to 0xffff888107289840 of 4 bytes by task 8965 on cpu 1: [ 311.756544][ T2981] d_delete+0x15a/0x180 [ 311.760739][ T2981] d_delete_notify+0x32/0x100 [ 311.765437][ T2981] vfs_unlink+0x287/0x490 [ 311.769799][ T2981] filename_unlinkat+0x1dc/0x410 [ 311.774765][ T2981] __se_sys_unlink+0x2b/0xe0 [ 311.779404][ T2981] __x64_sys_unlink+0x1f/0x30 [ 311.784109][ T2981] x64_sys_call+0x2eb6/0x3020 [ 311.788808][ T2981] do_syscall_64+0x136/0x3c0 [ 311.793421][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.799334][ T2981] [ 311.801667][ T2981] read to 0xffff888107289840 of 4 bytes by task 2981 on cpu 0: [ 311.809227][ T2981] step_into_slowpath+0xea/0x4c0 [ 311.814193][ T2981] path_lookupat+0x2eb/0x4c0 [ 311.818807][ T2981] filename_lookup+0x18f/0x390 [ 311.823593][ T2981] do_readlinkat+0x74/0x2f0 [ 311.828123][ T2981] __x64_sys_readlink+0x47/0x60 [ 311.832998][ T2981] x64_sys_call+0x2b51/0x3020 [ 311.837713][ T2981] do_syscall_64+0x136/0x3c0 [ 311.842336][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.848254][ T2981] [ 311.850591][ T2981] value changed: 0x00300180 -> 0x00004080 [ 311.856323][ T2981] [ 311.858664][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 311.864834][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 311.875279][ T2981] Tainted: [W]=WARN [ 311.879091][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.889160][ T2981] ================================================================== [ 311.904821][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 311.916432][ T316] net_ratelimit: 103 callbacks suppressed [ 311.916447][ T316] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.925570][T12162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.953624][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 311.957362][T12162] macvlan0: entered promiscuous mode [ 311.966778][T12162] macvlan0: entered allmulticast mode [ 311.973295][T12162] bond8: entered promiscuous mode [ 311.978672][T12162] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 311.986748][T12162] bond8: left promiscuous mode [ 311.993878][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.023383][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.032030][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.142609][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.150416][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.263402][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.271337][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 312.369546][ T96] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.381860][ T96] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.397621][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 312.397636][ T4431] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.397682][ T4431] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.963200][ T4431] net_ratelimit: 82 callbacks suppressed [ 316.963226][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 316.976710][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.092613][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.100459][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.212615][ T96] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.220393][ T96] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.332672][ T4431] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.340605][ T4431] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 317.452678][ T4424] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 317.460464][ T4424] bond3: (slave ip6gretap1): failed to get link speed/duplex