last executing test programs: 12m13.804251744s ago: executing program 32 (id=1947): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) unshare(0x6a040000) r0 = syz_open_dev$sg(0x0, 0x0, 0x20000) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x82) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xdf, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7fffffff, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'team0\x00', 0x0}) write(r1, &(0x7f0000000080)='4', 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000200025b729bd7000fddbdf250a0000cddb08734e1300f9fa05000600fe7f21933153550b5f30dba8ca6c505445d46b305be373958d517c787634d11e2a803268970b52944f0fa960ce9faef5110ff5636f12603f47e46cdc40ebc75f8c"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x100000001}) 11m55.822062575s ago: executing program 33 (id=2010): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) socket(0xa, 0x801, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x601, 0xe7e, 0x0, 0x9, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), 0x0}, 0x20) recvfrom(r2, &(0x7f0000000ac0)=""/4090, 0xffa, 0x42, 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 11m48.446724156s ago: executing program 34 (id=2085): socket(0x200000000000011, 0x2, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x1680a, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000240)={[], [{@obj_type}]}, 0xfd, 0x468, &(0x7f0000000400)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x2, 0x7, 0xf0, 0x3}, {0x6, 0x1, 0x4, 0x2}, {0xfc2, 0x7, 0xfb, 0x10007}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x44000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) getdents64(r3, &(0x7f0000000040)=""/225, 0xe1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x544c3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7ff}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x6}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10m55.010470676s ago: executing program 35 (id=2255): io_uring_setup(0x3893, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000030428bd", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040884}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000"], 0x0}, 0x94) r7 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r7, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{0x0}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r8, 0x402, 0x40000029) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000000)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000200025a729bd7000fddbdf250a000007ff00000102000100080006000000000008001000ff"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 10m51.470576863s ago: executing program 36 (id=2225): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x8}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000002c0)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000003c0)={0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080044bacf4c0000000000737b28000000f7fffffeffffff0000000000000dd00000009500c2000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m24.764661218s ago: executing program 37 (id=2350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101342, 0x105) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) connect$packet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0xb9b2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 9m5.211946359s ago: executing program 38 (id=2503): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x8000) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) mlockall(0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') preadv(r2, &(0x7f00000014c0), 0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept(r3, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xd}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e20, 0x80, @private2, 0x3}]}, &(0x7f0000000200)=0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) io_uring_setup(0x6f73, &(0x7f0000000000)={0x0, 0xa851, 0x20, 0x1, 0x22a}) 4m22.563242691s ago: executing program 7 (id=5888): syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) readlink(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x0, 0x6, 0xf6, 0x6, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x7, 0x120}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000700)=@ethtool_drvinfo={0x3, "dba14b685bdfebf86e7dd8e1121a9874bca9d266eb10a2e4731ea3f85065e99c", "f61d37651d7b0643e10e899a7d65e7c47b22063fb7ed0d634a34161056309011", "ab68b910434688d20f33c6ff6a5a11fb8fa85e6d79599c6f1360cdff04d97ded", "ffca9b61786e2820d9a9d29bb415823b2eeae53e089da19edf2700", "685147aa121067f685e26b0f338cc3d27dfebba1834f01302d7a521b489eca0d", "e7794b2b83de415efa98556d", 0x8, 0x2d, 0x3, 0x4c6, 0xd}}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44001) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xba02a121f6e9df17}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xacc6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xa4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x80, 0x2, 0x3, 0x10, 0xc}, 0x1e, &(0x7f00000005c0)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x11, 0x0, 0x8f, 0x3d6a}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0x2, 0xd6, 0xf8}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000800)={0x0, "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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) setxattr$incfs_size(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)=0x2, 0x8, 0x2) 4m21.437881558s ago: executing program 7 (id=5904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62b30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x21000, 0x452a0}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x70b52c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x22d}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) socket(0x5, 0x803, 0x3000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x5}]}}}]}, 0x3c}}, 0x20008080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0xd6f7, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$RNDADDENTROPY(r6, 0x40085203, 0x0) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = memfd_create(0x0, 0x6) ftruncate(r8, 0x2000000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote}}}}, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) pread64(r8, 0x0, 0x0, 0x9) socket(0xa, 0x3, 0xfb) splice(r7, &(0x7f0000000100)=0x54, r6, &(0x7f0000000180), 0x3, 0xeaf2771ad3c2ec73) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 3m55.709593469s ago: executing program 39 (id=5900): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000180)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x260, &(0x7f0000002780)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x5a00, 0x0, 0x3) 3m55.574174333s ago: executing program 40 (id=5906): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x4, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) 3m55.401040297s ago: executing program 41 (id=5904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x62b30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x21000, 0x452a0}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x70b52c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x22d}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) socket(0x5, 0x803, 0x3000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x5}]}}}]}, 0x3c}}, 0x20008080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0xd6f7, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$RNDADDENTROPY(r6, 0x40085203, 0x0) r7 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = memfd_create(0x0, 0x6) ftruncate(r8, 0x2000000) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@remote, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote}}}}, 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) pread64(r8, 0x0, 0x0, 0x9) socket(0xa, 0x3, 0xfb) splice(r7, &(0x7f0000000100)=0x54, r6, &(0x7f0000000180), 0x3, 0xeaf2771ad3c2ec73) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 3m55.126755504s ago: executing program 42 (id=5905): r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000200)=""/220, 0xdc) timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x20000000b000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 3m54.983508667s ago: executing program 43 (id=5907): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$eJzs3V9oHHkdAPDvbJOY6+W6FQ7U49Cg4B2eJm2T63kcyB34j3optfFFGyhJu01CN9mQbLSJoBWLFHzxSYRK0T4oiGJ87JuKoMWiD4WiL6VIQS20harPkdnd6YVk02zbdCdJPx+Yzm9+2+zvO/PNbGZ+O/ObAJ5ZvRHxdkTsiojXIqLYqC80pjhbn9L/NzawNJFOSSwvD99LIomIQwNLE9l7JY358403eDUift+ZxNi5te3OLSyeHi2XS7ON5f7q1Ez/3MLipyanRsdL46XpgTff+PTBgdcHDw5s2rreHD029cvK0Fs/u334Nx/++CfuJfF29DReW7kem6U3ehvbpDNeWPlCEvH1zW4sZ90ryklHjoHQsj+/8fIP844BAGi/QuPYv6N2/F+MXVE/eOu+NnK/GLf+st7PHRq5+O92xgkAAAA8vuXljzTmAAAAwM6VOPcHAACAHS67DuDQwNJENrXr2oPbX2hXS6znzjsRsbee/+z+7vorHY17erujMyJ2/yeJlbf1Jqvu+X0c1c9F9MY3/lg9+4NT6RRP6T5stqalf+QdAXnqGsw7AvL00pfzjoA8/fV83hGQp2t38o6APB0dzjsC8nT4YN4RkKcL9/KOgN++Ux8AcG3/X6E25l/Wy7O6/yctP/eEbd8tRPRG969W1un/aa+s/29sTf9f4UH/3651+v/2tNjG5a9d/1Cz+i9+Nc3/8FjW//fJkR+X0vbT+ROvGC25852Ilzqa5T95kP9knfwXW2zjD1cHm/b0/25Pmv+f/yLNdzbJf3st/zTilWie/0zy8PFZ+09Nlkv76v82beOj9//5v2b1039L83/lM9n+n05p+9l3ATx96f6/e538b/T5v7fFNi5N3mra0zvck+b/lW89PP+F213JV2q/jF2NmjOj1ers/oiu5N219QcedQs8W7JtlG3DNP+vfqz53/8P1ubNP//T34n3t9jmu8cKbzWrH/x1mv/vf97+n580/yc32P/X+/v/YqttXL852qx+4rNp/o9ekn8AAAAAAAAAeDKFiOiJpND3oFwo9PXVn+H9YuwulCtz1ddOVeanT0btWdl7o7OQXelVrC8n6fL+xvVA2fKBVcsDjetFzhefqy33naiUT+a98gAAALDD9UTcOPbdyx94ftX5/7+K9fN/AAAAYPtLz/9f/snFC2n5v60O5AMAAABsK+n5//3v3b0Szv8BAABgx+rpdv4PAAAAO132/f+RoaE4MjS0nD33b7oyPnl6YubNA/v6puZP9J2ozM70jVcq47UR+6Y2ft9ypTKz//WYP9NfLc1V++cWFo9PVeanq8drz409Xupsw7oBGzv398sjeccAAAC0T8864/+/sGLs/n0RsScirhY735eN9Q8AAABsfT0RN770o2/+aW5h8fRouVyaVXjUwvK3I7ZAGAprCtlFJlslnm1ZyPkDCgAA2HTvHfTnHQkAAAAAAAAAAAAAAAAAAAA8u9oxnFje6wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD28f8AAAD//0FW/Wk=") openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) unshare(0x22020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7", 0x1, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000000000000100000d000000000200000003000000000000000000000d00000000000000000000000300000000010000000300000000000000005fd3"], &(0x7f0000001f00)=""/4096, 0x56, 0x1000, 0x3}, 0x28) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7) write$P9_RREADDIR(r4, &(0x7f0000000340)={0x12a, 0x29, 0x1, {0x9, [{{0x80, 0x2, 0x3}, 0xb, 0x2, 0x14, './dev/mapper/control'}, {{0x80, 0x0, 0x6}, 0x6, 0x7, 0x5, './dev'}, {{0x20, 0x1, 0x6}, 0x80000000000, 0xf9, 0xb, './dev/file0'}, {{0x4, 0x1, 0x6}, 0x200, 0xd1, 0x14, './dev/mapper/control'}, {{0x1, 0x1, 0x4}, 0x3ff, 0x2, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x5, 0x9, 0x14, './dev/mapper/control'}, {{0x8, 0x1, 0x3}, 0xae09, 0x7, 0x5, './dev'}, {{0x80, 0x0, 0x5}, 0x5, 0x3, 0x7, './file0'}]}}, 0x12a) 2m34.521026601s ago: executing program 44 (id=5979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)=ANY=[], 0x0) 2m25.714879796s ago: executing program 3 (id=6094): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000480)={0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 2m24.34648738s ago: executing program 3 (id=6108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x0, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x201) r2 = dup3(r1, r0, 0x0) write$binfmt_register(r2, 0x0, 0x0) 2m23.542363689s ago: executing program 45 (id=6116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) 2m23.242076747s ago: executing program 3 (id=6122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) shutdown(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1000}}}}}}}, 0x0) 2m23.168270569s ago: executing program 3 (id=6123): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 2m23.083887981s ago: executing program 3 (id=6124): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) rt_sigprocmask(0x2, &(0x7f0000001080)={[0xffffffffffffffff]}, 0x0, 0x8) 2m22.859542157s ago: executing program 3 (id=6125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2m22.803220048s ago: executing program 46 (id=6125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e2fa08", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 2m17.308034063s ago: executing program 5 (id=6164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0x62) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2m17.110608878s ago: executing program 5 (id=6170): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d61737100"], 0xdc}}, 0x0) 2m17.050910709s ago: executing program 6 (id=6171): setgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='oom_score\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m16.931855372s ago: executing program 6 (id=6173): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) 2m16.876028263s ago: executing program 5 (id=6174): socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7, 0x5, 0xffffffff, 0xc}) 2m16.685155838s ago: executing program 5 (id=6175): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m16.409552995s ago: executing program 5 (id=6178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x50}}, 0x488c4) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) 2m14.717881046s ago: executing program 6 (id=6184): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x30) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.488694012s ago: executing program 6 (id=6186): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.057935332s ago: executing program 6 (id=6188): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x6}, 0x20080, 0x80000, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002006a000900020073797a32000000000900010073797a300000000024000480200001800700010063740000140002800800014000000017080002400000000205000740140000"], 0x80}}, 0x0) 2m13.731234541s ago: executing program 5 (id=6191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8, 0x80000) close(0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fcntl$notify(0xffffffffffffffff, 0x402, 0x100000020) 2m13.685123611s ago: executing program 47 (id=6191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff7]}, 0x8, 0x80000) close(0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fcntl$notify(0xffffffffffffffff, 0x402, 0x100000020) 2m11.779236598s ago: executing program 6 (id=6201): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m11.754173429s ago: executing program 7 (id=6127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001080)={@random="652c1d569d1e", @remote, @val={@val={0x88a8, 0x6, 0x1, 0x204}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0xd6b, 0x66, 0x0, 0xfe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101}, "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"}}}}, 0x0) 2m11.71786258s ago: executing program 48 (id=6201): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m11.595044523s ago: executing program 7 (id=6203): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 2m11.262458641s ago: executing program 7 (id=6206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 2m10.183232497s ago: executing program 7 (id=6212): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x40000000, 0xd2, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m10.173751598s ago: executing program 49 (id=6212): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x5, 0x40000000, 0xd2, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m22.959528376s ago: executing program 4 (id=6802): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) unshare(0x22020400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7", 0x1, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000006000000000000000100000d000000000200000003000000000000000000000d00000000000000000000000300000000010000000300000000000000005fd3"], &(0x7f0000001f00)=""/4096, 0x56, 0x1000, 0x3}, 0x28) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109000, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7) write$P9_RREADDIR(r4, &(0x7f0000000340)={0x156, 0x29, 0x1, {0x9, [{{0x2, 0x2}, 0xfffffffffffffffb, 0x4, 0x14, './dev/mapper/control'}, {{0x80, 0x2, 0x3}, 0xb, 0x2, 0x14, './dev/mapper/control'}, {{0x80, 0x0, 0x6}, 0x6, 0x7, 0x5, './dev'}, {{0x20, 0x1, 0x6}, 0x80000000000, 0xf9, 0xb, './dev/file0'}, {{0x4, 0x1, 0x6}, 0x200, 0xd1, 0x14, './dev/mapper/control'}, {{0x1, 0x1, 0x4}, 0x3ff, 0x2, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x5, 0x9, 0x14, './dev/mapper/control'}, {{0x8, 0x1, 0x3}, 0xae09, 0x7, 0x5, './dev'}, {{0x80, 0x0, 0x5}, 0x5, 0x3, 0x7, './file0'}]}}, 0x156) 1m22.474606107s ago: executing program 4 (id=6810): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x4800000, 0x0, 0x7fffffc, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002300), 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x50}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000038ff9c0000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000560800000200000085000000b4000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001280)=@o_path={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m21.316676606s ago: executing program 4 (id=6822): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7", 0x1, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r4) write$P9_RREADDIR(r1, &(0x7f0000000340)={0x156, 0x29, 0x1, {0x9, [{{0x2, 0x2}, 0xfffffffffffffffb, 0x4, 0x14, './dev/mapper/control'}, {{0x80, 0x2, 0x3}, 0xb, 0x2, 0x14, './dev/mapper/control'}, {{0x80, 0x0, 0x6}, 0x6, 0x7, 0x5, './dev'}, {{0x20, 0x1, 0x6}, 0x80000000000, 0xf9, 0xb, './dev/file0'}, {{0x4, 0x1, 0x6}, 0x200, 0xd1, 0x14, './dev/mapper/control'}, {{0x1, 0x1, 0x4}, 0x3ff, 0x2, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x5, 0x9, 0x14, './dev/mapper/control'}, {{0x8, 0x1, 0x3}, 0xae09, 0x7, 0x5, './dev'}, {{0x80, 0x0, 0x5}, 0x5, 0x3, 0x7, './file0'}]}}, 0x156) 1m20.905422406s ago: executing program 4 (id=6830): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, &(0x7f0000001080)) setgroups(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) 1m19.08690611s ago: executing program 4 (id=6852): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.873025686s ago: executing program 4 (id=6857): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000001d000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r0, 0x2219, 0xb, 0x16, 0x0, 0x0) 1m3.669800248s ago: executing program 50 (id=6857): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000001d000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r0, 0x2219, 0xb, 0x16, 0x0, 0x0) 3.357632608s ago: executing program 2 (id=7778): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f0000000180)={0x10001, 0xffffffffffffffff, 0x1, 0x2}) sendfile(r1, r0, 0x0, 0x3ffff) mount$bind(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0), 0x805, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 3.069335635s ago: executing program 8 (id=7782): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x7}}, 0x24, 0x2) 3.009123127s ago: executing program 0 (id=7783): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r2, 0x0, 0x1, 0x4000}}, 0x20) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) 2.654028705s ago: executing program 0 (id=7797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0x6e, 0x100000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000340)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000540)}, 0x2100) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x800c1, 0x9c37611dc13d0dab) 2.255612465s ago: executing program 2 (id=7791): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x28) 2.183822636s ago: executing program 0 (id=7803): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f0000000180)={0x10001, 0xffffffffffffffff, 0x1, 0x2}) sendfile(r1, r0, 0x0, 0x3ffff) mount$bind(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0), 0x805, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 2.05707547s ago: executing program 8 (id=7794): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) socket$unix(0x1, 0x5, 0x0) 1.970338162s ago: executing program 8 (id=7795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.853174735s ago: executing program 2 (id=7796): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x2, 0x4, 0x12}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1.852813804s ago: executing program 8 (id=7798): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.781310277s ago: executing program 8 (id=7799): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 1.695606469s ago: executing program 1 (id=7801): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1bc, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5a, 0x1, 0x5, 0x300, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000004026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0xa, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d220600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.489878164s ago: executing program 2 (id=7802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = signalfd4(r0, 0x0, 0x0, 0x101000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x89e1, &(0x7f00000000c0)='lapb0') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, r1, 0x4, 0x5, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) recvmsg$inet_nvme(r1, &(0x7f0000000640)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/170, 0xaa}], 0x2}, 0x140) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.397024616s ago: executing program 1 (id=7804): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x1}, 0x10000, 0x1, 0xfffffffa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) 1.395249016s ago: executing program 2 (id=7814): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.351141857s ago: executing program 1 (id=7805): r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 1.175704601s ago: executing program 0 (id=7807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.163335132s ago: executing program 1 (id=7808): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1.087042554s ago: executing program 1 (id=7809): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)="9b", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000340), 0x0) syz_read_part_table(0x632, &(0x7f0000000000)="$eJzs27+LXFUUB/DvzM7Om0lgN/6o0mysbMRg6oxusxliJUq6gEQFWSIK20UIOytpkmILC/8DEbZZUqmksFAXsbRaRNSIrU0Kibp45b15M7Pb2AT8AZ9Psffc+849517mbfnC/1o3O0mnCav0kpx/bfZoMB12MkuoV7r1WJan83Jlb+PS5VJK6XTTydUs56nPV+4m6bVbBvNGpZTt9NvJ8ynVqXu3n36nrDbzL+8s1cNweoxh8szp/qApc6xCSlnEwzqRf93+6KDTuTX7XWcvSu3i+3dfbMPtJ/JVUraT9+qMWfa7uX7uWq8JB8nefOdLiyL9Rbj4uYfpnTjD5NbWeHd9tHk4Wzg73vvkzYu/nbuXciFf93vd+fH6360sKk+SpUe4emN/dLBaOsnujdEfh+ObzRvcFH3yg8e/yFqb9aCUnKlbPpbmX2dt9rIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAfsz86SDIZ7yabh+OqXd14ebmN3hi0wfnju5ba8Xqu3a/H7WwlP32c5eNJnfpPs9LN8nqSYfLjWnm2edib9a+GzVi3ORz/fiq5/9yfZ8fTXak+u7Botz2v/GleaKOHZaqZ7GTapLU4TLtWVkvOnLz+IKNOL9ka794YbR6Ob/7c6Q2SV+db62MedZO8VeX1acXysN8+POrPrwEAAAAAAAAAAAAAAAAAAACPZOPS5bcftPHVQZJfqm4dl2r6lXsvndyeZ6/n+yrJUfLhoFST9STfvvJr/5uVOz9UzQf7maTKJMnpj3autJv6JxrOP63vpPT/gQvyt/4KAAD//0CQc7s=") mkdirat(0xffffffffffffffff, 0x0, 0x15) syz_open_dev$usbmon(0x0, 0x7, 0x0) 1.086674854s ago: executing program 9 (id=7810): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) io_uring_enter(r1, 0x12a, 0x34, 0x17, 0x0, 0x0) 1.008544225s ago: executing program 0 (id=7811): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 1.000228246s ago: executing program 9 (id=7812): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 952.907667ms ago: executing program 9 (id=7813): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, r1) socket$packet(0x11, 0x3, 0x300) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 951.578877ms ago: executing program 0 (id=7815): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x4c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) setxattr$security_capability(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v3={0x3000000, [{0x5, 0x1}, {0x101, 0x9}]}, 0x18, 0x1) 906.340068ms ago: executing program 9 (id=7816): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 667.987324ms ago: executing program 1 (id=7817): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800000000000800, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6a9}, &(0x7f0000000280), 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utime(&(0x7f0000000240)='./file5\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0700000000b23b4d17b723be8cf961bcf8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00), 0xfe, 0x472, &(0x7f0000000940)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001f00)={&(0x7f0000000000), &(0x7f0000000080)=""/121, &(0x7f0000000e80)="20cd4a719075d6a37470c8d9928771721cf2e8c96c8adf184a66a09ccb49ca7f745b9a33ffd32f5b38302802e38e4507d2682127349c33d6031f670a5cc640e33cf434df453f59879a12515a4b783da1c3d8818520a0fb9e7183c6337121c0321711ecd7d4a32cf05a5c6ef8c881ce990541d5a73eb67a530788e97c7e6c02ee6ea4ed359f6f1afc87c83baa123de5ebfdf28f438038f43fe761b506d4a60f5a57efafaff4153b647fd0f5d1aa70c09da2788ac6c18c81d441ce50cc87fa5dee42b79ccb2f641e757026e4d35255b47b3233ccd667d4e69f3424f9566a254f5654ae8bc8086afcfe396302784ab5e111f33f1901c9ee93370c7316aa7281d20fb214d59dd8974ca799520b3f323aebc167f0596ea021d696355ee9a53a5f1110d41018b155a5e42985561cae0c706ab686392ede9ecb8e70086065ddc474c9a8971ebef22bc9e66189d4873d4276e72a108c8084385a69cb4ca7493c1a964b57009e6f0c13d8f01b30ee2b1e72571388667b4aaafbc4b6b43e083df4f95605dc17cfb8c81c6afc5e0a0aa1985f1c33bd6e625610a6af82b8b1f8394f9e63cfb3e0e56392096e94133c34d543e46b3f4f8eec5ee21c9a41a139b4b89b9738a9d62a0809ac6c95b83033dc3da862ee0f991c0eee293f61a832be349c5e192baf7af4612545ef20328824a9973a12d2e157008d12ad0587dc661747253423d0b19e6795e6bcdf5ae3625ae1f0f48893109b8e370ea3ae8a47da66609aad26ffdc3a2b30071de12e29cb11b451a0c9f4d5138dd89e6630033a0b17f2c4d394ec54b778402571f6e7e372d1242534ab00be23e0fc9ff4c0ee841682a5280046965908f75afd10f90ffede3c1480dcc48b09674ae868dc97f3f13a82d08bf7673cd787e301ae497e2b1feee4670a21833f5dd74538f7ec645040007e7114fd5ea00070b2a2429c50ff371dcb025285c7db04928c616b8333040d069703674664a59d56607bc33285488a9cfea7ad811c66d1ae18ffaf4863e7e8c0b91d59bc1564dc7e3e09438d98595e2ffbfadfaf9bfe17ac6c83a4a57de46019e9daaf6ce1212d3946af3d06c240eb5c370c18d0a5e36d5417f15ca849602e2531aaad78eee58252522b023e07cc00b7014b33ec03da7b0f6ef7066ff2c7ce5def0b0abcc5184b2ac118a0a7d12c01746f1a6a0e8875fe47f69242ef5f8a1ef0e6e8cf98b67e107038b599788c0c951e698ee45a3a3258c0f851c89e31d0a6333c26b9bb3bd69bde776299bd827c1d77919f7f9767d1f35ec111df4c150c9b284e4944cf954de7f4f6032b22b64bb1cad405af567446ca11fc32277bf7b9cb83c4153f6d1b13320431fb6e7e5b23203df4c221d99e782d04d1ab25bff63cfcc9a43b9ca6d82242e87ed0c8ccb25f46f2ca5bb6b9d949214ae1951aea3d1b120f2834497d126bb2f892cf16ae1411f79c4dbf1e94d72070bb25a49259a004e22511f0a7af084eba985c219ec93d019162026f531066fd7f9f614054419fafffbeec9ea94d18b2546f70933cf6902450f30787451c8ea66f4cb7d4c6a52fad9318bb944f8edf391465dddd4e214943ec79d1d6dc572cc6199fa746584703d3e7fc7e033c0b59176d83f1ff6ea9cd5b9bb7e88dc682af10ea28b616c8c9c0bc87356955721383bb896b9ee782d634f87f6d4d747ef0d05370c7f096f8eb113a613370fd05f5edcd4ec26cfa42208af598089845f104f8257a7cec99d805714d5ea30e7fba88167600100580f5a3eb152ae130af5c1fe635fa872176bc2d1cf360c464df581459dab9d3ed23316aea7438de127bb9115917fe3e5afe524ab221178fa0b50583397577d136e9d718a22ba0e0ccbe71c416dafdd2970c6901b025c24a7f5b2b6974437cbda9a4ceed9bfedffab8cc4e454b2f5fc1f31538badaf03e39ceb6f3273ebbe0b6fbf4da89e61a0aca25d465f4724c8d2c573a85988278691e247f4eca3cae196ccbaa846014038ae847b2f03fe6d426db7bf76f61719bb98bc3f3498c9bfb3aab4156be9af5c230f64fd464fa89820280fee1d7e26053e965551c0c356ee1c3a97d8a0e84f8a658cbc255574028468e4613349874f13129d42e52002cdb9403f2df85565a818ec4ef428d17215a09d4c222e5cd0ab0863e792b757ff16ccd2af08b4c987378cdbe35ca1336cd5b24ebb606149f2824b5f8fdf352e8d5248b1b303ac87cae6ed35f0c52c18fa4fb667a497d5ca8cd549ff4451b696549e758c27ca260d81c61f7188ca5351505b3968d5d53c38e0c09ae0e072f024a61b1fd27f2900ac34ccbd28d8bf8ec4bcb47af77055b8e4e7b8ec8401cbacd846e432de5ea4ef503c39a13da6b8d788fb5c8bc4e7aad1fec240f14c17787f1ff08f23a44976fb8eeff85c18fc0120910d8330b47f28008fced4888dbec8b9f6343349ee7e05d4d0321264dccba3b317338fb88806bf0d5d21157dfa3d7cefe60b15896ca7f4682de65cf8ce91162f5d5b03dc5bdba09a84f171709c42e44b4a19adde37573a9a5bb01032ff48beda9665045dd951a868337a9aeda012e32d009239aa9e757b048352a1ebcbe9043e457e0fa9f0808c912ceeefbcc766e8c0c4aa51afc7780ca720093e37e8025f578884b7fe1e0e4f25f8df410c1bb7d6cfe4a6fdf6d6a7a81842d7881428c2182e914a378af3b81f0e354766ee3612d41fe6f8441bf81aeee32a6f0a62ea90dda2b919a4840007df6b8f6b4e85c5d5ac7b8e104f8447af71f7b0d8823ef0e7944d5364b3752fc38aca873c8efc4fb5d7706304e9413c243e75a91e308525300c0f193d690c2ca3f1ae3e585998f6bf13a8afcb0e615f44c157436e614e2c8eb8abf3e46867f724577b5e350018817ac05ac8270ac7871fe10c74245d948001302a9ae2a1ddf63735481881c54ed9449a7f9ded431088712a59508305006a5c4848a10326a28f0fb8c49bc265b4791ede244103275fe91e88e206c507dc0bbb8fba32da5aeefbe9a65977db11a21f8ab9b746af518a9d16b308bd306c2cef68690a2cba593ca23708f20ad522e793f80736abe382f93df754a6d91c249cdefb3efd0a36beabb09fe0b9600fb8f9b74c476407578f20bbda3ddced457ab01e90390dcbe949b85a2cdbbad88163731f73e7c8e36e7485f448c4270f53f9b7c4ff44ac2d178fd0c191ed135d51fac486e0dcd445fd70375ac19341ea67f9874fbf869ca3fc56c3590a26c029945fad65a50dc8ac73081cb16e1fe65b46912914929b51585b57cf36af1070db58aceb5348cb266ece3c804c0c1c058a2ae6921a7d07b1b31da5db27477e877a66010f4de74c2e43c68c834a8367d6baf8cb24459f3e3b8f54df732b89a90dd38845941ee006d9d3e0a882462673f219981e00eace55501c4afd3aec458ef683481e0c3fd29569ac6664f7b22d4b8c44acc0eed0a8364cb4bb9d8389ba988185c8d8fc03b7cbf3a75be67623bd3700b2ae37a10c1693dff8bf45ad3efaf026bc2e419677f5501db4b9d0105002352e9260958c35379279031ae9784e0356f97e66322fca991f2b94613377eba075178267c4e555549385fdea81803f2a2d12bd28fdbf6cfc3b14ace3809e62caf1e798abc35094f9e2513d5ff827d03c389712ea42d0eeec030e5631ac93f36524b98f1bddd21b5f47d463c7da59343daa4a5dd3c3ed512e25a77cb18ef52fe8aec1e5dbb42d9df6833002bc2e83a791feb61bbb015c9f15ea06528a1c66930c962d22312cc5955f1aa1bc75beaec97b7e8c83ded6e755854de34d6f6b85ac069edf8988588868781b467cc308e3f76ae1d75eaa6149fdbedc775fdc0b8692029caf568da4e4b79371feddf24ad25fca16aeebc440572bb5cdea8f4a49e2b3e203ad67184b310ed10f8cd81df6825768f44ff3b55829844c7e4e6c8604276fa2aa2015a303112b09961952531cf407cc59e5174b517c31acc89aed8d1b4d5a6d071a5837d91c5f95fa06fdf6abdacb3e75da690c1ee2c47cb2c5bfb1e5ec70a46337eb0c9207d023883015d6126e25d088721b89d064c2e8338dd1d3ff251ac78f94b2575b13ace7bac9a3c384d80f46a8c856458919c29bcf3fb31ad8dfe1b7885a0cbce425ef3a674251ba595305a38d6175df1c700e5085796ff905fabae570f8b77a70f1645d36f100e34a82cd1a9e09458a97966fb4a66f0d094653775f419cc019ceb6d93bea5bcc3f5f27004b0070279c21b3d4be6d45df86848108d3cc2036f9d52b257115ea357c75262842e886f575248b03943aabf33d05b8af92f548ecc49428c1ba89230a0a198de208243ff8ee9f06d8e70d3d7548c930a14", &(0x7f0000001e80)="216ec093355225e7d169f938f5b1823652f8ded72ee168d1eac58b2ce93dcd21329d815a084061f0249c6314f3cf55dd7c8be1cf035343dcc9725bb0b74b16752098", 0x7fffffff, r1, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 642.864064ms ago: executing program 8 (id=7818): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f0000000180)={0x10001, 0xffffffffffffffff, 0x1, 0x2}) sendfile(r1, r0, 0x0, 0x3ffff) mount$bind(0x0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000003c0), 0x805, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 87.036718ms ago: executing program 9 (id=7819): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c02000020000100000000020000000002000000000000020000000008000400fbffffff05001300010000007899daddd0d8b5d4a3043e854a900aeb5139ca6c787bde0e8b62bca3272f1bb32b69ed48b15461ef523a6b9473ca35238fcb390c97c381ff06c8522ee83e6d78ec83ed0c48b266c1c2d3c2be345090f6d9ea1e816ed45b13b9dd5b2f0c2d65e6aee013aded6772f19bd343b161755dbe735e5a59d34513a9a4ae85d9efde9fbae48dcc98b76279c2d6cc3ddbfc01425c8c6301b6a959b64fc6d9507c501c8c2b544b82f4e46ce1d6348d4aded82468ccae319318f4cf2aea0052319a3e25062855d0714c0579153a2a38"], 0x2c}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r1) 35.736899ms ago: executing program 9 (id=7820): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 0s ago: executing program 2 (id=7821): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) socket$unix(0x1, 0x5, 0x0) kernel console output (not intermixed with test programs): e0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.710269][T28888] random: crng reseeded on system resumption [ 1023.134796][T14473] usb usb6-port1: unable to enumerate USB device [ 1023.147198][T25436] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1023.227219][T25436] CPU: 0 UID: 0 PID: 25436 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1023.227250][T25436] Tainted: [W]=WARN [ 1023.227256][T25436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.227305][T25436] Call Trace: [ 1023.227311][T25436] [ 1023.227318][T25436] __dump_stack+0x1d/0x30 [ 1023.227518][T25436] dump_stack_lvl+0x95/0xd0 [ 1023.227537][T25436] dump_stack+0x15/0x1b [ 1023.227555][T25436] dump_header+0x80/0x240 [ 1023.227620][T25436] oom_kill_process+0x295/0x350 [ 1023.227661][T25436] out_of_memory+0x981/0xbc0 [ 1023.227691][T25436] try_charge_memcg+0x621/0xa00 [ 1023.227716][T25436] charge_memcg+0x6d/0x120 [ 1023.227747][T25436] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1023.227926][T25436] swap_cache_alloc_folio+0x47b/0x5e0 [ 1023.227961][T25436] swap_cluster_readahead+0x2b1/0x460 [ 1023.227999][T25436] swapin_readahead+0xd8/0x8a0 [ 1023.228062][T25436] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1023.228152][T25436] ? hrtimer_start_range_ns+0x108/0x120 [ 1023.228180][T25436] ? __rcu_read_unlock+0x4e/0x70 [ 1023.228205][T25436] ? swap_cache_get_folio+0x1f7/0x200 [ 1023.228234][T25436] do_swap_page+0x2a2/0x1ec0 [ 1023.228396][T25436] ? __schedule+0x799/0xd10 [ 1023.228424][T25436] ? __rcu_read_lock+0x36/0x50 [ 1023.228448][T25436] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1023.228484][T25436] handle_mm_fault+0xb3c/0x2da0 [ 1023.228522][T25436] do_user_addr_fault+0x634/0x1060 [ 1023.228553][T25436] ? trace_page_fault_user+0x1f/0xa0 [ 1023.228636][T25436] exc_page_fault+0x62/0xa0 [ 1023.228674][T25436] asm_exc_page_fault+0x26/0x30 [ 1023.228693][T25436] RIP: 0033:0x7f287ea79257 [ 1023.228708][T25436] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1023.228783][T25436] RSP: 002b:00007ffc3c0081b0 EFLAGS: 00010202 [ 1023.228799][T25436] RAX: 0000000000000000 RBX: 000055557b0f4500 RCX: 00007f287ea79257 [ 1023.228812][T25436] RDX: 00007ffc3c0081f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1023.228823][T25436] RBP: 00007ffc3c00825c R08: 0000000000000000 R09: 0000000000000000 [ 1023.228835][T25436] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1023.228847][T25436] R13: 00000000000927c0 R14: 00000000000f9b18 R15: 00007ffc3c0082b0 [ 1023.228881][T25436] [ 1023.462679][T25436] memory: usage 307200kB, limit 307200kB, failcnt 248 [ 1023.493313][T25436] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 1023.501276][T25436] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 1023.508608][T25436] Memory cgroup stats for /syz9: [ 1023.508877][T25436] cache 28672 [ 1023.533191][T25436] rss 0 [ 1023.535996][T25436] shmem 0 [ 1023.538932][T25436] mapped_file 0 [ 1023.542415][T25436] dirty 0 [ 1023.545898][T25436] writeback 0 [ 1023.549182][T25436] workingset_refault_anon 65 [ 1023.577665][T25436] workingset_refault_file 0 [ 1023.584268][T25436] swap 458752 [ 1023.590502][T25436] swapcached 11702272 [ 1023.601949][T25436] pgpgin 362853 [ 1023.617922][T25436] pgpgout 362846 [ 1023.631201][T25436] pgfault 392631 [ 1023.640351][T25436] pgmajfault 87 [ 1023.656700][T25436] inactive_anon 0 [ 1023.670229][T25436] active_anon 0 [ 1023.680475][T25436] inactive_file 16384 [ 1023.692640][T25436] active_file 12288 [ 1023.704600][T25436] unevictable 0 [ 1023.713436][T25436] hierarchical_memory_limit 314572800 [ 1023.727494][T25436] hierarchical_memsw_limit 9223372036854771712 [ 1023.743234][T25436] total_cache 28672 [ 1023.753764][T25436] total_rss 0 [ 1023.759936][T25436] total_shmem 0 [ 1023.766648][T25436] total_mapped_file 0 [ 1023.781953][T25436] total_dirty 0 [ 1023.793420][T25436] total_writeback 0 [ 1023.801835][T25436] total_workingset_refault_anon 65 [ 1023.807038][T25436] total_workingset_refault_file 0 [ 1023.816108][T25436] total_swap 458752 [ 1023.821681][T25436] total_swapcached 11702272 [ 1023.827350][T25436] total_pgpgin 362853 [ 1023.832147][T25436] total_pgpgout 362846 [ 1023.837632][T25436] total_pgfault 392631 [ 1023.841752][T25436] total_pgmajfault 87 [ 1023.846588][T25436] total_inactive_anon 0 [ 1023.855859][T25436] total_active_anon 0 [ 1023.859976][T25436] total_inactive_file 16384 [ 1023.864902][T25436] total_active_file 12288 [ 1023.870140][T25436] total_unevictable 0 [ 1023.874917][T25436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6878,pid=28876,uid=0 [ 1023.894272][T25436] Memory cgroup out of memory: Killed process 28876 (syz.9.6878) total-vm:96236kB, anon-rss:1244kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1024.020254][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.124072][T28915] loop9: detected capacity change from 0 to 256 [ 1024.452373][T28932] loop2: detected capacity change from 0 to 256 [ 1024.792715][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'. [ 1024.859206][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'. [ 1025.118708][T28952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6903'. [ 1025.957975][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1025.957988][ T28] audit: type=1400 audit(1786956939.720:5386): avc: denied { name_bind } for pid=28984 comm="syz.9.6916" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1025.999522][T28976] syzkaller0: entered promiscuous mode [ 1026.039537][T28976] syzkaller0: entered allmulticast mode [ 1026.963486][ T28] audit: type=1107 audit(1786956940.690:5387): pid=29019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1027.840172][ T28] audit: type=1326 audit(1786956941.590:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1028.570237][ T28] audit: type=1326 audit(1786956941.590:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1028.804242][ T28] audit: type=1326 audit(1786956941.590:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1028.955800][T29078] loop9: detected capacity change from 0 to 512 [ 1029.025225][T29078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.052997][ T28] audit: type=1326 audit(1786956941.590:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1029.139673][T29078] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.286614][ T28] audit: type=1326 audit(1786956941.590:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1029.515098][ T28] audit: type=1326 audit(1786956941.600:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1029.558420][T29091] tipc: Failed to remove unknown binding: 66,1,1/0:1477840795/1477840797 [ 1029.617730][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.756661][ T28] audit: type=1326 audit(1786956941.600:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1029.932864][ T28] audit: type=1326 audit(1786956941.600:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29047 comm="syz.1.6941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb1398e0d9 code=0x7ffc0000 [ 1030.176593][T29088] syz.1.6955 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1030.254268][T29088] CPU: 0 UID: 0 PID: 29088 Comm: syz.1.6955 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1030.254299][T29088] Tainted: [W]=WARN [ 1030.254305][T29088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1030.254317][T29088] Call Trace: [ 1030.254324][T29088] [ 1030.254331][T29088] __dump_stack+0x1d/0x30 [ 1030.254354][T29088] dump_stack_lvl+0x95/0xd0 [ 1030.254450][T29088] dump_stack+0x15/0x1b [ 1030.254467][T29088] dump_header+0x80/0x240 [ 1030.254488][T29088] oom_kill_process+0x295/0x350 [ 1030.254545][T29088] out_of_memory+0x981/0xbc0 [ 1030.254599][T29088] try_charge_memcg+0x621/0xa00 [ 1030.254626][T29088] charge_memcg+0x6d/0x120 [ 1030.254656][T29088] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1030.254695][T29088] swap_cache_alloc_folio+0x47b/0x5e0 [ 1030.254728][T29088] swap_cluster_readahead+0x2b1/0x460 [ 1030.254832][T29088] swapin_readahead+0xd8/0x8a0 [ 1030.254861][T29088] ? _raw_spin_unlock+0x9/0x30 [ 1030.254921][T29088] ? swap_put_entries_cluster+0x49c/0x4c0 [ 1030.255000][T29088] ? wake_page_function+0x11a/0x1f0 [ 1030.255032][T29088] ? __wake_up_locked_key+0x3d/0x60 [ 1030.255067][T29088] ? __rcu_read_unlock+0x4e/0x70 [ 1030.255093][T29088] ? swap_cache_get_folio+0x1f7/0x200 [ 1030.255122][T29088] do_swap_page+0x2a2/0x1ec0 [ 1030.255180][T29088] ? __css_rstat_updated+0xbb/0x280 [ 1030.255279][T29088] ? __rcu_read_lock+0x36/0x50 [ 1030.255307][T29088] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1030.255372][T29088] handle_mm_fault+0xb3c/0x2da0 [ 1030.255482][T29088] do_user_addr_fault+0x634/0x1060 [ 1030.255559][T29088] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1030.255582][T29088] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1030.255609][T29088] ? trace_page_fault_user+0x1f/0xa0 [ 1030.255637][T29088] exc_page_fault+0x62/0xa0 [ 1030.255733][T29088] asm_exc_page_fault+0x26/0x30 [ 1030.255751][T29088] RIP: 0033:0x7fbb13949238 [ 1030.255770][T29088] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 1030.255788][T29088] RSP: 002b:00007ffcf48d5260 EFLAGS: 00010246 [ 1030.255874][T29088] RAX: 0000000000000000 RBX: 000055557975f500 RCX: 00007fbb1394e90e [ 1030.255886][T29088] RDX: 00007ffcf48d52b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.255979][T29088] RBP: 00007fbb13c17da0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.255991][T29088] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000fb88f [ 1030.256003][T29088] R13: 00007fbb13c1609c R14: 00000000000fb6f1 R15: 00007fbb13c16090 [ 1030.256022][T29088] [ 1030.513290][T29088] memory: usage 307200kB, limit 307200kB, failcnt 1358 [ 1030.535164][T29088] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 1030.563763][T29088] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1030.571147][T29088] Memory cgroup stats for /syz1: [ 1030.571337][T29088] cache 28672 [ 1030.579599][T29088] rss 0 [ 1030.582362][T29088] shmem 0 [ 1030.603223][T29088] mapped_file 20480 [ 1030.607082][T29088] dirty 0 [ 1030.610013][T29088] writeback 0 [ 1030.613394][T29088] workingset_refault_anon 7745 [ 1030.618175][T29088] workingset_refault_file 3203 [ 1030.622944][T29088] swap 299008 [ 1030.652386][T29088] swapcached 45252608 [ 1030.665646][T29088] pgpgin 306315 [ 1030.679507][T29088] pgpgout 306307 [ 1030.690894][T29088] pgfault 308998 [ 1030.702769][T29088] pgmajfault 10059 [ 1030.720434][T29088] inactive_anon 0 [ 1030.734967][T29088] active_anon 4096 [ 1030.746749][T29088] inactive_file 0 [ 1030.759636][T29088] active_file 0 [ 1030.772374][T29088] unevictable 28672 [ 1030.789341][T29088] hierarchical_memory_limit 314572800 [ 1030.812863][T29088] hierarchical_memsw_limit 9223372036854771712 [ 1030.837626][T29088] total_cache 28672 [ 1030.850094][T29088] total_rss 0 [ 1030.870235][T29088] total_shmem 0 [ 1030.883838][T29088] total_mapped_file 20480 [ 1030.902189][T29088] total_dirty 0 [ 1030.922330][T29088] total_writeback 0 [ 1030.931713][T29088] total_workingset_refault_anon 7745 [ 1030.948865][T29088] total_workingset_refault_file 3203 [ 1030.963604][T29088] total_swap 299008 [ 1030.968069][T29088] total_swapcached 45252608 [ 1030.975171][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1030.975184][ T28] audit: type=1326 audit(1786956944.710:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.009217][T29088] total_pgpgin 306316 [ 1031.026219][T29088] total_pgpgout 306308 [ 1031.037948][T29088] total_pgfault 309001 [ 1031.056207][T29088] total_pgmajfault 10059 [ 1031.060790][T29088] total_inactive_anon 0 [ 1031.066698][T29088] total_active_anon 4096 [ 1031.072682][T29088] total_inactive_file 0 [ 1031.083233][T29088] total_active_file 0 [ 1031.087246][ T28] audit: type=1326 audit(1786956944.710:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.120760][T29088] total_unevictable 28672 [ 1031.144177][T29088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6955,pid=29088,uid=0 [ 1031.186430][T29088] Memory cgroup out of memory: Killed process 29088 (syz.1.6955) total-vm:96236kB, anon-rss:1240kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1031.207395][ T28] audit: type=1326 audit(1786956944.720:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.287354][ T28] audit: type=1326 audit(1786956944.720:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.386261][T29142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1031.524045][ T28] audit: type=1326 audit(1786956944.720:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.549530][ T28] audit: type=1326 audit(1786956944.720:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.575035][ T28] audit: type=1326 audit(1786956944.720:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.600488][ T28] audit: type=1326 audit(1786956944.730:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.845266][ T28] audit: type=1326 audit(1786956944.730:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1031.971961][ T28] audit: type=1326 audit(1786956944.730:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29118 comm="syz.8.6965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d37f1e0d9 code=0x7ffc0000 [ 1032.807553][T29186] loop9: detected capacity change from 0 to 2048 [ 1032.874190][T29186] loop9: p1 < > p4 [ 1032.885892][T29186] loop9: p4 size 722688 extends beyond EOD, truncated [ 1032.897245][T29152] Set syz0 is full, maxelem 65536 reached [ 1033.166064][T29208] loop9: detected capacity change from 0 to 512 [ 1033.233110][T29208] EXT4-fs: Ignoring removed orlov option [ 1033.288809][T29215] loop8: detected capacity change from 0 to 2048 [ 1033.318081][T29208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1033.384104][T29215] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 1033.418055][T29208] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.504349][T29230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1033.605685][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7009'. [ 1033.762488][T29244] loop9: detected capacity change from 0 to 1024 [ 1033.814540][T29244] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1033.835484][T29246] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1033.896045][T29244] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1033.987307][T29244] jbd2_journal_init_inode: Cannot locate journal superblock [ 1034.011915][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7014'. [ 1034.041204][T29244] EXT4-fs (loop9): Could not load journal inode [ 1034.580024][T29277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1035.567506][T29283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.650823][T29283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.670618][T29337] cgroup: Setting release_agent not allowed [ 1035.731495][T29283] bridge_slave_0: entered allmulticast mode [ 1035.796981][T29283] bridge_slave_0: entered promiscuous mode [ 1035.882518][T29283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.962682][T29283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.045997][T29283] bridge_slave_1: entered allmulticast mode [ 1036.112761][T29283] bridge_slave_1: entered promiscuous mode [ 1036.290077][T29283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.395455][T29283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.577345][ T3657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.663539][T29378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.748284][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1036.748351][ T28] audit: type=1400 audit(1786956950.510:5486): avc: denied { write } for pid=29360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.784348][T29378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.800703][T29283] team0: Port device team_slave_0 added [ 1036.857782][T29283] team0: Port device team_slave_1 added [ 1036.973276][ T28] audit: type=1400 audit(1786956950.730:5487): avc: denied { write } for pid=29392 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.005374][ T3657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.163948][ T3657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.212853][T29401] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1037.262356][T29283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1037.286381][T29283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.343768][T29283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1037.378355][T29283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1037.395586][T29283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.468105][T29283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.528439][ T3657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.652893][T29283] hsr_slave_0: entered promiscuous mode [ 1037.689156][T29283] hsr_slave_1: entered promiscuous mode [ 1037.720142][T29283] debugfs: 'hsr0' already exists in 'hsr' [ 1037.725916][T29283] Cannot create hsr debugfs directory [ 1037.770391][ T28] audit: type=1400 audit(1786956951.530:5488): avc: denied { write } for pid=29413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.834721][ T28] audit: type=1400 audit(1786956951.530:5489): avc: denied { write } for pid=29443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.910968][ T3657] bridge_slave_1: left allmulticast mode [ 1037.916807][ T3657] bridge_slave_1: left promiscuous mode [ 1037.922756][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.934774][ T3657] bridge_slave_0: left allmulticast mode [ 1037.945507][ T3657] bridge_slave_0: left promiscuous mode [ 1037.954911][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.097405][T29460] WARNING! power/level is deprecated; use power/control instead [ 1038.122286][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.145002][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.173372][ T3657] bond0 (unregistering): Released all slaves [ 1038.257696][ T3657] hsr_slave_0: left promiscuous mode [ 1038.275556][ T3657] hsr_slave_1: left promiscuous mode [ 1038.288745][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.296728][T29468] loop9: detected capacity change from 0 to 764 [ 1038.315087][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.337371][T29468] netlink: zone id is out of range [ 1038.354122][ T3657] veth1_macvtap: left promiscuous mode [ 1038.360347][T29468] netlink: zone id is out of range [ 1038.365507][T29468] netlink: zone id is out of range [ 1038.370645][T29468] netlink: zone id is out of range [ 1038.372863][ T3657] veth0_macvtap: left promiscuous mode [ 1038.375773][T29468] netlink: zone id is out of range [ 1038.375783][T29468] netlink: zone id is out of range [ 1038.375792][T29468] netlink: zone id is out of range [ 1038.375799][T29468] netlink: zone id is out of range [ 1038.375806][T29468] netlink: zone id is out of range [ 1038.375815][T29468] netlink: zone id is out of range [ 1038.400185][ T3657] veth1_vlan: left promiscuous mode [ 1038.400234][ T3657] veth0_vlan: left promiscuous mode [ 1038.511350][ T28] audit: type=1400 audit(1786956952.270:5490): avc: denied { write } for pid=29471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.580065][ T28] audit: type=1400 audit(1786956952.270:5491): avc: denied { write } for pid=29488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.799419][T29498] loop2: detected capacity change from 0 to 8192 [ 1038.847706][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 1038.919889][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 1038.988415][T29526] loop9: detected capacity change from 0 to 512 [ 1039.009561][T29526] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.7081: inode has both inline data and extents flags [ 1039.025040][T29526] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1039.025166][T29526] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.7081: couldn't read orphan inode 15 (err -117) [ 1039.034385][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1039.034404][ C0] EXT4-fs (loop9): initial error at time 1786956952: ext4_orphan_get:1399: inode 15 [ 1039.034429][ C0] EXT4-fs (loop9): last error at time 1786956952: ext4_orphan_get:1399: inode 15 [ 1039.106236][T29526] loop9: lost filesystem error report for type 5 error -117 [ 1039.111552][T29526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1039.142546][ T28] audit: type=1400 audit(1786956952.900:5492): avc: denied { write } for pid=29525 comm="syz.9.7081" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.300103][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.467895][ T28] audit: type=1400 audit(1786956953.220:5493): avc: denied { write } for pid=29532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.495930][T29553] loop8: detected capacity change from 0 to 128 [ 1039.536931][T29553] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1039.550404][T29553] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.565397][ T28] audit: type=1400 audit(1786956953.330:5494): avc: denied { write } for pid=29555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.614844][ T28] audit: type=1400 audit(1786956953.330:5495): avc: denied { write } for pid=29552 comm="syz.8.7087" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.767018][T29537] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.856056][T26118] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1039.867276][T29537] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.931093][T29579] loop8: detected capacity change from 0 to 512 [ 1039.945811][T29579] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1039.961302][T29579] EXT4-fs (loop8): 1 truncate cleaned up [ 1039.973804][T29579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.993766][T29537] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.073584][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.119011][T29537] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.184700][T24020] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.213497][ T36] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.224592][ T36] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.235471][ T36] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.448378][T29623] loop9: detected capacity change from 0 to 512 [ 1040.466540][T29623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.479196][T29623] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.545735][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.847082][T29566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1042.856960][T29283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1042.871869][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.886461][T29283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1042.914765][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.925455][T29283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1042.941041][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.951867][T29662] loop8: detected capacity change from 0 to 512 [ 1042.967011][T29283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.989339][T29662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.026806][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.079109][T29662] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1043.095986][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1043.096008][ T28] audit: type=1400 audit(1786956956.860:5518): avc: denied { write } for pid=29665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.150373][ T28] audit: type=1400 audit(1786956956.900:5519): avc: denied { write } for pid=29682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.174038][ T28] audit: type=1400 audit(1786956956.910:5520): avc: denied { write } for pid=29659 comm="syz.8.7109" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1043.196861][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1043.267665][ T28] audit: type=1400 audit(1786956957.030:5521): avc: denied { write } for pid=29659 comm="syz.8.7109" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1043.330270][T29283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.356956][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.375101][T29283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.439978][T24020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.447101][T24020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.478800][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.485907][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.560498][T29699] loop9: detected capacity change from 0 to 512 [ 1043.577215][ T28] audit: type=1400 audit(1786956957.330:5522): avc: denied { write } for pid=29696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.633206][T29699] EXT4-fs: Ignoring removed oldalloc option [ 1043.647561][T29699] EXT4-fs: Ignoring removed oldalloc option [ 1043.666813][ T28] audit: type=1400 audit(1786956957.430:5523): avc: denied { write } for pid=29718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.719414][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1043.759124][T29699] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.7117: corrupted in-inode xattr: invalid ea_ino [ 1043.781139][T29699] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1043.783165][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1043.798827][ C1] EXT4-fs (loop9): initial error at time 1786956957: ext4_iget_extra_inode:5180: inode 15 [ 1043.808799][ C1] EXT4-fs (loop9): last error at time 1786956957: ext4_iget_extra_inode:5180: inode 15 [ 1043.821236][T29699] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.7117: couldn't read orphan inode 15 (err -117) [ 1043.839988][T29699] loop9: lost filesystem error report for type 5 error -117 [ 1043.858186][T29699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.992100][ T28] audit: type=1400 audit(1786956957.750:5525): avc: denied { write } for pid=29729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.076569][ T28] audit: type=1400 audit(1786956957.750:5524): avc: denied { write } for pid=29698 comm="syz.9.7117" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1044.171660][T29283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.175136][ T28] audit: type=1400 audit(1786956957.860:5526): avc: denied { write } for pid=29748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.206633][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1044.316050][T29758] bond0: (slave macvlan0): Opening slave failed [ 1044.317551][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.583949][T29776] SELinux: failed to load policy [ 1044.750486][T29798] netlink: 'syz.1.7138': attribute type 3 has an invalid length. [ 1044.761762][T29795] loop9: detected capacity change from 0 to 1024 [ 1044.781462][T29798] netlink: 'syz.1.7138': attribute type 1 has an invalid length. [ 1044.794798][T29798] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7138'. [ 1044.818689][T29795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.834683][T29283] veth0_vlan: entered promiscuous mode [ 1044.847718][T29283] veth1_vlan: entered promiscuous mode [ 1044.855199][T29795] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.905481][ T28] audit: type=1400 audit(1786956958.670:5527): avc: denied { write } for pid=29794 comm="syz.9.7137" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1044.928132][T29795] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.7137: lblock 0 mapped to illegal pblock 0 (length 1) [ 1044.956669][T29795] EXT4-fs (loop9): Remounting filesystem read-only [ 1044.967208][T29283] veth0_macvtap: entered promiscuous mode [ 1044.989502][T29283] veth1_macvtap: entered promiscuous mode [ 1045.027535][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1045.041267][T29283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.078868][T29283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.119156][T29819] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7143'. [ 1045.330259][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1045.348222][ T3443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.362182][ T3443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.423988][T24020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.446507][T24020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.476732][T29834] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7145'. [ 1045.520437][T29834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7145'. syzkaller syzkaller login: [ 1046.317259][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7168'. [ 1047.314475][T29995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1047.335027][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1047.360559][T29995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1047.424604][ T3657] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.485117][ T3657] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.597457][ T3657] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.820799][ T3657] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.130166][ T3657] bridge_slave_1: left allmulticast mode [ 1048.137242][ T3657] bridge_slave_1: left promiscuous mode [ 1048.151956][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.212446][ T3657] bridge_slave_0: left allmulticast mode [ 1048.223066][ T3657] bridge_slave_0: left promiscuous mode [ 1048.234446][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.334103][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1048.334121][ T28] audit: type=1400 audit(1786956962.100:5556): avc: denied { write } for pid=30057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.415646][ T28] audit: type=1400 audit(1786956962.180:5557): avc: denied { write } for pid=30068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1048.824965][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.846877][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.859427][ T3657] bond0 (unregistering): Released all slaves [ 1049.069844][ T3657] hsr_slave_0: left promiscuous mode [ 1049.106706][ T3657] hsr_slave_1: left promiscuous mode [ 1049.130853][ T3657] veth0_to_team: left promiscuous mode [ 1049.142202][ T3657] veth1_macvtap: left promiscuous mode [ 1049.149090][ T3657] veth0_macvtap: left promiscuous mode [ 1049.155381][ T3657] veth1_vlan: left promiscuous mode [ 1049.160907][ T3657] veth0_vlan: left promiscuous mode [ 1049.240327][ T28] audit: type=1400 audit(1786956963.000:5558): avc: denied { write } for pid=30092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.303292][ T28] audit: type=1400 audit(1786956963.060:5559): avc: denied { write } for pid=30116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.480745][ T28] audit: type=1400 audit(1786956963.240:5560): avc: denied { write } for pid=30119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.539269][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 1049.575803][ T28] audit: type=1400 audit(1786956963.310:5561): avc: denied { write } for pid=30140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.598298][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 1049.701619][ T28] audit: type=1400 audit(1786956963.460:5562): avc: denied { write } for pid=30147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.712222][T30017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.732045][T30017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.751629][T30017] bridge_slave_0: entered allmulticast mode [ 1049.760974][T30017] bridge_slave_0: entered promiscuous mode [ 1049.770623][T30017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.779771][T30017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.798526][T30017] bridge_slave_1: entered allmulticast mode [ 1049.800828][ T28] audit: type=1400 audit(1786956963.560:5563): avc: denied { write } for pid=30165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.806397][T30017] bridge_slave_1: entered promiscuous mode [ 1049.865656][T30017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.895159][T30017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.936366][T30017] team0: Port device team_slave_0 added [ 1049.944447][T30017] team0: Port device team_slave_1 added [ 1049.971584][T30017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.992813][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.066204][T30017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.119092][T30017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.125130][ T28] audit: type=1400 audit(1786956963.880:5564): avc: denied { write } for pid=30173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.130884][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.198569][T30017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.203672][ T28] audit: type=1400 audit(1786956963.960:5565): avc: denied { read } for pid=30187 comm="syz.9.7213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1050.267072][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1050.296119][T30017] hsr_slave_0: entered promiscuous mode [ 1050.314720][T30017] hsr_slave_1: entered promiscuous mode [ 1050.440200][T30208] loop8: detected capacity change from 0 to 1024 [ 1050.472256][T30211] netlink: 'syz.0.7226': attribute type 1 has an invalid length. [ 1050.489367][T30208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.558168][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.607103][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1050.866179][T30017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1050.875508][T30017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.883656][T30017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1050.896165][T30017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.907394][T30017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1050.921943][T30017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.935136][T30017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1050.944070][T30017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.013000][T30017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.066730][T30017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.090634][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.097771][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.121173][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.128303][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.330517][T30017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.437322][T30017] veth0_vlan: entered promiscuous mode [ 1051.446154][T30017] veth1_vlan: entered promiscuous mode [ 1051.466593][T30017] veth0_macvtap: entered promiscuous mode [ 1051.475879][T30017] veth1_macvtap: entered promiscuous mode [ 1051.488841][T30017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.504195][T30017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.533798][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.544558][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.553563][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.594520][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.639794][ T279] IPVS: starting estimator thread 0... [ 1051.737542][T30306] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1051.960953][T30325] loop2: detected capacity change from 0 to 1024 [ 1052.001215][T30325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.029136][T30325] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.142026][T30331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.154800][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1052.620498][T30359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1052.667553][T30359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1052.885514][T30381] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7247'. [ 1052.936489][T30381] bond1: entered promiscuous mode [ 1052.954783][T30381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.004838][T30389] loop2: detected capacity change from 0 to 512 [ 1053.034744][T30381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1053.065285][T30381] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1053.076832][T30389] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7248: corrupted in-inode xattr: invalid ea_ino [ 1053.091234][T30389] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1053.091360][T30389] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7248: couldn't read orphan inode 15 (err -117) [ 1053.100610][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1053.100638][ C0] EXT4-fs (loop2): initial error at time 1786956966: ext4_iget_extra_inode:5180: inode 15 [ 1053.100671][ C0] EXT4-fs (loop2): last error at time 1786956966: ext4_iget_extra_inode:5180: inode 15 [ 1053.141891][T30381] bond1: (slave ipip0): Error -95 calling set_mac_address [ 1053.171335][T30389] loop2: lost filesystem error report for type 5 error -117 [ 1053.172084][T30389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.330021][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.587948][T30415] loop8: detected capacity change from 0 to 128 [ 1053.602119][T30415] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1053.626148][T30415] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.638717][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1053.638738][ T28] audit: type=1400 audit(1786956967.410:5582): avc: denied { write } for pid=30412 comm="syz.8.7257" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.801343][T29409] IPVS: starting estimator thread 0... [ 1053.869142][T26118] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1053.894185][T30428] IPVS: using max 2112 ests per chain, 105600 per kthread [ 1053.986498][ T28] audit: type=1326 audit(1786956967.750:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.062656][T30446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7267'. [ 1054.072969][ T28] audit: type=1326 audit(1786956967.750:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.116479][ T3657] IPVS: stop unused estimator thread 0... [ 1054.155747][ T28] audit: type=1326 audit(1786956967.750:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.226823][ T28] audit: type=1326 audit(1786956967.750:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.313533][ T28] audit: type=1326 audit(1786956967.750:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.409956][ T28] audit: type=1326 audit(1786956967.750:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.490243][ T28] audit: type=1326 audit(1786956967.750:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.550446][ T28] audit: type=1326 audit(1786956967.750:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.610938][ T28] audit: type=1326 audit(1786956967.750:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30440 comm="syz.2.7266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7d5fe0d9 code=0x7ffc0000 [ 1054.864897][T30469] netlink: 'syz.1.7278': attribute type 3 has an invalid length. [ 1055.232831][T30488] loop2: detected capacity change from 0 to 2048 [ 1055.291937][T30493] loop8: detected capacity change from 0 to 512 [ 1055.292316][T30495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1055.311830][T30495] Cannot find add_set index 0 as target [ 1055.317638][T30493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1055.331006][T30493] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.7288: iget: bad i_size value: 38620345925642 [ 1055.345711][T30493] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1055.349575][T30493] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.7288: couldn't read orphan inode 15 (err -117) [ 1055.358793][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1055.358819][ C1] EXT4-fs (loop8): initial error at time 1786956969: ext4_orphan_get:1399: inode 15 [ 1055.358859][ C1] EXT4-fs (loop8): last error at time 1786956969: ext4_orphan_get:1399: inode 15 [ 1055.400213][T30493] loop8: lost filesystem error report for type 5 error -117 [ 1055.400815][T30493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.430767][T30492] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.7288: bg 0: block 5: invalid block bitmap [ 1055.525610][T30017] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1055.539694][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.551095][T30017] CPU: 1 UID: 0 PID: 30017 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1055.551161][T30017] Tainted: [W]=WARN [ 1055.551171][T30017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1055.551217][T30017] Call Trace: [ 1055.551225][T30017] [ 1055.551234][T30017] __dump_stack+0x1d/0x30 [ 1055.551314][T30017] dump_stack_lvl+0x95/0xd0 [ 1055.551336][T30017] dump_stack+0x15/0x1b [ 1055.551398][T30017] dump_header+0x80/0x240 [ 1055.551427][T30017] oom_kill_process+0x295/0x350 [ 1055.551462][T30017] out_of_memory+0x981/0xbc0 [ 1055.551501][T30017] try_charge_memcg+0x621/0xa00 [ 1055.551537][T30017] charge_memcg+0x6d/0x120 [ 1055.551683][T30017] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1055.551723][T30017] swap_cache_alloc_folio+0x47b/0x5e0 [ 1055.551777][T30017] swap_cluster_readahead+0x3d2/0x460 [ 1055.551814][T30017] swapin_readahead+0xd8/0x8a0 [ 1055.551863][T30017] ? tick_program_event+0x79/0xc0 [ 1055.551932][T30017] ? _raw_spin_unlock+0x9/0x30 [ 1055.551966][T30017] ? __rcu_read_unlock+0x4e/0x70 [ 1055.552000][T30017] ? swap_cache_get_folio+0x1f7/0x200 [ 1055.552112][T30017] do_swap_page+0x2a2/0x1ec0 [ 1055.552151][T30017] ? __schedule+0x799/0xd10 [ 1055.552245][T30017] ? __rcu_read_lock+0x36/0x50 [ 1055.552275][T30017] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1055.552354][T30017] handle_mm_fault+0xb3c/0x2da0 [ 1055.552476][T30017] do_user_addr_fault+0x634/0x1060 [ 1055.552509][T30017] ? trace_page_fault_user+0x1f/0xa0 [ 1055.552578][T30017] exc_page_fault+0x62/0xa0 [ 1055.552603][T30017] asm_exc_page_fault+0x26/0x30 [ 1055.552626][T30017] RIP: 0033:0x7f0b7d5b9257 [ 1055.552643][T30017] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1055.552723][T30017] RSP: 002b:00007ffd5b7a3fa0 EFLAGS: 00010202 [ 1055.552742][T30017] RAX: 0000000000000000 RBX: 00005555807c8500 RCX: 00007f0b7d5b9257 [ 1055.552757][T30017] RDX: 00007ffd5b7a3fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.552784][T30017] RBP: 00007ffd5b7a404c R08: 0000000000000000 R09: 0000000000000000 [ 1055.552801][T30017] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1055.552815][T30017] R13: 00000000000927c0 R14: 00000000001019a5 R15: 00007ffd5b7a40a0 [ 1055.552836][T30017] [ 1055.644905][T30017] memory: usage 242460kB, limit 307200kB, failcnt 547 [ 1055.812005][T30488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1055.841667][T30508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7293'. [ 1055.851863][T30017] memory+swap: usage 185656kB, limit 9007199254740988kB, failcnt 0 [ 1055.860152][T30017] kmem: usage 182404kB, limit 9007199254740988kB, failcnt 0 [ 1055.888634][T30017] Memory cgroup stats for /syz2: [ 1055.888871][T30017] cache 24576 [ 1055.916030][T30017] rss 69632 [ 1055.920628][T30510] loop8: detected capacity change from 0 to 4096 [ 1055.930278][T30017] shmem 4096 [ 1055.939475][T30513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7295'. [ 1055.941928][T30017] mapped_file 0 [ 1055.952553][T30510] EXT4-fs: Ignoring removed mblk_io_submit option [ 1055.969771][T30017] dirty 0 [ 1055.975752][T30017] writeback 0 [ 1055.983835][T30017] workingset_refault_anon 1434 [ 1055.995412][T30510] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.009543][T30017] workingset_refault_file 2987 [ 1056.029784][T30017] swap 1163264 [ 1056.033308][T30017] swapcached 30621696 [ 1056.037353][T30017] pgpgin 644315 [ 1056.040923][T30017] pgpgout 644289 [ 1056.053357][T30017] pgfault 545198 [ 1056.059831][T30017] pgmajfault 6908 [ 1056.064261][T30017] inactive_anon 81920 [ 1056.086434][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.108016][T30017] active_anon 0 [ 1056.135753][T30017] inactive_file 8192 [ 1056.154287][T30017] active_file 4096 [ 1056.174957][T30017] unevictable 8192 [ 1056.191863][T30017] hierarchical_memory_limit 314572800 [ 1056.210021][T30017] hierarchical_memsw_limit 9223372036854771712 [ 1056.243887][T30017] total_cache 24576 [ 1056.259119][T30017] total_rss 69632 [ 1056.269845][T30017] total_shmem 4096 [ 1056.281339][T30017] total_mapped_file 0 [ 1056.285524][T30017] total_dirty 0 [ 1056.289048][T30017] total_writeback 0 [ 1056.292936][T30017] total_workingset_refault_anon 1434 [ 1056.299446][T30017] total_workingset_refault_file 2987 [ 1056.305762][T30017] total_swap 1163264 [ 1056.309812][T30017] total_swapcached 30621696 [ 1056.315002][T30017] total_pgpgin 644315 [ 1056.319153][T30017] total_pgpgout 644289 [ 1056.323593][T30017] total_pgfault 545198 [ 1056.330912][T30017] total_pgmajfault 6908 [ 1056.349619][T30017] total_inactive_anon 81920 [ 1056.360078][T30017] total_active_anon 0 [ 1056.369949][T30017] total_inactive_file 8192 [ 1056.387478][T30017] total_active_file 4096 [ 1056.395998][T30017] total_unevictable 8192 [ 1056.407134][T30017] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7284,pid=30483,uid=0 [ 1056.447598][T30017] Memory cgroup out of memory: Killed process 30483 (syz.2.7284) total-vm:96368kB, anon-rss:1380kB, file-rss:22396kB, shmem-rss:7944kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1056.480737][T30488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1056.501695][T30488] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1822 with error 28 [ 1056.536130][T30488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1056.536130][T30488] [ 1056.547910][T30488] EXT4-fs (loop2): Total free blocks count 0 [ 1056.555485][T30488] EXT4-fs (loop2): Free/Dirty block details [ 1056.561745][T30488] EXT4-fs (loop2): free_blocks=2415919104 [ 1056.567965][T30488] EXT4-fs (loop2): dirty_blocks=1824 [ 1056.575586][T30488] EXT4-fs (loop2): Block reservation details [ 1056.581918][T30488] EXT4-fs (loop2): i_reserved_data_blocks=114 [ 1056.590938][T30546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7305'. [ 1056.665236][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1056.686874][ T3376] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1056.800506][T30017] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1056.838723][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1056.967092][T30557] loop2: detected capacity change from 0 to 512 [ 1056.976648][T30557] EXT4-fs: Ignoring removed oldalloc option [ 1056.982654][T30557] EXT4-fs: Ignoring removed oldalloc option [ 1057.054797][T30557] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7309: corrupted in-inode xattr: invalid ea_ino [ 1057.094668][T30557] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1057.100454][T30557] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7309: couldn't read orphan inode 15 (err -117) [ 1057.110342][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1057.110393][ C0] EXT4-fs (loop2): initial error at time 1786956970: ext4_iget_extra_inode:5180: inode 15 [ 1057.110593][ C0] EXT4-fs (loop2): last error at time 1786956970: ext4_iget_extra_inode:5180: inode 15 [ 1057.279407][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7313'. [ 1057.294756][T30557] loop2: lost filesystem error report for type 5 error -117 [ 1057.311028][T30557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.609354][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.818829][T30590] netlink: 'syz.2.7319': attribute type 10 has an invalid length. [ 1057.835340][T30590] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1057.895368][T30594] loop8: detected capacity change from 0 to 512 [ 1057.925291][T30594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.071578][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.136265][T30604] loop8: detected capacity change from 0 to 1024 [ 1058.156101][T30604] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1058.169109][T30604] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1058.184722][T30604] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1058.199986][T30604] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.7324: Invalid inode table block 0 in block_group 0 [ 1058.215224][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.217067][T30604] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1058.224528][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1058.224551][ C0] EXT4-fs (loop8): initial error at time 1786956971: __ext4_get_inode_loc:4886 [ 1058.224571][ C0] EXT4-fs (loop8): last error at time 1786956971: __ext4_get_inode_loc:4886 [ 1058.258948][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.261301][T30604] EXT4-fs error (device loop8): ext4_quota_write:7430: inode #3: comm syz.8.7324: mark_inode_dirty error [ 1058.282541][T30604] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1058.282811][T30604] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.7324: Failed to acquire dquot type 0 [ 1058.311829][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.312018][T30604] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.7324: Invalid inode table block 0 in block_group 0 [ 1058.320987][T30610] loop2: detected capacity change from 0 to 128 [ 1058.332156][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.339305][T30604] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1058.356835][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.360587][T30604] EXT4-fs error (device loop8): ext4_ext_truncate:4557: inode #15: comm syz.8.7324: mark_inode_dirty error [ 1058.381569][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.381589][T30604] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1058.393432][T30604] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.7324: Invalid inode table block 0 in block_group 0 [ 1058.416443][T30610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1058.424415][T30610] System zones: 1-3, 19-19, 35-36 [ 1058.430325][T30610] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1058.437903][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.442925][T30604] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1058.460390][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.460516][T30604] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1058.471545][T30610] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.478549][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.511303][T30604] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.7324: Invalid inode table block 0 in block_group 0 [ 1058.531644][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.543053][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.560493][T30604] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1058.570554][T30604] loop8: lost filesystem error report for type 5 error -117 [ 1058.571956][T30604] EXT4-fs error (device loop8): ext4_truncate:4691: inode #15: comm syz.8.7324: mark_inode_dirty error [ 1058.575015][T30017] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1058.580606][T30604] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1058.600098][T30604] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1058.628576][T30604] EXT4-fs (loop8): 1 truncate cleaned up [ 1058.634947][T30604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1058.664128][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.681637][T30617] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7331'. [ 1058.732925][T30622] serio: Serial port ttyS3 [ 1058.765258][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.794532][T30604] EXT4-fs (loop8): shut down requested (0) [ 1058.806970][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1058.806991][ T28] audit: type=1400 audit(1786956972.560:5645): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1058.853272][ T28] audit: type=1400 audit(1786956972.560:5646): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.875272][ T28] audit: type=1400 audit(1786956972.560:5647): avc: denied { write search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.899360][ T28] audit: type=1400 audit(1786956972.560:5648): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.920453][ T28] audit: type=1400 audit(1786956972.560:5649): avc: denied { create } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.942782][ T28] audit: type=1400 audit(1786956972.560:5650): avc: denied { append open } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.967013][ T28] audit: type=1400 audit(1786956972.560:5651): avc: denied { getattr } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1058.967241][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.054406][ T36] bridge_slave_1: left allmulticast mode [ 1059.060182][ T36] bridge_slave_1: left promiscuous mode [ 1059.066127][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.075248][ T36] bridge_slave_0: left allmulticast mode [ 1059.081010][ T36] bridge_slave_0: left promiscuous mode [ 1059.087959][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.213519][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.223520][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.233237][ T36] bond0 (unregistering): Released all slaves [ 1059.377796][ T36] hsr_slave_0: left promiscuous mode [ 1059.396031][ T36] hsr_slave_1: left promiscuous mode [ 1059.402619][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.413380][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.420756][ T28] audit: type=1400 audit(1786956973.180:5652): avc: denied { write } for pid=30643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.449340][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.458693][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.476641][ T36] veth1_macvtap: left promiscuous mode [ 1059.484032][ T36] veth0_macvtap: left promiscuous mode [ 1059.489641][ T28] audit: type=1400 audit(1786956973.250:5653): avc: denied { write } for pid=30658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.519121][ T36] veth1_vlan: left promiscuous mode [ 1059.524812][ T36] veth0_vlan: left promiscuous mode [ 1059.611229][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1059.622524][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1059.666052][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1059.774302][T30663] syzkaller0: entered promiscuous mode [ 1059.779993][T30663] syzkaller0: entered allmulticast mode [ 1059.789280][T30663] net_ratelimit: 135 callbacks suppressed [ 1059.789299][T30663] TC_ACT_REPEAT abuse ? [ 1059.860479][ T28] audit: type=1400 audit(1786956973.620:5654): avc: denied { write } for pid=30661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.967043][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1060.217757][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1060.412763][T30724] loop2: detected capacity change from 0 to 512 [ 1060.437420][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1060.513462][ T3376] usb usb6-port1: attempt power cycle [ 1060.514419][T30724] EXT4-fs (loop2): 1 orphan inode deleted [ 1060.527260][T30724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.540809][T30724] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.573337][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 1060.658744][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.895790][T30753] loop2: detected capacity change from 0 to 512 [ 1060.919114][T30753] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 1060.980487][T29409] IPVS: starting estimator thread 0... [ 1061.116830][T30762] IPVS: using max 1968 ests per chain, 98400 per kthread [ 1061.563501][T30794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7373'. [ 1061.610647][T30794] hsr_slave_1 (unregistering): left promiscuous mode [ 1061.699471][T30802] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1061.733988][T30804] loop2: detected capacity change from 0 to 1764 [ 1061.734342][T30806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.767476][T30806] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.794274][T30806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.822166][T30806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.856077][T30806] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.881801][T30806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.897173][T30789] loop8: detected capacity change from 0 to 512 [ 1061.906612][T30806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.926624][T30806] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7377'. [ 1061.952723][T30789] EXT4-fs (loop8): filesystem is read-only [ 1062.115613][T30815] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1062.255350][T30822] ip6gre1: entered promiscuous mode [ 1062.260828][T30822] ip6gre1: entered allmulticast mode [ 1062.333725][T30826] loop8: detected capacity change from 0 to 512 [ 1062.348526][T30826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.378840][T30826] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.392311][T30826] netlink: 'syz.8.7386': attribute type 1 has an invalid length. [ 1062.427331][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.443429][ T3376] usb usb6-port1: unable to enumerate USB device [ 1063.290949][T30859] loop9: detected capacity change from 0 to 128 [ 1063.328156][T30859] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1063.351889][T30859] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.488086][T30876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.498180][T30876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.888660][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 1063.888680][ T28] audit: type=1400 audit(1786956977.630:5763): avc: denied { write } for pid=30912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.967294][ T28] audit: type=1400 audit(1786956977.710:5764): avc: denied { write } for pid=30929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.999140][T30931] loop2: detected capacity change from 0 to 512 [ 1064.057017][T30931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.157305][T25436] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1064.185861][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.248482][T30952] loop2: detected capacity change from 0 to 512 [ 1065.642090][T30990] macvlan2: entered promiscuous mode [ 1065.647423][T30990] bridge0: entered promiscuous mode [ 1065.756984][T31007] __nla_validate_parse: 23 callbacks suppressed [ 1065.757001][T31007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7427'. [ 1067.040972][T31032] netlink: 'syz.0.7437': attribute type 1 has an invalid length. [ 1067.062582][T31032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1067.116587][T31032] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1067.152814][T31036] loop8: detected capacity change from 0 to 512 [ 1067.198605][T31036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1067.216666][T31036] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.238429][ T28] audit: type=1400 audit(1786956981.000:5765): avc: denied { write } for pid=31035 comm="syz.8.7438" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.295015][T31032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.302307][T31032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.320705][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1067.333234][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1067.397623][T31032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.408711][T31032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.494872][T31032] ip6gre1: left promiscuous mode [ 1067.500076][T31032] ip6gre1: left allmulticast mode [ 1067.511242][T31032] macvlan2: left promiscuous mode [ 1067.533904][ T3443] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.557764][T31039] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1067.583722][T31039] bond1: (slave batadv1): making interface the new active one [ 1067.601621][T31039] batadv1: entered promiscuous mode [ 1067.609273][T31039] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1067.654793][T14459] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.778663][T31067] loop9: detected capacity change from 0 to 2048 [ 1067.863791][T31067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1067.887606][ T28] audit: type=1400 audit(1786956981.650:5766): avc: denied { write } for pid=31066 comm="syz.9.7448" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.971567][T31077] loop2: detected capacity change from 0 to 512 [ 1067.994680][ T3657] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.009176][T31079] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1068.044550][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.076067][T31077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.523417][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.584697][T31091] team0: Port device vlan2 added [ 1068.652451][T31067] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1068.694486][T31067] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1068.694486][T31067] [ 1068.704484][T31067] EXT4-fs (loop9): Total free blocks count 0 [ 1068.715987][T31067] EXT4-fs (loop9): Free/Dirty block details [ 1068.720423][T31103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1068.742998][T31067] EXT4-fs (loop9): free_blocks=2415919104 [ 1068.762550][T31067] EXT4-fs (loop9): dirty_blocks=7632 [ 1068.774183][T31067] EXT4-fs (loop9): Block reservation details [ 1068.785885][T31067] EXT4-fs (loop9): i_reserved_data_blocks=477 [ 1068.910796][ T3652] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 1068.966002][T25436] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1069.308976][ T28] audit: type=1326 audit(1786956983.060:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.316476][T31134] loop8: detected capacity change from 0 to 1024 [ 1069.349752][T31134] EXT4-fs: Ignoring removed bh option [ 1069.355434][ T28] audit: type=1326 audit(1786956983.060:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.382711][ T28] audit: type=1326 audit(1786956983.060:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.413110][ T28] audit: type=1326 audit(1786956983.060:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.441712][ T28] audit: type=1326 audit(1786956983.060:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.445989][T31134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.470847][ T28] audit: type=1326 audit(1786956983.060:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.507471][ T28] audit: type=1326 audit(1786956983.060:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.535451][ T28] audit: type=1326 audit(1786956983.110:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.561107][ T28] audit: type=1326 audit(1786956983.110:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31132 comm="syz.0.7474" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8754ede0d9 code=0x7ffc0000 [ 1069.580250][T31134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1069.668496][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.735930][T31142] netlink: 'syz.8.7475': attribute type 1 has an invalid length. [ 1069.751847][T31142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1069.776267][T31147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1069.825993][T31142] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1070.130459][T31142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.137748][T31142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.445073][T31158] loop2: detected capacity change from 0 to 164 [ 1070.464439][T31158] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1070.509539][T31142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.547021][T31142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.552962][T31158] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1070.704106][T31153] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1070.718833][T31153] bond2: (slave batadv1): making interface the new active one [ 1070.729850][T31153] batadv1: entered promiscuous mode [ 1070.735815][T31153] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1070.764126][ T36] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.777414][ T36] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.819331][T31177] loop8: detected capacity change from 0 to 1024 [ 1070.827833][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.850444][T31177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.863948][ T36] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.252255][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.415021][T31228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1071.424911][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1071.434246][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1071.436253][T31230] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1071.654576][T31238] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1072.157219][T31280] loop8: detected capacity change from 0 to 512 [ 1072.175508][T31280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.318614][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.404813][T31315] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1072.552200][T31330] loop9: detected capacity change from 0 to 512 [ 1072.577685][T31332] syzkaller0: entered promiscuous mode [ 1072.583206][T31332] syzkaller0: entered allmulticast mode [ 1072.621842][T31330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.809297][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.181227][T31347] netlink: 'syz.2.7528': attribute type 1 has an invalid length. [ 1073.233018][T31347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1073.274490][T31349] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1073.386476][T31347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.393846][T31347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.451241][T31362] loop8: detected capacity change from 0 to 512 [ 1073.464107][T31362] EXT4-fs: inline encryption not supported [ 1073.485139][T31362] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1073.509191][T31362] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1073.530440][T31362] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7532: bg 0: block 248: padding at end of block bitmap is not set [ 1073.544869][T31362] fserror_report: 1 callbacks suppressed [ 1073.544949][T31362] loop8: lost filesystem error report for type 5 error -117 [ 1073.552208][T31362] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.7532: Failed to acquire dquot type 1 [ 1073.559608][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1073.559640][ C1] EXT4-fs (loop8): last error at time 1786956987: ext4_validate_block_bitmap:441 [ 1073.566387][T31347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.573507][T31362] loop8: lost filesystem error report for type 5 error -28 [ 1073.597187][T31362] EXT4-fs (loop8): 1 truncate cleaned up [ 1073.611517][T31347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.620031][T31362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1073.665421][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1073.729218][T31349] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1073.737682][T31349] bond1: (slave batadv1): making interface the new active one [ 1073.745855][T31349] batadv1: entered promiscuous mode [ 1073.751190][T31349] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1073.777862][T31364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1073.804694][ T3443] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.834649][ T3443] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.858486][ T3443] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.871933][ T3443] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.917209][T31378] loop8: detected capacity change from 0 to 512 [ 1073.936335][T31378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.996937][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.117342][T31396] loop9: detected capacity change from 0 to 512 [ 1074.134742][T31396] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1074.144133][T31396] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.7543: ea_inode file size=4 entry size=6 [ 1074.157762][T31396] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1074.165324][T31403] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1074.177865][T31396] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.7543: corrupted inode contents [ 1074.190578][T31396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1074.191055][T31396] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #15: comm syz.9.7543: mark_inode_dirty error [ 1074.200266][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1074.200306][ C0] EXT4-fs (loop9): initial error at time 1786956987: ext4_do_update_inode:5742: inode 15 [ 1074.200345][ C0] EXT4-fs (loop9): last error at time 1786956987: ext4_do_update_inode:5742: inode 15 [ 1074.239666][T31396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1074.240998][T31396] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.7543: corrupted inode contents [ 1074.263022][T31396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1074.271289][T31396] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.7543: mark_inode_dirty error [ 1074.295285][T31396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1074.297538][T31396] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.7543: mark inode dirty (error -117) [ 1074.319871][T31396] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1074.320154][T31396] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 1074.340089][T31396] EXT4-fs (loop9): 1 orphan inode deleted [ 1074.347043][T31396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1074.377858][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.464622][T31412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7548'. [ 1074.506461][T31415] loop9: detected capacity change from 0 to 512 [ 1074.546065][T31415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.612330][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.662297][T31422] loop9: detected capacity change from 0 to 2048 [ 1074.707522][T31422] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1074.778437][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.877135][T31430] loop9: detected capacity change from 0 to 512 [ 1074.886596][T31430] EXT4-fs: Ignoring removed oldalloc option [ 1074.897660][T31430] EXT4-fs: Ignoring removed bh option [ 1075.004586][T31430] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.7553: corrupted in-inode xattr: invalid ea_ino [ 1075.023297][T31430] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1075.023670][T31430] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.7553: couldn't read orphan inode 15 (err -117) [ 1075.044685][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1075.044708][ C1] EXT4-fs (loop9): initial error at time 1786956988: ext4_iget_extra_inode:5180: inode 15 [ 1075.044740][ C1] EXT4-fs (loop9): last error at time 1786956988: ext4_iget_extra_inode:5180: inode 15 [ 1075.197994][T31430] loop9: lost filesystem error report for type 5 error -117 [ 1075.198691][T31430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.226297][ T28] kauditd_printk_skb: 204 callbacks suppressed [ 1075.226315][ T28] audit: type=1400 audit(1786956988.980:5976): avc: denied { write } for pid=31429 comm="syz.9.7553" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.270431][ T28] audit: type=1400 audit(1786956989.000:5977): avc: denied { write } for pid=31429 comm="syz.9.7553" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.297647][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.309772][ T28] audit: type=1400 audit(1786956989.000:5978): avc: denied { write } for pid=31429 comm="syz.9.7553" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.339116][ T28] audit: type=1400 audit(1786956989.000:5979): avc: denied { write } for pid=31429 comm="syz.9.7553" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.361800][ T28] audit: type=1400 audit(1786956989.000:5980): avc: denied { create } for pid=31429 comm="syz.9.7553" name=CD25B85C5DEB6E81068553BC84CEAD4D1EBA8AA57E2B354A6899E44ACBD3834491219B3E231CD55D82F161774A689EFE197CC193AC0124C67738A0A1D5F16A6768C2C2BA7386C8C95CA08C55117F344F5A2BCA0D09E79EA3FC49491F2C7ADC513C2779C1BF62B1A8643D23E9E8B2AE41D4A59F1B82B82E092B36EB851B8456DA871B4057AEC325A9D4CCCAFDE61F2ABC85E3CABEABB856F6FFBFE23D69219EC8FAE6BEB54ABE7870DBAE823D49806A967A1C7F252999804F106745F20490BB3347B59321DC69765567ABCBD89DE04D89622170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 1075.636977][T31451] loop8: detected capacity change from 0 to 512 [ 1075.667943][T31451] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.7560: inode has both inline data and extents flags [ 1075.692806][T31451] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1075.693159][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1075.708794][ C0] EXT4-fs (loop8): initial error at time 1786956989: ext4_orphan_get:1399: inode 15 [ 1075.718240][ C0] EXT4-fs (loop8): last error at time 1786956989: ext4_orphan_get:1399: inode 15 [ 1075.728601][T31451] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.7560: couldn't read orphan inode 15 (err -117) [ 1075.740634][T31451] loop8: lost filesystem error report for type 5 error -117 [ 1075.742737][T31451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.776351][T31451] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1075.796393][ T28] audit: type=1400 audit(1786956989.540:5981): avc: denied { write } for pid=31450 comm="syz.8.7560" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.894903][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.020404][T31465] loop2: detected capacity change from 0 to 512 [ 1076.034699][T31465] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.7576: inode has both inline data and extents flags [ 1076.049066][T31465] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1076.050291][T31465] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7576: couldn't read orphan inode 15 (err -117) [ 1076.053225][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1076.077841][ C0] EXT4-fs (loop2): initial error at time 1786956989: ext4_orphan_get:1399: inode 15 [ 1076.087299][ C0] EXT4-fs (loop2): last error at time 1786956989: ext4_orphan_get:1399: inode 15 [ 1076.097003][T31465] loop2: lost filesystem error report for type 5 error -117 [ 1076.100510][T31465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.127094][ T28] audit: type=1400 audit(1786956989.890:5982): avc: denied { write } for pid=31464 comm="syz.2.7576" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1076.128118][T31465] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 1076.348188][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.612110][T31482] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1076.628366][T31482] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.650655][ T28] audit: type=1400 audit(1786956990.360:5983): avc: denied { write } for pid=31481 comm="syz.2.7573" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1076.794546][T30017] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1076.911433][T31501] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.924096][T31501] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.963693][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1077.405972][ T28] audit: type=1400 audit(1786956991.170:5984): avc: denied { getopt } for pid=31528 comm="syz.9.7589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1077.605644][T31534] set_capacity_and_notify: 2 callbacks suppressed [ 1077.605660][T31534] loop9: detected capacity change from 0 to 128 [ 1077.621715][T31534] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1077.676042][T31534] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.698296][ T28] audit: type=1400 audit(1786956991.460:5985): avc: denied { write } for pid=31533 comm="syz.9.7591" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1077.760643][T31542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7595'. [ 1077.800928][T31542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31542 comm=syz.0.7595 [ 1077.815476][T25436] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1079.324730][T31580] loop8: detected capacity change from 0 to 128 [ 1079.378576][T31580] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1079.418981][T31580] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.610199][T26118] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1079.778114][T31573] loop2: detected capacity change from 0 to 512 [ 1080.001817][T31573] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 1080.241590][T31605] loop8: detected capacity change from 0 to 512 [ 1080.249944][T31605] EXT4-fs: inline encryption not supported [ 1080.249985][T31603] loop2: detected capacity change from 0 to 512 [ 1080.271133][T31605] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1080.285566][T31605] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.7618: corrupted in-inode xattr: e_value size too large [ 1080.299664][T31605] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1080.317417][T31605] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.7618: couldn't read orphan inode 15 (err -117) [ 1080.338458][T31605] loop8: lost filesystem error report for type 5 error -117 [ 1080.340513][T31611] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7620'. [ 1080.355006][T31613] netlink: 'syz.1.7621': attribute type 1 has an invalid length. [ 1080.366722][T31605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.384003][T31603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.403066][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.410108][T31613] bond1: entered allmulticast mode [ 1080.424617][T31617] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1080.440433][T31617] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1080.452095][T31617] bond1: (slave vti0): making interface the new active one [ 1080.459459][T31617] vti0: entered allmulticast mode [ 1080.465224][T31617] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1080.494491][T31613] bond1 (unregistering): (slave vti0): Releasing backup interface [ 1080.504038][T31613] vti0: left allmulticast mode [ 1080.509429][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.520402][T31613] bond1 (unregistering): Released all slaves [ 1080.718753][T31624] loop2: detected capacity change from 0 to 512 [ 1080.750679][T31624] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1080.758639][T31624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1080.766665][T31624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1080.773652][T31624] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.7624: iget: bad i_size value: 12154761577498 [ 1080.786347][T31624] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1080.787154][T31624] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7624: couldn't read orphan inode 13 (err -117) [ 1080.789245][T31635] Cannot find add_set index 0 as target [ 1080.796359][T31624] loop2: lost filesystem error report for type 5 error -117 [ 1080.798752][T31624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1080.920246][T31624] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.7624: dx entry: limit 65535 != root limit 120 [ 1080.936097][T31624] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7624: Corrupt directory, running e2fsck is recommended [ 1081.113506][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.214456][T31654] loop9: detected capacity change from 0 to 512 [ 1081.246711][T31654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.307233][T31663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7647'. [ 1081.422824][T31654] usb usb7: usbfs: process 31654 (syz.9.7635) did not claim interface 0 before use [ 1081.504794][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.528864][T31668] loop8: detected capacity change from 0 to 512 [ 1081.547244][T31671] loop9: detected capacity change from 0 to 512 [ 1081.559468][T31671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1081.576556][T31671] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.7638: iget: bad i_size value: 38620345925642 [ 1081.593286][T31668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.635951][T31671] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1081.636201][T31671] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.7638: couldn't read orphan inode 15 (err -117) [ 1081.645497][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1081.645514][ C1] EXT4-fs (loop9): initial error at time 1786956995: ext4_orphan_get:1399: inode 15 [ 1081.645552][ C1] EXT4-fs (loop9): last error at time 1786956995: ext4_orphan_get:1399: inode 15 [ 1081.693194][T31671] loop9: lost filesystem error report for type 5 error -117 [ 1081.694981][T31671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.738420][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1081.738506][ T28] audit: type=1400 audit(1786956995.500:5987): avc: denied { write } for pid=31670 comm="syz.9.7638" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1081.756179][T31670] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7638: bg 0: block 5: invalid block bitmap [ 1081.767349][ T28] audit: type=1400 audit(1786956995.500:5988): avc: denied { write } for pid=31670 comm="syz.9.7638" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1081.857147][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.891156][ T28] audit: type=1326 audit(1786956995.650:5989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1081.920596][ T28] audit: type=1326 audit(1786956995.650:5990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1081.950519][T31668] usb usb7: usbfs: process 31668 (syz.8.7650) did not claim interface 0 before use [ 1081.976843][ T28] audit: type=1326 audit(1786956995.650:5991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1082.073120][ T28] audit: type=1326 audit(1786956995.650:5992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1082.102514][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.113103][ T28] audit: type=1326 audit(1786956995.650:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1082.141963][ T28] audit: type=1326 audit(1786956995.650:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1082.169241][ T28] audit: type=1326 audit(1786956995.650:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1082.254803][ T28] audit: type=1326 audit(1786956995.650:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31681 comm="syz.9.7641" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287eabe0d9 code=0x7ffc0000 [ 1083.379457][T31727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7657'. [ 1084.276875][T31749] netlink: 'syz.8.7665': attribute type 10 has an invalid length. [ 1084.308103][T31749] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1084.358377][T31758] loop9: detected capacity change from 0 to 2048 [ 1084.413117][T31758] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1084.593590][T31770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1084.631796][ T3443] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1084.647529][ T3443] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 824 with error 28 [ 1084.704164][ T3443] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1084.704164][ T3443] [ 1084.724687][ T3443] EXT4-fs (loop9): Total free blocks count 0 [ 1084.735332][ T3443] EXT4-fs (loop9): Free/Dirty block details [ 1084.747501][ T3443] EXT4-fs (loop9): free_blocks=2415919104 [ 1084.751081][T31761] loop8: detected capacity change from 0 to 1024 [ 1084.759655][ T3443] EXT4-fs (loop9): dirty_blocks=1008 [ 1084.800514][ T3443] EXT4-fs (loop9): Block reservation details [ 1084.816009][ T3443] EXT4-fs (loop9): i_reserved_data_blocks=74 [ 1084.839391][ T3443] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 824 with max blocks 354 with error 28 [ 1084.894908][T31761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.924700][T31761] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1085.106981][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1085.114106][T31778] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.7674'. [ 1085.126407][T31778] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1085.188667][T31784] loop8: detected capacity change from 0 to 512 [ 1085.208229][T31784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.357650][T31789] loop2: detected capacity change from 0 to 128 [ 1085.395933][T31789] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1085.457859][T31789] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.325493][T25436] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1086.343889][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.366313][T30017] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1086.472215][T31807] netlink: 'syz.9.7680': attribute type 10 has an invalid length. [ 1086.502134][T31807] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1087.010718][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 1087.010739][ T28] audit: type=1400 audit(1786957000.770:6074): avc: denied { write } for pid=31828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.231387][ T28] audit: type=1400 audit(1786957000.990:6075): avc: denied { write } for pid=31845 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.424307][T31856] ip_tables: iptables: counters copy to user failed while replacing table [ 1087.993359][ T28] audit: type=1400 audit(1786957001.750:6076): avc: denied { write } for pid=31847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.060969][T31843] loop9: detected capacity change from 0 to 1024 [ 1088.142880][ T28] audit: type=1400 audit(1786957001.900:6077): avc: denied { write } for pid=31866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.240235][T31871] loop2: detected capacity change from 0 to 512 [ 1088.281115][T31871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.314892][T31843] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.356806][T31843] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.379388][T31875] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.7692'. [ 1088.400305][T31875] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1088.907755][T31880] netlink: 'syz.1.7696': attribute type 10 has an invalid length. [ 1088.968542][T31880] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1089.140794][T31903] loop9: detected capacity change from 0 to 512 [ 1089.234730][T31911] syzkaller0: entered promiscuous mode [ 1089.240270][T31911] syzkaller0: entered allmulticast mode [ 1089.252430][T31911] TC_ACT_REPEAT abuse ? [ 1090.129057][T31933] loop2: detected capacity change from 0 to 512 [ 1090.132635][T31932] netlink: 'syz.0.7716': attribute type 10 has an invalid length. [ 1090.136579][T31933] EXT4-fs: Ignoring removed nobh option [ 1090.156769][T31932] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1090.168534][T31933] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.201782][ T28] audit: type=1400 audit(1786957003.960:6078): avc: denied { write } for pid=31928 comm="syz.2.7719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1090.234646][T31933] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.7719: corrupted inode contents [ 1090.259695][T31933] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.7719: mark_inode_dirty error [ 1090.276566][T31933] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.7719: corrupted inode contents [ 1090.292878][T31933] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.7719: mark_inode_dirty error [ 1090.317775][T31941] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.7719: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1090.317775][T31941] [ 1090.338016][ T28] audit: type=1400 audit(1786957004.040:6079): avc: denied { write } for pid=31928 comm="syz.2.7719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1090.361439][T31941] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.7719: corrupted inode contents [ 1090.373824][T31941] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.7719: mark_inode_dirty error [ 1090.387461][T31941] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 1090.396021][T31945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7723'. [ 1090.402222][T31933] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.7719: corrupted inode contents [ 1090.417196][ T28] audit: type=1400 audit(1786957004.160:6080): avc: denied { write } for pid=31928 comm="syz.2.7719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1090.436239][T31933] EXT4-fs error (device loop2): add_dirent_to_buf:2151: inode #2: comm syz.2.7719: mark_inode_dirty error [ 1090.455883][ T28] audit: type=1400 audit(1786957004.220:6081): avc: denied { write } for pid=31928 comm="syz.2.7719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1090.456899][T31945] hsr_slave_1 (unregistering): left promiscuous mode [ 1091.182813][T31979] ip6gre1: entered promiscuous mode [ 1091.194861][T31979] ip6gre1: entered allmulticast mode [ 1091.206348][T31979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.275766][T31985] loop8: detected capacity change from 0 to 8192 [ 1091.436967][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7739'. [ 1091.593260][T32004] netlink: 'syz.1.7745': attribute type 1 has an invalid length. [ 1091.642366][T32004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.663853][T32009] ip6gre1: entered promiscuous mode [ 1091.669133][T32009] ip6gre1: entered allmulticast mode [ 1091.693409][T32004] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1091.715434][T32004] bond1: (slave veth7): Enslaving as an active interface with a down link [ 1091.770503][T32018] netlink: 'syz.8.7750': attribute type 10 has an invalid length. [ 1091.800587][T32018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.823059][T32023] netlink: 'syz.8.7750': attribute type 10 has an invalid length. [ 1091.830606][T32018] team0: Port device netdevsim2 added [ 1091.854748][T14459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.862407][T14459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.883699][ T3390] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.896812][T32023] team0: Port device netdevsim2 removed [ 1091.904939][T32023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.919166][T32023] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 1091.943489][ T3376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.218248][T32036] loop9: detected capacity change from 0 to 1024 [ 1092.242338][T32036] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1092.267130][T32036] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 1092.283858][ T28] audit: type=1400 audit(1786957006.040:6082): avc: denied { relabelto } for pid=32035 comm="syz.9.7754" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.313400][ T3376] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.342687][ T28] audit: type=1400 audit(1786957006.040:6083): avc: denied { write } for pid=32035 comm="syz.9.7754" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.368175][ T28] audit: type=1400 audit(1786957006.040:6084): avc: denied { add_name } for pid=32035 comm="syz.9.7754" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.394184][ T28] audit: type=1400 audit(1786957006.050:6085): avc: denied { write } for pid=32035 comm="syz.9.7754" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.464912][ T28] audit: type=1400 audit(1786957006.230:6086): avc: denied { setattr } for pid=32035 comm="syz.9.7754" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.540591][ T28] audit: type=1400 audit(1786957006.250:6087): avc: denied { write } for pid=32035 comm="syz.9.7754" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1092.570832][T32041] loop9: detected capacity change from 0 to 512 [ 1092.611214][T32041] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.630720][ T28] audit: type=1400 audit(1786957006.390:6088): avc: denied { write } for pid=32040 comm="syz.9.7755" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.845206][T32052] ip_tables: iptables: counters copy to user failed while replacing table [ 1093.392936][T32054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.408504][T32054] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.441253][T25436] EXT4-fs unmount: 9 callbacks suppressed [ 1093.441309][T25436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.447806][T32056] loop2: detected capacity change from 0 to 512 [ 1093.462631][T32054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.477608][T32054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.489510][T32054] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.514857][T32056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.527594][T32054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.538864][T32054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.549606][T32054] netlink: 2 bytes leftover after parsing attributes in process `syz.8.7757'. [ 1093.563476][T32056] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.576785][T32056] netlink: 'syz.2.7760': attribute type 1 has an invalid length. [ 1093.585961][ T28] audit: type=1400 audit(1786957007.350:6089): avc: denied { write } for pid=32055 comm="syz.2.7760" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.657941][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.667600][ T28] audit: type=1400 audit(1786957007.350:6090): avc: denied { write } for pid=30017 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.690002][ T28] audit: type=1400 audit(1786957007.350:6091): avc: denied { write } for pid=30017 comm="syz-executor" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.711074][T32066] loop9: detected capacity change from 0 to 512 [ 1093.746880][T32069] ip6gre1: entered promiscuous mode [ 1093.752302][T32069] ip6gre1: entered allmulticast mode [ 1093.761768][T32069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.223335][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.231102][ T54] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.253283][T29453] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1094.722154][T32104] loop2: detected capacity change from 0 to 4096 [ 1094.734541][T32104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.084864][T29453] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1095.144889][T29453] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.808780][T30017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.028254][T32155] __nla_validate_parse: 56 callbacks suppressed [ 1096.028274][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7794'. [ 1096.248857][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.288036][T32161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.293409][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1096.293456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.341032][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.371965][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.384226][T32161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.419159][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.429425][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.462096][T32169] IPv6: addrconf: prefix option has invalid lifetime [ 1096.506837][T32161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.544089][T32161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1096.791679][T32182] futex_wake_op: syz.9.7806 tries to shift op by 144; fix this program [ 1096.864327][T32182] futex_wake_op: syz.9.7806 tries to shift op by 144; fix this program [ 1097.468434][T32211] loop8: detected capacity change from 0 to 4096 [ 1097.483205][T32211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.498610][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 1097.498628][ T28] audit: type=1400 audit(1786957011.270:6163): avc: denied { write } for pid=32210 comm="syz.8.7818" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1097.903240][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1098.130703][T32216] ================================================================== [ 1098.138843][T32216] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 1098.145991][T32216] [ 1098.148353][T32216] write to 0xffff88811ab83014 of 4 bytes by task 32211 on cpu 0: [ 1098.156102][T32216] xas_set_mark+0x12b/0x140 [ 1098.160653][T32216] __folio_start_writeback+0x16a/0x350 [ 1098.166157][T32216] ext4_bio_write_folio+0x5a2/0xa10 [ 1098.171383][T32216] mpage_process_page_bufs+0x487/0x600 [ 1098.176881][T32216] mpage_prepare_extent_to_map+0x79e/0xc00 [ 1098.182750][T32216] ext4_do_writepages+0x6ec/0x2720 [ 1098.187911][T32216] ext4_writepages+0x18f/0x300 [ 1098.192723][T32216] do_writepages+0x1b9/0x300 [ 1098.197357][T32216] file_write_and_wait_range+0x178/0x2f0 [ 1098.203044][T32216] mmb_fsync_noflush+0x48/0x140 [ 1098.207936][T32216] ext4_sync_file+0x1f2/0x6d0 [ 1098.212666][T32216] vfs_fsync_range+0xc5/0xe0 [ 1098.217300][T32216] ext4_buffered_write_iter+0x426/0x480 [ 1098.222893][T32216] ext4_file_write_iter+0x38e/0xef0 [ 1098.228134][T32216] iter_file_splice_write+0x6a0/0xa60 [ 1098.233550][T32216] direct_splice_actor+0x156/0x280 [ 1098.238714][T32216] splice_direct_to_actor+0x2f9/0x680 [ 1098.244120][T32216] do_splice_direct+0x119/0x1a0 [ 1098.249018][T32216] do_sendfile+0x37d/0x640 [ 1098.253480][T32216] __x64_sys_sendfile64+0x105/0x150 [ 1098.258724][T32216] x64_sys_call+0x2dc4/0x3020 [ 1098.263554][T32216] do_syscall_64+0x136/0x3c0 [ 1098.268185][T32216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.274115][T32216] [ 1098.276466][T32216] read to 0xffff88811ab83014 of 4 bytes by task 32216 on cpu 1: [ 1098.284128][T32216] xas_find_marked+0x602/0x650 [ 1098.288934][T32216] filemap_get_folios_tag+0xf7/0x400 [ 1098.294245][T32216] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 1098.300108][T32216] ext4_do_writepages+0x6ec/0x2720 [ 1098.305266][T32216] ext4_writepages+0x18f/0x300 [ 1098.310082][T32216] do_writepages+0x1b9/0x300 [ 1098.314713][T32216] file_write_and_wait_range+0x178/0x2f0 [ 1098.320426][T32216] mmb_fsync_noflush+0x48/0x140 [ 1098.325318][T32216] ext4_sync_file+0x1f2/0x6d0 [ 1098.330053][T32216] vfs_fsync_range+0xc5/0xe0 [ 1098.334688][T32216] ext4_buffered_write_iter+0x426/0x480 [ 1098.340295][T32216] ext4_file_write_iter+0x38e/0xef0 [ 1098.345551][T32216] iter_file_splice_write+0x6a0/0xa60 [ 1098.350970][T32216] direct_splice_actor+0x156/0x280 [ 1098.356121][T32216] splice_direct_to_actor+0x2f9/0x680 [ 1098.361543][T32216] do_splice_direct+0x119/0x1a0 [ 1098.366429][T32216] do_sendfile+0x37d/0x640 [ 1098.370903][T32216] __x64_sys_sendfile64+0x105/0x150 [ 1098.376127][T32216] x64_sys_call+0x2dc4/0x3020 [ 1098.380843][T32216] do_syscall_64+0x136/0x3c0 [ 1098.385463][T32216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.391389][T32216] [ 1098.393757][T32216] value changed: 0x0a000021 -> 0x04000021 [ 1098.399498][T32216] [ 1098.401853][T32216] Reported by Kernel Concurrency Sanitizer on: [ 1098.408032][T32216] CPU: 1 UID: 0 PID: 32216 Comm: syz.8.7818 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1098.419014][T32216] Tainted: [W]=WARN [ 1098.422836][T32216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1098.432918][T32216] ================================================================== [ 1098.886882][T26118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.013280][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.653273][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!