last executing test programs: 17m2.665843326s ago: executing program 32 (id=20): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15m52.510989283s ago: executing program 33 (id=1713): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 15m42.124338804s ago: executing program 34 (id=1984): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 15m41.052391887s ago: executing program 35 (id=1997): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setpriority(0x2, 0xff, 0x0) 15m1.829542198s ago: executing program 36 (id=2828): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0xb, 0x1, 0x6}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 13m38.670246843s ago: executing program 37 (id=4989): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) 10m36.351223298s ago: executing program 3 (id=8666): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffd, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 10m36.028762285s ago: executing program 3 (id=8673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r2, r1}) 10m36.008307126s ago: executing program 3 (id=8674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10m35.979404977s ago: executing program 3 (id=8675): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x100700, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 10m35.933827178s ago: executing program 3 (id=8676): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ffd, 0x9, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu!=0||!') socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000001c0)='.\x00', 0x2477, &(0x7f0000001800)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000000)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 10m34.790088083s ago: executing program 3 (id=8687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x4101000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 10m34.789974813s ago: executing program 38 (id=8687): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x4101000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 9m47.377723345s ago: executing program 5 (id=9536): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x58a, &(0x7f0000000680)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) 9m47.238116588s ago: executing program 5 (id=9539): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r0, 0x0, &(0x7f0000000140)) 9m46.228178961s ago: executing program 5 (id=9548): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r1, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) write$P9_RVERSION(r1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004014}, 0x24040005) 9m46.151325312s ago: executing program 5 (id=9550): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 9m45.660581463s ago: executing program 5 (id=9556): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x8, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000600)="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", 0x3cb) write$UHID_INPUT(r0, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 9m44.539535078s ago: executing program 5 (id=9572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004060) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r0, @ANYBLOB="050006000100000008000200", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9m44.4860413s ago: executing program 39 (id=9572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004060) getresuid(&(0x7f0000000200), 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r0, @ANYBLOB="050006000100000008000200", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9m18.213154432s ago: executing program 6 (id=9980): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r2, &(0x7f0000000200)="7085e8", 0x3, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r0, 0x0) 9m17.367581131s ago: executing program 6 (id=9984): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 9m17.288052823s ago: executing program 6 (id=9988): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 9m17.247148744s ago: executing program 6 (id=9989): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 9m17.163784826s ago: executing program 6 (id=9993): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 9m16.385740013s ago: executing program 6 (id=10007): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x400c000, &(0x7f000005ffe4)={0xa, 0x0, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 9m16.322166854s ago: executing program 40 (id=10007): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x400c000, &(0x7f000005ffe4)={0xa, 0x0, 0x6, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 9m8.85607284s ago: executing program 9 (id=10137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 9m8.797023651s ago: executing program 9 (id=10139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac", 0x3}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4", 0xc5}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2e6", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8a2", 0x2}, {&(0x7f00000002c0)="7940e900e037", 0x6}, {&(0x7f0000000280)="87", 0x1}], 0x7}}], 0x3, 0x4000000) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)="f8416e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000ac0)="2440997f", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002780)="98a05a43ba", 0x5}], 0x1}}], 0x3, 0x4000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 9m8.506346018s ago: executing program 9 (id=10142): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) 9m8.431814669s ago: executing program 9 (id=10143): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@jqfmt_vfsv1}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x8002007ffb}]) 9m6.682626168s ago: executing program 9 (id=10153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'team0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x66) 9m6.294235276s ago: executing program 9 (id=10161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 9m6.284446947s ago: executing program 41 (id=10161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 5m43.496845847s ago: executing program 1 (id=12432): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5m29.598809225s ago: executing program 1 (id=12442): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m29.408598329s ago: executing program 1 (id=12444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="bad330fbc9b55400041900ea0756", 0xe, 0x1840, &(0x7f00000000c0)={0x11, 0x9, r3, 0x1, 0xda, 0x6, @random}, 0x14) 5m29.255582703s ago: executing program 1 (id=12447): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, @perf_bp={0x0, 0x3}, 0x800, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000001200)=0x80000003, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0f000000000000feffffff85000000c600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x5) 5m28.604439897s ago: executing program 1 (id=12449): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) getpriority(0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '\x00'}) socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x63, 0x0, 0x8001000f3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 5m28.568924678s ago: executing program 1 (id=12452): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 5m0.879257673s ago: executing program 42 (id=12452): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x99}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 7.113290717s ago: executing program 7 (id=15170): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3aa50a6b0c003e44, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x8000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x62, 0x0, 0x0, 0x0, 0xc, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x8a1, 0x0, 0x8, 0x2, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 6.474178871s ago: executing program 4 (id=15179): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001040000000000000000feffffff", @ANYRES32=0x0, @ANYRES8, @ANYRES32], 0x44}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb6234c46dcf51ae, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="680200000005010400000000000000000a000006540201000000000005"], 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB='\a'], 0x10) 5.63150721s ago: executing program 4 (id=15184): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.63021069s ago: executing program 0 (id=15192): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x20000000}, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) lseek(0xffffffffffffffff, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.564380192s ago: executing program 0 (id=15185): ioperm(0x2, 0x7ff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) 5.563981682s ago: executing program 2 (id=15186): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040), 0x10) sendmmsg$unix(r1, 0x0, 0x0, 0x4810) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040080) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) write$P9_RLERRORu(r4, &(0x7f00000005c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0xdfe, 0x0, 0xfffffffffffffffb, 0x1000007fe, 0x4]}, &(0x7f0000000080)=0x78) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, 0x0) 5.463163954s ago: executing program 4 (id=15187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x1, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rmdir(&(0x7f0000000080)='./bus\x00') sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10008095, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44884) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) 5.262623199s ago: executing program 4 (id=15188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.260839269s ago: executing program 0 (id=15189): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x19, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x89ff]}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x50004, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e9, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.309944534s ago: executing program 4 (id=15191): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000140)={&(0x7f0000000080)=0x87, 0xdbfffffe, 0x0, &(0x7f0000000100)}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000180)={{0x8000000000000000}, {0x100000001, 0xffff}, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.308655863s ago: executing program 2 (id=15202): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000500)={[{@utf8}, {@hide, 0x0}, {@hide}, {@overriderock}, {@map_off}, {@utf8, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {@overriderock}, {@map_off}, {@map_normal}, {}], [{@uid_eq}, {@seclabel}]}, 0x2, 0x6bd, &(0x7f0000000840)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc48d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x1, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 3.234829165s ago: executing program 2 (id=15194): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0xfffffffd, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @dev={0xfe, 0x80, '\x00', 0x24}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0x6c}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8044}, 0x20004080) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x182) inotify_init() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '!}*\xdb!/\xc9#.-*\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000f1000000f10000000400000008000000070000850e0000000a00000004000000ff0100000900000000000000ae0500000100000000000000020000001000000000000000010400000d00000005000000060000000700000000000000f8ffffff0c0000000300060000000000000a020000000a0000000400000f0100000002000000000001000700000005000000fe0b0000050000000400000004000000"], &(0x7f0000000340)=""/211, 0x110, 0xd3, 0x101, 0x6e1b49fe, 0x10000}, 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000ac0)=0x48000) 3.03423118s ago: executing program 0 (id=15195): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) 3.003097461s ago: executing program 7 (id=15196): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 2.984991231s ago: executing program 4 (id=15197): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.906108233s ago: executing program 8 (id=15198): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x24044080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$midi(0x4, 0x2a, &(0x7f00000002c0)={{0x12, 0x1, 0x40, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0xb, 0xa0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x62, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x1}]}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}}) r0 = socket$packet(0x11, 0x3, 0x300) keyctl$negate(0xd, 0x0, 0x9, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x6, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0xe, 0x2008}, 0x20) 2.905788663s ago: executing program 2 (id=15199): ioperm(0x2, 0x7ff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) 1.72012919s ago: executing program 2 (id=15200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300"], 0x40}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x39}, 0x10040, 0x0, 0x0, 0x4, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) 1.71828074s ago: executing program 7 (id=15201): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$9p_rdma(0x0, 0x0, 0x0, 0x82000, 0x0) listen(0xffffffffffffffff, 0xfffffffc) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), 0xa982b, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x1, 0x2, 0x5, 0x4, 0xe}, 0x20) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d6172"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) 1.554226994s ago: executing program 2 (id=15203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.411502887s ago: executing program 7 (id=15204): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4d, 0x0, 0x1, 0xfffffffc}, {0x16, 0xff, 0x0, 0x7fff0000}]}) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x9d, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) writev(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40000) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x25]}}]}) 465.855059ms ago: executing program 8 (id=15205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 459.527619ms ago: executing program 7 (id=15206): r0 = socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000bc0)={[{@max_batch_time={'max_batch_time', 0x3d, 0xffffffff}}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r1, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) umount2(0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10040, 0x0) 398.9873ms ago: executing program 0 (id=15207): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x4000891) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8004b706, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x40c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') prctl$PR_MCE_KILL(0x35, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611188000000000006000000000000009d00000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 334.141442ms ago: executing program 0 (id=15208): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa40810, &(0x7f0000000000), 0x1, 0x4c0, &(0x7f0000000840)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002000)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002200)={0x0, r2, "b5ffc572c2f3db127fef4e0b1583b3ff93927d097fd950d94846c99290241f69afb550ed200b58cb4e74b3ead03b90716ec68037aad955fbcdada28ee3ad7dcb4d990fb531f2647ae010f662dd432fd2ec72a704815c8399f39223905738cac79b362d6225abfc4a5201eda82f24341bf0feb80c40a5ba0c4ac6fb78164558b4cbb52ff401d2496cf53842e8487debf02d850e6b1edebbf8c460b1c569e3442fc13da8cd73011db8214788d8225f105b44698243a5bc4dc8e957ca8af76733ef11594f33d64e38517a1f6f2d34ef01579d6789fc06064d924cfeff04499b72e1f8780750eb133f85368074d622e9eff7f2fe5b530bcf0dcdb2aed63078abf810", "5757df4860a7b988008aa13d311f3117de06c4b82bfb84e75271f86d94df81446b80917ec1a9328f6563c747d129e7f300a3dcfc830599e603b4764bf0f2e2c4ef25b4671ae6e2ee2b1b2a2af8b3447593e9764c435c11a1fd138042c776073c34eac6337104eba4e400ce87d4a20dfdf07fb9644e2619b6ed9091a86ec12179c2a0e92659f83a33733a787d4d1899d8b8950400fb7eda9f9662f987c028691c1ac78c80e7a4755474dee096d58611b5ff715a8e6b7fe070c33b2291cf7a22279636e10e165ad449e3ccc92765c136beeb58b3eb6bd9c8673157b1712005a823635a74df029deb5bc5ae377fe76b699e4b59d227ffe84e13840f1c7f545d5891247a801f6df9f56f5f01aad73dcdd5f7bf2e4164910fbea8521d1bf364fd9e751af9a118b46ad40015c2251455a6b6cd14deeffa5ecf607ab329b8e3b4cbe621bc370d171533dc11329c43cafc5160426cfeec1df45d84042fbca2c0dff879b73887c588cb33aa1db781c680d559f311bc0d3a9f7cb8cd7d340920373789f2fa1dfcd785b2c3da038629200316354158249cf6e4f4069ac91720b844cbe6284f09aaf97ee00b753d7cda91cb7433cf6d9e774b26737ac706abada8a7310cb373dbaa6da4e16d6c89a0e8703e82ce332e673cf1ee59dd554c6028257ef21af02ac0bea120e0a31bb0afaf42a29ea514144242166ca4624eb0c5a9f26740251337114d768b4847702736e32077c3bde09b36e0c84808c5c47f67c73499e9961c09ce0e6693dfb17fecdd411e7290cc869a7c20463365b36ad94ab034060dcdad07b9281d7531df43369c9d18afd5b3263a2d8b45dbc9c40a0c89de9553612b6ab8994c464cc5ade5858fd1f9d4df110f57bdfc3ff084501afd8fafee5a60569e5f914e8bfc49ae4732e1fc50f2601f7cf29dfaf85b8a4ba9ddb8fd7511f5f9f9317ed80310cbd6f5c6e4414bb1f80f5bbc3880f73ddaf2ac7250fd1c58427c6f035764abbc2a5f1eac0779347c493f09a4f2950ebccbfa2359193190deffa348f5cf50634ae79311c987d9a572978cf3a9c0c4be9d9eba43b212a93702ca08c22fdbcec3fe1119b6c38fa53fc8ed52db13a86bdbe20a29b833635975f0f2e6e477d218efdfa2dc0fa74c30ee9a5b1f55076182f9d16da718b0438eb33f7839f0eaf5f00049d1510e308882301c71766cf9608c4f1d5d80f3c846b91c6d0d2d444bb5aeabb2d5be33690e33b5d22036222ae6dbb0d85b835638a3aac45ed17e872a505f14f35b59512fbfb4c444011624b33d8049eacba929fb5b99df05bd4741382aab110e8e675ddc7afbc87263563b662f6af6f76d50db248387012aa971c69343fe09c371840f64f4167df2b2358d2c1192042775f8dd52b527b16c053c3a27a0ca1ac080a5feaa823a34a71441fc6c92c6355751825c28e93f1d7158bfdbfd53ba439fa813f7c08ca375ab35997560a627f53778d8206270374d71d4a1c5b7be1610bd4f77b2581bd397f7be25154bb4c30748bcf7296fcf71afe1b54c4a16c602a2d9758957c75f863051e58d4d322d0b5da4ac1f01d4d97aea714185ad7d46d7179864cda729ab6630e02aedc97b2c7df6b378993d9b3143cd9e693c3ff1384d6f9089db70337ac21d552b5819034b97937aa6c5339ce0f3bad112af1ddedb5bf57ac90fe0c6987448b5b8e4826ec46f87dad29873e7ba0f4e299dcd0ed5b276b7bca553d56af57c5be13cb9c9848f82ee8e148c829e13e271dd4950951f7a9c8e4dd6bc2bbe4f061a128b822fd8229925a50c2983b6a7f84b29a00e727b4595d6002e4648416a34f01680b37b147e4af81d91558647bea9fcb728a59dccc451e32096968427dca5b497b0de45b84dccd3dcb772d0cb89acb2969b061be49c170deedccdc1b04875e3466ea8f50adb859f4093b83b6a709688fb5aa7bc2801f00a6ebe63e3917a1843d8c31d9856e922b922c11c010a83215722c60f659c941b5c989087408acc1fdd28bebf44a073311edd37a18bb3c22d01968e1b420ef44be164cbb5f6bb1f110f2c487ea97e6a2b7853fbbcd7267fb4e255e2fd30371c6f225d990602811a70e26f5fc0f8f5b1634e1340fb8c7815badb2c5fc3e319e3a4764ae765bc4153d72773f46e04d29fc38659f6ffb787582e0cd75accba598433a7b40c6a06fdb16f6aae80dc74a2e63c8d4450096bcbc96c5f9a874747be12870d69a2a1b97b5e3b9caeecb5d2ae5ec879591874e93a4f8d11bad3ea05e683678d5481b61d5305bd53c6d79873adabd16f5f7039f6aaf066e63c064aa549c51e2448548b79c80de542be94cf086250f6288246dec553c9c789177a89d5566dfadf099974741dde1a181548dc5b195f9b641990baf610fb7b01927409d60ba3150a93668f68ea39f27fe623db4e701a51ef8d83cd8acf36098251b1f6fcf05682c4dc20a2e6838daf950c43ac795cb413239af7d7a134c5e80f4cac9fb1304221f3d7eeb02e063a330f068478c72eb1761e1c101a029d340da83923124ce02e953e5069d6c550fca0e3c5bcdc3b7ec90b0e794d8051c00c0098077c8fb127189df8339825746048244d9b5350ccd741011522f62440cd5ed019e5ff82d54c4bed154f1644323841699f9c3c02c2277fa90d9a7e046cc44b51e7f4d44a13b84381d29da5b97b60dfe17c67ef825f2393bd3cb69edbd337720a9c6a64329cccb43416bf19cb06a1f97d5f39f5c042222341d6977c6a40fec990b1b41c63c1f7306d8a41e7516b3f85dfc2703a6914b19043569e4ca2f9d980c2eed98edf044f6124bfadf0665e04e779e2456f4a4ce51310a486f922ad69a4e4d25b1ca8480d7811abb42137616d53a210ce0cf140256160fe2b797964f0343bc99e22c787bb7a92daead206d622ae4439f0b7cc91b60ca6e8390c40fd4505def6c6c3ec1357eeeb68a78050026c31ef70f8c87484628a67b1382e249d8a1b2351ad5f366aaf7cb74bfd87b26693a485440e5404547510d1460c4fcecb8a674e41fa69f75c465b265e190484011e34b6ff68d049ecf9f4d1c622a7108544cc3e7b04ae374172aba126de58575631730eb8892036e0fb952d8d2f330206552f0a383224fba6c58ab195584e99be45bb1d57894c8f106cc99fccfb7addfc5ba66b1bc8bae0b2d9d0b58cab29c56b07bfc38182a89742544689a7058cb6ba27cc70905cce44a0bae0f3193efa6e3f8b84bdfa1a3877c2a8a9dc2b3c6e18485de9553485d7e2fce33b6cf465bbe2649de3b322ed797037a20c69205eb75cd50c2c3196ebe6b3bde738d08309dcf3c48af59aeb3a733c49c86b1186607f2184c754403b1c9879a4c6837d3f9fe95d2bd7bd2a2ad62626651c269bd45b188a509ba04dbe6720a0e4830a4f22afe3141ec82b4a13fdd6a476255269a0ab9955450e1fcdbe7cf782700597ec045e471c71ce691adace557a0e8373c1c31d039825b4028cf4b80bf5832be8ab7da373663a48bfcfa77535e722256e974b135dba5e0a97a3122bd3604754ee9b3d72b4f53edb3c23d30b4b190446960c6b2a87fcfddd115c2de5b54563f7885d48c0d19258b3a52baa861c1066c4fcb68a95a83a6c081b3572167ef96ff215331d128ed958cd3cabc56fefeb938c27910a4107b5bbe560d18db1cc7dc098c6cb1711c51661bc850e7705353399d0f7dd567d2b8a5d696fc7f607e3bb49c1da16c5a797e08fd869650e470dd89f062782a9b8194d4e5f1387c94c9daee1e0ae0185a761eeacffdfda3e7634b157f029f3892ff0e05a23a62211d6eaeafc6411bb1120fc9cc176fd8fc686f07be4fb6d48253283e5a68cf1bac73a05bf2a8b3abfbf4bcf692bca3a479a48bc606a94fd2fb8cc713ff1a19600c9116c912d7d4cccb14f985fd992c0970be374c05a3c25b4bde4823a3a0a1ab82782428c8cb0e8bdebc382dd2e70eccae64d1c9540f924158c7bc2d8e887bedd5ecf81c2d6f075910fd82f6680282673bfbfa68e653892e22f98f08a35fe395874804fa2c46441b33d330773bc7ba8e15436480fd206226dd1a4c77f3d2d2d166a4649d6ee7ac3111b51eb6b15e12769e22e7fa564f29e055334c0e03d782e9deae5290abcda721ce7649b7deb3113367442bdd550ee49cf603d0336fad83075c52529f19990c0adfd6522b56b4fbd915c841234b26776971b9042806316b739ac5eff95426878ade80f8fafbd64b71c91ee606bdc51260f1bd7d62004cc17f8aebbe9a1e475e31fdf9be18f071ceca9fea0b5e2b780e7ed784aa5dd6df9607e130265e5c6f12929130500f408a325f5867cfd510fff71acdaef5ba79231fde083f242a0c128a4a2b900e1fd20a856665293b6a4e84488c0a56c938d7117cb389e921feee353d4cf54e38e2e6672210c63bf9953e85b70adddc4300450ced7d5c7097bac065a636a2ea3361f33e359d89c8757b09aeb314ea7c48b5874311799806027ee977a26bc18e10d18ad7a24f30dd9d1bd96e36c7c5def1957634c03a0e741c07d6e16ba61e0255364f37fe6a87bfa59c3c2916d172a29f0801eda16b39940405cf58d7e3b3fb370d159cc7bc581ba379f9b6aeb2265015ddd0ed0ec80692e9c424b8b53abb77cc5821fe4a6566ee36d40910d686d4fd07b3bb3ae3ffd80e98ab147c83bf80d74e667536b892604037e4ae0343a4e5b97eba780fa5eed2f8c3c27dd4abf31f8aa598771cc7898294052ad34bf585c6e2a40d29fb6a92077bf24e422351139103dcb6d2031aed71b1353792a080892b4d71ec839812a498ea64c2604d1185c7160a25f753d99bd23e49fbba52b70f0e6f07b1fa7f2c0b7a71e492da10f7d4027d62b0c809aa4d65827ef8d272a5c5554096c4217e7d399735c7c9621d897a9b06562d6d20b2d58d62f50938490848b05a8a59192219551eec5d0483d86a28968169405614544f9e118e5a44f9392d16fff93ae4a876a66ababc4f3790d86d386017f480f220661c32604ec31955ab3e8bab3bf5b505a6b7b98d406d152bb65d37185e78a70409b81921d3d18bd5f578950f54a7d0aa535850498c1b359e1225eeb46a80c3816efdb90f71879035ada08ceca5d5389c5275313e1362218df37f850ba47ef8c60a8c02da2db640a228a84b61a396680b0c1da80f91a6b53311c98b5cb276b5e77b1c68cf85c26757ef24bcc073490721e1caf668561e44acd29f1c8ee9cc7fd59134a5ec3327229d022adbb639c234cd243697815d2e0fcf9b139e237d3b438f437590db065f19285756ee16ab3a4aae1f56151dc56ede8fbb22f3cc8d974ebf932d845756b336fd4494ef46e083678dfc55909077d1e7650abb37d1841296e7b773f7d695bd7e68ae4c2a058e29413c2eda283a47303ebf63bd93c1fa73f42f8d566d55c97973f"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 282.120893ms ago: executing program 7 (id=15209): syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getuid() sendmsg$nl_xfrm(r0, 0x0, 0x48080) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120003000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 205.744115ms ago: executing program 8 (id=15210): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x4b, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x7fffffffffffffff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffec, 0x0, @perf_bp={&(0x7f0000000140), 0x9ffe842cdabd21a7}, 0x800, 0x4, 0x8001, 0x4, 0xfffffffffffffff8, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x17, 0xdd, 0x80, 0x5, 0x0, 0x43, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x2000, 0x7, 0x0, 0x7, 0x7, 0x1, 0xc5a, 0x0, 0xfff, 0x0, 0x2}, r2, 0xb, r3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r5, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2000000}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x8006) 134.074776ms ago: executing program 8 (id=15211): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x9, {{0x14, 0x4, 0x1, 0x8, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3c, 0x3, [{0x7, 0x11, "973e0a32b6bba9ba1ac58b3b9671b8"}, {0x2, 0x5, "53f1df"}, {0x2, 0xb, "fb7865ccc26f746541"}, {0x7, 0xf, "0ed45fd65f267780d51a60df5f"}, {0x5, 0x6, "dfe2c991"}]}]}}}}}) r3 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[], [{@context={'context', 0x3d, 'user_u'}}, {@permit_directio}, {@hash}]}, 0x1, 0x5d7, &(0x7f0000000e40)="$eJzs3W2IHGcdAPD/7t6l5hJNK7Waapur1Tb2ZS93V4KpBclHbVNqXz4ZiUeyuYTby8a7DfauFq4UoYKRUP2knxQEFT9EBAXxQ0Gs+Enwm1IqWEQJhGIpikY9mdmZuOft3fZ6L6M7vx/M3TPPzOZ5Zv/8Z2eePDsXQGmNJj8qEXsj4uWI2NdZXbnDaOfXpcnLZ5KlEsvLT7xeSfd7dvLymXzX/HV7kh/ViPclv34esWd4dbvzC4szU81mYy5bH2vPnh+bX1i8/+zs1HRjunFuYnL88KGJw+OHj2zZsX73mRc/+eozj1y7eHXk26/sP/DXpL97s23dx7FVRmM0e0+G44PdGyoRH9/qxgpSi4ihiHhP0R1hw47/+stP5fEbTvN/X9TStYiRyeNv7IuLD3XvXy2qo8C2WE6ttbW2DAyyShTdA6AY+Sd9cv+bLzt17TEzKDfB/8euHu3cAD6bje1cuh7/oev3e8PbdH9/4E8Ro9G+5/In7vhissQ2jcOwtqXnIh2oW53/lXRs7MZsvzsj4mBEfCgiPhwRd0XE3Zts+8nPJPH/3Ve768R/Z73V+H8kIuoRcU9E3BsR90XE/Zts+5ZjSfz3fLa7TvzL49ZPFd0DivSrF4ruAen5/9DQUK/z/2bH++/os305/X/Fpde66/L2f7nJtvnf9/gTRfeAIj16uOgesLNqK9a+8XphHSHz0tHOzdzqz/9q3NK1X1J+b+dWMfYn1+4R8f6I+EBE3BYRt0fEgXw+0Vv0hYeT/euN7rrV93/VK5s5PtZ39WjEQ11zuy51xT9zYy1be2c6HjBcOX222TgUEe9Kx4SGb0jWx9dp40tLP3u4V/33b0vi/7FH8/G/ZEnaz8cCs35cGbph5etOTbWnNnvcdFx9LuLWoV7xr2QzgTrz+pYjYuxttvH8wR/8olf9Rx9P4n/XfevHn+20/M3OOG6v+Ocq68/PHEvPB2P5WWG15+Pmi73qH7uWxP+134p/cZL8H1k//un5//p83fmNtzF06cpXetbPJvH/w0/fzvl/V+XJtIO7srqnp9rtufGIXZVHKtmUxv/UT2y8z4Mqfz/y9yuJ/8E7e3/+vzt7TfKGJpn9z4j4V0T8LSL+HhHXIuIfEfHniHhjnTZ/8uKDP+5VP/lUEv8/viz/i5PE/1Sf/K+syP/Vhd2x5qa08PXbj3y+V9vf+VYS/5F6//x/IO3MwazG9V9/64RjRaHofgIAAAAAAACwNarpM/Aq1fr1crVar3ee4XdzjFSbrfn2vadbF86diuz7oMPVfKbXvq75oOPZd0Xz9Yn/Wp+MiJsi4oXa7nS9frLVPFX0wUNJ7Y149YefO7lrzxr5n3ilFrG76I4CWy7J/9Nfqy0l5TdrRfcG2ElJ/n/vzdn0e1nyH8pF/sPgGNrg/vIfykv+Q3nJfygv+Q/lJf+hvOQ/lJf8h/Lqzn+gnB47dixZlvPnfp5rTZ+dOXP+yMSh+uyFk/WTrbnz9elWazr9xs5s/3+v2WqdH38gLjw91m7Mt8fmFxZPzLYunGufSJ8bfaIxvAPHBPT3l99/+kc3HXjpN5WIWHpwd7pE1zO15SoMNrf+UF4bnTcMDA7X+EClz/Z3rLXh+Nb3BdgZ/f7Gv/sDGFx37zf+D2Vl/B/Ky/U9lJdrfMD4P5RPv/F/YHA15uYXFmemms1VhaJ7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQTvMLizNTzWZjTkFBoXSFfwcAAP//nMdHRQ==") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0134014030d9"}) unshare(0x22020600) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r3, &(0x7f0000000080)='\\\x00', 0x101542, &(0x7f00000000c0)={@align=0x8, {0x1, 0x9, 0x0, 0xdef}}, 0xf, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x100}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffd7, 0x0) 43.656159ms ago: executing program 8 (id=15212): perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0106001e010600f806ff02ff71ec6d721744cd5200080000f8cfcad4c4ec6503ec028c5028564abce83afe14c93e15e55655a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd3918879808b118301f1e76054a6443ba43523f5de7b347f3b740e105d0ed18fae7289635301ebd89c3268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c000000000000000000035c8d03000000000000002a5e15c8a95d29deb2ea00000800050015fef70515000300030000200503000054831bdbae1d82b306"], 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000084000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000005800038054000380140001007663616e300000000000"], 0x124}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0x9fd, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a3d001c009c110120010000000000000000000000000002ff0200000000000000000000000000014e234e20009c90"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) set_mempolicy(0x4001, 0x0, 0x5) 0s ago: executing program 8 (id=15213): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0xa}, 0x20) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r0, &(0x7f0000000740), 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x30]}}, 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) kernel console output (not intermixed with test programs): 912.970860][ T28] audit: type=1326 audit(1783844156.352:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.970899][ T28] audit: type=1326 audit(1783844156.352:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.970936][ T28] audit: type=1326 audit(1783844156.352:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.971024][ T28] audit: type=1326 audit(1783844156.352:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.971062][ T28] audit: type=1326 audit(1783844156.352:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.971097][ T28] audit: type=1326 audit(1783844156.352:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.13704" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 912.999422][T10894] netlink: 180904 bytes leftover after parsing attributes in process `syz.8.13705'. [ 913.029128][T10902] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13710'. [ 913.173825][T10905] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13710'. [ 913.228989][T10905] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 913.346876][T10902] 1ªî{X¹¦: entered promiscuous mode [ 913.348009][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13709'. [ 913.377082][T10902] 1ªî{X¹¦: left allmulticast mode [ 914.079908][T10922] xt_hashlimit: size too large, truncated to 1048576 [ 914.120823][T10919] loop7: detected capacity change from 0 to 2048 [ 914.173043][T10923] xt_hashlimit: size too large, truncated to 1048576 [ 914.377432][T10931] loop7: detected capacity change from 0 to 256 [ 915.474513][T10958] netlink: 'syz.0.13727': attribute type 49 has an invalid length. [ 915.555013][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13730'. [ 916.012350][T10966] veth25: entered allmulticast mode [ 916.095399][T10966] bond27: (slave veth25): Enslaving as an active interface with an up link [ 916.168826][T10973] bond27 (unregistering): (slave veth25): Releasing backup interface [ 916.186244][T10973] bond27 (unregistering): Released all slaves [ 916.765118][T11036] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 916.817343][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13751'. [ 916.826650][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13750'. [ 916.900019][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.908499][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.984903][T11042] loop7: detected capacity change from 0 to 8192 [ 916.993871][T11042] syz.7.13753: attempt to access beyond end of device [ 916.993871][T11042] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 917.016958][T11042] buffer_io_error: 2 callbacks suppressed [ 917.017105][T11042] Buffer I/O error on dev loop7, logical block 57847, async page read [ 917.042089][T11042] syz.7.13753: attempt to access beyond end of device [ 917.042089][T11042] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 917.064636][T11042] Buffer I/O error on dev loop7, logical block 57847, async page read [ 917.089300][T11042] syz.7.13753: attempt to access beyond end of device [ 917.089300][T11042] loop7: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 917.108547][T11042] Buffer I/O error on dev loop7, logical block 57847, async page read [ 918.137353][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13763'. [ 918.393287][T11087] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 919.005026][T11110] xt_hl: Unknown Hop Limit match mode: 221 [ 920.120042][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13782'. [ 921.408339][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13789'. [ 921.421294][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 921.538761][T11169] loop7: detected capacity change from 0 to 164 [ 921.568666][T11169] ISOFS: unable to read i-node block [ 921.581387][T11169] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 921.780178][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13796'. [ 921.909936][T11182] team0: Port device team_slave_0 removed [ 921.950596][T11194] tipc: Enabling of bearer rejected, failed to enable media [ 922.033857][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.042587][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.055328][T11203] wireguard: wg1: Could not create IPv4 socket [ 922.061540][T11203] net_ratelimit: 166 callbacks suppressed [ 922.061555][T11203] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 922.520187][T11230] xt_hashlimit: size too large, truncated to 1048576 [ 922.527011][T11230] xt_hashlimit: max too large, truncated to 1048576 [ 922.676317][T11236] loop7: detected capacity change from 0 to 512 [ 922.739173][T11236] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.13815: inode has both inline data and extents flags [ 922.753777][T11236] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 922.754982][T11236] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.13815: couldn't read orphan inode 15 (err -117) [ 922.764710][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 922.764742][ C0] EXT4-fs (loop7): initial error at time 1783844165: ext4_orphan_get:1399: inode 15 [ 922.764944][ C0] EXT4-fs (loop7): last error at time 1783844165: ext4_orphan_get:1399: inode 15 [ 922.815845][T11236] loop7: lost filesystem error report for type 5 error -117 [ 922.823998][T11236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 922.981087][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 923.081080][T11246] netlink: 'syz.7.13818': attribute type 4 has an invalid length. [ 923.181232][T11246] netlink: 17 bytes leftover after parsing attributes in process `syz.7.13818'. [ 923.629080][T11257] syzkaller0: entered promiscuous mode [ 923.634730][T11257] syzkaller0: entered allmulticast mode [ 923.956350][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13827'. [ 924.061566][T11277] netlink: 'syz.8.13830': attribute type 1 has an invalid length. [ 924.248794][T11277] 8021q: adding VLAN 0 to HW filter on device bond27 [ 924.276180][T11281] bond27: (slave veth27): Enslaving as an active interface with a down link [ 924.436834][T11278] tipc: Enabling of bearer rejected, failed to enable media [ 924.512830][T11282] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 924.626700][T11282] bond27: (slave batadv1): making interface the new active one [ 924.715548][T11282] batadv1: entered promiscuous mode [ 924.763716][T11282] bond27: (slave batadv1): Enslaving as an active interface with an up link [ 924.890883][T11285] bond27 (unregistering): (slave veth27): Releasing active interface [ 924.907278][T11285] bond27 (unregistering): (slave batadv1): Releasing active interface [ 924.919784][T11285] bond27 (unregistering): Released all slaves [ 925.073369][T11310] tipc: Enabling of bearer rejected, failed to enable media [ 925.411999][T11330] netlink: 'syz.4.13845': attribute type 1 has an invalid length. [ 925.458192][T11330] 8021q: adding VLAN 0 to HW filter on device bond25 [ 925.494041][T11334] bond25: (slave veth27): Enslaving as an active interface with a down link [ 925.625494][T11334] bond25 (unregistering): (slave veth27): Releasing active interface [ 925.705357][T11334] bond25 (unregistering): Released all slaves [ 926.051012][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13850'. [ 927.099962][T11386] syzkaller0: entered promiscuous mode [ 927.105516][T11386] syzkaller0: entered allmulticast mode [ 927.336513][T11390] bond0: entered promiscuous mode [ 927.356378][T11390] bond0: left promiscuous mode [ 928.856958][T11439] Cannot find del_set index 14804 as target [ 929.569086][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13900'. [ 929.584839][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13900'. [ 931.279771][T11515] netlink: 'syz.0.13904': attribute type 1 has an invalid length. [ 931.299752][T11515] 8021q: adding VLAN 0 to HW filter on device bond22 [ 931.310381][T11515] bond18: (slave veth0_to_bond): Releasing active interface [ 931.319379][T11515] veth19: entered promiscuous mode [ 931.339887][T11515] bond22: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 931.603303][T11522] netlink: 'syz.0.13915': attribute type 4 has an invalid length. [ 931.626125][T11522] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13915'. [ 932.163452][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13920'. [ 932.178087][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13910'. [ 932.230034][T11536] vlan6: entered allmulticast mode [ 932.235236][T11536] bridge10: entered allmulticast mode [ 932.243521][T11536] bridge10: port 1(erspan0) entered blocking state [ 932.250080][T11536] bridge10: port 1(erspan0) entered disabled state [ 932.256709][T11536] erspan0: entered allmulticast mode [ 932.262651][T11536] erspan0: entered promiscuous mode [ 932.799390][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13919'. [ 932.854156][T11557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11557 comm=syz.7.13919 [ 933.432621][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.7.13923'. [ 933.494099][T11573] netlink: 'syz.7.13925': attribute type 1 has an invalid length. [ 933.520743][T11573] 8021q: adding VLAN 0 to HW filter on device bond6 [ 933.632876][T11573] bond6: (slave veth9): Enslaving as an active interface with a down link [ 933.727279][T11577] bond6: (slave dummy0): making interface the new active one [ 933.769014][T11577] dummy0: entered promiscuous mode [ 933.779662][T11577] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 933.854158][T11573] bond6 (unregistering): (slave veth9): Releasing active interface [ 933.867835][T11573] bond6 (unregistering): (slave dummy0): Releasing active interface [ 933.890888][T11573] bond6 (unregistering): Released all slaves [ 934.136614][T11593] netlink: 'syz.0.13931': attribute type 1 has an invalid length. [ 934.162998][T11593] 8021q: adding VLAN 0 to HW filter on device bond23 [ 934.185304][T11593] bond23: (slave veth25): Enslaving as an active interface with a down link [ 934.202705][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.211450][T11593] bond23: (slave batadv0): making interface the new active one [ 934.220280][T11593] batadv0: entered promiscuous mode [ 934.225805][T11593] bond23: (slave batadv0): Enslaving as an active interface with an up link [ 934.245849][T11593] bond23 (unregistering): (slave veth25): Releasing active interface [ 934.278871][T11593] bond23 (unregistering): (slave batadv0): Releasing active interface [ 934.315034][T11593] bond23 (unregistering): Released all slaves [ 934.347237][T11601] syzkaller0: entered promiscuous mode [ 934.352866][T11601] syzkaller0: entered allmulticast mode [ 934.423962][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13936'. [ 934.446714][T11607] bond23: entered promiscuous mode [ 934.451899][T11607] bond23: entered allmulticast mode [ 934.473125][T11614] netlink: 'syz.8.13939': attribute type 1 has an invalid length. [ 934.487299][T11614] 8021q: adding VLAN 0 to HW filter on device bond27 [ 934.496196][T11617] netlink: 'syz.4.13940': attribute type 4 has an invalid length. [ 934.515522][T11614] bond27: (slave veth29): Enslaving as an active interface with a down link [ 934.552096][T11614] bond27 (unregistering): (slave veth29): Releasing active interface [ 934.627855][T11622] xt_l2tp: v2 tid > 0xffff: 1114116 [ 934.661320][T11614] bond27 (unregistering): Released all slaves [ 934.945497][T11626] netlink: 'syz.7.13941': attribute type 4 has an invalid length. [ 934.954366][T11626] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.13941'. [ 935.133520][T11645] syzkaller0: entered promiscuous mode [ 935.136918][T11648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13947'. [ 935.158680][T11645] syzkaller0: entered allmulticast mode [ 935.309266][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13952'. [ 935.736582][T11662] syzkaller0: entered promiscuous mode [ 935.742287][T11662] syzkaller0: entered allmulticast mode [ 935.766765][T11665] x_tables: unsorted entry at hook 2 [ 936.958473][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 936.958491][ T28] audit: type=1400 audit(1783844179.036:4535): avc: denied { getopt } for pid=11693 comm="syz.0.13965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 938.413408][T11721] bond0: entered promiscuous mode [ 938.458559][T11725] futex_wake_op: syz.7.13972 tries to shift op by -1; fix this program [ 938.514342][T11721] batadv_slave_0: entered promiscuous mode [ 939.106872][T11742] bond7: (slave veth0_to_bond): Releasing active interface [ 939.115032][T11742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 940.284017][T11758] loop7: detected capacity change from 0 to 512 [ 943.410559][T11817] netlink: 'syz.7.14002': attribute type 49 has an invalid length. [ 943.480857][T11817] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 943.491416][T11817] ip6gretap0: entered promiscuous mode [ 943.505848][T11817] ip6gretap0: entered allmulticast mode [ 943.581101][T11824] x_tables: unsorted entry at hook 2 [ 944.431086][ T28] audit: type=1400 audit(1783844186.033:4536): avc: denied { write } for pid=11835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.473526][ T28] audit: type=1400 audit(1783844186.070:4537): avc: denied { write } for pid=11847 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.867555][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14013'. [ 944.895130][T11885] lo: Caught tx_queue_len zero misconfig [ 944.901785][T11885] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 944.954520][T11890] veth1_to_bond: entered promiscuous mode [ 944.963013][T11890] veth1_to_bond: entered allmulticast mode [ 944.972534][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14016'. [ 945.051554][T11890] veth1_to_bond (unregistering): left promiscuous mode [ 945.073645][T11890] veth1_to_bond (unregistering): left allmulticast mode [ 945.108645][T11895] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14016'. [ 947.032429][T11924] tipc: Enabling of bearer rejected, failed to enable media [ 947.156518][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14029'. [ 948.516927][ T28] audit: type=1400 audit(1783844189.849:4538): avc: denied { create } for pid=11998 comm="syz.8.14051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 948.561586][ T28] audit: type=1326 audit(1783844189.877:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 948.608426][ T28] audit: type=1326 audit(1783844189.877:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 948.658224][ T28] audit: type=1326 audit(1783844189.877:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 948.703486][ T28] audit: type=1326 audit(1783844189.886:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 948.749754][ T28] audit: type=1326 audit(1783844189.943:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa793fe68e code=0x7ffc0000 [ 948.799351][ T28] audit: type=1326 audit(1783844189.943:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa793fe68e code=0x7ffc0000 [ 948.848307][ T28] audit: type=1326 audit(1783844189.943:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.14054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faa793fe68e code=0x7ffc0000 [ 948.997836][T12025] syzkaller0: entered promiscuous mode [ 949.013286][T12025] syzkaller0: entered allmulticast mode [ 950.100198][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14074'. [ 950.127825][T12063] bond6: entered promiscuous mode [ 950.133201][T12063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 950.154016][T12063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 950.169802][T12063] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 950.191334][T12063] bond6: (slave sit2): Error -95 calling set_mac_address [ 950.369619][T12077] loop7: detected capacity change from 0 to 512 [ 950.391372][T12077] EXT4-fs: dax option not supported [ 950.524666][T12088] syzkaller0: entered promiscuous mode [ 950.542741][T12088] syzkaller0: entered allmulticast mode [ 950.698918][T12096] syzkaller0: entered promiscuous mode [ 950.740734][T12094] can: request_module (can-proto-0) failed. [ 950.772080][T12096] syzkaller0: entered allmulticast mode [ 951.332407][T12139] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 951.401641][T11983] syz.0.14045 (11983) used greatest stack depth: 8000 bytes left [ 951.425843][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14097'. [ 951.482572][T11977] syz.0.14045 (11977) used greatest stack depth: 7368 bytes left [ 951.741224][T12157] netlink: 'syz.8.14101': attribute type 1 has an invalid length. [ 951.848458][T11759] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 951.925006][T12160] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 951.996389][ T8806] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 952.237122][T12170] xt_CONNSECMARK: invalid mode: 66 [ 952.834972][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14114'. [ 952.909556][T12208] loop7: detected capacity change from 0 to 512 [ 952.919443][T12208] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 952.990770][T12208] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.14116: bad orphan inode 131072 [ 953.001889][T12208] loop7: lost filesystem error report for type 5 error -117 [ 953.008013][T12208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.071291][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.201401][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 953.201419][ T28] audit: type=1326 audit(1783844194.227:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.268945][ T28] audit: type=1326 audit(1783844194.227:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.319081][ T28] audit: type=1326 audit(1783844194.227:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.373299][ T28] audit: type=1326 audit(1783844194.227:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.430462][ T28] audit: type=1326 audit(1783844194.283:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.463702][ T28] audit: type=1326 audit(1783844194.283:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.548707][ T28] audit: type=1326 audit(1783844194.283:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.600386][ T28] audit: type=1326 audit(1783844194.283:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.636033][ T28] audit: type=1326 audit(1783844194.283:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.662125][ T28] audit: type=1326 audit(1783844194.283:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12216 comm="syz.4.14121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x7ffc0000 [ 953.693922][T12240] netlink: 'syz.4.14127': attribute type 1 has an invalid length. [ 953.725863][T12240] 8021q: adding VLAN 0 to HW filter on device bond25 [ 953.883113][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14130'. [ 953.924557][T12249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14130'. [ 954.751924][T12268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=12268 comm=syz.2.14137 [ 954.766328][T12269] loop7: detected capacity change from 0 to 256 [ 954.788574][T12271] netlink: 'syz.4.14138': attribute type 1 has an invalid length. [ 954.867286][T12271] 8021q: adding VLAN 0 to HW filter on device bond26 [ 955.201579][T12278] bond26: (slave veth29): Enslaving as an active interface with a down link [ 955.436718][T12288] netlink: 'syz.2.14142': attribute type 27 has an invalid length. [ 955.462104][T12288] 0ªî{X¹¦: left allmulticast mode [ 955.540311][T12288] veth0_virt_wifi: left promiscuous mode [ 955.561289][T12288] bond5: left promiscuous mode [ 955.574225][T12288] veth13: left allmulticast mode [ 955.591822][T12288] bond7: left promiscuous mode [ 955.605633][T12288] bond7: left allmulticast mode [ 955.689668][T12294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.703319][T12277] syz.0.14139 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 955.718363][T12294] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.726811][T12277] CPU: 0 UID: 0 PID: 12277 Comm: syz.0.14139 Not tainted syzkaller #0 PREEMPT(lazy) [ 955.726847][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 955.726864][T12277] Call Trace: [ 955.726940][T12277] [ 955.726951][T12277] __dump_stack+0x1d/0x30 [ 955.726981][T12277] dump_stack_lvl+0x95/0xd0 [ 955.727008][T12277] dump_stack+0x15/0x1b [ 955.727028][T12277] dump_header+0x80/0x240 [ 955.727068][T12277] oom_kill_process+0x295/0x350 [ 955.727117][T12277] out_of_memory+0x981/0xbc0 [ 955.727153][T12277] try_charge_memcg+0x621/0xa00 [ 955.727250][T12277] __memcg_kmem_charge_page+0x199/0x3a0 [ 955.727367][T12277] __alloc_frozen_pages_noprof+0x18a/0x350 [ 955.727408][T12277] alloc_pages_bulk_noprof+0x4c3/0x550 [ 955.727446][T12277] ? policy_nodemask+0x417/0x5e0 [ 955.727498][T12277] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 955.727543][T12277] ? alloc_pages_mpol+0xd9/0x1d0 [ 955.727606][T12277] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 955.727729][T12277] __kvmalloc_node_noprof+0x3a0/0x590 [ 955.727768][T12277] ? futex_hash_allocate+0x192/0x920 [ 955.727799][T12277] ? futex_hash_allocate+0x192/0x920 [ 955.727825][T12277] ? futex_hash_allocate+0x192/0x920 [ 955.727970][T12277] futex_hash_allocate+0x192/0x920 [ 955.728003][T12277] ? cap_task_prctl+0x13f/0x6b0 [ 955.728044][T12277] futex_hash_prctl+0xd8/0xf0 [ 955.728066][T12277] __se_sys_prctl+0x4f4/0x13b0 [ 955.728159][T12277] __x64_sys_prctl+0x67/0x80 [ 955.728196][T12277] x64_sys_call+0x2533/0x3020 [ 955.728261][T12277] do_syscall_64+0x136/0x3c0 [ 955.728375][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.728441][T12277] RIP: 0033:0x7f0f9a64de59 [ 955.728463][T12277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.728539][T12277] RSP: 002b:00007f0f990a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 955.728568][T12277] RAX: ffffffffffffffda RBX: 00007f0f9a8d5fa0 RCX: 00007f0f9a64de59 [ 955.728588][T12277] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 955.728605][T12277] RBP: 00007f0f9a6e3e6f R08: 0000000000000000 R09: 0000000000000000 [ 955.728652][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.728669][T12277] R13: 00007f0f9a8d6038 R14: 00007f0f9a8d5fa0 R15: 00007ffe7c2871d8 [ 955.728694][T12277] [ 955.962293][T12294] wireguard: wg1: Could not create IPv4 socket [ 955.968712][T12294] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 955.990575][T12309] tipc: Enabling of bearer rejected, failed to enable media [ 956.009044][T12277] memory: usage 174300kB, limit 307200kB, failcnt 8564 [ 956.015953][T12277] memory+swap: usage 179848kB, limit 9007199254740988kB, failcnt 0 [ 956.024038][T12277] kmem: usage 174024kB, limit 9007199254740988kB, failcnt 0 [ 956.031437][T12277] Memory cgroup stats for /syz0: [ 956.031699][T12277] cache 16384 [ 956.040255][T12277] rss 49152 [ 956.043452][T12277] shmem 12288 [ 956.046985][T12277] mapped_file 4096 [ 956.051190][T12277] dirty 0 [ 956.054267][T12277] writeback 0 [ 956.057657][T12277] workingset_refault_anon 7114 [ 956.062628][T12277] workingset_refault_file 14900 [ 956.070814][T12277] swap 5681152 [ 956.074246][T12277] swapcached 97787904 [ 956.078248][T12277] pgpgin 1106361 [ 956.081994][T12277] pgpgout 1106340 [ 956.085661][T12277] pgfault 1042592 [ 956.089484][T12277] pgmajfault 3647 [ 956.093202][T12277] inactive_anon 0 [ 956.097259][T12277] active_anon 69632 [ 956.101330][T12277] inactive_file 0 [ 956.105515][T12277] active_file 4096 [ 956.112274][T12277] unevictable 12288 [ 956.122693][T12277] hierarchical_memory_limit 314572800 [ 956.128280][T12277] hierarchical_memsw_limit 9223372036854771712 [ 956.160022][T12322] netlink: 'syz.8.14148': attribute type 1 has an invalid length. [ 956.167881][T12322] netlink: 112860 bytes leftover after parsing attributes in process `syz.8.14148'. [ 956.175932][T12277] total_cache 16384 [ 956.181129][T12277] total_rss 49152 [ 956.184878][T12277] total_shmem 12288 [ 956.188691][T12277] total_mapped_file 4096 [ 956.192945][T12277] total_dirty 0 [ 956.196452][T12277] total_writeback 0 [ 956.200286][T12277] total_workingset_refault_anon 7114 [ 956.205587][T12277] total_workingset_refault_file 14900 [ 956.211004][T12277] total_swap 5681152 [ 956.214944][T12277] total_swapcached 97787904 [ 956.219475][T12277] total_pgpgin 1106361 [ 956.223568][T12277] total_pgpgout 1106340 [ 956.227770][T12277] total_pgfault 1042599 [ 956.231945][T12277] total_pgmajfault 3647 [ 956.236119][T12277] total_inactive_anon 0 [ 956.240351][T12277] total_active_anon 69632 [ 956.244733][T12277] total_inactive_file 0 [ 956.248910][T12277] total_active_file 4096 [ 956.253162][T12277] total_unevictable 12288 [ 956.257616][T12277] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.14139,pid=12273,uid=0 [ 956.307065][T12277] Memory cgroup out of memory: Killed process 12273 (syz.0.14139) total-vm:96228kB, anon-rss:1344kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 956.813270][T12338] syz.2.14150 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 956.824009][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.2.14150 Not tainted syzkaller #0 PREEMPT(lazy) [ 956.824047][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 956.824064][T12338] Call Trace: [ 956.824071][T12338] [ 956.824079][T12338] __dump_stack+0x1d/0x30 [ 956.824108][T12338] dump_stack_lvl+0x95/0xd0 [ 956.824186][T12338] dump_stack+0x15/0x1b [ 956.824212][T12338] dump_header+0x80/0x240 [ 956.824236][T12338] oom_kill_process+0x295/0x350 [ 956.824347][T12338] out_of_memory+0x981/0xbc0 [ 956.824414][T12338] try_charge_memcg+0x621/0xa00 [ 956.824451][T12338] __memcg_kmem_charge_page+0x199/0x3a0 [ 956.824549][T12338] __alloc_frozen_pages_noprof+0x18a/0x350 [ 956.824593][T12338] alloc_pages_mpol+0xa9/0x1d0 [ 956.824637][T12338] alloc_pages_noprof+0x8f/0x140 [ 956.824698][T12338] alloc_skb_with_frags+0x1c9/0x3d0 [ 956.824861][T12338] sock_alloc_send_pskb+0x44d/0x500 [ 956.824957][T12338] ? __rcu_read_unlock+0x4e/0x70 [ 956.824995][T12338] unix_stream_sendmsg+0x3ff/0xbc0 [ 956.825266][T12338] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 956.825387][T12338] sock_write_iter+0x2c5/0x2f0 [ 956.825419][T12338] ? __pfx_sock_write_iter+0x10/0x10 [ 956.825445][T12338] vfs_write+0x57d/0x990 [ 956.825479][T12338] ksys_write+0xdc/0x1a0 [ 956.825514][T12338] __x64_sys_write+0x40/0x50 [ 956.825647][T12338] x64_sys_call+0x27e1/0x3020 [ 956.825748][T12338] do_syscall_64+0x136/0x3c0 [ 956.825819][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.825928][T12338] RIP: 0033:0x7f598e47de59 [ 956.825949][T12338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.825975][T12338] RSP: 002b:00007f598ce95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 956.826064][T12338] RAX: ffffffffffffffda RBX: 00007f598e706180 RCX: 00007f598e47de59 [ 956.826084][T12338] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000003 [ 956.826102][T12338] RBP: 00007f598e513e6f R08: 0000000000000000 R09: 0000000000000000 [ 956.826121][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.826138][T12338] R13: 00007f598e706218 R14: 00007f598e706180 R15: 00007ffd1a62b788 [ 956.826164][T12338] [ 956.826185][T12338] memory: usage 307200kB, limit 307200kB, failcnt 1869 [ 957.053558][T12338] memory+swap: usage 315104kB, limit 9007199254740988kB, failcnt 0 [ 957.061597][T12338] kmem: usage 303984kB, limit 9007199254740988kB, failcnt 0 [ 957.111636][T12379] xt_hashlimit: max too large, truncated to 1048576 [ 957.144384][T12382] futex_wake_op: syz.8.14167 tries to shift op by -1; fix this program [ 957.161568][T12338] Memory cgroup stats for /syz2: [ 957.161775][T12338] cache 0 [ 957.172076][T12338] rss 3039232 [ 957.175456][T12338] shmem 0 [ 957.178548][T12338] mapped_file 0 [ 957.184971][T12338] dirty 0 [ 957.187987][T12338] writeback 0 [ 957.191376][T12338] workingset_refault_anon 3152 [ 957.196234][T12338] workingset_refault_file 1369 [ 957.217577][T12338] swap 8343552 [ 957.227258][T12338] swapcached 30466048 [ 957.236635][T12338] pgpgin 499114 [ 957.243626][T12338] pgpgout 498372 [ 957.253724][T12338] pgfault 543084 [ 957.262104][T12338] pgmajfault 2160 [ 957.272221][T12338] inactive_anon 929792 [ 957.282668][T12338] active_anon 2109440 [ 957.293374][T12338] inactive_file 0 [ 957.300340][T12338] active_file 0 [ 957.307278][T12338] unevictable 0 [ 957.314467][T12338] hierarchical_memory_limit 314572800 [ 957.325884][T12381] netlink: 'syz.0.14169': attribute type 12 has an invalid length. [ 957.334606][T12338] hierarchical_memsw_limit 9223372036854771712 [ 957.340829][T12338] total_cache 0 [ 957.346065][T12338] total_rss 3039232 [ 957.349987][T12338] total_shmem 0 [ 957.353631][T12338] total_mapped_file 0 [ 957.357825][T12338] total_dirty 0 [ 957.361347][T12338] total_writeback 0 [ 957.365236][T12338] total_workingset_refault_anon 3152 [ 957.370701][T12338] total_workingset_refault_file 1369 [ 957.376057][T12338] total_swap 8343552 [ 957.380034][T12338] total_swapcached 30466048 [ 957.384654][T12338] total_pgpgin 499114 [ 957.388750][T12338] total_pgpgout 498372 [ 957.392938][T12338] total_pgfault 543084 [ 957.397181][T12338] total_pgmajfault 2160 [ 957.401458][T12338] total_inactive_anon 929792 [ 957.406171][T12338] total_active_anon 2109440 [ 957.410806][T12338] total_inactive_file 0 [ 957.415099][T12338] total_active_file 0 [ 957.419245][T12338] total_unevictable 0 [ 957.423321][T12338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.14150,pid=12328,uid=0 [ 957.438356][T12338] Memory cgroup out of memory: Killed process 12328 (syz.2.14150) total-vm:96360kB, anon-rss:4208kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:0 [ 957.827172][T12396] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 957.840948][T12396] bridge10: entered promiscuous mode [ 959.028619][T12405] netlink: 'syz.7.14175': attribute type 2 has an invalid length. [ 959.100610][T12405] netlink: 'syz.7.14175': attribute type 3 has an invalid length. [ 959.173525][T12405] netlink: 11870 bytes leftover after parsing attributes in process `syz.7.14175'. [ 959.736417][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 959.853587][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 959.853610][ T28] audit: type=1400 audit(1783844200.438:4662): avc: denied { write } for pid=12400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.911178][ T28] audit: type=1400 audit(1783844200.494:4663): avc: denied { write } for pid=12437 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.182080][T12461] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 960.209853][T12461] syzkaller0: entered promiscuous mode [ 960.223401][T12461] syzkaller0: entered allmulticast mode [ 960.450296][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14198'. [ 961.089630][T12508] netlink: 'syz.0.14203': attribute type 1 has an invalid length. [ 961.141696][T12513] netlink: 'syz.2.14206': attribute type 33 has an invalid length. [ 961.150053][T12513] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14206'. [ 961.150965][ T28] audit: type=1400 audit(1783844201.672:4664): avc: denied { create } for pid=12514 comm="syz.0.14207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 961.222409][ T28] audit: type=1326 audit(1783844201.729:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.2.14208" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x0 [ 961.278669][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14208'. [ 961.358080][T12523] loop7: detected capacity change from 0 to 512 [ 961.364950][T12523] EXT4-fs: Ignoring removed bh option [ 961.392922][T12523] EXT4-fs (loop7): 1 truncate cleaned up [ 961.412071][T12523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.521576][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.720781][T12537] loop7: detected capacity change from 0 to 512 [ 961.740465][T12537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 961.761136][T12537] EXT4-fs (loop7): 1 truncate cleaned up [ 961.774917][T12537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.864250][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.247248][T12561] netlink: 80 bytes leftover after parsing attributes in process `syz.7.14224'. [ 962.264149][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14224'. [ 962.295478][ T28] audit: type=1326 audit(1783844202.739:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 962.339027][ T28] audit: type=1326 audit(1783844202.758:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 962.367329][ T28] audit: type=1326 audit(1783844202.758:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 962.397435][ T28] audit: type=1326 audit(1783844202.758:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 962.503356][ T28] audit: type=1326 audit(1783844202.832:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 962.558420][ T28] audit: type=1326 audit(1783844202.832:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12558 comm="syz.2.14223" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 962.743071][T12578] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 963.122206][T12585] netlink: 'syz.4.14233': attribute type 39 has an invalid length. [ 963.483319][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14237'. [ 963.495293][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14237'. [ 963.775528][T12607] loop7: detected capacity change from 0 to 1024 [ 963.822222][T12607] EXT4-fs: Ignoring removed orlov option [ 963.856590][T12607] EXT4-fs: dax option not supported [ 964.057893][T12616] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2005721284/2005721286 [ 964.072798][T12615] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3715546740/3715546741 [ 964.082591][T12615] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3715546740/3715546741 [ 964.578240][T12630] loop7: detected capacity change from 0 to 512 [ 964.590713][T12630] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 964.618528][T12630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 964.631528][T12630] System zones: 1-12 [ 964.662401][T12630] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.14247: bad orphan inode 131072 [ 964.699053][T12630] loop7: lost filesystem error report for type 5 error -117 [ 964.737376][T12630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.785853][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.163773][T12668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12668 comm=syz.8.14261 [ 965.261158][T12671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.269913][T12671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.625047][T12681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12681 comm=syz.4.14265 [ 965.639805][T12684] netlink: 'syz.8.14267': attribute type 1 has an invalid length. [ 965.647772][T12671] loop7: detected capacity change from 0 to 512 [ 965.664922][T12671] FAT-fs (loop7): error, clusters badly computed (1 != 0) [ 965.672821][T12671] FAT-fs (loop7): error, clusters badly computed (2 != 1) [ 965.681364][T12681] netlink: 'syz.4.14265': attribute type 1 has an invalid length. [ 965.708720][T12681] bond27: (slave gretap3): making interface the new active one [ 965.716934][T12681] bond27: (slave gretap3): Enslaving as an active interface with an up link [ 965.730606][T12681] vlan8: entered allmulticast mode [ 965.735955][T12681] bond27: entered allmulticast mode [ 965.741639][T12681] gretap3: entered allmulticast mode [ 965.744018][T12671] netlink: 'syz.7.14262': attribute type 12 has an invalid length. [ 965.749746][T12681] bond27: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 966.280384][T12703] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 966.296172][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 966.296186][ T28] audit: type=1400 audit(1783844206.462:4718): avc: denied { ioctl } for pid=12700 comm="syz.4.14271" path="socket:[140185]" dev="sockfs" ino=140185 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 967.511029][ T28] audit: type=1400 audit(1783844207.622:4719): avc: denied { read } for pid=12714 comm="syz.7.14276" path="socket:[141133]" dev="sockfs" ino=141133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 967.688676][ T28] audit: type=1326 audit(1783844207.781:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.759137][ T28] audit: type=1326 audit(1783844207.781:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.773419][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14285'. [ 967.800432][T12735] netlink: 'syz.8.14286': attribute type 12 has an invalid length. [ 967.815023][T12734] 8021q: adding VLAN 0 to HW filter on device bond10 [ 967.837244][ T28] audit: type=1326 audit(1783844207.809:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.874949][T12734] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 967.884963][ T28] audit: type=1326 audit(1783844207.809:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.910736][ T28] audit: type=1326 audit(1783844207.809:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.936829][ T28] audit: type=1326 audit(1783844207.809:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 967.962969][ T28] audit: type=1326 audit(1783844207.809:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f598e47dbc2 code=0x7ffc0000 [ 967.964005][T12734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12734 comm=syz.2.14285 [ 967.988895][ T28] audit: type=1326 audit(1783844207.809:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.2.14284" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 969.770339][T12772] loop7: detected capacity change from 0 to 2048 [ 969.838318][T12779] netlink: 'syz.8.14300': attribute type 33 has an invalid length. [ 969.846270][T12779] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.14300'. [ 969.933424][T12772] loop7: p2 < > p3 < p5 > p4 [ 969.952526][T12772] loop7: partition table partially beyond EOD, truncated [ 969.990555][T12772] loop7: p2 start 4278190080 is beyond EOD, truncated [ 970.024918][T12772] loop7: p4 size 8192 extends beyond EOD, truncated [ 970.060458][T12772] loop7: p5 size 8192 extends beyond EOD, truncated [ 970.183879][ T2982] loop7: p2 < > p3 < p5 > p4 [ 970.197190][ T2982] loop7: partition table partially beyond EOD, truncated [ 970.223406][ T2982] loop7: p2 start 4278190080 is beyond EOD, truncated [ 970.243823][ T2982] loop7: p4 size 8192 extends beyond EOD, truncated [ 970.262743][ T2982] loop7: p5 size 8192 extends beyond EOD, truncated [ 970.322346][T10972] udevd[10972]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 970.333841][T10833] udevd[10833]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 970.336848][T12802] udevd[12802]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 970.450598][T12812] syzkaller0: entered promiscuous mode [ 970.456145][T12812] syzkaller0: entered allmulticast mode [ 970.641388][T12825] loop7: detected capacity change from 0 to 512 [ 970.698129][T12825] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.714201][T12825] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.745359][T12825] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.832870][T12832] netlink: 'syz.2.14315': attribute type 2 has an invalid length. [ 970.840737][T12832] netlink: 'syz.2.14315': attribute type 3 has an invalid length. [ 970.848576][T12832] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.14315'. [ 971.059612][T12851] syzkaller0: entered promiscuous mode [ 971.065279][T12851] syzkaller0: entered allmulticast mode [ 971.156181][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14324'. [ 971.205341][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14326'. [ 971.251278][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14326'. [ 971.548203][T12872] netlink: 'syz.0.14329': attribute type 2 has an invalid length. [ 971.624772][T12872] netlink: 'syz.0.14329': attribute type 3 has an invalid length. [ 971.633551][T12872] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.14329'. [ 971.771535][T12870] bond27: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 971.988943][T12870] bond27 (unregistering): Released all slaves [ 972.546147][T12890] syzkaller0: entered promiscuous mode [ 972.564045][T12890] syzkaller0: entered allmulticast mode [ 973.081663][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 973.081681][ T28] audit: type=1326 audit(1783844212.832:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12911 comm="syz.8.14340" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa59f94de59 code=0x0 [ 973.231133][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz.8.14340'. [ 973.238717][T12918] xfrm1: entered allmulticast mode [ 974.108210][T12966] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14353'. [ 974.324799][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14358'. [ 974.382876][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14358'. [ 975.497605][T12984] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 975.506521][T12984] bridge11: entered promiscuous mode [ 976.295708][ T28] audit: type=1326 audit(1783844215.834:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13001 comm="syz.4.14363" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e7703de59 code=0x0 [ 976.392844][T13010] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14363'. [ 976.738776][T13016] loop7: detected capacity change from 0 to 8192 [ 978.627615][T13071] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 978.640486][T13071] bridge1: entered promiscuous mode [ 980.167564][T13091] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14390'. [ 980.629755][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14399'. [ 980.645164][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14400'. [ 980.789456][T13124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13124 comm=syz.8.14400 [ 980.822219][T13117] 8021q: adding VLAN 0 to HW filter on device bond27 [ 980.837462][T13123] bond27: (slave gretap0): Enslaving as an active interface with an up link [ 981.211412][T13132] loop7: detected capacity change from 0 to 128 [ 981.249807][T13132] FAT-fs (loop7): bogus number of FAT structure [ 981.256958][T13132] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 981.266431][T13132] FAT-fs (loop7): Can't find a valid FAT filesystem [ 981.823946][T13135] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 981.837621][T13135] bridge11: entered promiscuous mode [ 981.928725][T13132] netlink: 140 bytes leftover after parsing attributes in process `syz.7.14405'. [ 982.503857][ T28] audit: type=1326 audit(1783844221.643:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13151 comm="syz.0.14410" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x0 [ 983.649461][T13190] xt_bpf: check failed: parse error [ 984.248556][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14424'. [ 984.293703][T13192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 984.395931][T13196] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 984.460034][T13192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13192 comm=syz.7.14424 [ 984.751348][T13212] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 984.763843][T13212] bridge5: entered promiscuous mode [ 985.754285][T13219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 985.785051][T13219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 987.868597][T13276] loop7: detected capacity change from 0 to 1024 [ 987.945764][T13276] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 987.955655][T13276] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 988.048840][T13276] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 988.059103][T13276] System zones: 0-1, 4-36, 102-102 [ 988.079294][T13276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 988.311939][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.314026][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14461'. [ 989.323649][T13326] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 989.370002][T13338] netlink: 'syz.7.14463': attribute type 1 has an invalid length. [ 989.458331][T13338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 989.510013][T13340] bond2: (slave veth0_to_bond): Releasing active interface [ 989.536454][T13340] bond8: (slave veth0_to_bond): making interface the new active one [ 989.548779][T13340] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 989.598459][T13338] bond8: entered promiscuous mode [ 989.603924][T13338] veth0_to_bond: entered promiscuous mode [ 989.610608][T13338] bond8: entered allmulticast mode [ 989.615948][T13338] veth0_to_bond: entered allmulticast mode [ 989.636651][T13338] macvlan2: entered promiscuous mode [ 989.653096][T13338] macvlan2: entered allmulticast mode [ 989.660867][T13338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 989.671724][T13338] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 990.851931][T13399] team_slave_1: Caught tx_queue_len zero misconfig [ 992.096323][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14483'. [ 992.335365][T13424] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 992.400701][T13428] loop7: detected capacity change from 0 to 512 [ 992.415514][T13428] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 992.492100][T13428] EXT4-fs (loop7): 1 truncate cleaned up [ 992.508231][T13428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.003212][ T28] audit: type=1400 audit(1783844231.456:4771): avc: denied { write } for pid=13427 comm="syz.7.14488" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 993.390765][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.430939][T13456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14495'. [ 993.452951][T13460] syzkaller0: entered promiscuous mode [ 993.462285][T13460] syzkaller0: entered allmulticast mode [ 993.643358][T13469] xt_NFQUEUE: number of total queues is 0 [ 993.650388][T13472] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 995.626471][T13528] netlink: 52 bytes leftover after parsing attributes in process `syz.7.14519'. [ 996.201240][T13546] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 996.306615][ T28] audit: type=1326 audit(1783844234.552:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.2.14527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x0 [ 996.639368][T13571] netlink: 'syz.0.14530': attribute type 1 has an invalid length. [ 996.682468][T13571] bond24: (slave geneve4): making interface the new active one [ 996.714020][T13571] bond24: (slave geneve4): Enslaving as an active interface with an up link [ 996.783972][ T8543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.797992][ T8543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.819585][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14530'. [ 996.864201][T13571] 8021q: adding VLAN 0 to HW filter on device bond24 [ 996.882023][ T8543] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.914327][ T8543] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 997.612310][T13607] syzkaller0: entered promiscuous mode [ 997.626217][T13607] syzkaller0: entered allmulticast mode [ 998.018566][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14548'. [ 999.059400][T13650] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 999.311890][T13661] syzkaller0: entered promiscuous mode [ 999.333377][T13661] syzkaller0: entered allmulticast mode [ 1001.223386][T13723] cgroup: Unknown subsys name 'obj_user' [ 1001.235281][ T28] audit: type=1400 audit(1783844239.163:4773): avc: denied { create } for pid=13707 comm="syz.2.14571" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1001.294057][T13724] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14574'. [ 1001.967340][ T28] audit: type=1326 audit(1783844239.846:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.031426][T13680] kexec: Could not allocate control_code_buffer [ 1002.038340][ T28] audit: type=1326 audit(1783844239.846:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.064782][ T28] audit: type=1326 audit(1783844239.846:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.091138][ T28] audit: type=1326 audit(1783844239.846:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.119617][ T28] audit: type=1326 audit(1783844239.846:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.163276][ T28] audit: type=1326 audit(1783844239.846:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.202723][ T28] audit: type=1326 audit(1783844239.846:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.230235][ T28] audit: type=1326 audit(1783844239.846:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1002.288002][ T28] audit: type=1326 audit(1783844239.846:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.14580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1003.011455][T13758] netlink: 'syz.8.14593': attribute type 1 has an invalid length. [ 1003.024773][T13760] bond0: entered promiscuous mode [ 1003.065989][T13758] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1003.113922][T13764] vlan4: entered promiscuous mode [ 1003.132494][T13764] bond28: entered promiscuous mode [ 1003.181737][T13764] vlan4: entered allmulticast mode [ 1003.188525][T13764] bond28: entered allmulticast mode [ 1003.317948][T13758] bond28: (slave bridge12): making interface the new active one [ 1003.332731][T13758] bridge12: entered promiscuous mode [ 1003.338390][T13758] bridge12: entered allmulticast mode [ 1003.364663][T13758] bond28: (slave bridge12): Enslaving as an active interface with an up link [ 1003.491661][T13776] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14586'. [ 1005.426018][T13809] loop7: detected capacity change from 0 to 1024 [ 1005.460223][T13809] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1005.489105][T13809] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.14596: lblock 2 mapped to illegal pblock 2 (length 1) [ 1005.503213][T13809] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1005.525345][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1005.540897][ C1] EXT4-fs (loop7): initial error at time 1783844243: ext4_map_blocks:791: inode 3: block 2 [ 1005.547591][T13809] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.14596: lblock 0 mapped to illegal pblock 48 (length 1) [ 1005.550936][ C1] EXT4-fs (loop7): last error at time 1783844243: ext4_map_blocks:791: inode 3: block 2 [ 1005.580059][T13801] kexec: Could not allocate control_code_buffer [ 1005.598223][T13809] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1005.603961][T13809] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.14596: Failed to acquire dquot type 0 [ 1005.703099][T13809] loop7: lost filesystem error report for type 5 error -117 [ 1005.739806][T13809] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1005.790498][T13809] loop7: lost filesystem error report for type 5 error -117 [ 1005.792193][T13809] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.14596: mark_inode_dirty error [ 1005.836676][T13809] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.838044][T13809] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1005.891570][T13809] EXT4-fs (loop7): 1 orphan inode deleted [ 1005.945647][T13809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.891459][ T30] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1006.944923][ T30] __quota_error: 1720 callbacks suppressed [ 1006.944943][ T30] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1007.009658][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 0 [ 1007.057958][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.094551][ T6123] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1007.134524][ T6123] loop7: lost filesystem error report for type 5 error -117 [ 1007.134731][ T6123] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1007.285113][ T6123] loop7: lost filesystem error report for type 5 error -117 [ 1007.300523][ T6123] EXT4-fs error (device loop7): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1007.326043][T13836] netlink: 52 bytes leftover after parsing attributes in process `syz.8.14606'. [ 1007.350077][ T6123] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1007.403212][ T28] audit: type=1400 audit(1783844244.935:6501): avc: denied { read write } for pid=13838 comm="syz.7.14602" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1007.436013][ T28] audit: type=1400 audit(1783844244.935:6502): avc: denied { open } for pid=13838 comm="syz.7.14602" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1007.569487][T13844] bond28: Unable to set peer notification delay as MII monitoring is disabled [ 1007.635005][T13844] bond28 (unregistering): Released all slaves [ 1007.806969][T13854] loop7: detected capacity change from 0 to 1024 [ 1007.816388][ T28] audit: type=1326 audit(1783844245.300:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1007.856046][T13854] EXT4-fs: Ignoring removed bh option [ 1007.866684][ T28] audit: type=1326 audit(1783844245.300:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1007.893244][ T28] audit: type=1326 audit(1783844245.300:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1007.921684][ T28] audit: type=1326 audit(1783844245.300:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1007.947853][ T28] audit: type=1326 audit(1783844245.300:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1007.987622][T13856] tipc: Enabling of bearer rejected, failed to enable media [ 1008.000328][T13854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.025275][T13854] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.056233][ T28] audit: type=1326 audit(1783844245.300:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1008.098516][T13854] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14611: bg 0: block 112: padding at end of block bitmap is not set [ 1008.151958][ T28] audit: type=1326 audit(1783844245.300:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13853 comm="syz.7.14611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa7943de59 code=0x7ffc0000 [ 1008.210447][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1008.394850][T13880] loop7: detected capacity change from 0 to 2048 [ 1008.899343][T13880] loop7: unable to read partition table [ 1008.960096][T13880] loop7: partition table beyond EOD, truncated [ 1008.981526][T13880] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1010.331237][T13933] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 1010.343028][T13933] bridge12: entered promiscuous mode [ 1012.404145][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14651'. [ 1012.687803][T13968] netlink: 264 bytes leftover after parsing attributes in process `syz.2.14648'. [ 1012.696973][T13968] netlink: 264 bytes leftover after parsing attributes in process `syz.2.14648'. [ 1013.296405][T13981] cgroup: Unknown subsys name 'obj_user' [ 1014.029281][T13987] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14650'. [ 1014.133872][T13992] netlink: 'syz.8.14655': attribute type 1 has an invalid length. [ 1014.223859][T13994] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14655'. [ 1014.282277][T13992] bond29: (slave geneve3): making interface the new active one [ 1014.323449][T13992] bond29: (slave geneve3): Enslaving as an active interface with an up link [ 1014.359865][ T30] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1014.392581][ T30] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1014.429997][T13994] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1014.470553][ T30] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1014.506521][ T30] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1015.898488][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1015.898504][ T28] audit: type=1326 audit(1783844252.876:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1015.938566][ T28] audit: type=1326 audit(1783844252.876:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1015.975721][ T28] audit: type=1326 audit(1783844252.876:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.008532][ T28] audit: type=1326 audit(1783844252.876:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.039651][ T28] audit: type=1326 audit(1783844252.876:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.065363][ T28] audit: type=1326 audit(1783844252.876:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.131759][ T28] audit: type=1326 audit(1783844252.876:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.159106][ T28] audit: type=1326 audit(1783844252.914:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.186352][ T28] audit: type=1326 audit(1783844252.914:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1016.212317][ T28] audit: type=1326 audit(1783844252.914:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.0.14672" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0f9a64de59 code=0x7ffc0000 [ 1018.191955][T14130] netlink: 'syz.0.14690': attribute type 1 has an invalid length. [ 1018.321682][T14130] macvtap1: entered allmulticast mode [ 1018.507399][T14130] bond25: (slave bridge13): making interface the new active one [ 1018.563299][T14130] bond25: (slave bridge13): Enslaving as an active interface with an up link [ 1019.841116][T14148] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.14694'. [ 1019.955193][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14696'. [ 1020.209703][T14166] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1020.332594][T14166] No such timeout policy "syz0" [ 1020.381490][T14170] macvlan0 (unregistering): left allmulticast mode [ 1020.405301][T14170] macvlan0 (unregistering): left promiscuous mode [ 1020.428013][T14170] À: port 1(macvlan0) entered disabled state [ 1020.541804][T14172] loop7: detected capacity change from 0 to 512 [ 1020.574953][T14172] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1020.590047][T14172] EXT4-fs (loop7): Remounting filesystem read-only [ 1020.596979][T14172] EXT4-fs (loop7): 1 truncate cleaned up [ 1020.603166][T14172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.656488][T14177] tipc: Enabling of bearer rejected, failed to enable media [ 1020.666535][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.884750][T14190] netlink: 264 bytes leftover after parsing attributes in process `syz.7.14710'. [ 1020.894006][T14190] netlink: 264 bytes leftover after parsing attributes in process `syz.7.14710'. [ 1021.063070][T14198] syzkaller0: entered promiscuous mode [ 1021.077497][T14198] syzkaller0: entered allmulticast mode [ 1021.630845][T14222] netlink: 'syz.0.14721': attribute type 1 has an invalid length. [ 1021.655900][T14222] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1021.882080][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14720'. [ 1022.518142][T14261] loop7: detected capacity change from 0 to 512 [ 1022.566938][T14261] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14732: bg 0: block 127: padding at end of block bitmap is not set [ 1022.623057][T14261] loop7: lost filesystem error report for type 5 error -117 [ 1022.628460][T14261] EXT4-fs (loop7): Remounting filesystem read-only [ 1022.635974][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1022.636000][ C0] EXT4-fs (loop7): initial error at time 1783844259: ext4_validate_block_bitmap:441 [ 1022.636025][ C0] EXT4-fs (loop7): last error at time 1783844259: ext4_validate_block_bitmap:441 [ 1022.687354][T14261] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.7.14732: cleanup dec ref error -117 [ 1022.707500][T14261] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1022.724092][T14261] EXT4-fs (loop7): 1 orphan inode deleted [ 1022.732270][T14261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.073835][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1023.106031][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.394367][T14236] kexec: Could not allocate control_code_buffer [ 1024.003204][T14293] netlink: 3084 bytes leftover after parsing attributes in process `syz.7.14742'. [ 1024.023556][T14293] netlink: 'syz.7.14742': attribute type 1 has an invalid length. [ 1024.042386][T14293] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.14742'. [ 1025.563006][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 1025.563025][ T28] audit: type=1326 audit(1783844261.922:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1025.602087][T14338] netlink: 292 bytes leftover after parsing attributes in process `syz.2.14764'. [ 1025.611352][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14764'. [ 1025.611568][T14337] loop7: detected capacity change from 0 to 764 [ 1025.653484][T14337] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1025.663847][ T28] audit: type=1326 audit(1783844261.922:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1025.689422][ T28] audit: type=1326 audit(1783844261.922:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1025.830625][ T28] audit: type=1326 audit(1783844261.931:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1025.864075][ T28] audit: type=1326 audit(1783844261.931:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1025.955545][ T28] audit: type=1326 audit(1783844261.950:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 1026.045082][ T28] audit: type=1326 audit(1783844261.950:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 1026.093531][ T28] audit: type=1326 audit(1783844261.950:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f598e43e68e code=0x7ffc0000 [ 1026.122836][ T28] audit: type=1326 audit(1783844261.950:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1026.157168][ T28] audit: type=1326 audit(1783844261.959:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.2.14764" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1026.377870][T14359] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1026.387281][T14359] bridge2: entered promiscuous mode [ 1028.797150][T14389] tipc: Enabling of bearer rejected, failed to enable media [ 1028.822746][T14388] loop7: detected capacity change from 0 to 1024 [ 1028.863904][T14388] EXT4-fs: Ignoring removed bh option [ 1028.907321][T14388] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1028.928678][T14388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 1028.949057][T14388] System zones: 0-1, 3-12 [ 1028.976640][T14388] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.14770: lblock 1 mapped to illegal pblock 1 (length 1) [ 1028.998709][T14326] Set syz1 is full, maxelem 6117 reached [ 1029.013976][T14388] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1029.016900][T14388] EXT4-fs (loop7): Remounting filesystem read-only [ 1029.026331][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1029.026369][ C1] EXT4-fs (loop7): initial error at time 1783844265: ext4_map_blocks:833: inode 3: block 1 [ 1029.026469][ C1] EXT4-fs (loop7): last error at time 1783844265: ext4_map_blocks:833: inode 3: block 1 [ 1029.085780][T14388] EXT4-fs (loop7): 1 orphan inode deleted [ 1029.114518][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14772'. [ 1029.124627][T14388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.176324][T14416] netlink: 'syz.8.14775': attribute type 1 has an invalid length. [ 1029.209237][T14416] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1029.249201][T14416] veth31: entered allmulticast mode [ 1029.261347][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.281641][T14416] bond30: (slave veth31): Enslaving as an active interface with a down link [ 1029.332067][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14776'. [ 1029.372116][T14416] bond23: (slave veth0_to_bond): Releasing active interface [ 1029.394934][T14416] veth0_to_bond: left promiscuous mode [ 1029.400737][T14416] veth0_to_bond: left allmulticast mode [ 1029.410246][T14416] bond30: (slave veth0_to_bond): making interface the new active one [ 1029.419957][T14416] veth0_to_bond: entered promiscuous mode [ 1029.426278][T14416] bond30: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1029.442519][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.455212][T14420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.470882][T14421] macvlan2: entered promiscuous mode [ 1029.476343][T14421] macvlan2: entered allmulticast mode [ 1029.482660][T14421] bond30: entered promiscuous mode [ 1029.488188][T14421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1029.500554][T14421] bond30: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1029.522048][T14421] bond30: left promiscuous mode [ 1029.540986][T14425] tipc: Enabling of bearer rejected, failed to enable media [ 1029.618103][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14779'. [ 1029.642458][T14437] netlink: 'syz.4.14781': attribute type 1 has an invalid length. [ 1029.665688][T14437] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1029.679651][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14781'. [ 1029.764176][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14786'. [ 1029.774351][T14450] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14786'. [ 1029.903240][T14456] loop7: detected capacity change from 0 to 256 [ 1029.911281][T14456] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1030.121652][T14475] netlink: 'syz.8.14795': attribute type 1 has an invalid length. [ 1030.793050][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1030.800112][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1030.806566][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1030.851794][T14500] infiniband syz2: set down [ 1030.856539][T10940] erspan0 speed is unknown, defaulting to 1000 [ 1030.863122][T14500] infiniband syz2: added erspan0 [ 1030.880323][T14500] RDS/IB: syz2: added [ 1030.889459][T14500] smc: adding ib device syz2 with port count 1 [ 1030.895980][T14500] smc: ib device syz2 port 1 has no pnetid [ 1030.902845][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1030.910995][T10940] erspan0 speed is unknown, defaulting to 1000 [ 1030.973824][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1030.977661][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14805'. [ 1031.100571][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1031.157824][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1031.202540][T14500] erspan0 speed is unknown, defaulting to 1000 [ 1031.323642][T14516] syzkaller0: entered promiscuous mode [ 1032.258598][T14516] syzkaller0: entered allmulticast mode [ 1033.512824][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 1033.512853][ T28] audit: type=1326 audit(1783844269.349:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.562384][ T28] audit: type=1326 audit(1783844269.349:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.588168][ T28] audit: type=1326 audit(1783844269.349:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.614544][ T28] audit: type=1326 audit(1783844269.349:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.640118][ T28] audit: type=1326 audit(1783844269.349:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.665778][ T28] audit: type=1326 audit(1783844269.349:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.691555][ T28] audit: type=1326 audit(1783844269.349:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.693780][T14528] netlink: 'syz.0.14811': attribute type 13 has an invalid length. [ 1033.717367][ T28] audit: type=1326 audit(1783844269.349:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.756239][ T28] audit: type=1326 audit(1783844269.349:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.784018][T14531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14531 comm=syz.4.14813 [ 1033.825286][ T28] audit: type=1326 audit(1783844269.349:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.2.14820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598e47de59 code=0x7ffc0000 [ 1033.881698][T14540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14816'. [ 1034.363235][T14557] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14823'. [ 1035.276534][T14568] erspan0 speed is unknown, defaulting to 1000 [ 1036.667774][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14828'. [ 1036.707185][T14576] hsr_slave_0: left promiscuous mode [ 1036.727660][T14578] xt_hashlimit: size too large, truncated to 1048576 [ 1036.742040][T14576] hsr_slave_1: left promiscuous mode [ 1037.068914][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14832'. [ 1037.107552][T14593] loop7: detected capacity change from 0 to 1024 [ 1037.236343][T14593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.254028][T14593] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.340791][T14593] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.14831: Freeing blocks not in datazone - block = 0, count = 16 [ 1037.361997][T14593] EXT4-fs (loop7): Remounting filesystem read-only [ 1038.006162][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1038.400105][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14850'. [ 1039.624787][T14674] erspan0 speed is unknown, defaulting to 1000 [ 1040.044629][T14682] erspan0 speed is unknown, defaulting to 1000 [ 1040.076334][T14692] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1040.118112][T14687] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1040.154324][T14690] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.14862'. [ 1040.320856][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14868'. [ 1040.339734][T14710] bond0: option arp_validate: invalid value (18446744071562199044) [ 1040.472410][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1040.495224][T14726] loop7: detected capacity change from 0 to 512 [ 1040.547201][T14726] EXT4-fs: Ignoring removed nobh option [ 1040.576977][T14731] tipc: Enabling of bearer rejected, failed to enable media [ 1040.611192][T14726] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 1040.655566][T14726] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.14871: attempt to clear invalid blocks 1 len 1 [ 1040.668647][T14726] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1040.685608][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1040.698021][T14726] EXT4-fs (loop7): Remounting filesystem read-only [ 1040.701236][ C1] EXT4-fs (loop7): initial error at time 1783844276: ext4_clear_blocks:876: inode 13 [ 1040.717283][ C1] EXT4-fs (loop7): last error at time 1783844276: ext4_clear_blocks:876: inode 13 [ 1040.747466][T14726] EXT4-fs (loop7): 1 truncate cleaned up [ 1040.769505][T14726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.812393][T14726] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.033109][T14722] syz.7.14871 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1041.082025][T14722] CPU: 1 UID: 0 PID: 14722 Comm: syz.7.14871 Not tainted syzkaller #0 PREEMPT(lazy) [ 1041.082123][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1041.082141][T14722] Call Trace: [ 1041.082151][T14722] [ 1041.082162][T14722] __dump_stack+0x1d/0x30 [ 1041.082205][T14722] dump_stack_lvl+0x95/0xd0 [ 1041.082323][T14722] dump_stack+0x15/0x1b [ 1041.082409][T14722] dump_header+0x80/0x240 [ 1041.082441][T14722] oom_kill_process+0x295/0x350 [ 1041.082490][T14722] out_of_memory+0x981/0xbc0 [ 1041.082604][T14722] try_charge_memcg+0x621/0xa00 [ 1041.082637][T14722] __memcg_kmem_charge_page+0x199/0x3a0 [ 1041.082683][T14722] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1041.082728][T14722] alloc_pages_bulk_noprof+0x4c3/0x550 [ 1041.082777][T14722] ? policy_nodemask+0x417/0x5e0 [ 1041.082819][T14722] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 1041.082880][T14722] ? alloc_pages_mpol+0xd9/0x1d0 [ 1041.082963][T14722] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 1041.083040][T14722] __kvmalloc_node_noprof+0x3a0/0x590 [ 1041.083078][T14722] ? futex_hash_allocate+0x192/0x920 [ 1041.083127][T14722] ? futex_hash_allocate+0x192/0x920 [ 1041.083223][T14722] ? futex_hash_allocate+0x192/0x920 [ 1041.083253][T14722] futex_hash_allocate+0x192/0x920 [ 1041.083281][T14722] ? cap_task_prctl+0x13f/0x6b0 [ 1041.083344][T14722] futex_hash_prctl+0xd8/0xf0 [ 1041.083373][T14722] __se_sys_prctl+0x4f4/0x13b0 [ 1041.083413][T14722] __x64_sys_prctl+0x67/0x80 [ 1041.083499][T14722] x64_sys_call+0x2533/0x3020 [ 1041.083531][T14722] do_syscall_64+0x136/0x3c0 [ 1041.083617][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.083707][T14722] RIP: 0033:0x7faa7943de59 [ 1041.083726][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.083754][T14722] RSP: 002b:00007faa77e97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1041.083782][T14722] RAX: ffffffffffffffda RBX: 00007faa796c5fa0 RCX: 00007faa7943de59 [ 1041.083803][T14722] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1041.083844][T14722] RBP: 00007faa794d3e6f R08: 0000000000000000 R09: 0000000000000000 [ 1041.083949][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.083963][T14722] R13: 00007faa796c6038 R14: 00007faa796c5fa0 R15: 00007fffdb9789c8 [ 1041.083984][T14722] [ 1041.087139][T14722] memory: usage 307200kB, limit 307200kB, failcnt 1282 [ 1041.147184][T14763] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.14881'. [ 1041.166735][T14722] memory+swap: usage 354396kB, limit 9007199254740988kB, failcnt 0 [ 1041.229474][T14758] erspan0 speed is unknown, defaulting to 1000 [ 1041.402713][T14722] kmem: usage 256976kB, limit 9007199254740988kB, failcnt 0 [ 1041.456650][T14722] Memory cgroup stats for /syz7: [ 1041.456874][T14722] cache 18972672 [ 1041.465528][T14722] rss 315392 [ 1041.476454][T14722] shmem 18972672 [ 1041.481209][T14722] mapped_file 0 [ 1041.486890][T14722] dirty 0 [ 1041.492214][T14722] writeback 0 [ 1041.498139][T14722] workingset_refault_anon 2343 [ 1041.505005][T14772] netlink: 'syz.8.14883': attribute type 1 has an invalid length. [ 1041.516251][T14722] workingset_refault_file 0 [ 1041.525599][T14722] swap 48328704 [ 1041.547321][T14722] swapcached 63340544 [ 1041.551749][T14722] pgpgin 384515 [ 1041.555433][T14722] pgpgout 379736 [ 1041.559235][T14722] pgfault 427184 [ 1041.571875][T14722] pgmajfault 3206 [ 1041.575796][T14722] inactive_anon 10240000 [ 1041.581395][T14722] active_anon 9121792 [ 1041.585629][T14722] inactive_file 0 [ 1041.590214][T14722] active_file 0 [ 1041.593971][T14722] unevictable 0 [ 1041.601127][T14722] hierarchical_memory_limit 314572800 [ 1041.644139][T14776] macvtap2: entered allmulticast mode [ 1041.660014][T14775] netlink: 'syz.4.14884': attribute type 3 has an invalid length. [ 1041.676624][T14722] hierarchical_memsw_limit 9223372036854771712 [ 1041.693184][T14722] total_cache 18972672 [ 1041.697398][T14722] total_rss 315392 [ 1041.701560][T14722] total_shmem 18972672 [ 1041.705774][T14722] total_mapped_file 0 [ 1041.709988][T14722] total_dirty 0 [ 1041.713800][T14722] total_writeback 0 [ 1041.718222][T14722] total_workingset_refault_anon 2343 [ 1041.752169][T14722] total_workingset_refault_file 0 [ 1041.758099][T14722] total_swap 48328704 [ 1041.762454][T14722] total_swapcached 63340544 [ 1041.768027][T14722] total_pgpgin 384515 [ 1041.772306][T14722] total_pgpgout 379736 [ 1041.777162][T14722] total_pgfault 427184 [ 1041.781367][T14722] total_pgmajfault 3206 [ 1041.786161][T14722] total_inactive_anon 10240000 [ 1041.791478][T14722] total_active_anon 9121792 [ 1041.796287][T14722] total_inactive_file 0 [ 1041.804012][T14722] total_active_file 0 [ 1041.811750][T14722] total_unevictable 0 [ 1041.816773][T14722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.14871,pid=14721,uid=0 [ 1041.832746][T14722] Memory cgroup out of memory: Killed process 14722 (syz.7.14871) total-vm:94312kB, anon-rss:1444kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1041.877109][T14772] macvtap3: entered allmulticast mode [ 1041.964372][T14776] bond31: (slave bridge13): making interface the new active one [ 1042.121614][T14776] bond31: (slave bridge13): Enslaving as an active interface with an up link [ 1042.343181][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14889'. [ 1042.448431][T14786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1042.467995][T14786] batman_adv: batadv0: Adding interface: gretap1 [ 1042.474380][T14786] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.499680][T14786] batman_adv: batadv0: Interface activated: gretap1 [ 1042.509426][T14819] netlink: 'syz.2.14893': attribute type 10 has an invalid length. [ 1042.523833][T14819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.531853][T14819] team0: entered promiscuous mode [ 1042.537813][T14819] bond0: (slave team0): Enslaving as an active interface with an up link [ 1042.597837][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14897'. [ 1042.728483][T14845] syzkaller0: entered promiscuous mode [ 1042.741051][T14845] syzkaller0: entered allmulticast mode [ 1042.781343][T14850] netlink: 'syz.2.14904': attribute type 1 has an invalid length. [ 1042.803815][T14848] SET target dimension over the limit! [ 1042.806319][T14850] xt_socket: unknown flags 0x48 [ 1042.988262][T14855] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 1043.077131][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14907'. [ 1043.276447][T14891] netlink: 36 bytes leftover after parsing attributes in process `syz.8.14916'. [ 1043.659730][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14923'. [ 1044.167478][T14941] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1044.348078][T14957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14939'. [ 1044.424733][T14955] erspan0 speed is unknown, defaulting to 1000 [ 1044.429841][T14959] loop7: detected capacity change from 0 to 512 [ 1044.439135][T14959] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1044.459323][T14959] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.14940: bad orphan inode 131072 [ 1044.472024][T14959] loop7: lost filesystem error report for type 5 error -117 [ 1044.480791][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1044.494617][ C0] EXT4-fs (loop7): initial error at time 1783844279: ext4_orphan_get:1425 [ 1044.503228][ C0] EXT4-fs (loop7): last error at time 1783844279: ext4_orphan_get:1425 [ 1044.567726][T14959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.606687][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1044.606704][ T28] audit: type=1400 audit(1783844279.732:6776): avc: denied { write } for pid=14958 comm="syz.7.14940" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1044.685842][T14981] tipc: Enabling of bearer rejected, failed to enable media [ 1044.763264][T14981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14945'. [ 1044.873734][T14976] erspan0 speed is unknown, defaulting to 1000 [ 1044.888515][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14946'. [ 1044.953348][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.762867][T15042] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14960'. [ 1045.867818][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14961'. [ 1045.942094][T15058] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1046.167408][T15079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1046.403476][ T30] veth0_to_bond: left promiscuous mode [ 1047.224726][T15107] bond9: entered allmulticast mode [ 1047.230083][T15107] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1047.239386][T15098] erspan0 speed is unknown, defaulting to 1000 [ 1047.340437][T15110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1047.716209][T15141] netlink: 'syz.2.14987': attribute type 13 has an invalid length. [ 1047.831652][T15143] tipc: Enabled bearer , priority 0 [ 1047.884716][T15143] syzkaller0: entered promiscuous mode [ 1047.903454][T15143] syzkaller0: entered allmulticast mode [ 1047.935409][T15143] tipc: Resetting bearer [ 1047.958145][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.966420][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.996478][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.004715][T15143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.058103][T15142] tipc: Resetting bearer [ 1048.086213][T15142] tipc: Disabling bearer [ 1048.106409][T15157] __nla_validate_parse: 1 callbacks suppressed [ 1048.106438][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14992'. [ 1048.157967][T15161] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 1048.286194][T15157] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 1048.325487][ T28] audit: type=1400 audit(1783844283.211:6777): avc: denied { getopt } for pid=15173 comm="syz.4.14999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1048.576466][T15184] bond1: (slave .`): Releasing active interface [ 1048.585210][T15189] netlink: 'syz.7.15004': attribute type 16 has an invalid length. [ 1048.593352][T15189] netlink: 'syz.7.15004': attribute type 17 has an invalid length. [ 1048.622559][T15184] bridge_slave_0: left allmulticast mode [ 1048.628313][T15184] bridge_slave_0: left promiscuous mode [ 1048.634273][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.644629][T15184] bridge_slave_1: left allmulticast mode [ 1048.650347][T15184] bridge_slave_1: left promiscuous mode [ 1048.656051][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.665913][T15184] bond8: (slave veth0_to_bond): Releasing active interface [ 1048.673297][T15184] veth0_to_bond: left promiscuous mode [ 1048.678886][T15184] veth0_to_bond: left allmulticast mode [ 1048.819459][T15184] .`: (slave bond_slave_0): Releasing backup interface [ 1048.937876][T15184] .`: (slave bond_slave_1): Releasing backup interface [ 1049.141034][T15184] team0: Port device team_slave_1 removed [ 1049.183349][T15184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.264268][T15184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.702974][T15184] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1049.720161][T15184] batman_adv: batadv0: Removing interface: macvtap1 [ 1049.744194][T15184] bond3: (slave veth5): Releasing active interface [ 1049.783212][T15184] bond7: (slave gretap0): Releasing backup interface [ 1049.797247][T15184] batman_adv: batadv0: Interface deactivated: gretap1 [ 1049.809524][T15184] batman_adv: batadv0: Removing interface: gretap1 [ 1050.314426][T15190] team0: Port device xfrm0 added [ 1050.326042][T15196] tipc: Enabled bearer , priority 0 [ 1050.336549][T15192] erspan0: left promiscuous mode [ 1050.351441][T15192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.359186][T15192] tipc: Resetting bearer [ 1050.423906][T15192] veth0_to_team: left promiscuous mode [ 1050.433880][T15192] veth1_vlan: left promiscuous mode [ 1050.439885][T15192] veth0_vlan: left promiscuous mode [ 1050.446721][T15192] veth0_vlan: entered promiscuous mode [ 1050.452952][T15192] veth1_vlan: entered promiscuous mode [ 1050.466093][T15192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.475839][T15192] veth0_to_team: entered promiscuous mode [ 1050.493237][T15192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1050.528084][T15192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.538401][T15192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1050.548661][T15192] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1050.556747][T15192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1050.567104][T15192] erspan0: entered promiscuous mode [ 1050.574716][T15192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.586391][T15192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1050.610785][T15192] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1050.619907][T15192] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1050.629277][T15192] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1050.637909][T15192] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1050.648516][T15192] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1050.656674][T15192] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1050.665125][T15192] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 1050.674359][T15192] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1050.739727][T10940] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1050.810489][ T8563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1050.822619][ T8563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1050.856285][ T68] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.870910][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.898946][ T68] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1050.907566][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.916133][ T9] erspan0 speed is unknown, defaulting to 1000 [ 1050.965552][ T8046] erspan0 speed is unknown, defaulting to 1000 [ 1050.971781][ T8046] syz2: Port: 1 Link ACTIVE [ 1050.995552][ T68] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.005473][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.013750][ T68] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.022009][ T68] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.222601][ T8046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1051.356731][T15250] syzkaller0: entered promiscuous mode [ 1051.371609][T15250] syzkaller0: entered allmulticast mode [ 1051.591057][ T8046] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1051.845371][T15284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15028'. [ 1053.463464][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15040'. [ 1054.797562][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15043'. [ 1055.011312][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1055.211417][ T28] audit: type=1326 audit(1783844289.647:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15367 comm="syz.8.15049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa59f94de59 code=0x0 [ 1055.270515][T15377] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 1055.284922][ T28] audit: type=1400 audit(1783844289.722:6779): avc: denied { relabelto } for pid=15367 comm="syz.8.15049" name="2609" dev="tmpfs" ino=13490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1055.395398][ T28] audit: type=1400 audit(1783844289.722:6780): avc: denied { associate } for pid=15367 comm="syz.8.15049" name="2609" dev="tmpfs" ino=13490 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 1055.663875][T15392] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1055.998288][T15405] tc action pedit 'at' offset 3 out of bounds [ 1056.068475][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15064'. [ 1056.080174][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15064'. [ 1056.121301][ T8543] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.136843][ T8543] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.154316][T15417] tipc: Enabling of bearer rejected, failed to enable media [ 1056.177367][ T8543] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.185821][ T8543] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1056.211511][T15422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.285154][T15428] netlink: 64 bytes leftover after parsing attributes in process `syz.8.15068'. [ 1056.347549][T15436] netlink: 'syz.8.15070': attribute type 1 has an invalid length. [ 1056.387665][T15436] bond32: entered promiscuous mode [ 1056.392938][T15436] bond32: entered allmulticast mode [ 1056.398433][T15436] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1056.407412][T15409] erspan0 speed is unknown, defaulting to 1000 [ 1056.422465][T15436] erspan1: entered allmulticast mode [ 1056.431380][T15436] bond32: (slave erspan1): making interface the new active one [ 1056.438963][T15436] erspan1: entered promiscuous mode [ 1056.463311][T15436] bond32: (slave erspan1): Enslaving as an active interface with an up link [ 1056.500421][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15070'. [ 1056.530300][T15436] bond32 (unregistering): (slave erspan1): Releasing active interface [ 1056.538520][T15436] erspan1: left promiscuous mode [ 1056.545419][T15436] bond32 (unregistering): Released all slaves [ 1056.674822][T15448] netlink: 'syz.8.15074': attribute type 4 has an invalid length. [ 1056.729480][T15454] netlink: 'syz.8.15074': attribute type 4 has an invalid length. [ 1056.807258][T15448] netlink: 'syz.8.15074': attribute type 4 has an invalid length. [ 1057.013892][T15461] loop7: detected capacity change from 0 to 164 [ 1057.024834][T15461] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1057.152463][T15465] tipc: Bearer : already 2 bearers with priority 10 [ 1057.159989][T15465] tipc: Bearer : trying with adjusted priority [ 1057.167060][T15465] tipc: Enabling of bearer rejected, failed to enable media [ 1057.734517][T15474] netlink: 'syz.7.15080': attribute type 6 has an invalid length. [ 1057.852904][T15476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15081'. [ 1058.362032][T15498] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1058.561206][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15087'. [ 1058.628420][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15087'. [ 1058.675071][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15087'. [ 1058.783640][ T28] audit: type=1400 audit(1783844292.986:6781): avc: denied { write } for pid=15491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.841435][ T28] audit: type=1400 audit(1783844293.052:6782): avc: denied { write } for pid=15512 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.983142][T15527] __nla_validate_parse: 1 callbacks suppressed [ 1058.983194][T15527] netlink: 52 bytes leftover after parsing attributes in process `syz.7.15091'. [ 1059.019415][ T28] audit: type=1326 audit(1783844293.211:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.0.15093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f9a64de59 code=0x0 [ 1059.101135][T15537] geneve2: entered promiscuous mode [ 1059.106427][T15537] geneve2: entered allmulticast mode [ 1059.114379][T15537] batman_adv: batadv0: Adding interface: geneve2 [ 1059.159953][T15537] batman_adv: batadv0: Interface activated: geneve2 [ 1059.237702][ T28] audit: type=1326 audit(1783844293.417:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.15096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f94de59 code=0x7ffc0000 [ 1059.285598][ T28] audit: type=1326 audit(1783844293.417:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.15096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa59f94de59 code=0x7ffc0000 [ 1059.327696][T15553] loop7: detected capacity change from 0 to 512 [ 1059.339857][T15553] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1059.350838][ T28] audit: type=1326 audit(1783844293.463:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15539 comm="syz.8.15096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59f94de59 code=0x7ffc0000 [ 1059.378385][T15553] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1059.404325][T15553] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1059.415175][T15553] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1059.430046][T15553] System zones: 0-2, 18-18, 34-35 [ 1059.452363][T15553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.494063][T15563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15563 comm=syz.2.15102 [ 1059.508297][T15563] netlink: 'syz.2.15102': attribute type 1 has an invalid length. [ 1059.579138][T15563] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1059.593305][T15563] bond11: (slave dummy0): making interface the new active one [ 1059.603222][T15563] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 1059.638814][ T68] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.647592][ T68] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.656496][ T68] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.668395][ T68] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1059.670635][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.870494][T15575] vlan1: entered allmulticast mode [ 1059.875676][T15575] veth0_to_bond: entered allmulticast mode [ 1059.894291][T15575] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=15575 comm=syz.8.15106 [ 1059.952074][T15579] loop7: detected capacity change from 0 to 256 [ 1060.399894][T11565] erspan0 speed is unknown, defaulting to 1000 [ 1060.837020][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 1060.857907][T15592] netlink: 128 bytes leftover after parsing attributes in process `syz.8.15113'. [ 1061.524500][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15126'. [ 1061.729448][T15617] loop7: detected capacity change from 0 to 512 [ 1061.755969][T15617] EXT4-fs: Ignoring removed bh option [ 1061.763037][T15617] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1062.101685][T15617] EXT4-fs (loop7): 1 truncate cleaned up [ 1062.120821][T15617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.148403][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15118'. [ 1062.157472][T15617] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15118'. [ 1062.236330][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.584036][T15657] loop7: detected capacity change from 0 to 512 [ 1063.596270][T15657] journal_path: Non-blockdev passed as './file1' [ 1063.624514][T15657] EXT4-fs: error: could not find journal device path [ 1063.659885][T15660] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15134'. [ 1063.746104][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1063.754423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.773643][T15657] loop7: detected capacity change from 0 to 128 [ 1064.012992][T15663] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.15135'. [ 1064.080956][T15666] loop7: detected capacity change from 0 to 512 [ 1064.168309][T15666] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.15135: corrupted in-inode xattr: invalid ea_ino [ 1064.331720][T15666] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1064.331983][T15666] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.15135: couldn't read orphan inode 15 (err -117) [ 1064.341229][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1064.341246][ C0] EXT4-fs (loop7): initial error at time 1783844298: ext4_iget_extra_inode:5180: inode 15 [ 1064.341297][ C0] EXT4-fs (loop7): last error at time 1783844298: ext4_iget_extra_inode:5180: inode 15 [ 1064.686556][T15666] loop7: lost filesystem error report for type 5 error -117 [ 1064.700537][T15666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.813749][ T28] audit: type=1400 audit(1783844298.627:6787): avc: denied { write } for pid=15662 comm="syz.7.15135" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1064.843149][T15663] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.15135: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1065.171221][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.500690][T15683] dvmrp0: entered allmulticast mode [ 1065.717955][T15694] loop7: detected capacity change from 0 to 512 [ 1065.724574][T15694] EXT4-fs: Ignoring removed i_version option [ 1065.767364][T15694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.780231][T15694] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.904352][T15697] erspan0 speed is unknown, defaulting to 1000 [ 1067.236512][T15708] dvmrp0: entered allmulticast mode [ 1067.608573][T15740] netlink: 'syz.0.15157': attribute type 1 has an invalid length. [ 1067.616550][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15157'. [ 1067.823389][T15746] netlink: 140 bytes leftover after parsing attributes in process `syz.2.15158'. [ 1067.985984][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.410670][T15776] netlink: 'syz.0.15171': attribute type 10 has an invalid length. [ 1068.869505][T15798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15179'. [ 1069.239456][T15799] bond30: (slave veth0_to_bond): Releasing active interface [ 1069.295397][T15799] bond26: (slave bond0): Releasing active interface [ 1069.318029][ T3376] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1069.375098][T15799] bond19: (slave bond20): Releasing backup interface [ 1069.383895][T15799] bond19: (slave bond20): the permanent HWaddr of slave - 22:86:07:da:27:5c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1069.415869][T15799] bond19: (slave gretap3): making interface the new active one [ 1069.464350][T15799] bond19: (slave gretap3): Releasing backup interface [ 1069.477461][T15799] bond21: (slave bridge9): Releasing backup interface [ 1069.484553][T15799] bridge9: left promiscuous mode [ 1069.493720][T15799] bridge9: left allmulticast mode [ 1069.511307][T15799] batman_adv: batadv0: Removing interface: macvtap0 [ 1069.534671][T15799] bond22: (slave veth19): Releasing active interface [ 1069.545165][T15799] bond25: (slave veth23): Releasing active interface [ 1069.557164][T15799] bond27: (slave gretap0): Releasing backup interface [ 1069.571571][T15799] bond28: (slave bridge12): Releasing active interface [ 1069.580244][T15799] bridge12: left promiscuous mode [ 1069.587918][T15799] bridge12: left allmulticast mode [ 1069.597871][T15799] bond29: (slave geneve3): Releasing active interface [ 1069.610198][T15799] bond30: (slave veth31): Releasing active interface [ 1069.620436][T15799] bond31: (slave bridge13): Releasing active interface [ 1069.646520][ T8561] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.656942][ T8561] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.683599][ T8561] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.715081][ T8561] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.891105][ T28] audit: type=1400 audit(1783844303.379:6788): avc: denied { write } for pid=15812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.954847][T15827] erspan0 speed is unknown, defaulting to 1000 [ 1070.044393][ T28] audit: type=1400 audit(1783844303.528:6789): avc: denied { write } for pid=15843 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.234552][ T8046] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1070.295616][ T28] audit: type=1400 audit(1783844303.762:6790): avc: denied { write } for pid=15849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.334996][ T28] audit: type=1400 audit(1783844304.370:6791): avc: denied { write } for pid=15864 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.081323][T15887] 9p: Bad value for 'rfdno' [ 1072.099767][ T28] audit: type=1400 audit(1783844305.446:6792): avc: denied { write } for pid=15868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.155173][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15194'. [ 1072.178331][ T28] audit: type=1400 audit(1783844305.521:6793): avc: denied { write } for pid=15892 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.209266][T15897] netlink: 'syz.2.15194': attribute type 1 has an invalid length. [ 1072.223122][T15891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15194'. [ 1072.236444][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15194'. [ 1073.536434][ T28] audit: type=1400 audit(1783844306.793:6794): avc: denied { write } for pid=15907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.629028][T15931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15200'. [ 1073.688313][ T28] audit: type=1400 audit(1783844306.942:6795): avc: denied { write } for pid=15935 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.534035][T15946] loop7: detected capacity change from 0 to 4096 [ 1074.588400][T15946] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.911116][T15950] tipc: Enabling of bearer rejected, failed to enable media [ 1074.920755][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.927481][T15952] x_tables: duplicate entry at hook 2 [ 1074.968331][T15954] loop7: detected capacity change from 0 to 512 [ 1074.979734][T15954] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1074.990585][T15954] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.15206: bad orphan inode 131072 [ 1075.001031][T15954] loop7: lost filesystem error report for type 5 error -117 [ 1075.001647][T15954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.047951][ T6123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.160945][T15966] netlink: 'syz.8.15211': attribute type 9 has an invalid length. [ 1075.169274][T15966] netlink: 'syz.8.15211': attribute type 6 has an invalid length. [ 1075.302234][T15972] netlink: 1056 bytes leftover after parsing attributes in process `syz.8.15212'. [ 1075.894068][T11565] ================================================================== [ 1075.902216][T11565] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1075.910508][T11565] [ 1075.912852][T11565] read-write to 0xffff88810048e578 of 8 bytes by task 6123 on cpu 1: [ 1075.920931][T11565] __filemap_remove_folio+0x218/0x2e0 [ 1075.926336][T11565] __remove_mapping+0x396/0x4c0 [ 1075.931216][T11565] remove_mapping+0x22/0x90 [ 1075.935741][T11565] mapping_try_invalidate+0x293/0x430 [ 1075.941231][T11565] invalidate_mapping_pages+0x27/0x40 [ 1075.946629][T11565] invalidate_bdev+0x58/0x70 [ 1075.951241][T11565] ext4_put_super+0x614/0x7c0 [ 1075.955988][T11565] generic_shutdown_super+0xee/0x220 [ 1075.961314][T11565] kill_block_super+0x2a/0x70 [ 1075.966009][T11565] ext4_kill_sb+0x42/0x80 [ 1075.970367][T11565] deactivate_locked_super+0x75/0x1c0 [ 1075.975765][T11565] deactivate_super+0x97/0xa0 [ 1075.980472][T11565] cleanup_mnt+0x2c3/0x340 [ 1075.984933][T11565] __cleanup_mnt+0x19/0x20 [ 1075.989390][T11565] task_work_run+0x130/0x1a0 [ 1075.994010][T11565] exit_to_user_mode_loop+0x1e4/0x8c0 [ 1075.999407][T11565] do_syscall_64+0x23c/0x3c0 [ 1076.004041][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.009956][T11565] [ 1076.012299][T11565] read to 0xffff88810048e578 of 8 bytes by task 11565 on cpu 0: [ 1076.019942][T11565] nr_blockdev_pages+0x7e/0xd0 [ 1076.024739][T11565] si_meminfo+0x87/0xd0 [ 1076.028942][T11565] update_defense_level+0x44/0x5c0 [ 1076.034185][T11565] defense_work_handler+0x1f/0x80 [ 1076.039236][T11565] process_scheduled_works+0x4d4/0x9a0 [ 1076.044721][T11565] worker_thread+0x569/0x750 [ 1076.049347][T11565] kthread+0x221/0x270 [ 1076.053440][T11565] ret_from_fork+0x146/0x330 [ 1076.058089][T11565] ret_from_fork_asm+0x1a/0x30 [ 1076.062876][T11565] [ 1076.065214][T11565] value changed: 0x000000000000000a -> 0x0000000000000003 [ 1076.072330][T11565] [ 1076.074664][T11565] Reported by Kernel Concurrency Sanitizer on: [ 1076.080827][T11565] CPU: 0 UID: 0 PID: 11565 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(lazy) [ 1076.090388][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.100462][T11565] Workqueue: events_long defense_work_handler [ 1076.106557][T11565] ================================================================== [ 1080.840128][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!