last executing test programs: 8m51.845584407s ago: executing program 32 (id=52): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r3, 0x1}}, 0x48) 8m45.422708294s ago: executing program 33 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map=r1, r0, 0x2f}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 8m28.315833532s ago: executing program 34 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='10', 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) 8m7.441727896s ago: executing program 35 (id=404): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000700)={0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000740)={0x10000001}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000900)={0x60000008}) 7m37.990522844s ago: executing program 36 (id=971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x23, 0xa, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000a00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000fc0)={r0, r0, 0x2f, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file1\x00', &(0x7f0000000680), 0x0, 0x100000001, 0x0, 0x1}}, 0x40) unshare(0x2040600) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r1, 0x20, 0x0}, 0x10) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) 7m5.342710298s ago: executing program 37 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x315, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0xe, 0x8}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) 6m51.276825064s ago: executing program 9 (id=1514): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000740), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000780)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0xde7c) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/88, 0x58}], 0x1}, 0x1d7}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/166, 0xa6}], 0x1}, 0xc2e0}], 0x2, 0x10120, 0x0) 6m51.134014289s ago: executing program 9 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023010000340200000300000018000180130001006574683a73797a6b616c6c657230"], 0x2c}}, 0x0) write(r0, &(0x7f00000001c0)="fff8ffffffff0200402e58af88ca", 0xe) 6m50.894614653s ago: executing program 9 (id=1519): perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83a7, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000001280)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000001300)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 6m50.773950156s ago: executing program 9 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 6m50.678883696s ago: executing program 9 (id=1523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000580), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={r1, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000007c0)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0xf, &(0x7f0000000840)=[{&(0x7f0000000880)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)='b', 0x1194}], 0x1) 6m50.450820149s ago: executing program 9 (id=1527): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r1 = openat(0xffffffffffffff9c, &(0x7f000000a980)='./file1\x00', 0x101042, 0x155) pwrite64(r1, &(0x7f000000a9c0)="02", 0x1, 0x20c00) 6m50.427476951s ago: executing program 38 (id=1527): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000ac0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r1 = openat(0xffffffffffffff9c, &(0x7f000000a980)='./file1\x00', 0x101042, 0x155) pwrite64(r1, &(0x7f000000a9c0)="02", 0x1, 0x20c00) 6m18.486961733s ago: executing program 7 (id=1901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000740)={0x11, 0x8100, r2}, 0x14) 6m18.151153717s ago: executing program 7 (id=1908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000140)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$futex(&(0x7f0000001940)=0x1) futex(r1, 0xb, 0x1, 0x0, 0x0, 0x403) 6m17.985817744s ago: executing program 7 (id=1911): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000900)='p:_est/_vent1 ./file0:0', 0x17) 6m17.819969711s ago: executing program 7 (id=1913): preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x10, &(0x7f0000000340)={[{@dioread_lock}]}, 0x15, 0x7e5, &(0x7f0000000ac0)="$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") open(&(0x7f0000001300)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000001340)=@loop={'/dev/loop', 0x0}, &(0x7f0000001380)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000013c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f00000001c0)='./file0\x00', 0xecf86c37d53049cc) 6m17.414644873s ago: executing program 7 (id=1919): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m17.166814607s ago: executing program 7 (id=1924): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006400)=[{{&(0x7f00000009c0), 0x6e, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000ac0)=""/247, 0xf7}, {0x0}, {&(0x7f0000000d40)=""/97, 0x61}], 0x4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 6m17.076044677s ago: executing program 39 (id=1924): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006400)=[{{&(0x7f00000009c0), 0x6e, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000ac0)=""/247, 0xf7}, {0x0}, {&(0x7f0000000d40)=""/97, 0x61}], 0x4}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r4, 0x0, 0x38f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 6m7.836931771s ago: executing program 8 (id=2066): r0 = syz_create_resource$futex(&(0x7f00000000c0)) futex$unlock_pi_list32(r0, 0x687, 0x4, 0x0, &(0x7f0000000100)=0x7, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 6m7.402563835s ago: executing program 8 (id=2072): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000540), 0xffffffffffffff94, 0x9b00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000680)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6m6.503814797s ago: executing program 8 (id=2092): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x2) fcntl$notify(r0, 0x402, 0x8000000e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) getdents(r2, 0x0, 0x0) 6m6.461448661s ago: executing program 8 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) 6m6.381506669s ago: executing program 8 (id=2095): arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x1}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0xfffffff7, 0x4002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x40000000) kexec_load(0x3, 0x1, &(0x7f0000000280)=[{0x0, 0x22, 0x116094000, 0x41000000}], 0x0) 6m6.270855s ago: executing program 8 (id=2098): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x400000, 0x9, 0x800000, 0x43, 0x4d7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x14, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='id:cb2eE\xf1\xd0\x88\x13=_|\xf876\fv\'o\xdcg\xd1\xc5\xd8\xf0\x7foE+\x1a\x9d\xdd\xfe\x13\x9d\x9cm#\xdc\xad\xd7\a\xfc\xd5\xbcU[\xcd\xae\xe1\xda\xd7\xbdu\xc3\n4W\xf2\xb4\xbf\x85qj.\xf5\a\xad\xcf<\xa4\xa7N\xf9\xfeN\xa6X\xde\xbb\x9c\x96`\xefv\x14\xfa\xeaqM\x96\x90\xef{\xe8\xf0:\xf92O^sWo\x0eK\xf9`\xa3\x12\x97\xa95\xa1\x80m\xab+wmM#\xe9M\x9f\xef2\xe8\x94Q\xffK\xdd\xb8\x1a\xef)\x93F\x024\xf2\x9ef\xc6>9\xd0h\x80A\xb9\xaa^H\x99z\x92\xa9^\x1a5\xf6T\x94S\x90\x89~\xf7p,\xe3\xe8\xdc\xb5V\xd5i\xe7\x8ee\xcea:\xa5\x01\xa3') bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setresuid(0xee00, 0xee00, 0x0) setpriority(0x0, 0x0, 0xffffffffffffffcd) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 6m6.249771102s ago: executing program 40 (id=2098): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x400000, 0x9, 0x800000, 0x43, 0x4d7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0x14, 0x0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)='id:cb2eE\xf1\xd0\x88\x13=_|\xf876\fv\'o\xdcg\xd1\xc5\xd8\xf0\x7foE+\x1a\x9d\xdd\xfe\x13\x9d\x9cm#\xdc\xad\xd7\a\xfc\xd5\xbcU[\xcd\xae\xe1\xda\xd7\xbdu\xc3\n4W\xf2\xb4\xbf\x85qj.\xf5\a\xad\xcf<\xa4\xa7N\xf9\xfeN\xa6X\xde\xbb\x9c\x96`\xefv\x14\xfa\xeaqM\x96\x90\xef{\xe8\xf0:\xf92O^sWo\x0eK\xf9`\xa3\x12\x97\xa95\xa1\x80m\xab+wmM#\xe9M\x9f\xef2\xe8\x94Q\xffK\xdd\xb8\x1a\xef)\x93F\x024\xf2\x9ef\xc6>9\xd0h\x80A\xb9\xaa^H\x99z\x92\xa9^\x1a5\xf6T\x94S\x90\x89~\xf7p,\xe3\xe8\xdc\xb5V\xd5i\xe7\x8ee\xcea:\xa5\x01\xa3') bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setresuid(0xee00, 0xee00, 0x0) setpriority(0x0, 0x0, 0xffffffffffffffcd) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x60, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 4m12.059642267s ago: executing program 1 (id=3598): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000000100), 0x800001d, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0x3}, {0xfff3, 0xb}}}, 0x24}}, 0x0) 4m11.898901974s ago: executing program 1 (id=3600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x4c831, 0xffffffffffffffff, 0x0) 4m11.82762858s ago: executing program 1 (id=3602): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./rpc_pipefs\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(r1, r0, 0xff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m11.359021948s ago: executing program 1 (id=3606): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 4m11.334614861s ago: executing program 1 (id=3608): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4m11.277270937s ago: executing program 1 (id=3609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 4m11.277004057s ago: executing program 41 (id=3609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 29.643724262s ago: executing program 0 (id=6138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 29.47308348s ago: executing program 0 (id=6141): pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x42, 0x1b6) 28.559312993s ago: executing program 0 (id=6151): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 28.460732083s ago: executing program 0 (id=6152): perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0xa, 0x7fff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4808, &(0x7f0000000a00)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYRES16], 0x2, 0x56a, &(0x7f00000001c0)="$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") pipe(&(0x7f0000000840)) fsopen(&(0x7f0000000880)='autofs\x00', 0x0) rmdir(&(0x7f00000009c0)='./file0/file0\x00') rmdir(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x80800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) 28.257765124s ago: executing program 0 (id=6154): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x20002fb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.139500446s ago: executing program 0 (id=6156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1d67, 0x3800, 0x0, 0x100000, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000000400)={0x0, 0x2, '\x00', @zc_export}, 0x0) shutdown(r1, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 28.120994478s ago: executing program 42 (id=6156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1d67, 0x3800, 0x0, 0x100000, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000000400)={0x0, 0x2, '\x00', @zc_export}, 0x0) shutdown(r1, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.074100472s ago: executing program 3 (id=6400): mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='fd', 0x0, 0xffffffffffffffff) setns(0xc9, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x8020000) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.969022664s ago: executing program 3 (id=6408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x700, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002"], 0xa0}}, 0x0) 3.604176792s ago: executing program 2 (id=6410): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x7, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3.272619546s ago: executing program 2 (id=6411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000500)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000540), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b80)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 3.13030381s ago: executing program 2 (id=6412): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x88, 0x23) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000380)={0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="daa2", 0x2}], 0x1, 0xfe0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000ee", @ANYRES16=r3, @ANYBLOB="01002bbd700100000000030012005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}, 0x1, 0x300}, 0x8000) 3.12966241s ago: executing program 6 (id=6422): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 3.067886227s ago: executing program 3 (id=6413): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x1118a0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = memfd_create(&(0x7f00000002c0)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) 2.980490656s ago: executing program 6 (id=6414): socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x3019a4, 0x0, 0x40000000, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) fsopen(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '1234567890123456dcba'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000540), 0x97ff, 0x0, &(0x7f0000000580)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.337828791s ago: executing program 6 (id=6418): socket(0x1, 0x5, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0x0, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) 2.265171609s ago: executing program 4 (id=6419): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x28) 2.231268822s ago: executing program 6 (id=6420): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x10, &(0x7f0000000f00)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000f40)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000f80)={r3, @in6={{0xa, 0x3, 0x4, @private2}}}, &(0x7f0000001040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000001100)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001140)=ANY=[], 0xffc9) 2.205431485s ago: executing program 6 (id=6421): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000005000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000014010000f8ffffffb502020008000000b7030000ffffffff85000000ae00000095"], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/bonding/bond0\x00', 0x0, 0x0) read(r1, &(0x7f0000000c40)=""/4096, 0x1fc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xa, 0xff5c, &(0x7f00000001c0)=""/222, 0x0, 0x8}, 0x78) syz_emit_ethernet(0x3a, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32ff"], 0x0) 2.178883328s ago: executing program 2 (id=6423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2200000, &(0x7f0000000100), 0xb, 0x57b, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x141042, 0x58) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x280440e, &(0x7f0000000dc0)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@data_err_abort}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@nouid32}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x17}}]}, 0x1, 0xbdb, &(0x7f0000000e80)="$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") unshare(0x22020600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b00)=ANY=[], 0x25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000d80)=0xae8, 0x863, 0x0) 2.129737293s ago: executing program 3 (id=6424): ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.846469302s ago: executing program 2 (id=6427): socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) socket(0x2, 0x80805, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x43, 0x4c7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'lo\x00', &(0x7f0000000600)=@ethtool_cmd={0x25, 0x91ab4f28, 0xa6, 0x5, 0x81, 0x80, 0x6, 0x4, 0xc, 0x10, 0x2, 0x80000000, 0x7, 0x5, 0xc5, 0x9, [0x5, 0x6]}}) 1.708086026s ago: executing program 5 (id=6428): perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x4}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000dba000/0x1000)=nil, 0x4000) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x10, 0x0, 0x5, 0xff, 0x30, "10120d52000000200000f7490a0180002a00"}) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000c80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) 1.703309736s ago: executing program 4 (id=6429): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f00000030c0)=ANY=[], 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000001040), 0x10) mprotect(&(0x7f0000031000/0x4000)=nil, 0x4000, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000001180)=[{&(0x7f00000011c0)='?', 0x20000081}], 0x2) 1.662535451s ago: executing program 6 (id=6430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f5000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.660340941s ago: executing program 4 (id=6431): socket$netlink(0x10, 0x3, 0xb) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4c22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x20000005}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41, 0x0, r0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xca}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.606304896s ago: executing program 4 (id=6432): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1.464273891s ago: executing program 2 (id=6433): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000027c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000002800), 0x4000095, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000028c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c000280060001400000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x48881}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000002a00)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002ac0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.340109603s ago: executing program 5 (id=6434): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.299263937s ago: executing program 4 (id=6435): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000000c0), 0x4, 0x526, &(0x7f0000000340)="$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") perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x8, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x0) r1 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000a00)=""/1024, 0x400) 1.049033643s ago: executing program 5 (id=6436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x1118a0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = memfd_create(&(0x7f00000002c0)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) 1.048758503s ago: executing program 3 (id=6437): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xb0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0xe, 0x4) futex(r1, 0x6, 0x1, 0x0, r1, 0x1) futex(r1, 0x5, 0x80000008, 0x0, r1, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x1}, {}, {0x7, 0x10}}, [{0x8, 0xb, 0x1a80ac85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.048564793s ago: executing program 4 (id=6438): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 690.809379ms ago: executing program 5 (id=6439): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000, 0x6}, @empty, @multicast2, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000680)=ANY=[], 0x34) 612.781338ms ago: executing program 5 (id=6440): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x28) 432.969276ms ago: executing program 5 (id=6441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a40)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext2\x00', &(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000b80), 0xfd, 0x4cb, &(0x7f0000000bc0)="$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") setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c089) 0s ago: executing program 3 (id=6442): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 0000-0000-000000000000. [ 488.115714][T21856] netlink: 'syz.6.5593': attribute type 2 has an invalid length. [ 488.118472][T21856] 0: entered promiscuous mode [ 488.699184][T21872] TC_ACT_REPEAT abuse ? [ 488.822487][T21870] loop3: detected capacity change from 0 to 32768 [ 488.872295][T21870] loop3: p1 p3 < > [ 489.041155][T21009] udevd[21009]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 489.042595][T21022] udevd[21022]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 489.043495][T21893] netlink: 'syz.6.5609': attribute type 4 has an invalid length. [ 489.080275][T21893] netlink: 'syz.6.5609': attribute type 4 has an invalid length. [ 489.918446][T21898] loop0: detected capacity change from 0 to 764 [ 490.249598][T21927] netlink: 'syz.3.5620': attribute type 2 has an invalid length. [ 490.254087][T21927] 1: entered promiscuous mode [ 490.547546][T21937] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.576507][T21937] FAULT_INJECTION: forcing a failure. [ 490.576507][T21937] name failslab, interval 1, probability 0, space 0, times 0 [ 490.576545][T21937] CPU: 1 UID: 0 PID: 21937 Comm: syz.2.5625 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 490.576580][T21937] Tainted: [W]=WARN [ 490.576588][T21937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 490.576624][T21937] Call Trace: [ 490.576634][T21937] [ 490.576646][T21937] __dump_stack+0x1d/0x30 [ 490.576685][T21937] dump_stack_lvl+0x95/0xd0 [ 490.576716][T21937] dump_stack+0x15/0x1b [ 490.576741][T21937] should_fail_ex+0x259/0x270 [ 490.576784][T21937] ? kstrdup_const+0x3e/0x50 [ 490.576814][T21937] should_failslab+0x8c/0xb0 [ 490.576902][T21937] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 490.576961][T21937] ? kstrdup_const+0x3e/0x50 [ 490.576997][T21937] kstrdup+0x3e/0xd0 [ 490.577034][T21937] kstrdup_const+0x3e/0x50 [ 490.577063][T21937] __kernfs_new_node+0x42/0x440 [ 490.577146][T21937] ? rb_insert_color+0x6e/0x2a0 [ 490.577225][T21937] ? __rcu_read_unlock+0x4e/0x70 [ 490.577292][T21937] ? up_write+0x19/0x60 [ 490.577325][T21937] ? kernfs_link_sibling+0x2f5/0x320 [ 490.577359][T21937] ? __rcu_read_unlock+0x4e/0x70 [ 490.577388][T21937] kernfs_new_node+0x107/0x140 [ 490.577420][T21937] __kernfs_create_file+0x4b/0x180 [ 490.577480][T21937] ? __pfx_port_attr_show+0x10/0x10 [ 490.577517][T21937] ? __pfx_port_attr_store+0x10/0x10 [ 490.577629][T21937] sysfs_add_file_mode_ns+0x132/0x1b0 [ 490.577686][T21937] internal_create_group+0x43e/0x9e0 [ 490.577718][T21937] ? kobject_add+0xdb/0x150 [ 490.577825][T21937] sysfs_create_groups+0x3f/0xf0 [ 490.577853][T21937] ib_setup_port_attrs+0xa15/0x14a0 [ 490.577971][T21937] ? kobject_put+0x108/0x180 [ 490.578010][T21937] add_one_compat_dev+0x25c/0x360 [ 490.578082][T21937] rdma_dev_init_net+0x17d/0x210 [ 490.578115][T21937] ops_init+0x22a/0x2e0 [ 490.578153][T21937] setup_net+0x9f/0x230 [ 490.578233][T21937] copy_net_ns+0x339/0x490 [ 490.578267][T21937] create_new_namespaces+0x1f6/0x420 [ 490.578295][T21937] unshare_nsproxy_namespaces+0x115/0x150 [ 490.578389][T21937] ksys_unshare+0x3a3/0x690 [ 490.578437][T21937] __x64_sys_unshare+0x1f/0x30 [ 490.578538][T21937] x64_sys_call+0x1e33/0x2550 [ 490.578573][T21937] do_syscall_64+0x112/0x360 [ 490.578629][T21937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.578656][T21937] RIP: 0033:0x7f39a4c4f559 [ 490.578681][T21937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.578711][T21937] RSP: 002b:00007f39a36a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 490.578742][T21937] RAX: ffffffffffffffda RBX: 00007f39a4ed5fa0 RCX: 00007f39a4c4f559 [ 490.578823][T21937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 490.578858][T21937] RBP: 00007f39a4ce6b50 R08: 0000000000000000 R09: 0000000000000000 [ 490.578873][T21937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.578890][T21937] R13: 00007f39a4ed6038 R14: 00007f39a4ed5fa0 R15: 00007fff8fb012c8 [ 490.578914][T21937] [ 490.725507][T21939] rxe_eth0 speed is unknown, defaulting to 1000 [ 491.023952][T21950] tipc: Resetting bearer [ 491.085743][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 491.085763][ T28] audit: type=1326 audit(1793551243.952:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.086704][ T28] audit: type=1326 audit(1793551243.952:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.086872][ T28] audit: type=1326 audit(1793551243.952:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.087333][ T28] audit: type=1326 audit(1793551243.952:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.088270][ T28] audit: type=1326 audit(1793551243.952:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.088575][ T28] audit: type=1326 audit(1793551243.952:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.088794][ T28] audit: type=1326 audit(1793551243.952:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.089029][ T28] audit: type=1326 audit(1793551243.952:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.089158][ T28] audit: type=1326 audit(1793551243.952:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.089616][ T28] audit: type=1326 audit(1793551243.952:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="syz.6.5635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7ffc0000 [ 491.671155][T21976] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.5643'. [ 491.702341][T21978] ref_ctr increment failed for inode: 0x160c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888119d33600 [ 491.702711][T21977] uprobe: syz.0.5642:21977 failed to unregister, leaking uprobe [ 491.913337][T21991] rxe_eth0 speed is unknown, defaulting to 1000 [ 492.078299][T21994] rxe_eth0 speed is unknown, defaulting to 1000 [ 492.097415][T22005] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 492.103529][T22004] loop0: detected capacity change from 0 to 128 [ 492.214618][T21996] loop6: detected capacity change from 0 to 764 [ 492.245053][T22007] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.245087][T22007] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.245269][T22007] bridge_slave_0: entered allmulticast mode [ 492.247080][T22007] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.247125][T22007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.300980][T22007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5654'. [ 492.301548][T22007] bridge_slave_0: left allmulticast mode [ 492.301762][T22007] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.709428][T22018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5668'. [ 492.855463][T22023] loop6: detected capacity change from 0 to 1024 [ 492.859256][T22023] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 492.894295][T22023] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 492.894942][T22023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.896081][T22023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.008804][T22027] netlink: 'syz.2.5660': attribute type 2 has an invalid length. [ 493.431549][T22027] 0: entered promiscuous mode [ 493.517346][T22044] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 493.534288][T22047] loop2: detected capacity change from 0 to 256 [ 493.698061][T22049] loop0: detected capacity change from 0 to 512 [ 493.737932][T22049] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 493.795133][T22049] EXT4-fs (loop0): orphan cleanup on readonly fs [ 493.810773][T22049] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.5669: Block bitmap for bg 0 marked uninitialized [ 493.811148][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.819368][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 493.819484][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 493.819585][T22056] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 493.820033][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 493.820086][ C0] EXT4-fs (loop0): initial error at time 1793551246: ext4_read_block_bitmap_nowait:521 [ 493.820160][ C0] EXT4-fs (loop0): last error at time 1793551246: ext4_read_block_bitmap_nowait:521 [ 493.827198][T22049] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 493.827263][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.827943][T22049] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.5669: Block bitmap for bg 0 marked uninitialized [ 493.828063][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.828464][T22049] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 493.828518][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.829483][T22049] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.5669: Block bitmap for bg 0 marked uninitialized [ 493.829567][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.829857][T22049] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 493.829915][T22049] loop0: lost filesystem error report for type 5 error -117 [ 493.835007][T22049] EXT4-fs (loop0): 1 orphan inode deleted [ 493.836163][T22049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 493.872994][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5669'. [ 493.873059][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5669'. [ 493.873100][T22049] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 493.873154][T22049] iwpm_mapping_info_cb: Unable to parse nlmsg [ 493.923614][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.047841][T22059] logitech-hidpp-device 0003:046D:C082.0006: hid_field_extract() called with n (221) > 32! (syz.0.5673) [ 494.055621][ T11] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 494.091674][T22060] fido_id[22060]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.229645][T22076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5681'. [ 494.459872][T22064] loop2: detected capacity change from 0 to 512 [ 494.531415][T22064] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 494.531849][T22064] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 494.788345][T22098] loop6: detected capacity change from 0 to 2048 [ 494.825145][T22098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.894441][T22109] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 494.894538][T22109] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 254 with error 28 [ 494.894572][T22109] EXT4-fs (loop6): This should not happen!! Data will be lost [ 494.894572][T22109] [ 494.894590][T22109] EXT4-fs (loop6): Total free blocks count 0 [ 494.894628][T22109] EXT4-fs (loop6): Free/Dirty block details [ 494.894640][T22109] EXT4-fs (loop6): free_blocks=2415919104 [ 494.894654][T22109] EXT4-fs (loop6): dirty_blocks=288 [ 494.894671][T22109] EXT4-fs (loop6): Block reservation details [ 494.894737][T22109] EXT4-fs (loop6): i_reserved_data_blocks=18 [ 495.036688][T22119] loop0: detected capacity change from 0 to 512 [ 495.054411][T22119] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.5697: iget: bad i_size value: 38620345925642 [ 495.054447][T22119] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.054923][T22119] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.5697: couldn't read orphan inode 15 (err -117) [ 495.054960][T22119] loop0: lost filesystem error report for type 5 error -117 [ 495.055860][T22119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.199059][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.430101][T22137] loop0: detected capacity change from 0 to 1024 [ 495.502932][T22127] loop3: detected capacity change from 0 to 512 [ 495.515599][T22127] vfat: Unknown parameter '01777777777777777777777' [ 495.547760][ T3934] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 495.566096][T22141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 495.618182][T15773] EXT4-fs warning (device loop6): ext4_evict_inode:261: inode #15: comm syz-executor: data will be lost [ 495.694762][T22145] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 495.723350][T22150] loop2: detected capacity change from 0 to 128 [ 495.745240][T22150] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.745440][T22150] ext4 filesystem being mounted at /753/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.774800][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5710'. [ 496.609732][T11022] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.844193][T22181] tipc: Failed to remove unknown binding: 66,0,0/0:4272573599/4272573601 [ 496.844229][T22181] tipc: Failed to remove unknown binding: 66,0,0/0:4272573599/4272573600 [ 496.844499][T22181] tipc: Failed to remove unknown binding: 66,0,0/0:4272573599/4272573601 [ 496.844527][T22181] tipc: Failed to remove unknown binding: 66,0,0/0:4272573599/4272573600 [ 496.933989][T22185] netlink: 'syz.4.5720': attribute type 1 has an invalid length. [ 496.960331][T22185] bond11: entered promiscuous mode [ 496.960618][T22185] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.004156][T22192] loop6: detected capacity change from 0 to 512 [ 497.040201][T22185] bond11: (slave bridge6): making interface the new active one [ 497.040233][T22185] bridge6: entered promiscuous mode [ 497.041499][T22185] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 497.076245][T22192] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.5719: bg 0: block 385: padding at end of block bitmap is not set [ 497.076286][T22192] loop6: lost filesystem error report for type 5 error -117 [ 497.076484][T22192] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 497.076504][T22192] loop6: lost filesystem error report for type 5 error -117 [ 497.076925][T22192] EXT4-fs (loop6): 2 truncates cleaned up [ 497.076948][T22196] loop0: detected capacity change from 0 to 512 [ 497.077480][T22192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.128211][T22196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.128536][T22196] ext4 filesystem being mounted at /1085/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.205622][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.332187][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.416785][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 498.416801][ T28] audit: type=1326 audit(1793551251.282:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22259 comm="syz.3.5748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x0 [ 498.473520][ T28] audit: type=1326 audit(1793551251.342:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.473614][ T28] audit: type=1326 audit(1793551251.342:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.474242][ T28] audit: type=1326 audit(1793551251.342:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.474293][ T28] audit: type=1326 audit(1793551251.342:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.476705][ T28] audit: type=1326 audit(1793551251.342:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.478403][ T28] audit: type=1326 audit(1793551251.342:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.479332][ T28] audit: type=1326 audit(1793551251.342:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.479637][ T28] audit: type=1326 audit(1793551251.342:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.484032][ T28] audit: type=1326 audit(1793551251.352:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22261 comm="syz.2.5749" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 498.572344][T22262] FAULT_INJECTION: forcing a failure. [ 498.572344][T22262] name failslab, interval 1, probability 0, space 0, times 0 [ 498.572443][T22262] CPU: 0 UID: 0 PID: 22262 Comm: syz.2.5749 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 498.572601][T22262] Tainted: [W]=WARN [ 498.572632][T22262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.572677][T22262] Call Trace: [ 498.572699][T22262] [ 498.572730][T22262] __dump_stack+0x1d/0x30 [ 498.572814][T22262] dump_stack_lvl+0x95/0xd0 [ 498.572952][T22262] dump_stack+0x15/0x1b [ 498.573033][T22262] should_fail_ex+0x259/0x270 [ 498.573130][T22262] ? audit_log_start+0x34c/0x730 [ 498.573350][T22262] should_failslab+0x8c/0xb0 [ 498.573449][T22262] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 498.573545][T22262] ? audit_log_start+0x34c/0x730 [ 498.573710][T22262] audit_log_start+0x34c/0x730 [ 498.573826][T22262] audit_seccomp+0x49/0x110 [ 498.573956][T22262] ? _raw_spin_unlock_irq+0x9/0x30 [ 498.574030][T22262] __seccomp_filter+0x8f8/0x13d0 [ 498.574225][T22262] __seccomp_permit_syscall+0x7d/0x150 [ 498.574326][T22262] do_syscall_64+0xca/0x360 [ 498.574547][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.574659][T22262] RIP: 0033:0x7f39a4c492d7 [ 498.574733][T22262] Code: 8d 3d 8c ac 0b 00 e8 58 1d fa ff e8 a3 87 00 00 0f 1f 00 b8 68 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 498.574798][T22262] RSP: 002b:00007f39a36a6a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000027 [ 498.574819][T22262] RAX: ffffffffffffffda RBX: 00007f39a36a6bb0 RCX: 00007f39a4c492d7 [ 498.574833][T22262] RDX: 00007f39a36a6a80 RSI: 00007f39a36a6bb0 RDI: 0000000000000021 [ 498.574871][T22262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.574952][T22262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 498.574995][T22262] R13: 00007f39a4ed6038 R14: 00007f39a4ed5fa0 R15: 00007fff8fb012c8 [ 498.575061][T22262] [ 499.131328][T22275] loop6: detected capacity change from 0 to 512 [ 499.155370][T22275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.155551][T22275] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.429667][T22291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5758'. [ 499.492053][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.558701][T22335] loop2: detected capacity change from 0 to 512 [ 502.087353][T22349] veth0: Caught tx_queue_len zero misconfig [ 503.138454][T22389] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.143058][T22392] veth0: Caught tx_queue_len zero misconfig [ 503.473191][T22407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 503.473225][T22407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 503.473319][T22407] vhci_hcd vhci_hcd.0: Device attached [ 503.703534][ T28] kauditd_printk_skb: 1445 callbacks suppressed [ 503.703555][ T28] audit: type=1326 audit(1793551256.572:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22412 comm="syz.6.5796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7fc00000 [ 503.703876][ T28] audit: type=1326 audit(1793551256.572:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22412 comm="syz.6.5796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1b0143f559 code=0x7fc00000 [ 503.704330][ T28] audit: type=1326 audit(1793551256.572:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22412 comm="syz.6.5796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0143f559 code=0x7fc00000 [ 503.730326][ T11] usb 1-1: new high-speed USB device number 3 using vhci_hcd [ 503.848878][ T28] audit: type=1326 audit(1793551256.712:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.848947][ T28] audit: type=1326 audit(1793551256.712:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.849214][ T28] audit: type=1326 audit(1793551256.712:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.849357][ T28] audit: type=1326 audit(1793551256.712:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.849431][ T28] audit: type=1326 audit(1793551256.712:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.849504][ T28] audit: type=1326 audit(1793551256.712:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.849615][ T28] audit: type=1326 audit(1793551256.712:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22420 comm="syz.3.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 503.857909][T22407] loop0: detected capacity change from 0 to 512 [ 504.080178][T22407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.080298][T22407] ext4 filesystem being mounted at /1093/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.102518][T22408] vhci_hcd: cannot find a urb of seqnum 7 max seqnum 1 [ 504.115579][ T3768] vhci_hcd vhci_hcd.0: stop threads [ 504.115602][ T3768] vhci_hcd vhci_hcd.0: release socket [ 504.115670][ T3768] vhci_hcd vhci_hcd.0: disconnect device [ 504.213776][T22436] syz.6.5803 (22436): /proc/22436/oom_adj is deprecated, please use /proc/22436/oom_score_adj instead. [ 504.279226][T22440] loop3: detected capacity change from 0 to 1024 [ 504.291115][T22440] EXT4-fs: Ignoring removed bh option [ 504.306296][T22440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.355031][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.591083][T22390] Set syz0 is full, maxelem 65536 reached [ 504.607576][T22459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.666620][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.747826][T22464] SELinux: failed to load policy [ 504.763504][T22466] loop0: detected capacity change from 0 to 2048 [ 504.835541][T22466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.835664][T22466] ext4 filesystem being mounted at /1094/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 505.286148][T22489] loop2: detected capacity change from 0 to 1024 [ 505.286578][T22489] EXT4-fs: Ignoring removed oldalloc option [ 505.286638][T22489] EXT4-fs: Ignoring removed oldalloc option [ 505.348848][T22489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.682492][T22495] loop3: detected capacity change from 0 to 512 [ 505.716147][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.716572][T22495] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 505.717635][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.861594][T22505] loop2: detected capacity change from 0 to 256 [ 505.862814][T22505] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 505.924163][T22507] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 505.924186][T22507] FAT-fs (loop2): Filesystem has been set read-only [ 505.924201][T22507] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 506.128557][T22518] syzkaller0: entered promiscuous mode [ 506.128583][T22518] syzkaller0: entered allmulticast mode [ 506.129531][T22518] syzkaller0: mtu less than device minimum [ 506.249738][T22529] loop6: detected capacity change from 0 to 1024 [ 506.256881][T22529] EXT4-fs: Ignoring removed oldalloc option [ 506.256985][T22529] EXT4-fs: Ignoring removed oldalloc option [ 506.283808][T22529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.342507][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5839'. [ 506.344675][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5839'. [ 506.547772][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.244394][T22573] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 507.855358][T22573] syzkaller0: entered promiscuous mode [ 507.855734][T22573] syzkaller0: entered allmulticast mode [ 508.054759][T22587] batman_adv: batadv0: Adding interface: syzkaller0 [ 508.054779][T22587] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1792) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 5664 would solve the problem. [ 508.054943][T22587] batman_adv: batadv0: Interface activated: syzkaller0 [ 508.117992][T22576] loop2: detected capacity change from 0 to 4096 [ 508.136428][T22576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.210151][T22598] loop3: detected capacity change from 0 to 1024 [ 508.219521][T22598] EXT4-fs: Ignoring removed oldalloc option [ 508.219596][T22598] EXT4-fs: Ignoring removed oldalloc option [ 508.234756][T22598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.441057][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.475123][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.700781][T22614] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.789208][T22616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.789354][T22616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.829983][ T11] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 509.915276][T22629] loop0: detected capacity change from 0 to 512 [ 510.015872][T17021] logitech-hidpp-device 0003:046D:C082.0007: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 510.041082][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5869'. [ 510.073373][T22640] fido_id[22640]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 510.719285][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5875'. [ 510.719336][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5875'. [ 510.813235][T22655] loop0: detected capacity change from 0 to 1024 [ 510.837426][T22655] EXT4-fs: Ignoring removed oldalloc option [ 510.837453][T22655] EXT4-fs: Ignoring removed oldalloc option [ 510.862047][T22655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.038058][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.355884][T22674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5883'. [ 511.480449][T22669] loop2: detected capacity change from 0 to 1024 [ 511.535324][T22682] loop3: detected capacity change from 0 to 1024 [ 511.547212][T22682] EXT4-fs: Ignoring removed nobh option [ 511.547338][T22682] EXT4-fs: Ignoring removed bh option [ 511.578286][T22682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.655411][T22669] EXT4-fs: Ignoring removed i_version option [ 511.664624][T22669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 511.676836][T22669] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 511.840427][T22669] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 511.852182][T22669] EXT4-fs (loop2): orphan cleanup on readonly fs [ 511.860533][T22669] EXT4-fs error (device loop2): ext4_free_blocks:6717: comm syz.2.5882: Freeing blocks not in datazone - block = 0, count = 4096 [ 511.860693][T22669] loop2: lost filesystem error report for type 5 error -117 [ 511.865750][T22689] loop6: detected capacity change from 0 to 512 [ 511.866629][T22669] EXT4-fs (loop2): Remounting filesystem read-only [ 511.866778][T22669] EXT4-fs (loop2): 1 orphan inode deleted [ 511.868292][T22669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.950521][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.437549][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.939449][T22717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5896'. [ 513.111926][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5897'. [ 513.111965][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5897'. [ 513.160941][T22727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.166197][T22727] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.185945][T22727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.376815][T22737] netlink: 'syz.0.5900': attribute type 2 has an invalid length. [ 513.429239][T22727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.429268][T22727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.449347][T22727] veth0_vlan: left promiscuous mode [ 513.456504][T22727] veth0_vlan: entered promiscuous mode [ 513.470244][T22727] veth1_macvtap: left promiscuous mode [ 513.472334][T22727] veth0_macvtap: left promiscuous mode [ 513.472958][T22727] veth0_macvtap: entered promiscuous mode [ 513.473634][T22727] veth1_macvtap: entered promiscuous mode [ 513.491769][T22727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.509428][T22727] 8021q: adding VLAN 0 to HW filter on device eth0 [ 513.515917][T22727] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.528401][T22727] 8021q: adding VLAN 0 to HW filter on device eth2 [ 513.532091][T22727] 8021q: adding VLAN 0 to HW filter on device eth3 [ 513.539410][T22727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 513.552570][T22727] gretap1: left promiscuous mode [ 513.552949][T22727] bond6: left promiscuous mode [ 513.555485][T22727] bond7: left promiscuous mode [ 513.555678][T22727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 513.558729][T22727] 8021q: adding VLAN 0 to HW filter on device bond8 [ 513.564981][T22727] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.614557][T22737] 0: entered promiscuous mode [ 513.650843][ T72] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.651011][ T72] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 513.651109][ T72] bond2: (slave macvlan0): link status definitely up, 10000 Mbps full duplex [ 513.651195][ T72] bond2: (slave veth5): making interface the new active one [ 513.651633][ T72] bond2: active interface up! [ 513.651816][ T72] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 513.651854][ T72] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 513.651983][ T72] bond1: active interface up! [ 513.652030][ T72] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.683697][ T3935] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.684181][ T3935] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.803734][T22749] loop2: detected capacity change from 0 to 512 [ 513.833009][T22749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.837217][T22749] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.5907: iget: bad i_size value: 38620345925642 [ 513.837312][T22749] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.839804][T22749] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.5907: couldn't read orphan inode 15 (err -117) [ 513.839830][T22749] loop2: lost filesystem error report for type 5 error -117 [ 513.839910][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 513.839941][ C0] EXT4-fs (loop2): initial error at time 1793551266: ext4_orphan_get:1404: inode 15 [ 513.839982][ C0] EXT4-fs (loop2): last error at time 1793551266: ext4_orphan_get:1409 [ 513.849484][T22749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.867290][T22748] pim6reg: entered allmulticast mode [ 514.207084][T22755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.5907: bg 0: block 5: invalid block bitmap [ 514.207347][T22755] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 514.207391][T22755] EXT4-fs (loop2): This should not happen!! Data will be lost [ 514.207391][T22755] [ 514.207437][T22755] EXT4-fs (loop2): Total free blocks count 0 [ 514.207456][T22755] EXT4-fs (loop2): Free/Dirty block details [ 514.207472][T22755] EXT4-fs (loop2): free_blocks=0 [ 514.207489][T22755] EXT4-fs (loop2): dirty_blocks=1 [ 514.207533][T22755] EXT4-fs (loop2): Block reservation details [ 514.207549][T22755] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 514.311919][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.350637][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 514.350657][ T28] audit: type=1400 audit(1793551267.222:5624): avc: denied { write } for pid=22756 comm="syz.2.5912" name="functions" dev="configfs" ino=11756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 514.485069][T22774] loop3: detected capacity change from 0 to 1024 [ 514.487821][T22774] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 514.487884][T22774] EXT4-fs (loop3): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 514.786621][T22774] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 514.786880][T22774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 514.787137][T22774] EXT4-fs error (device loop3): ext4_read_inode_bitmap:169: comm syz.3.5913: Inode bitmap for bg 0 marked uninitialized [ 514.787233][T22774] loop3: lost filesystem error report for type 5 error -117 [ 514.787990][T22774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.872379][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.908840][T22783] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.908895][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.909139][T22783] bridge_slave_0: entered allmulticast mode [ 514.913361][T22783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5920'. [ 514.915371][T22783] bridge_slave_0: left allmulticast mode [ 514.915576][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.456433][T22789] lo: left promiscuous mode [ 515.457013][T22789] tunl0: left promiscuous mode [ 515.457434][T22789] gre0: left promiscuous mode [ 515.458273][T22789] erspan0: left promiscuous mode [ 515.458654][T22789] ip_vti0: left promiscuous mode [ 515.459030][T22789] ip6_vti0: left promiscuous mode [ 515.459291][T22789] sit0: left promiscuous mode [ 515.459672][T22789] ip6tnl0: left promiscuous mode [ 515.503111][T22789] ip6gre0: left promiscuous mode [ 515.503468][T22789] syz_tun: left promiscuous mode [ 515.503827][T22789] ip6gretap0: left promiscuous mode [ 515.504265][T22789] bridge0: left promiscuous mode [ 515.504957][T22789] dummy0: left promiscuous mode [ 515.505350][T22789] nlmon0: left promiscuous mode [ 515.505668][T22789] wg0: left promiscuous mode [ 515.506048][T22789] wg2: left promiscuous mode [ 515.506313][T22789] veth0_to_bridge: left promiscuous mode [ 515.506670][T22789] bridge_slave_0: left promiscuous mode [ 515.507140][T22789] veth1_to_bridge: left promiscuous mode [ 515.509105][T22789] veth0_to_bond: left promiscuous mode [ 515.509521][T22789] bond_slave_0: left promiscuous mode [ 515.509808][T22789] veth1_to_bond: left promiscuous mode [ 515.601098][T22789] bond_slave_1: left promiscuous mode [ 515.601483][T22789] veth1_to_team: left promiscuous mode [ 515.601792][T22789] team_slave_1: left promiscuous mode [ 515.605342][T22789] veth0_to_batadv: left promiscuous mode [ 515.605716][T22789] batadv_slave_0: left promiscuous mode [ 515.606079][T22789] xfrm0: left promiscuous mode [ 515.606493][T22789] veth0_to_hsr: left promiscuous mode [ 515.607278][T22789] veth1_to_hsr: left promiscuous mode [ 515.677879][T22789] hsr0: left promiscuous mode [ 515.680851][T22789] veth1_virt_wifi: left promiscuous mode [ 515.683965][T22789] veth0_virt_wifi: left promiscuous mode [ 515.687369][T22789] veth1_vlan: left promiscuous mode [ 515.694712][T22789] vlan1: left promiscuous mode [ 515.698119][T22789] veth1_vlan: entered promiscuous mode [ 515.700542][T22789] macvlan0: left promiscuous mode [ 515.704082][T22789] macvlan1: left promiscuous mode [ 515.713093][T22789] ipvlan0: left promiscuous mode [ 515.716580][T22789] ipvlan1: left promiscuous mode [ 515.722855][T22789] veth1_macvtap: left promiscuous mode [ 515.726944][T22789] veth0_macvtap: left promiscuous mode [ 515.732141][T22789] veth0_macvtap: entered promiscuous mode [ 515.732398][T22789] macvtap0: left promiscuous mode [ 515.736623][T22789] veth1_macvtap: entered promiscuous mode [ 515.736945][T22789] macsec0: left promiscuous mode [ 515.742941][T22789] geneve0: left promiscuous mode [ 515.749506][T22789] geneve1: left promiscuous mode [ 515.751891][T22789] bridge1: left promiscuous mode [ 515.753843][T22789] vlan2: left promiscuous mode [ 515.753904][T22789] gretap0: left promiscuous mode [ 515.756918][T22789] bond1: left promiscuous mode [ 515.758503][T22789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.762298][T22789] bridge2: left promiscuous mode [ 515.765101][T22789] gre1: left promiscuous mode [ 515.810717][T22789] gtp0: left promiscuous mode [ 515.813219][T22789] bond2: left promiscuous mode [ 515.813697][T22789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.814755][T22789] team1: left promiscuous mode [ 515.814859][T22789] 8021q: adding VLAN 0 to HW filter on device team1 [ 515.816803][T22789] gre2: left promiscuous mode [ 515.886850][T22798] loop6: detected capacity change from 0 to 512 [ 515.898935][T22789] bond3: left promiscuous mode [ 515.899054][T22789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.905257][T22789] veth2: left promiscuous mode [ 515.908380][T22789] veth3: left promiscuous mode [ 515.929518][T22798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.932399][T22789] ip6gre1: left promiscuous mode [ 515.934765][T22789] bond4: left promiscuous mode [ 515.935134][T22789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.937486][T22789] veth4: left promiscuous mode [ 515.938835][T22789] veth5: left promiscuous mode [ 515.941528][T22789] gre3: left promiscuous mode [ 515.943526][T22789] sit1: left promiscuous mode [ 515.982232][T22789] bond5: left promiscuous mode [ 515.983161][T22789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.983913][T22789] bond6: left promiscuous mode [ 515.984077][T22789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 515.984665][T22798] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.5934: iget: bad i_size value: 38620345925642 [ 515.984719][T22798] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 515.984895][T22798] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.5934: couldn't read orphan inode 15 (err -117) [ 515.984955][T22798] loop6: lost filesystem error report for type 5 error -117 [ 515.985491][T22798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.052552][T22789] bond7: left promiscuous mode [ 516.052882][T22789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 516.065599][T22789] bond8: left promiscuous mode [ 516.082984][T22789] 8021q: adding VLAN 0 to HW filter on device bond8 [ 516.093666][T22789] ipvlan2: left promiscuous mode [ 516.097783][T22798] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.5934: bg 0: block 5: invalid block bitmap [ 516.098854][T22789] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 516.103186][T22798] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 516.103262][T22798] EXT4-fs (loop6): This should not happen!! Data will be lost [ 516.103262][T22798] [ 516.103432][T22798] EXT4-fs (loop6): Total free blocks count 0 [ 516.103586][T22798] EXT4-fs (loop6): Free/Dirty block details [ 516.104175][T22798] EXT4-fs (loop6): free_blocks=0 [ 516.104249][T22798] EXT4-fs (loop6): dirty_blocks=1 [ 516.104278][T22798] EXT4-fs (loop6): Block reservation details [ 516.107098][T22798] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 516.117564][T22789] bond0: left promiscuous mode [ 516.117732][T22789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.126553][T22789] veth6: left promiscuous mode [ 516.131300][T22789] veth7: left promiscuous mode [ 516.133908][T22789] gretap1: left promiscuous mode [ 516.143685][T22789] 8021q: adding VLAN 0 to HW filter on device eth0 [ 516.153895][T22789] 8021q: adding VLAN 0 to HW filter on device eth1 [ 516.161275][T22789] 8021q: adding VLAN 0 to HW filter on device eth2 [ 516.169871][T22789] 8021q: adding VLAN 0 to HW filter on device eth3 [ 516.259982][ T3939] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.260221][ T3939] bond0: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 516.260324][ T3939] bond0: (slave veth7): making interface the new active one [ 516.262912][ T3939] bond0: active interface up! [ 516.288940][ T3768] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.289060][ T3768] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.289092][ T3768] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.385503][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.520639][T22803] loop2: detected capacity change from 0 to 512 [ 516.541931][T22803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.5936: bg 0: block 385: padding at end of block bitmap is not set [ 516.541969][T22803] loop2: lost filesystem error report for type 5 error -117 [ 516.542405][T22803] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 516.542713][T22803] loop2: lost filesystem error report for type 5 error -117 [ 516.545604][T22803] EXT4-fs (loop2): 2 truncates cleaned up [ 516.546573][T22803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.752200][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.833500][T22810] loop3: detected capacity change from 0 to 512 [ 516.842551][T22810] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.843318][T22810] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 516.888528][T22815] loop6: detected capacity change from 0 to 512 [ 516.923508][T22815] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 516.990828][T22815] EXT4-fs (loop6): orphan cleanup on readonly fs [ 517.020066][T22815] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.5928: Block bitmap for bg 0 marked uninitialized [ 517.020135][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.029228][T22815] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 517.030788][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 517.031237][ C1] EXT4-fs (loop6): initial error at time 1793551269: ext4_read_block_bitmap_nowait:521 [ 517.031518][ C1] EXT4-fs (loop6): last error at time 1793551269: ext4_read_block_bitmap_nowait:521 [ 517.085196][T22827] loop0: detected capacity change from 0 to 1024 [ 517.100618][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.104167][T22815] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.5928: Block bitmap for bg 0 marked uninitialized [ 517.104487][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.107451][T22815] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 517.107592][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.108805][T22815] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:521: comm syz.6.5928: Block bitmap for bg 0 marked uninitialized [ 517.108905][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.109564][T22815] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 517.109594][T22815] loop6: lost filesystem error report for type 5 error -117 [ 517.157464][T22827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 517.157608][T22827] EXT4-fs (loop0): stripe (134) is not aligned with cluster size (4096), stripe is disabled [ 517.175991][T22827] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 517.176294][T22827] EXT4-fs (loop0): orphan cleanup on readonly fs [ 517.191333][T22827] EXT4-fs error (device loop0): ext4_read_inode_bitmap:169: comm syz.0.5931: Inode bitmap for bg 0 marked uninitialized [ 517.191418][T22827] loop0: lost filesystem error report for type 5 error -117 [ 517.193573][T22827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.269272][T22815] EXT4-fs (loop6): 1 orphan inode deleted [ 517.282365][T22815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 517.328286][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.371354][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5928'. [ 517.371534][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5928'. [ 517.371653][T22815] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 517.371823][T22815] iwpm_mapping_info_cb: Unable to parse nlmsg [ 517.406706][T22836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5935'. [ 517.446051][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.148315][T22845] loop3: detected capacity change from 0 to 512 [ 518.165902][T22842] tipc: Failed to remove unknown binding: 66,0,0/43690:1895552204/1895552205 [ 518.174263][T22842] tipc: Failed to remove unknown binding: 66,0,0/43690:1895552204/1895552205 [ 518.198376][T22845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.204238][T22845] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.5937: iget: bad i_size value: 38620345925642 [ 518.204336][T22845] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.204476][T22845] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5937: couldn't read orphan inode 15 (err -117) [ 518.204607][T22845] loop3: lost filesystem error report for type 5 error -117 [ 518.205225][T22845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.327386][T22843] loop2: detected capacity change from 0 to 512 [ 518.579256][T22859] syzkaller0: entered promiscuous mode [ 518.579280][T22859] syzkaller0: entered allmulticast mode [ 518.896126][ T28] audit: type=1400 audit(1793551271.762:5625): avc: denied { connect } for pid=22861 comm="syz.0.5945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 518.968141][T22843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.971676][T22843] ext4 filesystem being mounted at /796/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.065103][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.217970][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.143576][T22902] FAULT_INJECTION: forcing a failure. [ 521.143576][T22902] name failslab, interval 1, probability 0, space 0, times 0 [ 521.143615][T22902] CPU: 0 UID: 0 PID: 22902 Comm: syz.3.5970 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 521.143645][T22902] Tainted: [W]=WARN [ 521.143653][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 521.143689][T22902] Call Trace: [ 521.143698][T22902] [ 521.143709][T22902] __dump_stack+0x1d/0x30 [ 521.143743][T22902] dump_stack_lvl+0x95/0xd0 [ 521.143767][T22902] dump_stack+0x15/0x1b [ 521.143796][T22902] should_fail_ex+0x259/0x270 [ 521.143911][T22902] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 521.143961][T22902] should_failslab+0x8c/0xb0 [ 521.144005][T22902] __kmalloc_cache_noprof+0x5d/0x3e0 [ 521.144039][T22902] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 521.144106][T22902] ? __pfx_batadv_roam_tvlv_unicast_handler_v1+0x10/0x10 [ 521.144199][T22902] batadv_tvlv_handler_register+0xbd/0x2c0 [ 521.144229][T22902] ? __pfx_batadv_roam_tvlv_unicast_handler_v1+0x10/0x10 [ 521.144264][T22902] batadv_tt_init+0x10c/0x1f0 [ 521.144324][T22902] batadv_mesh_init+0x2b9/0x410 [ 521.144351][T22902] batadv_meshif_init_late+0x3e1/0x460 [ 521.144438][T22902] register_netdevice+0x234/0x13f0 [ 521.144481][T22902] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 521.144551][T22902] batadv_meshif_newlink+0x7d/0x90 [ 521.144591][T22902] rtnl_newlink_create+0x1e4/0x4a0 [ 521.144624][T22902] ? security_capable+0x7b/0x90 [ 521.144722][T22902] ? netlink_ns_capable+0x86/0xa0 [ 521.144809][T22902] rtnl_newlink+0x1255/0x1510 [ 521.144848][T22902] ? __rcu_read_unlock+0x4e/0x70 [ 521.144879][T22902] ? mt_find+0x8c1/0xa10 [ 521.144907][T22902] ? __rcu_read_unlock+0x4e/0x70 [ 521.145003][T22902] ? avc_has_perm_noaudit+0xac/0x160 [ 521.145093][T22902] ? cred_has_capability+0x224/0x2a0 [ 521.145118][T22902] ? selinux_capable+0x31/0x40 [ 521.145188][T22902] ? security_capable+0x7b/0x90 [ 521.145218][T22902] ? ns_capable+0x80/0xb0 [ 521.145246][T22902] ? __pfx_rtnl_newlink+0x10/0x10 [ 521.145346][T22902] rtnetlink_rcv_msg+0x64b/0x720 [ 521.145383][T22902] ? avc_has_perm_noaudit+0xac/0x160 [ 521.145428][T22902] netlink_rcv_skb+0x11e/0x220 [ 521.145467][T22902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.145502][T22902] rtnetlink_rcv+0x1c/0x30 [ 521.145527][T22902] netlink_unicast+0x665/0x740 [ 521.145568][T22902] netlink_sendmsg+0x5ef/0x740 [ 521.145625][T22902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.145654][T22902] ____sys_sendmsg+0x54a/0x590 [ 521.145681][T22902] ___sys_sendmsg+0x195/0x1e0 [ 521.145713][T22902] __x64_sys_sendmsg+0xd4/0x160 [ 521.145744][T22902] x64_sys_call+0x22ab/0x2550 [ 521.145835][T22902] do_syscall_64+0x112/0x360 [ 521.145881][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.145912][T22902] RIP: 0033:0x7f9ea999f559 [ 521.145935][T22902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.145987][T22902] RSP: 002b:00007f9ea83f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.146012][T22902] RAX: ffffffffffffffda RBX: 00007f9ea9c25fa0 RCX: 00007f9ea999f559 [ 521.146032][T22902] RDX: 0000000020000840 RSI: 0000200000004c40 RDI: 0000000000000007 [ 521.146046][T22902] RBP: 00007f9ea9a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 521.146060][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.146073][T22902] R13: 00007f9ea9c26038 R14: 00007f9ea9c25fa0 R15: 00007ffdc4d24b38 [ 521.146174][T22902] [ 521.214052][T22902] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 522.400143][T22923] loop3: detected capacity change from 0 to 512 [ 522.505107][T22949] loop2: detected capacity change from 0 to 512 [ 522.505520][T22949] EXT4-fs: inline encryption not supported [ 522.514406][T22949] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 522.514428][T22949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 522.565857][T22949] EXT4-fs (loop2): 1 truncate cleaned up [ 522.566364][T22949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.606117][T22923] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.5967: bg 0: block 385: padding at end of block bitmap is not set [ 522.606182][T22923] loop3: lost filesystem error report for type 5 error -117 [ 522.606548][T22923] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 522.606600][T22923] loop3: lost filesystem error report for type 5 error -117 [ 522.610253][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 522.610841][ C1] EXT4-fs (loop3): initial error at time 1793551275: ext4_validate_block_bitmap:445 [ 522.611273][ C1] EXT4-fs (loop3): last error at time 1793551275: ext4_mb_clear_bb:6678 [ 522.702890][T22923] EXT4-fs (loop3): 2 truncates cleaned up [ 522.745140][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.816928][T22962] loop0: detected capacity change from 0 to 1024 [ 522.817447][T22962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 522.849632][T22923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.856450][T22926] rxe_eth0 speed is unknown, defaulting to 1000 [ 522.887443][T22962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.008485][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.144507][T22980] netlink: 'syz.0.5981': attribute type 1 has an invalid length. [ 523.144803][T22980] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5981'. [ 523.211411][T22966] loop2: detected capacity change from 0 to 512 [ 523.263429][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.353972][T22998] ip_tables: iptables: counters copy to user failed while replacing table [ 523.424929][T22996] ip_tables: iptables: counters copy to user failed while replacing table [ 524.089714][T23032] syzkaller1: entered allmulticast mode [ 524.324038][T23043] lo: Caught tx_queue_len zero misconfig [ 524.331134][T23044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6005'. [ 524.331204][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 524.331269][T23044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6005'. [ 524.661558][ T28] audit: type=1400 audit(1793551533.580:5626): avc: denied { write } for pid=23054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.727536][ T28] audit: type=1400 audit(1793551533.640:5627): avc: denied { write } for pid=23068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.334095][ T28] audit: type=1400 audit(1793551534.250:5628): avc: denied { write } for pid=23080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.420964][ T28] audit: type=1400 audit(1793551534.340:5629): avc: denied { write } for pid=23095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.630640][ T28] audit: type=1400 audit(1793551534.550:5630): avc: denied { write } for pid=23099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.637185][ T28] audit: type=1326 audit(1793551534.550:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.0.6013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53457bf559 code=0x7ffc0000 [ 525.637507][ T28] audit: type=1326 audit(1793551534.550:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.0.6013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53457bf559 code=0x7ffc0000 [ 525.637607][ T28] audit: type=1326 audit(1793551534.550:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.0.6013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53457bf559 code=0x7ffc0000 [ 525.637642][ T28] audit: type=1326 audit(1793551534.550:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.0.6013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f53457bf559 code=0x7ffc0000 [ 525.688859][ T28] audit: type=1326 audit(1793551534.580:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23101 comm="syz.0.6013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f534577fd8e code=0x7ffc0000 [ 525.818980][T23087] loop2: detected capacity change from 0 to 128 [ 526.142561][T23153] netlink: 'syz.2.6018': attribute type 1 has an invalid length. [ 526.191818][T23153] bond8: (slave bridge8): making interface the new active one [ 526.194885][T23153] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 527.177313][T23212] loop3: detected capacity change from 0 to 128 [ 530.347227][T23226] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.349391][T23226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.371132][T23226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.371203][T23226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.374657][T23226] veth1_macvtap: left promiscuous mode [ 530.384799][T23226] veth0_macvtap: left promiscuous mode [ 530.385502][T23226] veth0_macvtap: entered promiscuous mode [ 530.389513][T23226] veth1_macvtap: entered promiscuous mode [ 530.401227][T23226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.481559][T23226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.487857][T23226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.500865][T23226] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.507641][T23226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.512180][T23226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.545937][T23242] FAULT_INJECTION: forcing a failure. [ 530.545937][T23242] name failslab, interval 1, probability 0, space 0, times 0 [ 530.546021][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.3.6034 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 530.546070][T23242] Tainted: [W]=WARN [ 530.546080][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 530.546099][T23242] Call Trace: [ 530.546125][T23242] [ 530.546137][T23242] __dump_stack+0x1d/0x30 [ 530.546172][T23242] dump_stack_lvl+0x95/0xd0 [ 530.546204][T23242] dump_stack+0x15/0x1b [ 530.546229][T23242] should_fail_ex+0x259/0x270 [ 530.546273][T23242] ? subflow_ulp_init+0x98/0x2d0 [ 530.546314][T23242] should_failslab+0x8c/0xb0 [ 530.546358][T23242] __kmalloc_cache_noprof+0x5d/0x3e0 [ 530.546412][T23242] ? mptcp_getsockopt+0x72d/0x1830 [ 530.546451][T23242] ? subflow_ulp_init+0x98/0x2d0 [ 530.546560][T23242] ? do_syscall_64+0x112/0x360 [ 530.546597][T23242] subflow_ulp_init+0x98/0x2d0 [ 530.546688][T23242] tcp_set_ulp+0x1eb/0x230 [ 530.546762][T23242] mptcp_subflow_create_socket+0x21f/0x500 [ 530.546801][T23242] __mptcp_nmpc_sk+0xb5/0x3d0 [ 530.546863][T23242] mptcp_getsockopt+0x72d/0x1830 [ 530.546966][T23242] ? __rcu_read_unlock+0x4e/0x70 [ 530.547059][T23242] ? mt_find+0x8c1/0xa10 [ 530.547094][T23242] ? cmp_ex_search+0x25/0x40 [ 530.547196][T23242] ? bsearch+0x91/0xc0 [ 530.547282][T23242] ? __pfx_cmp_ex_search+0x10/0x10 [ 530.547311][T23242] ? rep_movs_alternative+0xf/0xa0 [ 530.547398][T23242] ? search_extable+0x53/0x80 [ 530.547428][T23242] ? rep_movs_alternative+0xf/0xa0 [ 530.547457][T23242] ? rep_movs_alternative+0xf/0xa0 [ 530.547487][T23242] ? fixup_exception+0x742/0xce0 [ 530.547552][T23242] ? do_user_addr_fault+0x6bb/0xde0 [ 530.547598][T23242] ? __rcu_read_unlock+0x4e/0x70 [ 530.547628][T23242] ? avc_has_perm_noaudit+0xac/0x160 [ 530.547671][T23226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 530.547657][T23242] ? irqentry_exit_to_kernel_mode_preempt+0x55/0x80 [ 530.547777][T23242] ? irqentry_exit+0x7d/0x610 [ 530.547848][T23242] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 530.547996][T23242] sock_common_getsockopt+0x60/0x70 [ 530.548039][T23242] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 530.548089][T23242] do_sock_getsockopt+0x2ce/0x350 [ 530.548186][T23242] __x64_sys_getsockopt+0x11d/0x1a0 [ 530.548238][T23242] x64_sys_call+0x1032/0x2550 [ 530.548316][T23242] do_syscall_64+0x112/0x360 [ 530.548361][T23242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.548391][T23242] RIP: 0033:0x7f9ea999f559 [ 530.548414][T23242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.548519][T23242] RSP: 002b:00007f9ea83f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 530.548548][T23242] RAX: ffffffffffffffda RBX: 00007f9ea9c25fa0 RCX: 00007f9ea999f559 [ 530.548569][T23242] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000004 [ 530.548587][T23242] RBP: 00007f9ea9a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 530.548601][T23242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.548616][T23242] R13: 00007f9ea9c26038 R14: 00007f9ea9c25fa0 R15: 00007ffdc4d24b38 [ 530.548682][T23242] [ 530.581684][T23226] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.587754][T23226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.609220][T23226] 8021q: adding VLAN 0 to HW filter on device eth0 [ 530.611039][T23226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 530.612825][T23226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 530.614540][T23226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 530.615277][T23226] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 530.615377][T23226] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 530.618830][T23226] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.634324][T23226] 8021q: adding VLAN 0 to HW filter on device bond10 [ 530.687005][T23226] bond11: left promiscuous mode [ 530.687132][T23226] bridge6: left promiscuous mode [ 530.733833][ T347] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.733945][ T347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.884051][ T3935] bond10: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 530.895860][ T3935] bond10: (slave veth13): making interface the new active one [ 530.897253][ T3935] bond10: active interface up! [ 530.928311][ T9] geneve3: entered promiscuous mode [ 531.022645][ T3939] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.022853][ T3939] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.053391][ T954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.063071][ T3768] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.063187][ T3768] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.073876][ T3939] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.073991][ T3939] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.075131][ T3939] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.075359][ T3939] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.134807][T23252] loop3: detected capacity change from 0 to 512 [ 531.162048][T23252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.162124][T23252] ext4 filesystem being mounted at /788/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.251601][ T954] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.390613][T23263] rxe_eth0 speed is unknown, defaulting to 1000 [ 531.430346][T23271] loop6: detected capacity change from 0 to 1024 [ 531.439235][T23272] 9p: Bad value for 'rfdno' [ 531.448537][T23271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.487135][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.488607][T23271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.758345][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 531.758365][ T28] audit: type=1400 audit(1793551540.670:5685): avc: denied { ioctl } for pid=23291 comm="syz.2.6052" path="socket:[73582]" dev="sockfs" ino=73582 ioctlcmd=0x40186f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 531.849851][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.158104][ T11] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 532.342074][T23322] PM: suspend entry (s2idle) [ 532.342091][T23322] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 532.342104][T23322] PM: suspend exit [ 532.472661][T23333] 0: reclassify loop, rule prio 0, protocol 800 [ 532.518360][T23338] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.518398][T23338] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.518485][T23338] bridge_slave_0: entered allmulticast mode [ 532.518945][T23338] bridge_slave_0: entered promiscuous mode [ 532.519152][T23338] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.519263][T23338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.542989][T23338] bridge_slave_0: left allmulticast mode [ 532.543097][T23338] bridge_slave_0: left promiscuous mode [ 532.543337][T23338] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.687035][T23339] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.771581][T23373] xt_hashlimit: max too large, truncated to 1048576 [ 533.803787][T23376] netlink: 'syz.2.6082': attribute type 4 has an invalid length. [ 534.046719][T23395] loop2: detected capacity change from 0 to 1024 [ 534.066750][T23395] EXT4-fs: Ignoring removed oldalloc option [ 534.085381][T23395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.103025][T23395] sg_write: data in/out 461547/217 bytes for SCSI command 0x0-- guessing data in; [ 534.103025][T23395] program syz.2.6089 not setting count and/or reply_len properly [ 534.109991][ T28] audit: type=1400 audit(1793551543.020:5686): avc: denied { write } for pid=23387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.236470][ T28] audit: type=1400 audit(1793551543.150:5687): avc: denied { write } for pid=23404 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.238676][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.437856][T23419] loop0: detected capacity change from 0 to 164 [ 534.601548][T23419] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 534.663260][ T28] audit: type=1400 audit(1793551543.580:5688): avc: denied { write } for pid=23409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.770827][ T28] audit: type=1400 audit(1793551543.690:5689): avc: denied { write } for pid=23428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.927557][ T28] audit: type=1400 audit(1793551543.840:5690): avc: denied { write } for pid=23430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.987064][ T28] audit: type=1400 audit(1793551543.900:5691): avc: denied { write } for pid=23441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.160210][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 535.161398][ T28] audit: type=1400 audit(1793551544.080:5692): avc: denied { write } for pid=23443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.213443][ T28] audit: type=1400 audit(1793551544.130:5693): avc: denied { write } for pid=23455 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.269066][T23458] FAULT_INJECTION: forcing a failure. [ 535.269066][T23458] name failslab, interval 1, probability 0, space 0, times 0 [ 535.269130][T23458] CPU: 0 UID: 0 PID: 23458 Comm: syz.2.6095 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 535.269201][T23458] Tainted: [W]=WARN [ 535.269212][T23458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.269229][T23458] Call Trace: [ 535.269239][T23458] [ 535.269250][T23458] __dump_stack+0x1d/0x30 [ 535.269285][T23458] dump_stack_lvl+0x95/0xd0 [ 535.269317][T23458] dump_stack+0x15/0x1b [ 535.269359][T23458] should_fail_ex+0x259/0x270 [ 535.269436][T23458] ? fcntl_setlk+0x4c/0x910 [ 535.269478][T23458] should_failslab+0x8c/0xb0 [ 535.269520][T23458] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 535.269663][T23458] ? fcntl_setlk+0x4c/0x910 [ 535.269700][T23458] fcntl_setlk+0x4c/0x910 [ 535.269767][T23458] ? should_fail_ex+0xdb/0x270 [ 535.269820][T23458] do_fcntl+0x6b9/0xfa0 [ 535.269869][T23458] __se_sys_fcntl+0xb1/0x120 [ 535.269907][T23458] __x64_sys_fcntl+0x43/0x50 [ 535.270002][T23458] x64_sys_call+0x1a43/0x2550 [ 535.270060][T23458] do_syscall_64+0x112/0x360 [ 535.270108][T23458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.270211][T23458] RIP: 0033:0x7f39a4c4f559 [ 535.270234][T23458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.270262][T23458] RSP: 002b:00007f39a36a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 535.270288][T23458] RAX: ffffffffffffffda RBX: 00007f39a4ed5fa0 RCX: 00007f39a4c4f559 [ 535.270359][T23458] RDX: 0000200000001a80 RSI: 0000000000000026 RDI: 0000000000000003 [ 535.270377][T23458] RBP: 00007f39a4ce6b50 R08: 0000000000000000 R09: 0000000000000000 [ 535.270395][T23458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.270412][T23458] R13: 00007f39a4ed6038 R14: 00007f39a4ed5fa0 R15: 00007fff8fb012c8 [ 535.270440][T23458] [ 535.354105][ T28] audit: type=1400 audit(1793551544.270:5694): avc: denied { shutdown } for pid=23459 comm="syz.4.6096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 535.764821][T23475] loop2: detected capacity change from 0 to 2048 [ 535.854600][T23475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.920832][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.519694][T23538] loop3: detected capacity change from 0 to 512 [ 537.554446][T23538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.554576][T23538] ext4 filesystem being mounted at /794/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.624527][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.686083][T23551] loop3: detected capacity change from 0 to 1024 [ 537.696559][T23551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.720588][T23551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.868161][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.032369][T23577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6125'. [ 538.116559][T23582] syzkaller0: entered promiscuous mode [ 538.116583][T23582] syzkaller0: entered allmulticast mode [ 538.497306][T23592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23592 comm=syz.4.6130 [ 538.497354][T23592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=23592 comm=syz.4.6130 [ 539.402988][T23514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.212551][T23618] loop2: detected capacity change from 0 to 512 [ 541.218373][T23618] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.6137: iget: bad i_size value: 38620345925642 [ 541.218437][T23618] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 541.218591][T23618] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.6137: couldn't read orphan inode 15 (err -117) [ 541.218623][T23618] loop2: lost filesystem error report for type 5 error -117 [ 541.219245][T23618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.327180][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.535474][T23642] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6144'. [ 541.565801][T23642] veth6: entered allmulticast mode [ 542.462658][T23662] loop0: detected capacity change from 0 to 164 [ 542.547626][T23656] loop2: detected capacity change from 0 to 1024 [ 542.595839][ T3297] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 542.597356][ T3297] ISOFS: unable to read i-node block [ 542.597455][ T3297] ISOFS: unable to read i-node block [ 542.602692][T23656] EXT4-fs: Ignoring removed bh option [ 542.645608][T23656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.690301][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.901728][T23676] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.977428][T23675] FAULT_INJECTION: forcing a failure. [ 542.977428][T23675] name failslab, interval 1, probability 0, space 0, times 0 [ 542.977505][T23675] CPU: 1 UID: 0 PID: 23675 Comm: syz.2.6155 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 542.977550][T23675] Tainted: [W]=WARN [ 542.977561][T23675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 542.977576][T23675] Call Trace: [ 542.977583][T23675] [ 542.977595][T23675] __dump_stack+0x1d/0x30 [ 542.977630][T23675] dump_stack_lvl+0x95/0xd0 [ 542.977728][T23675] dump_stack+0x15/0x1b [ 542.977757][T23675] should_fail_ex+0x259/0x270 [ 542.977797][T23675] ? bpf_init_scev+0x38/0x280 [ 542.977845][T23675] should_failslab+0x8c/0xb0 [ 542.977882][T23675] __kmalloc_cache_noprof+0x5d/0x3e0 [ 542.977975][T23675] ? bpf_init_scev+0x38/0x280 [ 542.978013][T23675] bpf_init_scev+0x38/0x280 [ 542.978044][T23675] bpf_check+0x1f3b/0x20e0 [ 542.978151][T23675] bpf_prog_load+0xf52/0x10b0 [ 542.978195][T23675] __sys_bpf+0xbce/0xc50 [ 542.978228][T23675] ? do_futex+0x380/0x460 [ 542.978318][T23675] __x64_sys_bpf+0x69/0x80 [ 542.978396][T23675] x64_sys_call+0xf26/0x2550 [ 542.978434][T23675] do_syscall_64+0x112/0x360 [ 542.978478][T23675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.978580][T23675] RIP: 0033:0x7f39a4c4f559 [ 542.978603][T23675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.978629][T23675] RSP: 002b:00007f39a36a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.978726][T23675] RAX: ffffffffffffffda RBX: 00007f39a4ed5fa0 RCX: 00007f39a4c4f559 [ 542.978747][T23675] RDX: 0000000000000094 RSI: 0000200000000a00 RDI: 0000000000000005 [ 542.978766][T23675] RBP: 00007f39a4ce6b50 R08: 0000000000000000 R09: 0000000000000000 [ 542.978785][T23675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.978853][T23675] R13: 00007f39a4ed6038 R14: 00007f39a4ed5fa0 R15: 00007fff8fb012c8 [ 542.978881][T23675] [ 543.247500][T23676] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.247551][T23676] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.247738][T23676] bridge_slave_0: entered allmulticast mode [ 543.248507][T23676] bridge_slave_0: entered promiscuous mode [ 543.249692][T23676] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.249740][T23676] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.249906][T23676] bridge_slave_1: entered allmulticast mode [ 543.250588][T23676] bridge_slave_1: entered promiscuous mode [ 543.265533][T23676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.267096][T23676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.304905][T23676] team0: Port device team_slave_0 added [ 543.309119][T23676] team0: Port device team_slave_1 added [ 543.323920][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.344023][T23676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.344075][T23676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.344171][T23676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.344902][T23676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.344917][T23676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.344953][T23676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.429360][T23684] loop3: detected capacity change from 0 to 1024 [ 543.501748][T23684] EXT4-fs: Ignoring removed bh option [ 543.510667][T23676] hsr_slave_0: entered promiscuous mode [ 543.512880][T23676] hsr_slave_1: entered promiscuous mode [ 543.695276][T23684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.739526][T23711] rxe_eth0 speed is unknown, defaulting to 1000 [ 543.790830][T23684] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6158'. [ 543.840616][T23718] syzkaller0: entered promiscuous mode [ 543.840639][T23718] syzkaller0: entered allmulticast mode [ 543.864953][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.904942][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 543.904962][ T28] audit: type=1400 audit(1793551808.818:5699): avc: denied { write } for pid=23712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.971655][ T28] audit: type=1400 audit(1793551808.888:5700): avc: denied { write } for pid=23730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.133785][T23735] lo speed is unknown, defaulting to 1000 [ 544.139469][T23735] lo speed is unknown, defaulting to 1000 [ 544.148861][T23735] lo speed is unknown, defaulting to 1000 [ 544.182278][T23676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.196500][ T28] audit: type=1400 audit(1793551809.108:5701): avc: denied { write } for pid=23737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.224637][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.225041][T23676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.229311][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.230042][T23676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 544.251222][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.253704][T23676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 544.277555][T23676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.297092][ T28] audit: type=1400 audit(1793551809.208:5702): avc: denied { write } for pid=23755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.381333][T23676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.388678][T23676] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.406701][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.406749][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.407639][ T28] audit: type=1326 audit(1793551809.328:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 544.408033][ T28] audit: type=1326 audit(1793551809.328:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 544.408063][ T28] audit: type=1326 audit(1793551809.328:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 544.419543][ T28] audit: type=1326 audit(1793551809.328:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 544.459287][ T28] audit: type=1326 audit(1793551809.368:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea999f559 code=0x7ffc0000 [ 544.478295][ T28] audit: type=1326 audit(1793551809.398:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.3.6176" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ea999f2c2 code=0x7ffc0000 [ 544.536611][T23735] lo speed is unknown, defaulting to 1000 [ 544.537592][T23735] lo speed is unknown, defaulting to 1000 [ 544.544837][ T3934] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.544936][ T3934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.564605][T23735] lo speed is unknown, defaulting to 1000 [ 544.565441][T23735] lo speed is unknown, defaulting to 1000 [ 544.604802][T23735] lo speed is unknown, defaulting to 1000 [ 544.605807][T23735] lo speed is unknown, defaulting to 1000 [ 544.655230][T23748] siw: device registration error -23 [ 544.916007][T23813] ./dev/sda1: Can't lookup blockdev [ 544.950632][T23676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.217640][T23676] veth0_vlan: entered promiscuous mode [ 545.226413][T23676] veth1_vlan: entered promiscuous mode [ 545.259482][T23676] veth0_macvtap: entered promiscuous mode [ 545.266420][T23676] veth1_macvtap: entered promiscuous mode [ 545.291812][T23676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.298022][T23676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.341194][ T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.341273][ T72] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.341310][ T72] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.341408][ T72] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.744492][T23901] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.744737][T23901] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.804467][T23901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.806210][T23901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.900645][ T72] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.901078][ T72] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.901124][ T72] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.901213][ T72] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.947011][T23908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.948366][T23908] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.967037][T23908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.028768][T23908] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.028816][T23908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.037134][T23908] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.037178][T23908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.069681][T23908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.077636][T23908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.106804][T23908] veth1_vlan: left promiscuous mode [ 546.107408][T23908] veth0_vlan: left promiscuous mode [ 546.120401][T23908] veth0_vlan: entered promiscuous mode [ 546.129473][T23908] veth1_vlan: entered promiscuous mode [ 546.142133][T23908] veth1_macvtap: left promiscuous mode [ 546.142840][T23908] veth0_macvtap: left promiscuous mode [ 546.145754][T23908] veth0_macvtap: entered promiscuous mode [ 546.148573][T23908] veth1_macvtap: entered promiscuous mode [ 546.164017][T23908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.167539][T23908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.171856][T23908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.176014][T23908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.321053][ T3934] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.324734][ T3935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.324841][ T3935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.324963][ T3935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.388054][T23953] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.466584][T23953] lo speed is unknown, defaulting to 1000 [ 547.539464][T24008] loop2: detected capacity change from 0 to 512 [ 547.552800][T24008] FAT-fs (loop2): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 548.225339][T24061] loop3: detected capacity change from 0 to 512 [ 548.225749][T24061] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 548.957797][T24076] loop5: detected capacity change from 0 to 1024 [ 548.981778][T24076] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 549.012004][T24076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.109831][T24078] loop3: detected capacity change from 0 to 164 [ 549.247231][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.392897][T24101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.645918][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 549.645938][ T28] audit: type=1400 audit(1793551814.558:5794): avc: denied { mount } for pid=24109 comm="syz.6.6235" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 549.647608][T24111] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 549.647974][ T28] audit: type=1400 audit(1793551814.558:5795): avc: denied { unmount } for pid=24109 comm="syz.6.6235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 549.815104][T24124] loop5: detected capacity change from 0 to 2048 [ 549.815534][T24124] EXT4-fs: Ignoring removed nobh option [ 549.848802][T24124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.865041][T24124] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 549.865264][T24124] EXT4-fs (loop5): Remounting filesystem read-only [ 549.920937][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.026854][ T28] audit: type=1326 audit(1793551814.938:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.027235][ T28] audit: type=1326 audit(1793551814.938:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.027274][ T28] audit: type=1326 audit(1793551814.938:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.031084][ T28] audit: type=1326 audit(1793551814.948:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.031274][ T28] audit: type=1326 audit(1793551814.948:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.031426][ T28] audit: type=1326 audit(1793551814.948:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.031587][ T28] audit: type=1326 audit(1793551814.948:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.031769][ T28] audit: type=1326 audit(1793551814.948:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24127 comm="syz.2.6241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a4c4f559 code=0x7ffc0000 [ 550.283878][T24139] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6246'. [ 550.326640][T24145] tipc: Failed to remove unknown binding: 66,0,0/0:4176413925/4176413927 [ 550.326749][T24145] tipc: Failed to remove unknown binding: 66,0,0/0:4176413925/4176413926 [ 550.326959][T24145] tipc: Failed to remove unknown binding: 66,0,0/0:4176413925/4176413927 [ 550.326980][T24145] tipc: Failed to remove unknown binding: 66,0,0/0:4176413925/4176413926 [ 550.420452][T24151] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 552.812627][T24207] loop5: detected capacity change from 0 to 1024 [ 552.821582][T24207] EXT4-fs: Ignoring removed bh option [ 552.853151][T24207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 552.853236][T24207] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.858045][T24207] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 3: comm syz.5.6270: lblock 3 mapped to illegal pblock 3 (length 3) [ 552.858286][T24207] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 552.858318][T24207] EXT4-fs (loop5): This should not happen!! Data will be lost [ 552.858318][T24207] [ 552.957207][ T3939] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #15: block 8: comm kworker/u8:25: lblock 8 mapped to illegal pblock 8 (length 8) [ 552.957483][ T3939] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 552.957507][ T3939] EXT4-fs (loop5): This should not happen!! Data will be lost [ 552.957507][ T3939] [ 552.975021][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 553.027383][T24202] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 553.401220][T24230] loop6: detected capacity change from 0 to 1024 [ 553.455166][T24230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.477622][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.506698][T24242] loop2: detected capacity change from 0 to 512 [ 553.525995][T24242] EXT4-fs: test_dummy_encryption option not supported [ 553.898280][T24233] loop3: detected capacity change from 0 to 512 [ 554.136608][T24233] netlink: 'syz.3.6278': attribute type 4 has an invalid length. [ 554.136915][T24233] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6278'. [ 554.196965][T24233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 554.383344][T24276] loop3: detected capacity change from 0 to 512 [ 554.430122][T24276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.430217][T24276] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.610552][T24273] loop2: detected capacity change from 0 to 1024 [ 554.650004][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 554.650026][ T28] audit: type=1326 audit(1793551819.568:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.651612][ T28] audit: type=1326 audit(1793551819.568:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.653645][ T28] audit: type=1326 audit(1793551819.568:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.655362][ T28] audit: type=1326 audit(1793551819.568:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.656980][ T28] audit: type=1326 audit(1793551819.568:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.658672][ T28] audit: type=1326 audit(1793551819.568:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.660552][T24273] EXT4-fs: Ignoring removed bh option [ 554.718816][ T28] audit: type=1400 audit(1793551819.618:5909): avc: denied { create } for pid=24274 comm="syz.3.6294" name="file4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 554.768088][T24273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.798049][ T28] audit: type=1326 audit(1793551819.698:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.798092][ T28] audit: type=1326 audit(1793551819.698:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.798197][ T28] audit: type=1326 audit(1793551819.698:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24279 comm="syz.4.6295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 554.947668][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.973167][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.457845][T24298] FAULT_INJECTION: forcing a failure. [ 555.457845][T24298] name failslab, interval 1, probability 0, space 0, times 0 [ 555.457995][T24298] CPU: 1 UID: 0 PID: 24298 Comm: syz.6.6301 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 555.458056][T24298] Tainted: [W]=WARN [ 555.458067][T24298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 555.458142][T24298] Call Trace: [ 555.458152][T24298] [ 555.458163][T24298] __dump_stack+0x1d/0x30 [ 555.458200][T24298] dump_stack_lvl+0x95/0xd0 [ 555.458289][T24298] dump_stack+0x15/0x1b [ 555.458321][T24298] should_fail_ex+0x259/0x270 [ 555.458364][T24298] ? sk_prot_alloc+0xa8/0x180 [ 555.458480][T24298] should_failslab+0x8c/0xb0 [ 555.458529][T24298] __kmalloc_noprof+0xb6/0x4b0 [ 555.458587][T24298] ? sk_prot_alloc+0xa8/0x180 [ 555.458627][T24298] sk_prot_alloc+0xa8/0x180 [ 555.458673][T24298] sk_alloc+0x34/0x3e0 [ 555.458737][T24298] __netlink_kernel_create+0xe9/0x550 [ 555.458846][T24298] genl_pernet_init+0x4e/0xc0 [ 555.458886][T24298] ? __pfx_genl_rcv+0x10/0x10 [ 555.458925][T24298] ? __pfx_genl_bind+0x10/0x10 [ 555.458962][T24298] ? __pfx_genl_unbind+0x10/0x10 [ 555.459003][T24298] ? __pfx_genl_release+0x10/0x10 [ 555.459045][T24298] ops_init+0x22a/0x2e0 [ 555.459131][T24298] setup_net+0x9f/0x230 [ 555.459172][T24298] copy_net_ns+0x339/0x490 [ 555.459255][T24298] create_new_namespaces+0x1f6/0x420 [ 555.459349][T24298] unshare_nsproxy_namespaces+0x115/0x150 [ 555.459385][T24298] ksys_unshare+0x3a3/0x690 [ 555.459421][T24298] __x64_sys_unshare+0x1f/0x30 [ 555.459468][T24298] x64_sys_call+0x1e33/0x2550 [ 555.459578][T24298] do_syscall_64+0x112/0x360 [ 555.459642][T24298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.459682][T24298] RIP: 0033:0x7f1b0143f559 [ 555.459775][T24298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.459800][T24298] RSP: 002b:00007f1affe97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.459834][T24298] RAX: ffffffffffffffda RBX: 00007f1b016c5fa0 RCX: 00007f1b0143f559 [ 555.459880][T24298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 555.459899][T24298] RBP: 00007f1b014d6b50 R08: 0000000000000000 R09: 0000000000000000 [ 555.459965][T24298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.459986][T24298] R13: 00007f1b016c6038 R14: 00007f1b016c5fa0 R15: 00007ffdf41abb48 [ 555.460019][T24298] [ 555.927986][T24313] qrtr: Invalid version 0 [ 558.242337][T24313] lo: entered allmulticast mode [ 558.296744][T24329] tmpfs: Bad value for 'mpol' [ 558.340194][T24330] syzkaller0: left promiscuous mode [ 558.340241][T24330] syzkaller0: left allmulticast mode [ 558.443201][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6308'. [ 558.488933][T24354] loop5: detected capacity change from 0 to 512 [ 558.517072][T24359] ip_tables: iptables: counters copy to user failed while replacing table [ 558.549436][T24357] loop2: detected capacity change from 0 to 128 [ 558.594019][T24343] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 559.123698][T24412] sit0: entered allmulticast mode [ 559.139272][T24412] sit0: entered promiscuous mode [ 559.175536][T24415] Cannot find del_set index 4 as target [ 559.646071][T24405] loop2: detected capacity change from 0 to 512 [ 559.696763][T24405] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.6321: iget: bad extended attribute block 134217728 [ 559.696948][T24405] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 559.699010][T24405] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.6321: couldn't read orphan inode 15 (err -117) [ 559.699139][T24405] loop2: lost filesystem error report for type 5 error -117 [ 559.704367][T24405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.758448][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.842552][T24433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 559.844293][ T28] kauditd_printk_skb: 523 callbacks suppressed [ 559.844310][ T28] audit: type=1400 audit(1793551824.758:6436): avc: denied { create } for pid=24435 comm="syz.5.6333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 559.846017][T24436] netlink: 'syz.5.6333': attribute type 11 has an invalid length. [ 559.878055][T24437] pimreg: entered allmulticast mode [ 559.960366][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 559.971906][T24433] team1: entered promiscuous mode [ 559.971964][T24433] team1: entered allmulticast mode [ 559.983500][T24437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6332'. [ 560.011975][T24434] pimreg: left allmulticast mode [ 560.265562][ T28] audit: type=1400 audit(1793551825.178:6437): avc: denied { bind } for pid=24445 comm="syz.2.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.265621][ T28] audit: type=1400 audit(1793551825.178:6438): avc: denied { write } for pid=24445 comm="syz.2.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.329562][T24453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.338989][T24453] tipc: Resetting bearer [ 560.339349][T24453] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.354351][T24453] tipc: Resetting bearer [ 560.362584][T24453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.458243][T24453] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 560.905185][T24477] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(4) [ 560.905217][T24477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.908258][T24477] vhci_hcd vhci_hcd.0: Device attached [ 560.925310][T24479] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 560.925342][T24479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.925378][T24479] vhci_hcd vhci_hcd.0: Device attached [ 560.940391][T24480] loop6: detected capacity change from 0 to 512 [ 561.068380][T24480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.069193][T24480] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 561.137780][T15773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.140069][T17028] usb 7-2: new high-speed USB device number 3 using vhci_hcd [ 561.270625][T24495] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.479733][ T28] audit: type=1400 audit(1793551826.388:6439): avc: denied { read } for pid=24497 comm="syz.4.6352" path="socket:[80451]" dev="sockfs" ino=80451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.491046][ T28] audit: type=1400 audit(1793551826.398:6440): avc: denied { connect } for pid=24497 comm="syz.4.6352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.520022][T24481] vhci_hcd: connection closed [ 561.520850][ T3934] vhci_hcd vhci_hcd.3: stop threads [ 561.520912][ T3934] vhci_hcd vhci_hcd.3: release socket [ 561.520972][ T3934] vhci_hcd vhci_hcd.3: disconnect device [ 561.523629][T24484] vhci_hcd: connection reset by peer [ 561.524022][ T3934] vhci_hcd vhci_hcd.3: stop threads [ 561.524084][ T3934] vhci_hcd vhci_hcd.3: release socket [ 561.524146][ T3934] vhci_hcd vhci_hcd.3: disconnect device [ 562.183110][ T28] audit: type=1326 audit(1793551827.088:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24520 comm="syz.5.6361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 562.183156][ T28] audit: type=1326 audit(1793551827.088:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24520 comm="syz.5.6361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 562.183199][ T28] audit: type=1326 audit(1793551827.088:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24520 comm="syz.5.6361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 562.183261][ T28] audit: type=1326 audit(1793551827.088:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24520 comm="syz.5.6361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 562.183291][ T28] audit: type=1326 audit(1793551827.088:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24520 comm="syz.5.6361" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 562.320656][T24522] loop3: detected capacity change from 0 to 1024 [ 562.354219][T24522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.574752][T24545] loop5: detected capacity change from 0 to 512 [ 562.575495][T24546] loop6: detected capacity change from 0 to 512 [ 562.597032][T24545] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.6370: inode has both inline data and extents flags [ 562.597070][T24545] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 562.598582][T24546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.598652][T24546] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.598744][T24545] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.6370: couldn't read orphan inode 15 (err -117) [ 562.598771][T24545] loop5: lost filesystem error report for type 5 error -117 [ 562.599416][T24546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.600501][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 562.600526][ C0] EXT4-fs (loop5): initial error at time 1793551827: ext4_orphan_get:1404: inode 15 [ 562.600580][ C0] EXT4-fs (loop5): last error at time 1793551827: ext4_orphan_get:1409 [ 562.685355][T24545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.844690][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.046375][T24566] netlink: 'syz.4.6376': attribute type 1 has an invalid length. [ 563.046400][T24566] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6376'. [ 563.227404][T24561] loop2: detected capacity change from 0 to 512 [ 563.481173][T10365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.504460][T24561] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.595926][T24561] netlink: 'syz.2.6374': attribute type 9 has an invalid length. [ 563.596017][T24561] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6374'. [ 563.606530][T24589] loop3: detected capacity change from 0 to 128 [ 563.610636][T24589] vfat: Unknown parameter 'T\iN [ 565.226640][T24629] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6395'. [ 565.332284][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881195e6200: rx timeout, send abort [ 565.344512][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 565.344577][ T28] audit: type=1400 audit(1793551830.258:6486): avc: denied { append } for pid=2961 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 565.344663][ T28] audit: type=1400 audit(1793551830.258:6487): avc: denied { open } for pid=2961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 565.344774][ T28] audit: type=1400 audit(1793551830.258:6488): avc: denied { getattr } for pid=2961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 565.583338][T24603] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 565.624332][T24625] bridge0: port 1(vlan7) entered blocking state [ 565.624378][T24625] bridge0: port 1(vlan7) entered disabled state [ 565.624497][T24625] vlan7: entered allmulticast mode [ 565.624517][T24625] bridge_slave_0: entered allmulticast mode [ 565.625123][T24625] vlan7: entered promiscuous mode [ 565.625145][T24625] bridge_slave_0: entered promiscuous mode [ 565.725649][T24627] tipc: Resetting bearer [ 565.877136][T24627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.920275][T17026] lo speed is unknown, defaulting to 1000 [ 565.996220][T24654] loop6: detected capacity change from 0 to 256 [ 566.011999][T24654] FAT-fs (loop6): bogus sectors per cluster 30 [ 566.012026][T24654] FAT-fs (loop6): Can't find a valid FAT filesystem [ 566.278678][T17028] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 566.324856][T24647] loop5: detected capacity change from 0 to 512 [ 566.576941][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.6399: bg 0: block 385: padding at end of block bitmap is not set [ 566.577081][T24647] loop5: lost filesystem error report for type 5 error -117 [ 566.578052][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 566.578213][T24647] loop5: lost filesystem error report for type 5 error -117 [ 566.580109][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 566.580267][ C1] EXT4-fs (loop5): initial error at time 1793551831: ext4_validate_block_bitmap:445 [ 566.580399][ C1] EXT4-fs (loop5): last error at time 1793551831: ext4_mb_clear_bb:6678 [ 566.642661][T24647] EXT4-fs (loop5): 2 truncates cleaned up [ 566.669138][T24647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.072266][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.654950][T24681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6411'. [ 567.736689][T24685] netlink: 'syz.6.6422': attribute type 4 has an invalid length. [ 567.808919][T24687] netlink: 'syz.6.6422': attribute type 4 has an invalid length. [ 568.694057][T24716] loop2: detected capacity change from 0 to 1024 [ 568.710326][T24716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.734287][ T28] audit: type=1326 audit(1793551833.669:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe393d7f559 code=0x7ffc0000 [ 568.734460][ T28] audit: type=1326 audit(1793551833.669:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe393d7f559 code=0x7ffc0000 [ 568.735887][ T28] audit: type=1326 audit(1793551833.669:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe393d7f559 code=0x7ffc0000 [ 568.736249][ T28] audit: type=1326 audit(1793551833.669:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe393d7f559 code=0x7ffc0000 [ 568.737540][ T28] audit: type=1326 audit(1793551833.669:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe393d7f559 code=0x7ffc0000 [ 568.788317][ T28] audit: type=1326 audit(1793551833.720:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 568.789991][ T28] audit: type=1326 audit(1793551833.720:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24708 comm="syz.4.6419" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe393d3fd8e code=0x7ffc0000 [ 569.003158][T11022] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.038407][T24728] ip_tables: iptables: counters copy to user failed while replacing table [ 569.499208][T24742] tipc: Resetting bearer [ 569.511871][T24738] mount: server 127. not responding, timed out [ 569.572582][T24749] netlink: 'syz.5.6434': attribute type 4 has an invalid length. [ 569.623618][T24750] netlink: 'syz.5.6434': attribute type 4 has an invalid length. [ 569.714886][T24742] batman_adv: batadv0: Interface deactivated: gretap1 [ 569.731854][T17026] lo speed is unknown, defaulting to 1000 [ 569.731899][T17026] syz0: Port: 1 Link DOWN [ 569.739791][ T3760] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.739911][ T3760] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.743632][ T3939] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.743725][ T3939] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.743833][ T3939] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.743968][ T3939] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.744129][ T3939] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.744320][ T3939] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.414883][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 570.414905][ T28] audit: type=1326 audit(1793551835.292:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.414948][ T28] audit: type=1326 audit(1793551835.292:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.414985][ T28] audit: type=1326 audit(1793551835.292:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.415033][ T28] audit: type=1326 audit(1793551835.292:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.415065][ T28] audit: type=1326 audit(1793551835.322:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.415099][ T28] audit: type=1326 audit(1793551835.322:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.415214][ T28] audit: type=1326 audit(1793551835.332:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.415296][ T28] audit: type=1326 audit(1793551835.332:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24763 comm="syz.5.6440" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f22aa4af559 code=0x7ffc0000 [ 570.823677][T24768] loop5: detected capacity change from 0 to 512 [ 570.880559][T24768] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 570.898661][T24768] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 570.916781][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6442'. [ 570.938489][T24758] ================================================================== [ 570.938533][T24758] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 570.938601][T24758] [ 570.938607][T24758] write to 0xffff88811b06a820 of 8 bytes by task 24771 on cpu 1: [ 570.938624][T24758] shmem_file_splice_read+0x3eb/0x570 [ 570.938665][T24758] splice_direct_to_actor+0x25d/0x680 [ 570.938696][T24758] do_splice_direct+0x119/0x1a0 [ 570.938720][T24758] do_sendfile+0x37d/0x640 [ 570.938740][T24758] __x64_sys_sendfile64+0x105/0x150 [ 570.938759][T24758] x64_sys_call+0x1015/0x2550 [ 570.938786][T24758] do_syscall_64+0x112/0x360 [ 570.938827][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.938856][T24758] [ 570.938865][T24758] write to 0xffff88811b06a820 of 8 bytes by task 24758 on cpu 0: [ 570.938887][T24758] shmem_file_splice_read+0x3eb/0x570 [ 570.938925][T24758] splice_direct_to_actor+0x25d/0x680 [ 570.938952][T24758] do_splice_direct+0x119/0x1a0 [ 570.938973][T24758] do_sendfile+0x37d/0x640 [ 570.938993][T24758] __x64_sys_sendfile64+0x105/0x150 [ 570.939011][T24758] x64_sys_call+0x1015/0x2550 [ 570.939036][T24758] do_syscall_64+0x112/0x360 [ 570.939077][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.939106][T24758] [ 570.939112][T24758] value changed: 0x000000000000d954 -> 0x000000000000d955 [ 570.939129][T24758] [ 570.939134][T24758] Reported by Kernel Concurrency Sanitizer on: [ 570.939154][T24758] CPU: 0 UID: 0 PID: 24758 Comm: syz.4.6438 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 570.939193][T24758] Tainted: [W]=WARN [ 570.939201][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 570.939213][T24758] ================================================================== [ 571.105695][T24768] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.6441: bg 0: block 4: invalid block bitmap [ 571.105794][T24768] loop5: lost filesystem error report for type 5 error -117 [ 571.107918][T24768] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 571.107980][T24768] loop5: lost filesystem error report for type 5 error -117 [ 571.108484][T24768] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.6441: invalid indirect mapped block 1 (level 1) [ 571.108738][T24768] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.110360][T24768] EXT4-fs (loop5): 1 truncate cleaned up [ 571.111579][T24768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.227537][T24770] team1: entered promiscuous mode [ 571.227557][T24770] team1: entered allmulticast mode [ 571.431238][T23676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.