last executing test programs: 2m55.319109163s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x7}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m55.060619609s ago: executing program 2 (id=74): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m54.202866289s ago: executing program 2 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@delchain={0x24, 0x66, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0x6}, {0x0, 0xfff1}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000881}, 0x49090) 2m54.088069662s ago: executing program 2 (id=89): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2m54.024515864s ago: executing program 2 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x268, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffffee}, 0x48) 2m53.78080156s ago: executing program 2 (id=92): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18e40000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2m53.78064706s ago: executing program 32 (id=92): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18e40000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2m51.399453107s ago: executing program 3 (id=137): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="93e1df", 0x3, 0x201, 0x0, 0x0) shutdown(r1, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 2m51.352765669s ago: executing program 3 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 2m51.298551659s ago: executing program 3 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r5, &(0x7f00000004c0)="027512f4984bba4856c1a8f99015b83e2da6985d5e222db0b8a9838d1be6"}, 0x20) 2m51.2540355s ago: executing program 3 (id=142): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 2m51.201426912s ago: executing program 3 (id=143): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 2m50.800372832s ago: executing program 3 (id=150): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvfrom(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m35.303113225s ago: executing program 33 (id=150): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvfrom(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m29.020525436s ago: executing program 6 (id=493): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) 2m28.936793429s ago: executing program 6 (id=496): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) syz_emit_ethernet(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200333a0000000000000000000000ffff0a010101ff02000000000000000000000000000108029078ffffff1000003300000000000000bbe9732effff00000000fc020000000000000000000000000000fb"], 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m28.905443959s ago: executing program 6 (id=497): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000200)={0x6, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x108) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 2m28.841437461s ago: executing program 6 (id=499): setresgid(0xee00, 0xee01, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 2m28.697818364s ago: executing program 6 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000b901"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800) 2m28.306235784s ago: executing program 6 (id=514): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 2m28.291214324s ago: executing program 34 (id=514): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 2m21.722696743s ago: executing program 1 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x4, 0x100, 0x81, 0x540000, r2}) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x32}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, 0x1, 0x6, 0xc, 0x100, 0x2, 0x86020086, r4}) 2m21.673910764s ago: executing program 1 (id=638): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8000, &(0x7f0000000300)={[{@fat=@tz_utc}, {@fat=@errors_continue}, {@fat=@dos1xfloppy}, {@fat=@uid}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7fff}}, {@fat=@usefree}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@nodots}, {@fat=@quiet}, {@fat=@quiet}]}, 0x21, 0x24e, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 2m21.453987739s ago: executing program 1 (id=640): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x1b}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) 2m21.310980622s ago: executing program 1 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 2m21.271264783s ago: executing program 1 (id=645): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) 2m20.705549147s ago: executing program 1 (id=651): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xb4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 2m20.673222058s ago: executing program 35 (id=651): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb2}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xb4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040) 2.947703429s ago: executing program 7 (id=2873): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd84, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 2.681336265s ago: executing program 8 (id=2881): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) sendfile(r2, r3, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.48086433s ago: executing program 8 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1.716901419s ago: executing program 5 (id=2886): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) 1.597067552s ago: executing program 8 (id=2887): r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newsa={0x16c, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '\x00'/20}}, @encap={0x1c, 0x4, {0x7, 0x1f90, 0x1f90, @in=@loopback}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@newpolicy={0xfc, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x6) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) r3 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000100)='espintcp\x00', 0x9) sendto(r2, &(0x7f0000000900)='testpayload', 0xb, 0x0, 0x0, 0x0) 1.567851612s ago: executing program 7 (id=2888): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) mremap(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.190708761s ago: executing program 0 (id=2896): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB='f\n\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read(r3, &(0x7f0000002000)=""/165, 0xa5) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) write(r1, &(0x7f0000000040), 0xffffff4a) 1.077557884s ago: executing program 7 (id=2897): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.054293655s ago: executing program 4 (id=2899): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001ca000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb, 0xfffb}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x2000c001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 816.84948ms ago: executing program 4 (id=2900): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x30004040) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) close(r0) 816.64846ms ago: executing program 4 (id=2901): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c082}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0) 733.312982ms ago: executing program 8 (id=2902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x404, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7ffb}, 0x0, 0x6, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000015e000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 719.004583ms ago: executing program 4 (id=2903): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000180)=ANY=[@ANYBLOB="003547e2289179cd09225a276d8ad02e59785f28c3aa2961f7b0c0c87eef2b0562c4f3f6420329cd2632232c81c29c35a9b1e5093b58dc15bee9e62b713346cc9eba1f080b146fd809966dc7e99fbb5c49b3820557ebbf19eb465bb2b868f0c7b1bbdf47f14b78ec7f2e981f"], 0x1, 0x537, &(0x7f0000000580)="$eJzs3V1v01YYwPHHfRElk9A0JoSqAoeySUUqwUkgKOLKc07SA44d2Q5qrxCirVSRjokyae3NxA3TpO07jNt9iGlfCO0jdPJLSkqbhLXQsOj/i8An9vE5j93Ij04bHwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdt2yRLP+J1VNZhbD4PWkO299m4eWgzpV8RK/sncnFzOVl3++t3mS8l/i7KQvVuQuWQxJ3tfXPry/sWZqd7+QwI6Ezu7e8+edLsbL8YdyJg0tW+iwLScplYmClStWrVvrzQi1TCejtaiWLeUG2onDkK15N5UpVqtonRxLej4zbrj6d7Ke7fKtl1VD4pt7YRR4N9+UIzcFeN5xm+mdZLNSZ17yQfxoYlVrJ2WUptb3Y3KqCCTSqUPqVQeValsl8ulUrlcqt6t3b1n2zNHVtjvkSM1xv+hxXh95Cs4cHJTef4XT4z40pFVUce+XKlLKIG0BmzP9fL/t7f10H77838vy19+t3le0vx/NXt3dVD+HxDL2b12ZFf25Jk8ka50ZUNejD2is301RYsvRiIJxEhLnHSNytcoqUlVqmLLY1mRhkSipCFGPNESyZpEEotOP1GuhKLFkVgCCUXJkrhyU5SUpCY1qYgSLUVZk0A64ktT6uKkrWzKVnreK0NiPKhU+pBK5SGVyP84vY9/EQdOaL+X/wEAAAAAwMSy0t++J+P/WbmSlhrG0/a4wwIAAAAAAB9R+pf/hWQxm5SuiMX4HwAAAACASWOl99hZIlKQa1mpdycUvwQAAAAAAGBCpH//vyrWtBSS0jWxGP8DAAAAADBplgfNsf93utayJGqfs/76R8Jw1nrVXv3G2naSDc72dLbf9Pstxo1560LeSLqozuTvXL1g5bNfHkyC+TZfbI6a6986aQC9uQ3vX5yR3+S6iJwXub6erVzP6+UzEhcaxtNFN/Dul8RxLkzFejX+8futnyQ9/F/91gVLNre6G8Wnz7vraSyvklZebeedHJlHcfDJkJfpfAvpPRfHHvFseiNG3m8h69fuP/6pbPep/9Dna1nM6iwWsmXh8PHPJX2WioOOPovinIic6shfy42szo2lG9miL4ptkXQKivKIKDbK/ef/ROdiSBS9c1HJopjLmzsUxf7+/s8blVNGAQDjsjkiC1lHE//wq1ySjo9c5T5ddj98RV/K6izNpxfWmfljruj2qLxinzKv/3nkGUiDcmzS7+8H/ZbSft8kO7wZ2G/kla3kFE6/3P5BLu3s7t3aOp9vKleq9h3bvluW2fQw8gW5BwBwjNHP2BlZw7qTjqpl4Kj6q4OvFBTlqTyXrqzLcnq3QfqNg2NbLfR9DWF5xKi10PeEl+URo7pC34NePrxu5Qx+EgAAnJ3FLA9baQo+Yf5fHjHuPpzLh4+O+3M5AAD4NHT41irEv1hhaNqPS7VayYlXtAoD96EKTb2plfFjHborjt/Uqh0GceAGXlJ4ZOo6UlGn3Q7CWDWCULWDyKymT35X+aPfI91y/Ni4UdvTTqSVG/ix48aqbiJXtTvfeSZa0WG6c9TWrmkY14lN4Kso6ISuLioVad1X0dS1H5uGSYq+aoem5YRr6lHgdVpa1XXkhqYdB1mDvb6M3wjCVtpscdwnGwCAz8TO7t6zJ93uxotPWBj3MQIAgMPI0gAAAAAAAAAAAAAAAAAAAAAAfP7O4v6//1/h3Il3n5GxBz/Jhd6k059LPBNckD+OzPANYKL8GwAA//9nRkyy") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004000b008e9f"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x20000080}, 0x80) 650.349884ms ago: executing program 5 (id=2904): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, &(0x7f00000000c0)) 596.559646ms ago: executing program 8 (id=2905): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}, {&(0x7f00000001c0)="856549090746643101d1304b6bee6eb2e5f8ea5522aef411bad5a935", 0x1c}], 0x2}, 0x0) 534.638427ms ago: executing program 8 (id=2906): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$eJzs3E9rE2sUx/HTpk3TlDa5cLlwBfWgG92ENr4ADdKCGFBqU9SFMLUTDRmTMhMqEbHZiFtfR3HpTlBfgN2IG3HrrgiCmy7Ekc6fmrRpzZ+2SdvvB8o8mWd+PKfTaTlTmFm//fJRMe+k8kZFBmMqgyI12RBJbo4CA8F20BtHpV5NLo79+Hz61p271zPZ7PSs6kxm7lJaVSfOvn389NW595Wx+dcTb0ZkLXlv/Xv669p/a/+v/5p7WHCGxdFSuaKGLpTLFWPBMnWx4BRTqjct03BMLZQc026Yz1vlpaWqGqXF8fiSbTqOGqWqFs2qVspasatqPDAKJU2lUjoel5Mi0XTvUAvJ3OrsrJHZddqNdFEVemC02U7bztSaT+ZWD6EmAADQZ/bu//1ef/f+Pzvvbzvq/7WwW/8v0nX//yF6+OfyKKg1fPpL/x9qfoMR27eicKBsO2PEg9/fRvT/AAAAAAAAAAAAAAAAAAAAAAAcBRuum3BdNxFuw6+R4AGP8HOv68TBaPPnH74Q4HIPS8Y+qntwLyZivVjOLef8rT+fyUtBLDFlUhLy07seAv545lp2elI9SXlnrQT5leVcRDavoUxUCluLJcP8gPcYmp8/88+Un9fG/LDE69dPS0L+bb5+umk+KhfO1+VTkpCP96UsliyKfAkuaC//bEr16o3stvzo5nEAAAAAABwLKd2y4/7dm/cOiMnOeT/fxv8Htt1fD8mpVl5RCQAAAAAAuuZUnxQNyzLtDgYjItJF/LgOItIXZWwbXBGRTuLxfii+/UFMRPw92kn821a8pZTbwjFDItLz09LGoNd/mQAAAADstz9NfxuhT88PsCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6eVt8HFh6/Yyqc2CNet1zk0L9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoI/8DgAA///REBf+") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 534.065417ms ago: executing program 4 (id=2907): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="b98256db3224cdf4f7e3201c7863b17c71c6b4dc23e09bd5001a76e98ef5a8b083a68a3772b212847be4b0b055856e1e5eb7e8531cf0452bac65e4c2f634a52d4177c4dfca3edc5107342e046363d2f911a8ad16495c1af72c024963d59fbfa5fe17d74de95a81e5cb964c6fcf20c4eb756d96830257b94c0c8af17a95a9f1c3c8a1e16359a48febdaa71a3b772e51e196d8ad360786cd5eb19d253b5b4a8a0ab7031403b4a271a38d74dae789963c22e4594917e76a6f0cfbd3aaac43307e11d394cd78d0093cdc1b3c6b8d3208a735672a8ac1b9cbaaabffa3c2336e65af340da2061d7ef32c85c1063af439c0a65cd88e07d7904579231dc83579ee770555", 0x100}, {&(0x7f00000004c0)="11c3e85bb11156cebf92df3b65b0577f2b166c27f4f6039ffb1868f500563e23304abb42db743441f726812f068589a9e7619869322e83f1f5a94a7caef127a049f12aaeea3082bb2cb14f706466ca424b65ed6455c6a402abcf9bd088166f33f68caab04d6d8ab11d2b59db21ee339c5e95bf549d9545676717e16d0a46ef0e21fc90f3f42e7d23ad1ede7673bc5bde99df928e46e25366db886525ab80ef54836d05b03d0b4bfe7a6a614713", 0xad}, {&(0x7f0000000600)="7580ff2c23d417c0523db9788ad47ce8cd0c223ea553b6beee3dcfe23ec24218c2d0c7e6885771ba032d6a67201525e6e244161902c6fcc02048d249ed49be1f476c74db262eb68b5eb23954d8bc0854e687203e030ab6350701ecfd92eb9426e36da9fc52f6190f1a0a9f5460d1615e9bbb3c67fa7371591c8a6517c55fcbf0aaa6a97cbd", 0x85}, {&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebcc997799498f98ef0b749ecc8eba4bd4186d32e085fb138a2436a1797e41f041ff7c750a8c9e24bc892c38fb50e6dd842bba05913401ae1c30cb8ea803aa8d8bc335a9b0a8dc8897d7900fd31844f0c58037700c3ce36e6d38ec3f571c36ecf02e4f7ba2187907201a5edf75900ea24c56f4b2f453054972f92abe0a3a57267600c7a700fad32317e4cfdf8c25bed691274ca9fec371c6bd3dd00f15dc2d4e9dd17699a099d14f5ee5b3932061f3b51f72d3ad7b5627838", 0xe2}, {&(0x7f00000008c0)="26b80df6eca985188e62a64122b2d4bb8b5b22176766e8679e35a5c8813a9a246766e96f9ed22e3dc371cf1bedeaa8521b186cf551eab0cce8c2fc9b4832e9a29fd64b78da1ac7611be5fd8e427758ebed1cd0dd69f5b0bf9a198fb16284f10d870ff83660ff1dfb076fff863368a9c8f3c17e45b86e52264b429d732dc87683eb30feff97872ceb22143ff169522872822dcca0963c11faff9db65c635905906f302710f9bda57002b2e1fa8fc2f47cf692cf582e249f7a3d22889e71e00bebdd067afd7b18b99dc953f24e320e", 0xce}], 0x5}, 0xc0d0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 384.988291ms ago: executing program 0 (id=2908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x4e24, 0x1000, @empty}, 0x1c) mmap(&(0x7f0000134000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x70846000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000d7c000/0x4000)=nil) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) shmat(0x0, &(0x7f0000df6000/0x1000)=nil, 0x4000) 316.807773ms ago: executing program 0 (id=2909): bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000002c0)={0x1, "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"}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x6, 0xfffffffd, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 316.398982ms ago: executing program 0 (id=2910): mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) 288.718833ms ago: executing program 5 (id=2911): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x1b95ef2a8c14edc7) write$binfmt_elf32(r1, 0x0, 0x38) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 270.605314ms ago: executing program 0 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 201.442385ms ago: executing program 5 (id=2913): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x400003, @loopback, 0x2}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 167.421576ms ago: executing program 0 (id=2914): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) close(0x3) r2 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 167.015376ms ago: executing program 7 (id=2915): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 137.735137ms ago: executing program 5 (id=2916): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 137.218417ms ago: executing program 7 (id=2917): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) unshare(0x8000400) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f00000001c0)=0x8, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000780)={@remote, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x2, 0x6, "ba5740", 0xd47, 0x3a, 0x1, @mcast1, @private0, {[@srh={0x88, 0xe, 0x4, 0x7, 0x7, 0x10, 0x3, [@dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0xf}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @remote]}, @routing={0x2e, 0xa, 0x2, 0x6, 0x0, [@local, @local, @remote, @private2, @dev={0xfe, 0x80, '\x00', 0x19}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x0, 0x8, 0x0, [@rand_addr=' \x01\x00', @local]}, @dstopts={0x73, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo={0xc2, 0x4, 0x2000200}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @dstopts={0x5e, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xbc9a}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x1, [0x2, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x25, "a224307e7e54e3a37d1f94b9c7dbaf75a9968af9d8c80cfe4320d16d2bb58151641b516501"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfffb}, @ra={0x5, 0x2, 0xfffe}]}, @dstopts={0x21, 0x22, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x3c0, [0x8, 0x1, 0x6, 0x2, 0x97, 0x3ff, 0xffffffffffff2ed1, 0x0, 0xfffffffffffffff8]}}, @generic={0xb, 0xb6, "dda10aa03c7aa6b73885317f97c341443bf5494007647e967220a6152dc72613f1a4441465d2fd971e6f91d2586489e7e65e9397ee5a8f1f61dbdb7471aba1ab6b04415400c2cb0e6198bff120d0c3cb6b50177cc54c00e795bf66f820dc24f7ac39dd326ff3ce3342ebb16d3e4348f6c08989ccd8a3d02584ab8a50bc4bec8d18e77e3472ab9715974406626b9ccd9ab70f060be6b8832481245c6f77b5d99e0de5c73d8886383ff22c9493ac83e4c39a5344a58f0c"}, @pad1, @ra={0x5, 0x2, 0x3}]}, @srh={0xc, 0x12, 0x4, 0x9, 0x5, 0x20, 0x1000, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @empty, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x86, 0x50, 0x6, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}]}, @dstopts={0x73, 0x10b, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x101, [0xffffffffffff8001, 0x7f]}}, @generic={0x8, 0x83d, "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"}]}, @routing={0x0, 0x2, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x0, 0xa, "a32699178d08965fb6952ee29193e279e51e9d9834f6d2de1944ff1024ef42c11df3c8cee556ed01a383be596da0f8231bcc3441baa773e24d46104a45ee8070584291d8ab93491d178fa2cb509a"}, {0x5, 0x1b, "15ccf20a9b35a572f5377959b012a71a7d6bcf2f5380540798818fcf78446fd8209d14b4432f53395c8feb718a8fa22373d362e7ac9b15445920097ac11168b1516a49c0bdba7f657e65a52ae700a84dd8ff0b002a9d14a80e05622bc324c113d3ad5a277d267498204dc384894938ed020beffb41f72b40296607649792260cb89b735ce34387f31565bfed18b7c505bb73bdee5df087a852275ce42514d1a15d0d794e8060213377e7d17e24d2def797bfc426001526f9d7a36ed4f8537f0c5ab3f9c8f1376767680f2f3d2dd44e29ccb2c56ff589cc6ab2b2e0194a"}]}}}}}}}, 0x0) 121.064787ms ago: executing program 5 (id=2918): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) creat(0x0, 0xd931d3864d39dcdb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x23, 0x80805, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000010) fsopen(0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000600)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 15.03518ms ago: executing program 7 (id=2919): setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x100000000}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@getlink={0x28, 0x12, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8120, 0x6002}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xb6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000880)=ANY=[], 0x0) syz_emit_ethernet(0x72, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev}]}]}}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x1, 0x7) 0s ago: executing program 4 (id=2920): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x2, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x580, &(0x7f0000000380)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/time_for_children\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002aa47000fedbdf252ae7000008002a000600001314002b800500020002000000000000000100000008000300", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x20008044}, 0x4800) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): 85296325.250:1134): avc: denied { write } for pid=7670 comm="syz.8.1349" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.590539][ T6052] net_ratelimit: 14 callbacks suppressed [ 109.590551][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.612321][ T28] audit: type=1400 audit(1785296325.250:1135): avc: denied { append } for pid=7670 comm="syz.8.1349" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.653631][ T7699] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 109.653643][ T28] audit: type=1400 audit(1785296325.330:1136): avc: denied { mounton } for pid=7670 comm="syz.8.1349" path="/128/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.685391][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.699310][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.754391][ T3460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.802395][ T7705] loop8: detected capacity change from 0 to 1024 [ 109.810531][ T7705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.821189][ T7705] EXT4-fs: inline encryption not supported [ 109.827241][ T7705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.852697][ T7705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.865240][ T7705] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.883801][ T7705] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1360: bg 0: block 3: invalid block bitmap [ 109.898901][ T28] audit: type=1400 audit(1785296325.530:1137): avc: denied { write } for pid=7704 comm="syz.8.1360" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.900289][ T7705] EXT4-fs (loop8): Remounting filesystem read-only [ 109.927790][ T357] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5075: inode #15: block 3: len 3: ext4_ext_map_blocks returned -30 [ 109.988077][ T7705] syz.8.1360 (7705) used greatest stack depth: 9648 bytes left [ 110.032615][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.097904][ T7710] loop8: detected capacity change from 0 to 512 [ 110.144805][ T7710] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 110.168481][ T7710] EXT4-fs (loop8): 1 truncate cleaned up [ 110.176144][ T7710] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.226707][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.360185][ T7715] loop8: detected capacity change from 0 to 4096 [ 110.473493][ T7708] Set syz1 is full, maxelem 65536 reached [ 110.613012][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 110.692324][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.717251][ T7738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7738 comm=syz.7.1374 [ 110.730613][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 110.914607][ T7754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1382'. [ 110.934025][ T3460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.984977][ T7755] loop8: detected capacity change from 0 to 512 [ 111.066297][ T7755] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1380: bg 0: block 393: padding at end of block bitmap is not set [ 111.083838][ T7755] loop8: lost filesystem error report for type 5 error -117 [ 111.084975][ T7755] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 111.093369][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 111.093428][ C0] EXT4-fs (loop8): initial error at time 1785296326: ext4_validate_block_bitmap:441 [ 111.093568][ C0] EXT4-fs (loop8): last error at time 1785296326: ext4_validate_block_bitmap:441 [ 111.161474][ T7755] loop8: lost filesystem error report for type 5 error -117 [ 111.163675][ T7755] EXT4-fs (loop8): 2 truncates cleaned up [ 111.212931][ T7755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.269757][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 111.269773][ T28] audit: type=1400 audit(1785296582.989:1141): avc: denied { write } for pid=7752 comm="syz.8.1380" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.338521][ T28] audit: type=1400 audit(1785296583.019:1142): avc: denied { create } for pid=7752 comm="syz.8.1380" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 111.378318][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.388830][ T28] audit: type=1400 audit(1785296583.049:1143): avc: denied { write } for pid=7752 comm="syz.8.1380" name=E91F7189591E9233614B dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 111.419311][ T28] audit: type=1326 audit(1785296583.139:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7793 comm="syz.0.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa04a29de99 code=0x0 [ 111.525699][ T7810] loop7: detected capacity change from 0 to 128 [ 111.536168][ T28] audit: type=1400 audit(1785296583.259:1145): avc: denied { ioctl } for pid=7804 comm="syz.5.1400" path="socket:[18015]" dev="sockfs" ino=18015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.549838][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.549838][ T7810] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 111.588178][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.588178][ T7810] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 111.601953][ T7810] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 111.610377][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.610377][ T7810] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 111.624078][ T7810] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 111.632769][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.632769][ T7810] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 111.646592][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.646592][ T7810] loop7: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 111.691182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.699794][ T7810] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 111.711976][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.711976][ T7810] loop7: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 111.725844][ T7810] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 111.735733][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.753359][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.753359][ T7810] loop7: rw=8912896, sector=154, nr_sectors = 16 limit=128 [ 111.767251][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.767251][ T7810] loop7: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 111.781281][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.781281][ T7810] loop7: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 111.795605][ T7810] syz.7.1403: attempt to access beyond end of device [ 111.795605][ T7810] loop7: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 112.141108][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.396505][ T7826] bridge_slave_0: left allmulticast mode [ 112.407720][ T7826] bridge_slave_0: left promiscuous mode [ 112.420335][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.440056][ T7826] bridge_slave_1: left allmulticast mode [ 112.447436][ T7826] bridge_slave_1: left promiscuous mode [ 112.461607][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.474787][ T7826] bond0: (slave bond_slave_0): Releasing backup interface [ 112.498435][ T7826] bond0: (slave bond_slave_1): Releasing backup interface [ 112.523128][ T7826] team0: Port device team_slave_0 removed [ 112.543779][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.565920][ T7826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.611896][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.622534][ T7826] bond2: (slave bond3): Releasing backup interface [ 112.636659][ T7828] team0: Mode changed to "loadbalance" [ 112.653501][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 112.704456][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 112.960264][ T28] audit: type=1400 audit(1785296584.679:1146): avc: denied { nlmsg_write } for pid=7854 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.971732][ T7857] xt_hashlimit: size too large, truncated to 1048576 [ 113.026832][ T28] audit: type=1400 audit(1785296584.679:1147): avc: denied { audit_write } for pid=7854 comm="syz.4.1419" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.083110][ T28] audit: type=1107 audit(1785296584.689:1148): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 113.328933][ T28] audit: type=1400 audit(1785296585.039:1149): avc: denied { name_bind } for pid=7867 comm="syz.8.1433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.820748][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1435'. [ 113.950364][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 113.969284][ T7910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.983668][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 114.128802][ T7910] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 114.294394][ T28] audit: type=1400 audit(1785296586.019:1150): avc: denied { ioctl } for pid=7930 comm="syz.8.1451" path="/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.356738][ T7939] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 114.409665][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1456'. [ 114.504351][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1462'. [ 114.528766][ T7959] bond3: entered promiscuous mode [ 114.536049][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.554947][ T7959] bridge1: entered promiscuous mode [ 114.562104][ T7959] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 114.598900][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1464'. [ 114.642379][ T7972] team0: Port device team_slave_1 removed [ 114.825253][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1475'. [ 114.840516][ T7997] bond6: entered promiscuous mode [ 114.845848][ T7997] 8021q: adding VLAN 0 to HW filter on device bond6 [ 114.854151][ T6074] net_ratelimit: 6 callbacks suppressed [ 114.854160][ T6074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.877667][ T7997] bridge2: entered promiscuous mode [ 114.884687][ T7997] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 115.258906][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1d6a00: rx timeout, send abort [ 115.553763][ T3460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.665565][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.758959][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab8ee00: rx timeout, send abort [ 115.767308][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1d6a00: abort rx timeout. Force session deactivation [ 115.893125][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.142592][ T6056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.187833][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 116.197826][ T8027] netlink: 'syz.0.1487': attribute type 19 has an invalid length. [ 116.225635][ T8027] netlink: 'syz.0.1487': attribute type 19 has an invalid length. [ 116.263174][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881295eba00: rx timeout, send abort [ 116.271849][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.274620][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881295eba00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 116.283392][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.294976][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab8ee00: abort rx timeout. Force session deactivation [ 116.368941][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 116.369001][ T28] audit: type=1326 audit(1785296588.089:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8037 comm="syz.8.1491" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x0 [ 116.369747][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.411380][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.412099][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.431011][ T8040] loop8: detected capacity change from 0 to 512 [ 116.455442][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.464820][ T8040] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1491: iget: bad i_size value: 38620345925642 [ 116.488123][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.504892][ T8040] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.506678][ T8040] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1491: couldn't read orphan inode 15 (err -117) [ 116.514225][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.515942][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 116.542186][ C0] EXT4-fs (loop8): initial error at time 1785296588: ext4_orphan_get:1399: inode 15 [ 116.549631][ T8036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.551616][ C0] EXT4-fs (loop8): last error at time 1785296588: ext4_orphan_get:1399: inode 15 [ 116.569172][ T8040] loop8: lost filesystem error report for type 5 error -117 [ 116.571910][ T8040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.612501][ T28] audit: type=1400 audit(1785296588.329:1159): avc: denied { write } for pid=8037 comm="syz.8.1491" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.662679][ T8047] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1491: bg 0: block 5: invalid block bitmap [ 116.683077][ T28] audit: type=1400 audit(1785296588.409:1160): avc: denied { shutdown } for pid=8049 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 116.711529][ T8047] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 116.750140][ T8047] EXT4-fs (loop8): This should not happen!! Data will be lost [ 116.750140][ T8047] [ 116.777852][ T8047] EXT4-fs (loop8): Total free blocks count 0 [ 116.788647][ T8058] netlink: 'syz.4.1497': attribute type 1 has an invalid length. [ 116.796751][ T8047] EXT4-fs (loop8): Free/Dirty block details [ 116.810508][ T8047] EXT4-fs (loop8): free_blocks=0 [ 116.815079][ T8058] 8021q: adding VLAN 0 to HW filter on device bond7 [ 116.816317][ T8047] EXT4-fs (loop8): dirty_blocks=684 [ 116.828027][ T8047] EXT4-fs (loop8): Block reservation details [ 116.835551][ T8047] EXT4-fs (loop8): i_reserved_data_blocks=684 [ 116.857974][ T8058] dummy0: left promiscuous mode [ 116.867661][ T8058] bond7: (slave dummy0): making interface the new active one [ 116.876521][ T8058] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 116.898655][ T8058] : renamed from dummy0 (while UP) [ 117.227647][ T3460] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 676 with error 28 [ 117.256127][ T5589] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 117.842882][ T8117] netlink: 'syz.7.1521': attribute type 1 has an invalid length. [ 117.880770][ T8117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.920348][ T8117] vlan0: entered allmulticast mode [ 117.941135][ T8117] bond1: entered allmulticast mode [ 117.969918][ T8117] bond1: (slave geneve2): making interface the new active one [ 117.977745][ T8117] geneve2: entered allmulticast mode [ 117.984737][ T8117] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.027836][ T8124] __nla_validate_parse: 5 callbacks suppressed [ 118.027849][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1525'. [ 118.093344][ T8130] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.1527'. [ 118.735028][ T8156] bridge0: port 1(syz_tun) entered blocking state [ 118.741751][ T8156] bridge0: port 1(syz_tun) entered disabled state [ 118.751978][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 118.761165][ T8156] syz_tun: entered allmulticast mode [ 118.767119][ T8156] syz_tun: entered promiscuous mode [ 118.781463][ T8156] bridge0: port 1(syz_tun) entered blocking state [ 118.788047][ T8156] bridge0: port 1(syz_tun) entered forwarding state [ 118.801836][ T8159] bridge0: port 1(syz_tun) entered disabled state [ 119.115581][ T8169] loop8: detected capacity change from 0 to 4096 [ 119.129370][ T8169] EXT4-fs: test_dummy_encryption option not supported [ 119.234572][ T8177] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 119.276678][ T8173] netlink: 'syz.0.1543': attribute type 4 has an invalid length. [ 119.345565][ T28] audit: type=1400 audit(1785296591.069:1161): avc: denied { accept } for pid=8172 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 119.565444][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.575003][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.592566][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.612478][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.642836][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.664992][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.693914][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.722505][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.855396][ T8191] geneve2: entered promiscuous mode [ 119.861759][ T8193] bridge0: port 3(syz_tun) entered blocking state [ 119.880003][ T8193] bridge0: port 3(syz_tun) entered disabled state [ 119.892803][ T8193] syz_tun: entered allmulticast mode [ 119.900309][ T8193] syz_tun: entered promiscuous mode [ 119.907374][ T8193] bridge0: port 3(syz_tun) entered blocking state [ 119.913865][ T8193] bridge0: port 3(syz_tun) entered forwarding state [ 119.930540][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.939634][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.949825][ T8196] bridge0: port 3(syz_tun) entered disabled state [ 119.956348][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.963549][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.980573][ T8195] sctp: [Deprecated]: syz.0.1552 (pid 8195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.980573][ T8195] Use struct sctp_sack_info instead [ 119.985201][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.027426][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.051892][ T6046] net_ratelimit: 23 callbacks suppressed [ 120.051907][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.076374][ T8201] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1554'. [ 120.111664][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.120297][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.128653][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.216450][ T8203] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 120.243963][ T8203] bond4: entered allmulticast mode [ 120.265847][ T8209] ip6gretap1: entered promiscuous mode [ 120.331836][ T8209] ip6gretap1: entered allmulticast mode [ 120.346179][ T8209] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.371495][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.434308][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.451558][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.471400][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.485150][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.504643][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.654003][ T8241] loop7: detected capacity change from 0 to 128 [ 120.671545][ T8241] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.756297][ T8249] tipc: Started in network mode [ 120.774481][ T8249] tipc: Node identity 2007ff, cluster identity 4711 [ 120.793466][ T28] audit: type=1326 audit(1785296592.519:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.8.1571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 120.801709][ T8249] tipc: Node number set to 2099199 [ 120.880543][ T28] audit: type=1326 audit(1785296592.549:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.8.1571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 120.937282][ T28] audit: type=1326 audit(1785296592.589:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.8.1571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 120.983855][ T28] audit: type=1326 audit(1785296592.589:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.8.1571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 121.027002][ T8260] loop4: detected capacity change from 0 to 7 [ 121.038108][ T8260] loop4: [ 121.087007][ T28] audit: type=1400 audit(1785296592.809:1166): avc: denied { create } for pid=8264 comm="syz.7.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.129511][ T28] audit: type=1400 audit(1785296592.809:1167): avc: denied { write } for pid=8264 comm="syz.7.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.145659][ T8269] netlink: 'syz.8.1580': attribute type 4 has an invalid length. [ 121.157076][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1580'. [ 121.158311][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1582'. [ 121.183055][ T8271] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1582'. [ 121.248721][ T8280] IPVS: set_ctl: invalid protocol: 44 172.20.20.20:20004 [ 121.326591][ T8288] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.1587'. [ 121.390487][ T8295] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.404968][ T8295] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.531502][ T8298] loop8: detected capacity change from 0 to 1024 [ 122.162436][ T8314] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 122.171774][ T8314] bond2: entered allmulticast mode [ 122.185273][ T8314] ip6gretap1: entered promiscuous mode [ 122.192634][ T8314] ip6gretap1: entered allmulticast mode [ 122.198437][ T8314] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 122.315214][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 122.337986][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 122.391873][ T8337] bond2: left allmulticast mode [ 122.430435][ T8337] ip6gretap1: left allmulticast mode [ 122.448238][ T8337] ip6gretap1: left promiscuous mode [ 122.455024][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.468060][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.484510][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.502095][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.521188][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.551715][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.565316][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.574289][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.607853][ T8350] infiniband syz0: set down [ 122.612406][ T8350] infiniband syz0: added ipvlan0 [ 122.623835][ T8350] RDS/IB: syz0: added [ 122.630334][ T8350] smc: adding ib device syz0 with port count 1 [ 122.636699][ T8350] smc: ib device syz0 port 1 has no pnetid [ 123.263074][ T8372] bond2: option ad_actor_sys_prio: invalid value (0) [ 123.269789][ T8372] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 123.278527][ T8372] bond2 (unregistering): Released all slaves [ 123.375394][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1626'. [ 123.909653][ T8442] tmpfs: Bad value for 'mpol' [ 124.307061][ T8463] bridge0: port 1(syz_tun) entered blocking state [ 124.313551][ T8463] bridge0: port 1(syz_tun) entered listening state [ 124.322098][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.340861][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.356073][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.418479][ T8463] veth1_vlan: left promiscuous mode [ 124.424510][ T8463] veth0_vlan: left promiscuous mode [ 124.438991][ T8463] veth0_vlan: entered promiscuous mode [ 124.449465][ T8463] veth1_vlan: entered promiscuous mode [ 124.463580][ T8463] geneve1: left promiscuous mode [ 124.469956][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.479121][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.488024][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.497022][ T8463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.520065][ T8463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.560676][ T8463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.568828][ T8463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.590936][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 124.590950][ T28] audit: type=1400 audit(1785296596.279:1170): avc: denied { read } for pid=8470 comm="syz.7.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.622226][ T8463] geneve2: left promiscuous mode [ 124.627871][ T8463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.635635][ T8463] ip6gretap1: left promiscuous mode [ 124.660735][ T8475] tipc: Failed to remove unknown binding: 66,0,0/0:3332145774/3332145776 [ 124.672224][ T8475] tipc: Failed to remove unknown binding: 66,0,0/0:3332145774/3332145775 [ 124.681974][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.690869][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.710742][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.720011][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.746958][ T28] audit: type=1400 audit(1785296596.469:1171): avc: denied { read write } for pid=8481 comm="syz.7.1666" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.799874][ T8478] bond0: (slave bond_slave_1): Releasing backup interface [ 124.808774][ T28] audit: type=1400 audit(1785296596.469:1172): avc: denied { open } for pid=8481 comm="syz.7.1666" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.863149][ T49] bond4: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 124.872226][ T49] bond4: active interface up! [ 124.878991][ T8486] loop7: detected capacity change from 0 to 1024 [ 124.887326][ T8486] ext4: Invalid gid '0x00000000ffffffff' [ 125.121918][ T8499] netlink: 'syz.5.1674': attribute type 1 has an invalid length. [ 125.151341][ T8499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.159992][ T8499] bond3: (slave bond4): making interface the new active one [ 125.167922][ T8499] bond3: (slave bond4): Enslaving as an active interface with an up link [ 125.192447][ T8499] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 125.220882][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1674'. [ 125.238852][ T8499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.447200][ T8525] geneve3: entered promiscuous mode [ 125.535258][ T8535] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 125.535445][ T28] audit: type=1400 audit(1785296597.259:1173): avc: denied { mac_admin } for pid=8534 comm="syz.8.1687" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.568001][ T28] audit: type=1400 audit(1785296597.269:1174): avc: denied { relabelto } for pid=8534 comm="syz.8.1687" name="194" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 125.617519][ T28] audit: type=1400 audit(1785296597.269:1175): avc: denied { associate } for pid=8534 comm="syz.8.1687" name="194" dev="tmpfs" ino=1023 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 125.644721][ T28] audit: type=1326 audit(1785296597.289:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.7.1686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7fc00000 [ 125.670620][ T28] audit: type=1326 audit(1785296597.289:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8532 comm="syz.7.1686" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d3fc9de99 code=0x7fc00000 [ 125.696224][ T28] audit: type=1400 audit(1785296597.329:1178): avc: denied { write } for pid=5589 comm="syz-executor" name="194" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 125.722308][ T28] audit: type=1400 audit(1785296597.329:1179): avc: denied { remove_name } for pid=5589 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 125.751395][ T6052] net_ratelimit: 28 callbacks suppressed [ 125.751407][ T6052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.052518][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.060653][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.069045][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.077153][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.085758][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.093924][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.662693][ T8555] loop7: detected capacity change from 0 to 8192 [ 126.896610][ T8574] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 126.919534][ T8574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 126.950862][ T8574] bond8: entered promiscuous mode [ 126.962988][ T8574] bond8: entered allmulticast mode [ 126.993055][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1703'. [ 127.011164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.019338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.038455][ T8574] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 127.056601][ T8574] bond8: left promiscuous mode [ 127.073158][ T8574] bond8: left allmulticast mode [ 127.074691][ T8587] loop7: detected capacity change from 0 to 764 [ 127.089943][ T8574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 127.139896][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1709'. [ 127.165079][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 127.174830][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1713'. [ 127.221275][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.670556][ T8627] 9p: Bad value for 'rfdno' [ 127.749269][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1730'. [ 127.797563][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 128.300098][ T8687] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 128.332593][ T8687] bond9: entered promiscuous mode [ 128.337981][ T8687] 8021q: adding VLAN 0 to HW filter on device bond9 [ 128.357546][ T8687] bond9: (slave bridge3): making interface the new active one [ 128.367921][ T8687] bridge3: entered promiscuous mode [ 128.375039][ T8687] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 128.428463][ T8701] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 128.446420][ T8701] bond10: entered promiscuous mode [ 128.451750][ T8701] 8021q: adding VLAN 0 to HW filter on device bond10 [ 128.464238][ T8701] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.476719][ T8701] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 128.487126][ T8701] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 128.497421][ T8701] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 128.554764][ T8710] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.567397][ T8710] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 128.578704][ T8710] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 128.649697][ T8714] bond5: option ad_actor_sys_prio: invalid value (0) [ 128.656562][ T8714] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 128.665156][ T8714] bond5 (unregistering): Released all slaves [ 128.696036][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 128.717424][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 128.833762][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1765'. [ 128.912005][ T8754] cgroup: Unexpected value for 'nofavordynmods' [ 129.014604][ T8762] loop8: detected capacity change from 0 to 512 [ 129.021232][ T8762] EXT4-fs: dax option not supported [ 129.809246][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1779'. [ 129.874934][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 129.884372][ T28] kauditd_printk_skb: 2669 callbacks suppressed [ 129.884387][ T28] audit: type=1326 audit(1785296601.609:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 129.944671][ T28] audit: type=1326 audit(1785296601.609:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 129.970349][ T28] audit: type=1326 audit(1785296601.609:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 129.996511][ T28] audit: type=1326 audit(1785296601.609:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.022208][ T28] audit: type=1326 audit(1785296601.649:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.052618][ T28] audit: type=1326 audit(1785296601.669:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.078798][ T28] audit: type=1326 audit(1785296601.729:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.113918][ T28] audit: type=1326 audit(1785296601.729:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.153083][ T28] audit: type=1326 audit(1785296601.729:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.192971][ T28] audit: type=1326 audit(1785296601.779:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.7.1783" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x7ffc0000 [ 130.220646][ T8801] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1792'. [ 130.415316][ T8815] loop8: detected capacity change from 0 to 512 [ 130.433177][ T8815] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 130.456786][ T8815] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1798: invalid indirect mapped block 32768 (level 2) [ 130.475084][ T8815] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 130.475313][ T8815] EXT4-fs (loop8): Remounting filesystem read-only [ 130.484549][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 130.484576][ C0] EXT4-fs (loop8): initial error at time 1785296602: ext4_free_branches:1023: inode 16 [ 130.484607][ C0] EXT4-fs (loop8): last error at time 1785296602: ext4_free_branches:1023: inode 16 [ 130.531873][ T8815] EXT4-fs (loop8): 1 orphan inode deleted [ 130.537636][ T8815] EXT4-fs (loop8): 1 truncate cleaned up [ 130.544032][ T8815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.577667][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 130.588385][ T8821] syz_tun: left allmulticast mode [ 130.593448][ T8821] syz_tun: left promiscuous mode [ 130.598553][ T8821] bridge0: port 3(syz_tun) entered disabled state [ 130.607775][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.618692][ T8821] bridge_slave_1: left allmulticast mode [ 130.624449][ T8821] bridge_slave_1: left promiscuous mode [ 130.630127][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.640758][ T8821] bridge_slave_0: left allmulticast mode [ 130.647680][ T8821] bridge_slave_0: left promiscuous mode [ 130.653520][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.712138][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 130.732064][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 130.962004][ T30] net_ratelimit: 25 callbacks suppressed [ 130.962021][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.975810][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.986651][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.994790][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.003277][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.011419][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.049404][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 131.174400][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.183452][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.195250][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.204307][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.213209][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.221298][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.231304][ T8869] batman_adv: batadv0: Interface deactivated: gretap1 [ 131.238164][ T8869] batman_adv: batadv0: Removing interface: gretap1 [ 132.099888][ T8930] netlink: 'syz.5.1835': attribute type 1 has an invalid length. [ 132.111268][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.119393][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.127588][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.135682][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.148001][ T8930] bond5: entered promiscuous mode [ 132.154148][ T8930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.166579][ T8933] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.182452][ T8933] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.193309][ T8933] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 132.216182][ T8933] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 132.235576][ T8930] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.248254][ T8930] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 132.259834][ T8930] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 132.278524][ T8940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.286854][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.297300][ T8940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.306203][ T8940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.544843][ T8993] macvlan2: entered promiscuous mode [ 133.562701][ T8993] bridge0: entered promiscuous mode [ 133.777281][ T9006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.997056][ T9015] loop7: detected capacity change from 0 to 512 [ 134.006118][ T9015] EXT4-fs: inline encryption not supported [ 134.024556][ T9015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 134.033893][ T9015] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1867: corrupted in-inode xattr: e_value size too large [ 134.050678][ T9015] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.050901][ T9015] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1867: couldn't read orphan inode 15 (err -117) [ 134.060116][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 134.060134][ C0] EXT4-fs (loop7): initial error at time 1785296605: ext4_iget_extra_inode:5180: inode 15 [ 134.060166][ C0] EXT4-fs (loop7): last error at time 1785296605: ext4_iget_extra_inode:5180: inode 15 [ 134.140016][ T9015] loop7: lost filesystem error report for type 5 error -117 [ 134.141212][ T9015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.306554][ T9024] __nla_validate_parse: 4 callbacks suppressed [ 134.306573][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1867'. [ 134.606366][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.120324][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 135.120378][ T28] audit: type=1400 audit(1785296606.839:3895): avc: denied { accept } for pid=9045 comm="syz.8.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.005907][ T28] audit: type=1400 audit(1785296607.719:3896): avc: denied { create } for pid=9063 comm="syz.8.1884" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.071914][ T28] audit: type=1400 audit(1785296607.759:3897): avc: denied { write } for pid=9063 comm="syz.8.1884" name="file0" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.128551][ T28] audit: type=1400 audit(1785296607.769:3898): avc: denied { open } for pid=9063 comm="syz.8.1884" path="/224/file0" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.173019][ T28] audit: type=1400 audit(1785296607.779:3899): avc: denied { ioctl } for pid=9063 comm="syz.8.1884" path="/224/file0" dev="tmpfs" ino=1183 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.245539][ T28] audit: type=1400 audit(1785296607.799:3900): avc: denied { unlink } for pid=5589 comm="syz-executor" name="file0" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 136.400590][ T9041] net_ratelimit: 22 callbacks suppressed [ 136.400611][ T9041] Set syz1 is full, maxelem 65536 reached [ 136.639049][ T9100] tipc: Enabling of bearer rejected, failed to enable media [ 136.871217][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.879369][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.888700][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.896897][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.934617][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.942831][ T357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.031235][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.049978][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.077569][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.179381][ T9118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.214329][ T9118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.254802][ T9118] veth1_vlan: left promiscuous mode [ 137.262358][ T9118] veth0_vlan: left promiscuous mode [ 137.272633][ T9118] veth0_vlan: entered promiscuous mode [ 137.281525][ T9118] veth1_vlan: entered promiscuous mode [ 137.300874][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.343490][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.382549][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.413151][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.444618][ T9118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.466484][ T40] bond2: (slave ip6gretap1): link status down again after 0 ms [ 137.484930][ T9118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.537560][ T9118] bond5: left promiscuous mode [ 137.569087][ T9118] macvlan2: left promiscuous mode [ 137.611396][ T40] bond2: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 137.662634][ T9132] loop7: detected capacity change from 0 to 128 [ 137.674000][ T40] bond2: active interface up! [ 137.706449][ T9132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 137.741012][ T9132] System zones: 1-3, 19-19, 35-36 [ 137.765447][ T9132] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.798860][ T6052] syz0: Port: 1 Link ACTIVE [ 137.806688][ T9122] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.838063][ T9122] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.858806][ T9132] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.902031][ T9122] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.918675][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 137.935183][ T9122] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.953759][ T9127] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1905'. [ 137.980044][ T9122] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.011169][ T9122] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.047291][ T9122] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.056143][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.064276][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.082349][ T9122] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.133483][ T5078] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.380671][ T9161] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 138.392482][ T9158] loop7: detected capacity change from 0 to 512 [ 138.401748][ T9158] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1916: iget: bad extended attribute block 1 [ 138.414251][ T9158] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.414568][ T9158] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1916: couldn't read orphan inode 15 (err -117) [ 138.423718][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 138.423754][ C0] EXT4-fs (loop7): initial error at time 1785296610: ext4_orphan_get:1399: inode 15 [ 138.423799][ C0] EXT4-fs (loop7): last error at time 1785296610: ext4_orphan_get:1399: inode 15 [ 138.460552][ T9158] loop7: lost filesystem error report for type 5 error -117 [ 138.463701][ T9158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.486385][ T9158] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 13: comm syz.7.1916: lblock 0 mapped to illegal pblock 13 (length 1) [ 138.575891][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.150130][ T9195] loop7: detected capacity change from 0 to 256 [ 139.382679][ T9202] loop7: detected capacity change from 0 to 512 [ 139.435318][ T9210] tipc: Enabling of bearer rejected, failed to enable media [ 139.565613][ T9202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.578185][ T9202] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.618266][ T28] audit: type=1400 audit(1785296611.339:3901): avc: denied { write } for pid=9201 comm="syz.7.1933" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.703375][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.875008][ T28] audit: type=1400 audit(1785296611.599:3902): avc: denied { create } for pid=9247 comm="syz.8.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.925904][ T28] audit: type=1400 audit(1785296611.639:3903): avc: denied { bind } for pid=9247 comm="syz.8.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.401663][ T28] audit: type=1400 audit(1785296612.119:3904): avc: denied { write } for pid=9253 comm="syz.0.1965" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.446798][ T9257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.764034][ T28] audit: type=1400 audit(1785296612.489:3905): avc: denied { map } for pid=9258 comm="syz.0.1968" path="socket:[26064]" dev="sockfs" ino=26064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.845010][ T9265] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1958'. [ 141.170111][ T9286] loop7: detected capacity change from 0 to 512 [ 141.178373][ T9286] EXT4-fs: inline encryption not supported [ 141.184262][ T9286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.208191][ T9286] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 141.263675][ T9286] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -ENXIO [ 141.271178][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1971'. [ 142.465189][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1987'. [ 142.530358][ T9339] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 142.578196][ T9339] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 142.877624][ T9337] loop8: detected capacity change from 0 to 764 [ 142.903440][ T9337] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 143.002806][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 143.061839][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.070695][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.079978][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.088979][ T68] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 143.169023][ T28] audit: type=1400 audit(1785296614.889:3906): avc: denied { name_bind } for pid=9368 comm="syz.4.2001" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 144.100972][ T9394] tipc: Enabled bearer , priority 0 [ 144.305943][ T9407] netlink: 'syz.7.2016': attribute type 10 has an invalid length. [ 145.498062][ T6053] tipc: Node number set to 3747224326 [ 145.559285][ T9435] tipc: Enabled bearer , priority 0 [ 146.298724][ T9453] netlink: 'syz.7.2033': attribute type 39 has an invalid length. [ 149.001344][ T6073] tipc: Node number set to 3664630468 [ 149.037521][ T9461] loop8: detected capacity change from 0 to 1024 [ 149.049991][ T9461] EXT4-fs: Ignoring removed bh option [ 149.166383][ T9461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.267629][ T9461] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.295887][ T28] audit: type=1400 audit(1785296620.989:3907): avc: denied { shutdown } for pid=9459 comm="syz.8.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.325511][ T28] audit: type=1400 audit(1785296620.989:3908): avc: denied { write } for pid=9459 comm="syz.8.2045" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.364443][ T28] audit: type=1400 audit(1785296620.989:3909): avc: denied { map } for pid=9459 comm="syz.8.2045" path="/245/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.390773][ T28] audit: type=1400 audit(1785296620.989:3910): avc: denied { execute } for pid=9459 comm="syz.8.2045" path="/245/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.649193][ T9501] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 151.351836][ T3746] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 151.372189][ T3746] CPU: 0 UID: 0 PID: 3746 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 151.372216][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.372230][ T3746] Call Trace: [ 151.372238][ T3746] [ 151.372318][ T3746] __dump_stack+0x1d/0x30 [ 151.372344][ T3746] dump_stack_lvl+0x95/0xd0 [ 151.372427][ T3746] dump_stack+0x15/0x1b [ 151.372449][ T3746] dump_header+0x80/0x240 [ 151.372469][ T3746] oom_kill_process+0x295/0x350 [ 151.372531][ T3746] out_of_memory+0x981/0xbc0 [ 151.372632][ T3746] try_charge_memcg+0x621/0xa00 [ 151.372707][ T3746] charge_memcg+0x6d/0x120 [ 151.372735][ T3746] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 151.372769][ T3746] swap_cache_alloc_folio+0x47b/0x5e0 [ 151.372808][ T3746] swap_cluster_readahead+0x2b1/0x460 [ 151.372901][ T3746] swapin_readahead+0xd8/0x8a0 [ 151.372931][ T3746] ? _raw_spin_unlock+0x9/0x30 [ 151.372978][ T3746] ? swap_put_entries_cluster+0x49c/0x4c0 [ 151.373003][ T3746] ? __entry_text_end+0xf208/0x102179 [ 151.373075][ T3746] ? __rcu_read_unlock+0x4e/0x70 [ 151.373102][ T3746] ? swap_cache_get_folio+0x1f7/0x200 [ 151.373131][ T3746] do_swap_page+0x2a2/0x1ec0 [ 151.373194][ T3746] ? __css_rstat_updated+0xbb/0x280 [ 151.373217][ T3746] ? __rcu_read_lock+0x36/0x50 [ 151.373298][ T3746] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 151.373342][ T3746] handle_mm_fault+0xb3c/0x2da0 [ 151.373381][ T3746] do_user_addr_fault+0x634/0x1060 [ 151.373417][ T3746] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 151.373523][ T3746] ? trace_page_fault_user+0x1f/0xa0 [ 151.373652][ T3746] exc_page_fault+0x62/0xa0 [ 151.373850][ T3746] asm_exc_page_fault+0x26/0x30 [ 151.373867][ T3746] RIP: 0033:0x7fe56c77ece0 [ 151.373882][ T3746] Code: 49 81 c0 00 36 65 c4 4c 89 45 c8 ff c2 49 81 f8 ff c9 9a 3b 77 ea 89 d2 eb 02 31 d2 48 01 ca 48 89 16 4c 89 46 08 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 a8 60 0f 84 30 02 00 00 89 fa 48 [ 151.373902][ T3746] RSP: 002b:00007ffcedcb1fa8 EFLAGS: 00010202 [ 151.373921][ T3746] RAX: 0000000000000000 RBX: 7fffffffffffffff RCX: 0000000000000097 [ 151.373936][ T3746] RDX: 0000000000000097 RSI: 00007ffcedcb2080 RDI: 0000000000000001 [ 151.374012][ T3746] RBP: 00007ffcedcb1fd0 R08: 000000001257518f R09: 3fffffffffffffff [ 151.374025][ T3746] R10: 4000000000000000 R11: 0000000000000202 R12: 00007fe56c778000 [ 151.374038][ T3746] R13: 0000000000000010 R14: 00007fe56c778038 R15: 0000000000006132 [ 151.374060][ T3746] [ 151.374079][ T3746] memory: usage 307200kB, limit 307200kB, failcnt 713 [ 151.631659][ T3746] memory+swap: usage 114780kB, limit 9007199254740988kB, failcnt 0 [ 151.658572][ T3746] kmem: usage 107392kB, limit 9007199254740988kB, failcnt 0 [ 151.702942][ T3746] Memory cgroup stats for /syz5: [ 151.703175][ T3746] cache 6000640 [ 151.742485][ T3746] rss 9543680 [ 151.750204][ T3746] shmem 0 [ 151.762519][ T3746] mapped_file 5996544 [ 151.766575][ T3746] dirty 0 [ 151.769496][ T3746] writeback 0 [ 151.772793][ T3746] workingset_refault_anon 1369 [ 151.777561][ T3746] workingset_refault_file 1228 [ 151.812508][ T3746] swap 192512 [ 151.821122][ T3746] swapcached 8798208 [ 151.831135][ T3746] pgpgin 137898 [ 151.841203][ T3746] pgpgout 134102 [ 151.851107][ T3746] pgfault 126112 [ 151.856566][ T3746] pgmajfault 2260 [ 151.860213][ T3746] inactive_anon 0 [ 151.863907][ T3746] active_anon 4096 [ 151.868930][ T3746] inactive_file 0 [ 151.873576][ T3746] active_file 4096 [ 151.877293][ T3746] unevictable 15540224 [ 151.881438][ T3746] hierarchical_memory_limit 314572800 [ 151.886875][ T3746] hierarchical_memsw_limit 9223372036854771712 [ 151.893073][ T3746] total_cache 6000640 [ 151.897196][ T3746] total_rss 9543680 [ 151.901000][ T3746] total_shmem 0 [ 151.905013][ T3746] total_mapped_file 5996544 [ 151.909713][ T3746] total_dirty 0 [ 151.913236][ T3746] total_writeback 0 [ 151.917044][ T3746] total_workingset_refault_anon 1369 [ 151.923532][ T3746] total_workingset_refault_file 1228 [ 151.928819][ T3746] total_swap 192512 [ 151.932720][ T3746] total_swapcached 8798208 [ 151.937194][ T3746] total_pgpgin 137898 [ 151.941253][ T3746] total_pgpgout 134102 [ 151.945320][ T3746] total_pgfault 126112 [ 151.949384][ T3746] total_pgmajfault 2260 [ 151.953736][ T3746] total_inactive_anon 0 [ 151.957897][ T3746] total_active_anon 4096 [ 151.962174][ T3746] total_inactive_file 0 [ 151.966426][ T3746] total_active_file 4096 [ 151.970663][ T3746] total_unevictable 15540224 [ 151.975978][ T3746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2053,pid=9506,uid=0 [ 151.990728][ T3746] Memory cgroup out of memory: OOM victim 9506 (syz.5.2053) is already exiting. Skip killing the task [ 152.022625][ T9510] 9pnet_fd: p9_fd_create_unix (9510): problem connecting socket: ./file0: -111 [ 152.071624][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.181222][ T9522] sctp: [Deprecated]: syz.8.2058 (pid 9522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.181222][ T9522] Use struct sctp_sack_info instead [ 152.329360][ T9546] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2068'. [ 152.403585][ T9555] sctp: [Deprecated]: syz.4.2073 (pid 9555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.403585][ T9555] Use struct sctp_sack_info instead [ 152.493769][ T9572] syzkaller0: entered promiscuous mode [ 152.504101][ T9572] syzkaller0: entered allmulticast mode [ 152.948014][ T9624] netlink: 'syz.4.2097': attribute type 11 has an invalid length. [ 153.030973][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.045288][ T9632] bridge_slave_0 (unregistering): left allmulticast mode [ 153.059627][ T9632] bridge_slave_0 (unregistering): left promiscuous mode [ 153.067118][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.111334][ T9645] uprobe: syz.4.2106:9645 failed to unregister, leaking uprobe [ 153.123302][ T9645] uprobe: syz.4.2106:9645 failed to unregister, leaking uprobe [ 153.180575][ T9654] loop8: detected capacity change from 0 to 128 [ 153.194571][ T9654] EXT4-fs: Ignoring removed orlov option [ 153.204374][ T9654] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.218157][ T9654] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.232078][ T28] audit: type=1400 audit(1785296624.959:3911): avc: denied { write } for pid=9653 comm="syz.8.2110" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.263320][ T28] audit: type=1400 audit(1785296624.989:3912): avc: denied { setattr } for pid=9653 comm="syz.8.2110" path="/258/file1/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.297084][ T28] audit: type=1400 audit(1785296625.019:3913): avc: denied { map } for pid=9653 comm="syz.8.2110" path="/258/file1/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.358691][ T5589] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.420243][ T9678] netlink: 'syz.0.2119': attribute type 3 has an invalid length. [ 153.428009][ T9678] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2119'. [ 153.622966][ T9676] loop8: detected capacity change from 0 to 1024 [ 153.649956][ T6053] IPVS: starting estimator thread 0... [ 153.743151][ T9676] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.761508][ T9686] IPVS: using max 2304 ests per chain, 115200 per kthread [ 153.770178][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 153.849545][ T28] audit: type=1400 audit(1785296625.569:3914): avc: denied { write } for pid=9675 comm="syz.8.2116" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.970426][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.069152][ T28] audit: type=1400 audit(1785296625.789:3915): avc: denied { create } for pid=9706 comm="syz.8.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.108923][ T9713] 9pnet_fd: p9_fd_create_unix (9713): problem connecting socket: ./file0: -111 [ 154.128255][ T28] audit: type=1400 audit(1785296625.829:3916): avc: denied { setopt } for pid=9706 comm="syz.8.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.261358][ T9718] netlink: 'syz.7.2131': attribute type 1 has an invalid length. [ 154.275098][ T9718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.289751][ T9718] bond2: (slave dummy0): making interface the new active one [ 154.298062][ T9718] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 154.309515][ T9718] : renamed from dummy0 (while UP) [ 154.561054][ C1] bridge0: port 1(syz_tun) entered learning state [ 155.882382][ T9768] gretap1: left promiscuous mode [ 155.892487][ T9768] team1: left promiscuous mode [ 155.906316][ T9768] team2: left promiscuous mode [ 155.936487][ T9768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.962723][ T9768] bond6: left promiscuous mode [ 155.976875][ T9768] bridge2: left promiscuous mode [ 156.044358][ T9768] bond9: left promiscuous mode [ 156.061520][ T9768] bridge3: left promiscuous mode [ 156.069054][ T9768] bond10: left promiscuous mode [ 156.081858][ T49] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 156.093668][ T49] net_ratelimit: 4 callbacks suppressed [ 156.093681][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.143029][ T49] bond3: active interface up! [ 156.241898][ T28] audit: type=1400 audit(1785296627.959:3917): avc: denied { mounton } for pid=9770 comm="syz.4.2147" path="/file0" dev="bpf" ino=27321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=file permissive=1 [ 156.350179][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2149'. [ 156.858940][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2156'. [ 157.093502][ T9707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.582512][ T9833] tipc: Started in network mode [ 157.594839][ T9833] tipc: Node identity 4, cluster identity 4711 [ 157.611760][ T9833] tipc: Node number set to 4 [ 157.779919][ T9835] loop7: detected capacity change from 0 to 512 [ 158.009600][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 158.127890][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 158.127980][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.127994][ T3304] Call Trace: [ 158.128001][ T3304] [ 158.128009][ T3304] __dump_stack+0x1d/0x30 [ 158.128100][ T3304] dump_stack_lvl+0x95/0xd0 [ 158.128123][ T3304] dump_stack+0x15/0x1b [ 158.128158][ T3304] dump_header+0x80/0x240 [ 158.128181][ T3304] oom_kill_process+0x295/0x350 [ 158.128211][ T3304] out_of_memory+0x981/0xbc0 [ 158.128287][ T3304] try_charge_memcg+0x621/0xa00 [ 158.128316][ T3304] charge_memcg+0x6d/0x120 [ 158.128348][ T3304] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 158.128437][ T3304] swap_cache_alloc_folio+0x47b/0x5e0 [ 158.128471][ T3304] swap_cluster_readahead+0x2b1/0x460 [ 158.128507][ T3304] swapin_readahead+0xd8/0x8a0 [ 158.128613][ T3304] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 158.128643][ T3304] ? hrtimer_start_range_ns+0x108/0x120 [ 158.128728][ T3304] ? __rcu_read_unlock+0x4e/0x70 [ 158.128755][ T3304] ? swap_cache_get_folio+0x1f7/0x200 [ 158.128785][ T3304] do_swap_page+0x2a2/0x1ec0 [ 158.128834][ T3304] ? __schedule+0x799/0xd10 [ 158.128897][ T3304] ? __rcu_read_lock+0x36/0x50 [ 158.128936][ T3304] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 158.128965][ T3304] handle_mm_fault+0xb3c/0x2da0 [ 158.129005][ T3304] do_user_addr_fault+0x634/0x1060 [ 158.129063][ T3304] ? trace_page_fault_user+0x1f/0xa0 [ 158.129154][ T3304] exc_page_fault+0x62/0xa0 [ 158.129183][ T3304] asm_exc_page_fault+0x26/0x30 [ 158.129205][ T3304] RIP: 0033:0x7f75cdd29017 [ 158.129222][ T3304] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 158.129242][ T3304] RSP: 002b:00007ffe89af1010 EFLAGS: 00010202 [ 158.129318][ T3304] RAX: 0000000000000000 RBX: 000055556ac14500 RCX: 00007f75cdd29017 [ 158.129412][ T3304] RDX: 00007ffe89af1050 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.129427][ T3304] RBP: 00007ffe89af10bc R08: 0000000000000000 R09: 0000000000000000 [ 158.129459][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 158.129473][ T3304] R13: 00000000000927c0 R14: 00000000000267cd R15: 00007ffe89af1110 [ 158.129497][ T3304] [ 158.130102][ T3304] memory: usage 295500kB, limit 307200kB, failcnt 450 [ 158.455349][ T3304] memory+swap: usage 24920kB, limit 9007199254740988kB, failcnt 0 [ 158.463434][ T3304] kmem: usage 2500kB, limit 9007199254740988kB, failcnt 0 [ 158.470556][ T3304] Memory cgroup stats for /syz4: [ 158.470799][ T3304] cache 9961472 [ 158.479366][ T3304] rss 12607488 [ 158.482834][ T3304] shmem 0 [ 158.487267][ T3304] mapped_file 9961472 [ 158.491403][ T3304] dirty 126976 [ 158.494781][ T3304] writeback 0 [ 158.498065][ T3304] workingset_refault_anon 1359 [ 158.503037][ T3304] workingset_refault_file 4347 [ 158.507818][ T3304] swap 348160 [ 158.519066][ T3304] swapcached 21680128 [ 158.537095][ T3304] pgpgin 160989 [ 158.541631][ T3304] pgpgout 155479 [ 158.545243][ T3304] pgfault 153719 [ 158.548794][ T3304] pgmajfault 2254 [ 158.555822][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 158.585220][ T3304] inactive_anon 0 [ 158.602161][ T3304] active_anon 0 [ 158.620891][ T3304] inactive_file 0 [ 158.627524][ T3304] active_file 0 [ 158.754308][ T3304] unevictable 22568960 [ 158.758442][ T3304] hierarchical_memory_limit 314572800 [ 158.778836][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 158.799240][ T3304] total_cache 9961472 [ 158.812067][ T3304] total_rss 12607488 [ 158.848407][ T3304] total_shmem 0 [ 158.862563][ T3304] total_mapped_file 9961472 [ 158.878583][ T3304] total_dirty 126976 [ 158.899646][ T3304] total_writeback 0 [ 158.920246][ T3304] total_workingset_refault_anon 1359 [ 158.932765][ T3304] total_workingset_refault_file 4347 [ 158.956789][ T3304] total_swap 348160 [ 158.998678][ T3304] total_swapcached 21680128 [ 159.003298][ T3304] total_pgpgin 160989 [ 159.007426][ T3304] total_pgpgout 155479 [ 159.011570][ T3304] total_pgfault 153719 [ 159.027286][ T3304] total_pgmajfault 2254 [ 159.033581][ T3304] total_inactive_anon 0 [ 159.039229][ T3304] total_active_anon 0 [ 159.049311][ T3304] total_inactive_file 0 [ 159.053768][ T3304] total_active_file 0 [ 159.059108][ T3304] total_unevictable 22568960 [ 159.060704][ T9876] netlink: 'syz.5.2184': attribute type 1 has an invalid length. [ 159.063712][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2159,pid=9802,uid=0 [ 159.084550][ T9876] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.115962][ T3304] Memory cgroup out of memory: OOM victim 9802 (syz.4.2159) is already exiting. Skip killing the task [ 159.140670][ T9876] bond7: (slave veth3): Enslaving as an active interface with a down link [ 159.249328][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.261802][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.330119][ T9876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.357046][ T9883] veth0_virt_wifi: entered promiscuous mode [ 159.365679][ T9883] bond7: (slave veth0_virt_wifi): making interface the new active one [ 159.375377][ T9883] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 159.415066][ T3460] bond7: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 159.429655][ T9895] netlink: 'syz.7.2189': attribute type 7 has an invalid length. [ 159.437683][ T9895] netlink: 'syz.7.2189': attribute type 8 has an invalid length. [ 159.449929][ T9895] netlink: 'syz.7.2189': attribute type 15 has an invalid length. [ 159.528556][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2194'. [ 159.579155][ T9905] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 159.597786][ T9905] ref_ctr increment failed for inode: 0x641 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c9e8700 [ 159.609495][ T9904] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 159.618325][ T9904] ref_ctr decrement failed for inode: 0x641 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811c9e8700 [ 159.629406][ T9904] uprobe: syz.7.2196:9904 failed to unregister, leaking uprobe [ 159.730720][ T28] audit: type=1400 audit(1785296631.449:3918): avc: denied { getopt } for pid=9914 comm="syz.4.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.248506][ T28] audit: type=1400 audit(1785296631.969:3919): avc: denied { setopt } for pid=9928 comm="syz.0.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.807574][ T9908] loop7: detected capacity change from 0 to 8192 [ 160.827945][ T9908] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 161.785293][ T9958] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2226'. [ 164.058998][ T28] audit: type=1400 audit(1785296635.779:3920): avc: denied { mount } for pid=9968 comm="syz.0.2229" name="/" dev="hugetlbfs" ino=27631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 164.104985][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2220'. [ 164.132938][ T9973] team1: entered promiscuous mode [ 164.146588][ T9973] team1: entered allmulticast mode [ 164.172506][ T9973] 8021q: adding VLAN 0 to HW filter on device team1 [ 164.584715][ T9983] loop8: detected capacity change from 0 to 512 [ 164.644849][ T9983] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 164.692950][ T9983] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1024: comm syz.8.2223: invalid block [ 164.715132][ T9983] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 164.720847][ T9983] EXT4-fs (loop8): 1 truncate cleaned up [ 164.741050][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 164.747509][ C0] EXT4-fs (loop8): initial error at time 1785296636: ext4_get_branch:178: inode 13: block 1024 [ 164.756289][ T9983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.757879][ C0] EXT4-fs (loop8): last error at time 1785296636: ext4_get_branch:178: inode 13: block 1024 [ 164.903779][ T5589] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.959916][T10023] netlink: 'syz.8.2243': attribute type 21 has an invalid length. [ 164.967816][T10023] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2243'. [ 164.976838][T10023] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2243'. [ 165.008557][ T28] audit: type=1400 audit(1785296636.699:3921): avc: denied { watch } for pid=10029 comm="syz.0.2245" path="/512/file1" dev="tmpfs" ino=2671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 165.246139][T10051] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2254'. [ 165.617745][T10072] netlink: 'syz.7.2262': attribute type 21 has an invalid length. [ 165.632529][T10072] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2262'. [ 165.647331][T10072] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2262'. [ 165.889229][ T28] audit: type=1326 audit(1785296637.609:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.7.2268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d3fc9de99 code=0x0 [ 167.384834][T10125] loop7: detected capacity change from 0 to 512 [ 167.506320][T10125] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 167.524534][T10125] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.2283: invalid block [ 167.536670][T10125] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 167.539084][T10125] EXT4-fs (loop7): 1 truncate cleaned up [ 167.548663][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 167.548724][ C1] EXT4-fs (loop7): initial error at time 1785296639: ext4_get_branch:178: inode 13: block 1024 [ 167.548924][ C1] EXT4-fs (loop7): last error at time 1785296639: ext4_get_branch:178: inode 13: block 1024 [ 167.619398][T10125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.766238][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.046183][ T28] audit: type=1400 audit(1785296639.769:3923): avc: denied { mount } for pid=10154 comm="syz.5.2293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.191433][ T28] audit: type=1400 audit(1785296639.909:3924): avc: denied { setopt } for pid=10164 comm="syz.7.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 168.262503][ T28] audit: type=1400 audit(1785296639.989:3925): avc: denied { unmount } for pid=10167 comm="syz.8.2299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.691652][T10193] netlink: 'syz.4.2309': attribute type 21 has an invalid length. [ 168.714712][T10193] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2309'. [ 168.738219][T10193] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2309'. [ 168.878279][ T28] audit: type=1400 audit(1785296640.599:3926): avc: denied { execute } for pid=10209 comm="syz.8.2316" path="/file1" dev="ramfs" ino=28990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 169.839621][T10241] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 170.273152][T10260] loop7: detected capacity change from 0 to 128 [ 170.382173][T10285] netlink: 'syz.0.2346': attribute type 21 has an invalid length. [ 170.390049][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 170.399314][T10285] netlink: 'syz.0.2346': attribute type 21 has an invalid length. [ 170.411042][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 170.601225][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2349'. [ 170.670184][ T28] audit: type=1326 audit(1785296642.389:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.7.2350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d3fc9de99 code=0x0 [ 171.259660][T10318] nftables ruleset with unbound chain [ 171.354740][ T28] audit: type=1400 audit(1785296643.059:3928): avc: denied { write } for pid=10326 comm="syz.4.2364" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.915646][ T28] audit: type=1326 audit(1785296643.639:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 171.995304][ T28] audit: type=1326 audit(1785296643.639:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.028231][ T28] audit: type=1326 audit(1785296643.639:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.082438][ T28] audit: type=1326 audit(1785296643.639:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.108425][ T28] audit: type=1326 audit(1785296643.669:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.138231][ T28] audit: type=1326 audit(1785296643.669:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.167687][ T28] audit: type=1326 audit(1785296643.669:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.193602][ T28] audit: type=1326 audit(1785296643.669:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10344 comm="syz.5.2372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 172.536175][T10363] ref_ctr increment failed for inode: 0xa46 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811c9ef700 [ 172.564022][T10362] uprobe: syz.4.2380:10362 failed to unregister, leaking uprobe [ 173.303304][T10422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2403'. [ 173.473924][T10436] netlink: 'syz.7.2409': attribute type 1 has an invalid length. [ 173.486709][T10436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.508751][T10436] bond3: (slave ip6gretap1): making interface the new active one [ 173.518172][T10436] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 173.595094][T10446] loop7: detected capacity change from 0 to 512 [ 176.180048][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2445'. [ 176.208860][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2446'. [ 176.219155][T10538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.659746][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2448'. [ 176.701905][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2448'. [ 176.737612][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2448'. [ 176.776455][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2448'. [ 176.797805][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2449'. [ 177.108375][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 177.108390][ T28] audit: type=1400 audit(1785296648.829:3976): avc: denied { map } for pid=10552 comm="syz.5.2451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 177.231108][ T28] audit: type=1400 audit(1785296648.829:3977): avc: denied { read write } for pid=10552 comm="syz.5.2451" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 177.256201][ T28] audit: type=1400 audit(1785296648.929:3978): avc: denied { bind } for pid=10556 comm="syz.4.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.635982][T10581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2461'. [ 177.770130][T10583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10583 comm=syz.4.2461 [ 179.126418][T10625] --map-set only usable from mangle table [ 179.177485][T10622] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2476'. [ 179.594277][ T28] audit: type=1326 audit(1785296651.309:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cdd6de99 code=0x7ffc0000 [ 179.882233][ T28] audit: type=1326 audit(1785296651.339:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cdd6de99 code=0x7ffc0000 [ 180.196342][ T28] audit: type=1326 audit(1785296651.349:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cdd6de99 code=0x7ffc0000 [ 180.255844][T10664] loop7: detected capacity change from 0 to 1024 [ 180.305969][T10664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.352970][ T28] audit: type=1326 audit(1785296651.349:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75cdd6de99 code=0x7ffc0000 [ 180.418039][T10664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.461781][T10678] bridge0: port 1(syz_tun) entered blocking state [ 180.477466][T10664] EXT4-fs: inline encryption not supported [ 180.485200][ T28] audit: type=1326 audit(1785296651.349:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75cdd6de99 code=0x7ffc0000 [ 180.512463][T10678] bridge0: port 1(syz_tun) entered disabled state [ 180.529806][T10678] syz_tun: entered allmulticast mode [ 180.536482][T10664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.549833][T10678] syz_tun: entered promiscuous mode [ 180.565963][T10678] bridge0: port 1(syz_tun) entered blocking state [ 180.572493][T10678] bridge0: port 1(syz_tun) entered forwarding state [ 180.583948][T10664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.601015][ T28] audit: type=1326 audit(1785296651.409:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75cdd2e6ce code=0x7ffc0000 [ 180.621166][T10664] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.637919][T10681] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 180.651698][ T28] audit: type=1326 audit(1785296651.409:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.4.2480" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75cdd2e6ce code=0x7ffc0000 [ 180.936566][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.130783][T10695] tipc: Failed to remove unknown binding: 66,0,0/3664630468:3263888040/3263888041 [ 181.140674][T10695] tipc: Failed to remove unknown binding: 66,0,0/3664630468:3263888040/3263888041 [ 181.143618][T10694] loop7: detected capacity change from 0 to 1024 [ 181.182700][T10694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.286926][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.253472][T10756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2520'. [ 182.940253][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2531'. [ 183.378847][T10801] ip6t_REJECT: ECHOREPLY is not supported [ 183.405883][T10805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2537'. [ 183.647228][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2543'. [ 183.667301][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2543'. [ 183.718522][T10825] netlink: 'syz.7.2547': attribute type 1 has an invalid length. [ 183.760885][T10825] bond4: (slave bridge1): making interface the new active one [ 183.777889][T10825] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 184.158470][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2553'. [ 184.611090][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 184.617753][ C1] bridge0: topology change detected, propagating [ 184.882276][T10864] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 185.082675][T10874] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 185.100510][T10874] 8021q: adding VLAN 0 to HW filter on device bond11 [ 185.120910][T10874] bond11: (slave veth13): Enslaving as an active interface with a down link [ 185.151530][T10874] netlink: 'syz.4.2565': attribute type 10 has an invalid length. [ 185.172134][T10874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2565'. [ 185.181547][T10874] : entered promiscuous mode [ 185.187545][T10874] bond7: (slave ): Releasing active interface [ 185.280849][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2572'. [ 185.300344][T10891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10891 comm=syz.8.2572 [ 185.315355][T10892] bridge0: port 1(syz_tun) entered blocking state [ 185.324859][T10892] bridge0: port 1(syz_tun) entered disabled state [ 185.333028][T10892] syz_tun: entered allmulticast mode [ 185.339054][T10892] syz_tun: entered promiscuous mode [ 185.345358][T10892] bridge0: port 1(syz_tun) entered blocking state [ 185.351850][T10892] bridge0: port 1(syz_tun) entered forwarding state [ 185.380395][T10895] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 185.477577][T10901] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2576'. [ 185.732334][T10913] loop7: detected capacity change from 0 to 512 [ 185.739793][T10913] EXT4-fs: dax option not supported [ 185.774921][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 185.774936][ T28] audit: type=1400 audit(1785296657.499:4037): avc: denied { bind } for pid=10914 comm="syz.5.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.832306][ T28] audit: type=1400 audit(1785296657.529:4038): avc: denied { unmount } for pid=5078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 185.901785][T10931] loop7: detected capacity change from 0 to 512 [ 185.925064][T10931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.943683][T10931] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.957345][ T28] audit: type=1400 audit(1785296657.679:4039): avc: denied { write } for pid=10928 comm="syz.7.2587" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.998215][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 186.008917][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.163626][T10952] netlink: 'syz.5.2595': attribute type 4 has an invalid length. [ 186.194268][T10952] netlink: 'syz.5.2595': attribute type 4 has an invalid length. [ 186.224798][T10952] bridge0: port 1(syz_tun) entered disabled state [ 186.636532][ T3377] syz0: Port: 1 Link DOWN [ 186.641659][ T9122] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.687955][ T9122] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.773481][ T9122] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.040797][ T9122] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.063231][ T28] audit: type=1326 audit(1785296658.779:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.104259][ T9122] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.130688][ T9122] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.166588][ T28] audit: type=1326 audit(1785296658.779:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.257947][ T9122] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.277577][ T28] audit: type=1326 audit(1785296658.779:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.317231][ T9122] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.353882][ T28] audit: type=1326 audit(1785296658.779:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.379478][ T28] audit: type=1326 audit(1785296658.819:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 187.404942][ T28] audit: type=1326 audit(1785296658.819:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.453343][ T28] audit: type=1326 audit(1785296658.819:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10963 comm="syz.5.2598" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 187.496112][T10987] tipc: Enabling of bearer rejected, failed to enable media [ 188.172595][T11007] bridge2: port 1(macvlan2) entered blocking state [ 188.188993][T11007] bridge2: port 1(macvlan2) entered disabled state [ 188.216708][T11007] macvlan2: entered allmulticast mode [ 188.284463][T11022] loop7: detected capacity change from 0 to 1024 [ 188.318108][T11022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.411541][T11033] netlink: 'syz.0.2624': attribute type 13 has an invalid length. [ 188.419587][T11033] netlink: 'syz.0.2624': attribute type 17 has an invalid length. [ 188.430859][ T5078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.610697][T11033] bond4: left allmulticast mode [ 188.617687][T11033] ip6gretap1: left allmulticast mode [ 189.561159][T11065] __nla_validate_parse: 1 callbacks suppressed [ 189.561178][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 189.576557][T11065] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 189.601138][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2635'. [ 191.629236][T11065] geneve4: entered promiscuous mode [ 191.644280][T11065] geneve4: entered allmulticast mode [ 191.766366][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2646'. [ 191.810723][T11094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11094 comm=syz.7.2646 [ 192.542441][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 192.542457][ T28] audit: type=1326 audit(1785296664.269:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 192.604537][ T28] audit: type=1326 audit(1785296664.269:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 192.656944][ T28] audit: type=1326 audit(1785296664.269:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 192.707986][T11125] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 192.734863][T11128] x_tables: duplicate entry at hook 3 [ 192.742551][ T28] audit: type=1326 audit(1785296664.269:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 192.816048][ T28] audit: type=1326 audit(1785296664.339:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 192.866801][ T28] audit: type=1326 audit(1785296664.339:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 192.919898][ T28] audit: type=1326 audit(1785296664.349:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 192.994839][ T28] audit: type=1326 audit(1785296664.349:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 193.029647][ T28] audit: type=1326 audit(1785296664.359:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 193.055109][ T28] audit: type=1326 audit(1785296664.359:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11117 comm="syz.5.2654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe56c4de6ce code=0x7ffc0000 [ 193.479880][T11151] netlink: 'syz.7.2664': attribute type 322 has an invalid length. [ 193.953627][T11170] netlink: 'syz.0.2671': attribute type 20 has an invalid length. [ 193.971543][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 194.051508][T11170] netlink: 'syz.0.2671': attribute type 20 has an invalid length. [ 194.059470][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2671'. [ 194.091093][T11172] Cannot find add_set index 0 as target [ 194.596658][T11204] netlink: 'syz.8.2678': attribute type 13 has an invalid length. [ 194.605077][T11204] netlink: 'syz.8.2678': attribute type 17 has an invalid length. [ 194.649517][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.658579][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.671421][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.715098][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.740002][T11204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.750920][T11204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.766852][T11217] netlink: 'syz.5.2688': attribute type 21 has an invalid length. [ 194.767545][T11204] veth1_vlan: left promiscuous mode [ 194.775214][T11217] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.788459][T11217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.788555][T11204] veth0_vlan: left promiscuous mode [ 194.795746][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 194.808320][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 194.815605][T11217] IPv6: NLM_F_CREATE should be set when creating new route [ 194.817989][T11204] veth0_vlan: entered promiscuous mode [ 194.832394][T11204] veth1_vlan: entered promiscuous mode [ 194.845197][T11204] veth1_macvtap: left promiscuous mode [ 194.849892][T11220] netlink: 'syz.5.2688': attribute type 21 has an invalid length. [ 194.860106][T11204] veth0_macvtap: left promiscuous mode [ 194.860742][T11220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.873202][T11204] veth0_macvtap: entered promiscuous mode [ 194.885810][T11204] veth1_macvtap: entered promiscuous mode [ 194.898508][T11204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.911360][T11204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.922843][T11204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.939428][T11204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.957871][T11204] ipvlan2: left allmulticast mode [ 194.963140][T11204] bond2: left allmulticast mode [ 194.968275][T11204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.977114][T11204] bond3: left promiscuous mode [ 194.982094][T11204] bridge1: left promiscuous mode [ 194.991364][T11204] geneve3: left promiscuous mode [ 194.996936][T11227] netlink: 'syz.7.2690': attribute type 16 has an invalid length. [ 195.005002][T11227] netlink: 'syz.7.2690': attribute type 17 has an invalid length. [ 195.016852][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.024037][ T9122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.034164][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.041249][ T9122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.089774][T11217] vlan4: entered promiscuous mode [ 195.114002][T11226] bridge0: port 3(syz_tun) entered disabled state [ 195.125745][T11226] tipc: Resetting bearer [ 195.133182][T11226] tipc: Resetting bearer [ 195.165567][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.251645][ T310] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.260567][ T310] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.294932][T11227] bridge0: port 3(syz_tun) entered blocking state [ 195.301513][T11227] bridge0: port 3(syz_tun) entered forwarding state [ 195.320174][T11227] tipc: Resetting bearer [ 195.337888][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.372640][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.379748][T11227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.442362][T11244] x_tables: duplicate underflow at hook 2 [ 195.449917][T11244] netlink: 'syz.8.2698': attribute type 9 has an invalid length. [ 195.465161][T11244] netlink: 'syz.8.2698': attribute type 7 has an invalid length. [ 195.473645][T11244] netlink: 'syz.8.2698': attribute type 8 has an invalid length. [ 195.483314][T11227] vlan0: left allmulticast mode [ 195.488199][T11227] bond1: left allmulticast mode [ 195.493088][T11227] geneve2: left allmulticast mode [ 195.517600][T11227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.532058][T11227] bond0: entered allmulticast mode [ 195.537305][T11227] gretap2: entered allmulticast mode [ 195.543581][T11227] gretap2: entered promiscuous mode [ 195.549297][T11227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.559236][T11227] bridge2: port 1(macvlan2) entered blocking state [ 195.565883][T11227] bridge2: port 1(macvlan2) entered forwarding state [ 195.621376][ T310] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.636755][ T310] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.772224][T11256] netlink: 'syz.0.2700': attribute type 322 has an invalid length. [ 199.037356][T11265] syz.7.2704 (11265) used greatest stack depth: 9472 bytes left [ 199.255000][T11323] 9p: Could not find request transport: 0x0000000000000005 [ 200.378292][T11366] bridge_slave_0: left allmulticast mode [ 200.393575][T11366] bridge_slave_0: left promiscuous mode [ 200.405125][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.421697][T11366] bridge_slave_1: left allmulticast mode [ 200.438956][T11366] bridge_slave_1: left promiscuous mode [ 200.445010][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.460252][T11366] bond0: (slave bond_slave_0): Releasing backup interface [ 200.480202][T11366] bond0: (slave bond_slave_1): Releasing backup interface [ 200.506275][T11366] team0: Port device team_slave_0 removed [ 200.516685][T11366] team0: Port device team_slave_1 removed [ 200.523961][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.538518][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.560395][T11366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.595262][T11370] team0: Port device xfrm0 added [ 200.625761][T11373] tipc: Started in network mode [ 200.662995][T11373] tipc: Node identity c67d344dfa29, cluster identity 4711 [ 200.708134][T11373] tipc: Enabled bearer , priority 0 [ 201.698078][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2746'. [ 201.745155][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 201.762081][T11500] bridge0: port 1(syz_tun) entered disabled state [ 201.768811][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2752'. [ 201.779985][T11500] syz_tun (unregistering): left allmulticast mode [ 201.791119][T11500] syz_tun (unregistering): left promiscuous mode [ 201.798362][T11500] bridge0: port 1(syz_tun) entered disabled state [ 201.821189][ T6074] tipc: Node number set to 1012151373 [ 201.827064][T11501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11501 comm=syz.8.2752 [ 201.874408][T11512] validate_nla: 1 callbacks suppressed [ 201.874426][T11512] netlink: 'syz.8.2756': attribute type 1 has an invalid length. [ 201.910568][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 201.910584][ T28] audit: type=1400 audit(1785296673.629:4111): avc: denied { cmd } for pid=11515 comm="syz.0.2759" path="/621/file0" dev="tmpfs" ino=3244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 201.942562][T11520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.955135][T11512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.963601][T11512] bond4: (slave bond5): making interface the new active one [ 201.971380][T11512] bond4: (slave bond5): Enslaving as an active interface with an up link [ 201.998391][T11524] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 202.173242][T11532] uprobe: syz.8.2765:11532 failed to unregister, leaking uprobe [ 202.193306][T11532] uprobe: syz.8.2765:11532 failed to unregister, leaking uprobe [ 202.211851][T11534] netlink: 'syz.7.2764': attribute type 4 has an invalid length. [ 202.212868][ T28] audit: type=1326 audit(1785296673.939:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.253276][ T28] audit: type=1326 audit(1785296673.939:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.279777][ T28] audit: type=1326 audit(1785296673.939:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.308597][ T28] audit: type=1326 audit(1785296673.939:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.334760][ T28] audit: type=1326 audit(1785296673.939:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.364603][ T28] audit: type=1326 audit(1785296673.939:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.393068][ T28] audit: type=1326 audit(1785296673.939:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.423412][ T28] audit: type=1326 audit(1785296673.939:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.450258][ T28] audit: type=1326 audit(1785296673.969:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11535 comm="syz.5.2766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56c51de99 code=0x7ffc0000 [ 202.538630][T11523] syz.4.2761 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 202.549839][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.4.2761 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.549868][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.549920][T11523] Call Trace: [ 202.549927][T11523] [ 202.549935][T11523] __dump_stack+0x1d/0x30 [ 202.549955][T11523] dump_stack_lvl+0x95/0xd0 [ 202.549975][T11523] dump_stack+0x15/0x1b [ 202.549995][T11523] dump_header+0x80/0x240 [ 202.550056][T11523] oom_kill_process+0x295/0x350 [ 202.550086][T11523] out_of_memory+0x981/0xbc0 [ 202.550124][T11523] try_charge_memcg+0x621/0xa00 [ 202.550153][T11523] charge_memcg+0x6d/0x120 [ 202.550186][T11523] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 202.550218][T11523] swap_cache_alloc_folio+0x47b/0x5e0 [ 202.550334][T11523] swap_cluster_readahead+0x2b1/0x460 [ 202.550432][T11523] swapin_readahead+0xd8/0x8a0 [ 202.550462][T11523] ? _raw_spin_unlock+0x9/0x30 [ 202.550488][T11523] ? swap_put_entries_cluster+0x49c/0x4c0 [ 202.550567][T11523] ? __rcu_read_unlock+0x4e/0x70 [ 202.550621][T11523] ? swap_cache_get_folio+0x1f7/0x200 [ 202.550722][T11523] do_swap_page+0x2a2/0x1ec0 [ 202.550759][T11523] ? __css_rstat_updated+0xbb/0x280 [ 202.550836][T11523] ? __rcu_read_lock+0x36/0x50 [ 202.550856][T11523] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 202.550931][T11523] handle_mm_fault+0xb3c/0x2da0 [ 202.550970][T11523] do_user_addr_fault+0x634/0x1060 [ 202.551077][T11523] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 202.551102][T11523] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 202.551131][T11523] ? trace_page_fault_user+0x1f/0xa0 [ 202.551238][T11523] exc_page_fault+0x62/0xa0 [ 202.551270][T11523] asm_exc_page_fault+0x26/0x30 [ 202.551293][T11523] RIP: 0033:0x7f75cdc3b80c [ 202.551311][T11523] Code: ca 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 202.551343][T11523] RSP: 002b:00007ffe89af0e80 EFLAGS: 00010206 [ 202.551401][T11523] RAX: 0000000000000000 RBX: 00007f75cdff5fa0 RCX: 000055556ac14808 [ 202.551414][T11523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.551428][T11523] RBP: 00007f75cdff7da0 R08: 0000000000000000 R09: 0000000000000000 [ 202.551441][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003182c [ 202.551453][T11523] R13: 00007f75cdff609c R14: 000000000003156b R15: 00007f75cdff6090 [ 202.551470][T11523] [ 202.842766][T11523] memory: usage 307200kB, limit 307200kB, failcnt 552 [ 202.849942][T11523] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 202.858642][T11523] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 202.866389][T11523] Memory cgroup stats for /syz4: [ 202.866554][T11523] cache 86016 [ 202.875588][T11523] rss 0 [ 202.882629][T11523] shmem 0 [ 202.885976][T11523] mapped_file 0 [ 202.889659][T11523] dirty 0 [ 202.896379][T11523] writeback 4096 [ 202.929003][T11523] workingset_refault_anon 1373 [ 202.939819][T11523] workingset_refault_file 4987 [ 202.950101][T11523] swap 532480 [ 202.956995][T11523] swapcached 27287552 [ 202.965466][T11523] pgpgin 195779 [ 202.973076][T11523] pgpgout 195754 [ 202.981182][T11523] pgfault 197557 [ 202.988790][T11523] pgmajfault 3798 [ 202.995567][T11523] inactive_anon 8192 [ 203.007289][T11523] active_anon 0 [ 203.014775][T11523] inactive_file 8192 [ 203.023101][T11523] active_file 77824 [ 203.031202][T11523] unevictable 0 [ 203.038361][T11523] hierarchical_memory_limit 314572800 [ 203.049646][T11523] hierarchical_memsw_limit 9223372036854771712 [ 203.062409][T11523] total_cache 86016 [ 203.070282][T11523] total_rss 0 [ 203.077325][T11523] total_shmem 0 [ 203.084534][T11523] total_mapped_file 0 [ 203.092903][T11523] total_dirty 0 [ 203.100223][T11523] total_writeback 4096 [ 203.108835][T11523] total_workingset_refault_anon 1373 [ 203.123398][T11523] total_workingset_refault_file 4987 [ 203.135095][T11523] total_swap 532480 [ 203.142595][T11523] total_swapcached 27287552 [ 203.152220][T11523] total_pgpgin 195779 [ 203.160443][T11523] total_pgpgout 195754 [ 203.168812][T11523] total_pgfault 197557 [ 203.179330][T11523] total_pgmajfault 3798 [ 203.188575][T11523] total_inactive_anon 8192 [ 203.197911][T11523] total_active_anon 0 [ 203.206388][T11523] total_inactive_file 8192 [ 203.215924][T11523] total_active_file 77824 [ 203.227219][T11523] total_unevictable 0 [ 203.280672][T11523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2761,pid=11523,uid=0 [ 203.306756][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2775'. [ 203.339746][T11564] bridge0: port 3(syz_tun) entered disabled state [ 203.358136][T11523] Memory cgroup out of memory: Killed process 11523 (syz.4.2761) total-vm:96312kB, anon-rss:1236kB, file-rss:22088kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 203.377768][T11564] syz_tun (unregistering): left allmulticast mode [ 203.384534][T11564] syz_tun (unregistering): left promiscuous mode [ 203.391443][T11564] bridge0: port 3(syz_tun) entered disabled state [ 203.513278][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2780'. [ 203.549975][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2782'. [ 203.564186][T11576] team0: Failed to send options change via netlink (err -105) [ 203.582419][T11576] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 203.600680][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2782'. [ 203.606154][T11576] team0: Port device team_slave_0 removed [ 203.704499][T11592] IPv6: NLM_F_REPLACE set, but no existing node found! [ 204.025563][T11630] netlink: 'syz.4.2795': attribute type 1 has an invalid length. [ 204.046297][T11630] 8021q: adding VLAN 0 to HW filter on device bond12 [ 204.084701][T11630] bond12: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 204.102999][T11630] bond12: entered allmulticast mode [ 204.127601][T11630] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 204.609978][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2805'. [ 204.961461][T11677] macvlan0: entered allmulticast mode [ 204.976472][T11677] veth1_vlan: entered allmulticast mode [ 204.988774][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2816'. [ 205.012126][T11677] veth1_vlan: left allmulticast mode [ 205.037679][T11677] macvlan0 (unregistering): left allmulticast mode [ 205.215087][T11694] 9p: Bad value for 'source' [ 205.287089][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'. [ 205.386300][T11697] xt_connbytes: Forcing CT accounting to be enabled [ 205.393037][T11697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.417290][T11704] netlink: 'syz.8.2827': attribute type 4 has an invalid length. [ 205.429613][T11704] netlink: 'syz.8.2827': attribute type 4 has an invalid length. [ 207.036377][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 207.069807][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 207.083213][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 207.083321][ T28] audit: type=1400 audit(1785296678.799:4147): avc: denied { remount } for pid=11733 comm="syz.7.2837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 207.194144][ T28] audit: type=1400 audit(1785296678.919:4148): avc: denied { create } for pid=11753 comm="syz.0.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 207.624065][ T28] audit: type=1400 audit(1785296679.349:4149): avc: denied { audit_read } for pid=11776 comm="syz.0.2853" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.943873][T11788] netlink: 'syz.8.2857': attribute type 1 has an invalid length. [ 208.007736][T11788] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.054863][T11790] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 208.073190][T11796] netlink: 'syz.7.2858': attribute type 4 has an invalid length. [ 208.096205][T11790] bond6: entered allmulticast mode [ 208.159279][T11795] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 208.168448][T11792] netlink: 'syz.7.2858': attribute type 4 has an invalid length. [ 209.568133][ T28] audit: type=1326 audit(1785296937.286:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.647547][ T28] audit: type=1326 audit(1785296937.286:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.711087][ T28] audit: type=1326 audit(1785296937.286:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.757156][ T28] audit: type=1326 audit(1785296937.286:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.826039][ T28] audit: type=1326 audit(1785296937.286:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.885472][ T28] audit: type=1326 audit(2000000000.000:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 209.941297][ T28] audit: type=1326 audit(2000000000.000:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.8.2876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea792de99 code=0x7ffc0000 [ 210.878576][T11879] sctp: [Deprecated]: syz.7.2888 (pid 11879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.878576][T11879] Use struct sctp_sack_info instead [ 210.896824][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.906038][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.915066][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.924090][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.933162][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.942161][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.951179][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.960355][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.969517][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 210.978697][T11879] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 211.159915][T11892] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2893'. [ 211.789532][T11923] netlink: 'syz.4.2903': attribute type 30 has an invalid length. [ 212.523277][T11937] ================================================================== [ 212.531408][T11937] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 212.540029][T11937] [ 212.542349][T11937] write to 0xffff88810ce509a0 of 8 bytes by task 11941 on cpu 0: [ 212.550065][T11937] shmem_file_splice_read+0x401/0x590 [ 212.555449][T11937] splice_direct_to_actor+0x261/0x680 [ 212.560918][T11937] do_splice_direct+0x119/0x1a0 [ 212.565776][T11937] do_sendfile+0x37d/0x640 [ 212.570202][T11937] __x64_sys_sendfile64+0x105/0x150 [ 212.575416][T11937] x64_sys_call+0x2dc4/0x3020 [ 212.580105][T11937] do_syscall_64+0x136/0x3c0 [ 212.584701][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.590643][T11937] [ 212.592966][T11937] write to 0xffff88810ce509a0 of 8 bytes by task 11937 on cpu 1: [ 212.600682][T11937] shmem_file_splice_read+0x401/0x590 [ 212.606073][T11937] splice_direct_to_actor+0x261/0x680 [ 212.611453][T11937] do_splice_direct+0x119/0x1a0 [ 212.616317][T11937] do_sendfile+0x37d/0x640 [ 212.620750][T11937] __x64_sys_sendfile64+0x105/0x150 [ 212.625961][T11937] x64_sys_call+0x2dc4/0x3020 [ 212.630821][T11937] do_syscall_64+0x136/0x3c0 [ 212.635421][T11937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.641329][T11937] [ 212.643648][T11937] value changed: 0x000000000000452b -> 0x000000000000452c [ 212.650749][T11937] [ 212.653067][T11937] Reported by Kernel Concurrency Sanitizer on: [ 212.659214][T11937] CPU: 1 UID: 0 PID: 11937 Comm: syz.8.2906 Not tainted syzkaller #0 PREEMPT(lazy) [ 212.668592][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.678651][T11937] ================================================================== [ 212.796551][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 212.796565][ T28] audit: type=1400 audit(2000000003.209:4160): avc: denied { create } for pid=11968 comm="syz.5.2918" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 212.851855][ T28] audit: type=1400 audit(2000000003.259:4161): avc: denied { unlink } for pid=3746 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1