last executing test programs: 15m15.713268429s ago: executing program 32 (id=110): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x4, 0x9, 0x15, 0x20, 0x0, 0x849, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x4, 0xffffffff}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x44, 0x0, 0xfffffffffffffffd}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 14m58.367977101s ago: executing program 33 (id=155): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) 14m53.422980131s ago: executing program 34 (id=239): mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r0, &(0x7f0000000700)=[{&(0x7f0000003440)=""/131, 0x83}], 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 14m20.123554101s ago: executing program 35 (id=1080): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13m25.626316517s ago: executing program 36 (id=1891): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) close(0x3) 12m53.709833166s ago: executing program 37 (id=2631): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x1000) 12m51.034975482s ago: executing program 38 (id=2684): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 12m46.796476529s ago: executing program 39 (id=2714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQomAMHg2Jd+PRxL/Ak16MejLxqndDQgwXkdOa2Z1hf3S3tMu2g+znkwx9b+YN7333zdt9M283gL41lv2TROyMiD8iYqSWbS4wVvtz4/qF2X+vX5hNolJ59++kWu6f6xdmi6LFeTvyzHgakX6exP429S6dO39qZmFh/myen1w+/eHk0rnzL5w8PXNi/sT8memjR48cnnr5pekXV558c/1x3p+1dd8niwf2vvnelbdnj115/5fvBor4W+LokbHVDj5dqfS4unLtakgngyU2hHXJxkDWXUPV8T8SA1HvvJF447NSGwdsqEquw+GLFeAelkTZLQDKUXzQZ/e/xbZ5s4/yXXu1dgOUxX0j32pHBiPNywy13N/20lhEHLt48+tsi415DgEA0OSHbP7zfLv5XxoPNZS7L18bGs3XUnZHxAMRsSciHoyoln04Ih5ZZ/2tiyQr5z/p1a4CW6Ns/vdKvrbVPP8rZn8xOpDndlXjH0qOn1yYP5S/JuMxtDXLT61Sx4+v//5lp2ON879sy+ov5oJ5O64Obm0+Z25meeZOYm507VLEvsF28Se3VgKSiNgbEfu6rOPks98e6HTs9vGvogfrTJVvIp6p9f/FaIm/kKy+Pjm5LRbmD00WV8VKv/52+Z1O9d9R/D2Q9f/2ttf/rfhHk8b12qX113H5zy863tNMdHX913dsyf9+PLO8fHYqYkvyVq3Rjfun6+cW+aJ8Fv/4wfbjf3fUX4n9EZFdxI9GxGMR8Xjed09ExJMRcbAlrsb7659fe+qDTvHfDf0/19L/o81FWvq/ntgSrXvaJwZO/fR98/9YT67t/e9INTWe71nL+99a2tXd1QwAAAD/P2lE7IwknbiVHk4nJmrf4d8T29OFxaXl544vfnRmrvYbgdEYSosnXSMNz0On8tv60Uu1/HSRz48fzp8bfzUwXM1PzC4uzJUdPPS5HSvGf1od/5m/BspuHbDh/F4L+lfD+E/KbAew+Xz+Q/8y/qF/tRn/w2W0A9h87T7/Py2hHcDmaxn/lv2gj7j/h/5l/EP/ahz/vgAAfWNpOG7/I/l2iW3RzVkS90wi0ruiGb1JJF2OgrUmdpYd4PoTZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZ/AQAA//8L+fEo") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 12m22.999443565s ago: executing program 40 (id=3083): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000900)=0xffff) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 11m18.559593982s ago: executing program 41 (id=4558): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 11m16.236037107s ago: executing program 42 (id=4599): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x0, 0xb1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0xffffef01, 0x0}) 10m17.105161273s ago: executing program 43 (id=5524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x80000080, 0xe) write(r0, 0x0, 0x0) 10m14.503499277s ago: executing program 44 (id=5800): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa9a0786"], 0x0) 10m2.407979807s ago: executing program 45 (id=5969): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'ext4\x00', 0x3a, 'ext4\x00', 0x3a, './file1'}, 0x31) 9m36.070952256s ago: executing program 46 (id=6516): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1412, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10014}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x1, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x2, 0xff, "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", 0x3, "5c8dc20000000000fb002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x8, 0x11, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) 9m9.633525648s ago: executing program 47 (id=7076): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 9m6.551780377s ago: executing program 48 (id=7122): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c746572ff0f00000000000000000000000000000000000000000000000004"], 0x68) 8m47.83180333s ago: executing program 49 (id=7482): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) 8m15.070279576s ago: executing program 50 (id=8087): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0xfdad) 8m5.978628259s ago: executing program 51 (id=8301): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x301, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x4, 0x2, 0x0, 0x0, "00000100"}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 7m58.715820843s ago: executing program 52 (id=8430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000f40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x14000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 6m45.072500677s ago: executing program 53 (id=9726): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 4m31.86089644s ago: executing program 6 (id=12036): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 4m31.822006352s ago: executing program 6 (id=12039): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000180), 0xd, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4m31.528454251s ago: executing program 6 (id=12047): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m31.499405572s ago: executing program 6 (id=12050): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 4m31.446286973s ago: executing program 6 (id=12052): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x4f}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4m31.000127308s ago: executing program 6 (id=12059): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 4m30.997900478s ago: executing program 54 (id=12059): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) 4m20.517969266s ago: executing program 3 (id=12244): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) 4m20.459883358s ago: executing program 3 (id=12247): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 4m20.044393101s ago: executing program 3 (id=12252): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 4m19.976123653s ago: executing program 3 (id=12254): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x800000, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000, 0x9, &(0x7f0000006680)) pidfd_send_signal(r0, 0x21, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioprio_set$pid(0x2, 0x0, 0x0) 4m19.844306037s ago: executing program 3 (id=12260): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 4m19.171531139s ago: executing program 3 (id=12267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) 4m2.976635131s ago: executing program 55 (id=12267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) 3m6.114023714s ago: executing program 2 (id=13348): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @private=0xa010100}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) 3m6.023663107s ago: executing program 2 (id=13351): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_gettime(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000280)={0xd9, "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"}) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) execve(0x0, 0x0, 0x0) 3m5.914649531s ago: executing program 2 (id=13354): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x19, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x7, 0x0, 0x4, 0xff, 0x9}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x20004000) sync() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x2c000010) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000005c0)={0x7a29, 0xc, 0x5a, 0x4}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x801) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x1, 0x40}, 0x8) 3m4.934366682s ago: executing program 2 (id=13374): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) 3m4.888685213s ago: executing program 2 (id=13375): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20040840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m4.084800539s ago: executing program 2 (id=13379): recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/17, 0x11}, 0x100}], 0x1, 0x14322, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 3m4.07600111s ago: executing program 56 (id=13379): recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=""/17, 0x11}, 0x100}], 0x1, 0x14322, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2m58.424990672s ago: executing program 7 (id=13484): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/171) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0xfc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xd0, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0xb4, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0xf, 0xd5d7, 0x3, 0x5}, {0x48, 0x9, 0xc1, 0x1ff}, {0x9, 0x2, 0x4, 0xffffff00}, {0xaf, 0x6, 0x9, 0x2}, {0x8, 0x4, 0xa, 0xd}, {0x10, 0x3, 0x1, 0x1ff}, {0xfffffffd, 0xff, 0x4, 0xffffff7d}, {0xffffffff, 0xe79, 0x3, 0x3}, {0xfffffff8, 0xc3a, 0x80, 0xad9}, {0x10001, 0x7c, 0x5, 0xce}]}}, @TCA_U32_LINK={0x8}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 2m58.366975224s ago: executing program 7 (id=13486): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 2m58.298976056s ago: executing program 7 (id=13487): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m58.206862429s ago: executing program 7 (id=13489): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 2m57.803911241s ago: executing program 7 (id=13495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6160d1d7) 2m56.752492406s ago: executing program 7 (id=13507): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m40.359949444s ago: executing program 57 (id=13507): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m27.690243172s ago: executing program 0 (id=13683): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xfffffffe, 0x4) 2m27.508322689s ago: executing program 0 (id=13684): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x45ddc9e5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x6, @private2, 0x9}], 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x20000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x20000040) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind'}}}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'bind'}}]}) 2m27.4427048s ago: executing program 0 (id=13685): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xe8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 2m27.028229944s ago: executing program 0 (id=13687): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(0x0, 0xb) 2m26.952162396s ago: executing program 0 (id=13689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 2m26.123354573s ago: executing program 0 (id=13692): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2m26.123050383s ago: executing program 58 (id=13692): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 4.084750161s ago: executing program 1 (id=15305): ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4939) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.846161316s ago: executing program 5 (id=15309): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3.775989398s ago: executing program 1 (id=15312): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x12000, 0xea) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000219000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, &(0x7f000002b000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002bb}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.71976498s ago: executing program 1 (id=15314): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3.214147872s ago: executing program 5 (id=15317): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0xd031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r0, 0x5421, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.035177946s ago: executing program 8 (id=15320): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x2) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x7, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000000)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.499983949s ago: executing program 1 (id=15324): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}}}}]}, @CTA_SYNPROXY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket(0x2, 0xa, 0x1000300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x25}, 0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x8855) getpeername$inet6(r1, 0x0, 0x0) 2.499791339s ago: executing program 8 (id=15325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d21b0e8a0e000000000000000600", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(0x0, r0) recvmmsg(r0, 0x0, 0x0, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) close(0x3) 2.368782223s ago: executing program 8 (id=15328): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) truncate(&(0x7f0000000100)='\x00', 0xafe4d31) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) socket$inet_sctp(0x2, 0x4, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x8048802) 2.288992155s ago: executing program 9 (id=15330): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) 2.144555848s ago: executing program 4 (id=15331): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x10b, 0x2, 0x0, &(0x7f0000000380), 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), &(0x7f00000004c0), 0x2, 0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x7fc, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 2.136026708s ago: executing program 1 (id=15332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000001, 0x8a}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20008840) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x0, 0x10001, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pivot_root(0x0, &(0x7f0000000080)='./file1\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') syz_emit_ethernet(0xfdef, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 2.05952053s ago: executing program 8 (id=15333): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.917453123s ago: executing program 9 (id=15334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0x46) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040020) r2 = socket(0x40000000015, 0x805, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000002380)={{0x0}, 0x0, 0x8}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x20, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.679183179s ago: executing program 4 (id=15335): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x0, 0x5, 0x0}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0xfffffffc, @mcast2}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1.6374045s ago: executing program 4 (id=15336): syz_open_dev$evdev(0x0, 0x0, 0x822b01) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f4}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc5}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) lseek(0xffffffffffffffff, 0x101, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xbfd, 0x414000) 1.598843001s ago: executing program 5 (id=15337): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x810c9365, 0x0) 1.572689422s ago: executing program 9 (id=15338): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x5, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000076000d0b00000000327efb1a030000000000000008000a0001000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) 1.568012152s ago: executing program 5 (id=15339): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 1.117905093s ago: executing program 8 (id=15340): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x9}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) readahead(0xffffffffffffffff, 0x2, 0xd5ac) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) openat(0xffffffffffffff9c, 0x0, 0x129042, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) 984.065926ms ago: executing program 9 (id=15341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='illinois', 0xfdfc) sendto$inet6(r3, 0x0, 0x0, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) shutdown(r3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x9c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x4, 0x5, 0x5, 0x9, 0x10, 0x8, 0x3, 0x8, 0x1, 0x10, 0x8, 0xc, 0x0, 0x2, 0xe, 0xa], 0x1, [0xffff, 0x3ff, 0x278b, 0x0, 0x7, 0x7fff, 0x4, 0x7ff, 0x7, 0x5, 0x6, 0x800, 0x4, 0x9, 0x3, 0x7], [0x2, 0x4, 0xfff, 0x1, 0x9, 0x7, 0x7, 0xb, 0x707d, 0x3ff, 0x1ff, 0x6, 0x2, 0x1]}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 873.228489ms ago: executing program 9 (id=15342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff2, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xf6b6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 787.669221ms ago: executing program 1 (id=15343): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 687.699373ms ago: executing program 9 (id=15344): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x40, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) io_setup(0x3fc, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 639.555834ms ago: executing program 8 (id=15345): socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20000400) r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f0000000200)={0x1e, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 639.150914ms ago: executing program 5 (id=15346): mkdir(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x6, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) write$vga_arbiter(r0, 0x0, 0x0) open$dir(0x0, 0x800, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 370.720921ms ago: executing program 4 (id=15347): socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) 142.780657ms ago: executing program 4 (id=15348): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x204, 0x8, 0x43a1bd74, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x11ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 114.598767ms ago: executing program 5 (id=15349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0x46) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040020) r2 = socket(0x40000000015, 0x805, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000002380)={{0x0}, 0x0, 0x8}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x20, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 0s ago: executing program 4 (id=15350): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r3}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) recvfrom(r1, 0x0, 0xb, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): port 6081 - 0 [ 815.031489][ T28] audit: type=1400 audit(1785051483.978:6649): avc: denied { write } for pid=13250 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.224997][T24392] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.239530][T24392] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.549320][ T28] audit: type=1400 audit(1785051484.474:6650): avc: denied { write } for pid=13263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.669699][ T28] audit: type=1400 audit(1785051484.577:6651): avc: denied { write } for pid=13282 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.192595][T13316] netlink: 830 bytes leftover after parsing attributes in process `syz.4.13751'. [ 816.897581][T13349] netlink: 'syz.4.13757': attribute type 4 has an invalid length. [ 816.974264][T13349] netlink: 'syz.4.13757': attribute type 4 has an invalid length. [ 817.018158][T13283] Set syz1 is full, maxelem 65536 reached [ 817.579115][T13386] syzkaller0: Caught tx_queue_len zero misconfig [ 817.607549][T13386] netlink: 'syz.1.13761': attribute type 1 has an invalid length. [ 817.635085][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13761'. [ 817.923698][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13766'. [ 817.945013][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13766'. [ 817.963247][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13766'. [ 818.060246][T13426] loop8: detected capacity change from 0 to 512 [ 818.114381][T13426] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.13771: corrupted xattr block 95: invalid header [ 818.129736][T13426] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 818.130074][T13426] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.13771: bg 0: block 7: invalid block bitmap [ 818.140960][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 818.140986][ C0] EXT4-fs (loop8): initial error at time 1785051486: ext4_expand_extra_isize_ea:2810: inode 11 [ 818.141022][ C0] EXT4-fs (loop8): last error at time 1785051486: ext4_expand_extra_isize_ea:2810: inode 11 [ 818.192567][T13426] loop8: lost filesystem error report for type 5 error -117 [ 818.192744][T13426] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 818.213970][T13426] loop8: lost filesystem error report for type 5 error -117 [ 818.214217][T13426] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.13771: corrupted xattr block 95: invalid header [ 818.237677][T13426] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 818.237884][T13426] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 818.272659][T13426] EXT4-fs (loop8): 1 orphan inode deleted [ 818.279494][T13426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.345368][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.570761][T13421] vcan0 speed is unknown, defaulting to 1000 [ 818.667298][T13432] loop8: detected capacity change from 0 to 4096 [ 818.882496][T13432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.413750][T13453] vcan0 speed is unknown, defaulting to 1000 [ 819.493255][T13432] Set syz1 is full, maxelem 65536 reached [ 819.540912][T13457] loop4: detected capacity change from 0 to 512 [ 819.549441][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.607723][T13457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 819.647127][T13457] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.755588][T12311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 819.758156][ T6798] IPVS: starting estimator thread 0... [ 819.866477][T13469] IPVS: using max 2496 ests per chain, 124800 per kthread [ 819.966462][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 819.966481][ T28] audit: type=1400 audit(1785051488.601:6666): avc: denied { create } for pid=13478 comm="syz.8.13790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 820.015825][T13480] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.13790'. [ 820.370914][T13494] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 820.399069][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13798'. [ 820.412554][T13498] vcan0 speed is unknown, defaulting to 1000 [ 820.709899][T13518] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.13804'. [ 820.776196][T13512] vcan0 speed is unknown, defaulting to 1000 [ 820.831468][T13521] loop4: detected capacity change from 0 to 1024 [ 820.883471][T13521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 820.913044][T13521] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.119654][T12311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 821.264985][T13540] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13813'. [ 821.290373][ T28] audit: type=1400 audit(1785051489.818:6667): avc: denied { accept } for pid=13536 comm="syz.4.13810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 821.413569][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.443965][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.298865][T13567] netlink: 'syz.1.13821': attribute type 4 has an invalid length. [ 822.346383][T13567] netlink: 'syz.1.13821': attribute type 4 has an invalid length. [ 822.557994][T13572] vcan0 speed is unknown, defaulting to 1000 [ 823.300495][T13613] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.13838'. [ 823.588305][ T28] audit: type=1326 audit(1785051491.989:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cd54de99 code=0x7fc00000 [ 823.657246][ T28] audit: type=1326 audit(1785051491.989:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89cd54de99 code=0x7fc00000 [ 823.714632][ T28] audit: type=1326 audit(1785051492.007:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89cd547c17 code=0x7fc00000 [ 823.777202][ T28] audit: type=1326 audit(1785051492.007:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89cd4ef219 code=0x7fc00000 [ 823.876877][ T28] audit: type=1326 audit(1785051492.007:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f89cd4ef2dd code=0x7fc00000 [ 823.938744][ T28] audit: type=1326 audit(1785051492.007:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13622 comm="syz.8.13841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89cd54de99 code=0x7fc00000 [ 824.132167][T13640] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13848'. [ 824.311787][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13850'. [ 824.476720][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13850'. [ 824.510900][ T7649] bond1 (unregistering): (slave veth3): Releasing backup interface [ 824.535442][ T7649] veth3: left promiscuous mode [ 824.544922][ T7649] bond1 (unregistering): Released all slaves [ 824.587795][ T7649] bond0 (unregistering): (slave ): Releasing active interface [ 824.612192][ T7649] bond0 (unregistering): Released all slaves [ 824.763536][ T28] audit: type=1400 audit(1785051493.093:6674): avc: denied { write } for pid=13647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.932964][ T28] audit: type=1400 audit(1785051493.252:6675): avc: denied { write } for pid=13671 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.020540][T13677] loop8: detected capacity change from 0 to 1024 [ 825.072253][T13677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.118131][T13677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.159694][T13677] EXT4-fs: inline encryption not supported [ 825.174889][T13677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.206724][T13677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.265383][T13677] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.471090][T13675] vcan0 speed is unknown, defaulting to 1000 [ 825.490840][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 825.602554][T13674] vcan0 speed is unknown, defaulting to 1000 [ 825.745275][ T7649] IPVS: stop unused estimator thread 0... [ 825.906268][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 825.985068][T13712] loop8: detected capacity change from 0 to 1024 [ 826.035938][T13712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.065471][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 826.065489][ T28] audit: type=1400 audit(1785051494.310:6677): avc: denied { write } for pid=13701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.100465][T13712] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.175072][T13712] xt_TCPMSS: Only works on TCP SYN packets [ 826.197902][ T28] audit: type=1400 audit(1785051494.431:6678): avc: denied { write } for pid=13719 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.281832][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 826.363472][T13712] EXT4-fs (loop8): re-mounted 00000000-0000-0006-0000-000000000000. [ 826.421912][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 826.542791][T13737] loop4: detected capacity change from 0 to 4096 [ 826.566566][ T28] audit: type=1400 audit(1785051494.768:6679): avc: denied { write } for pid=13730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.598864][ T28] audit: type=1400 audit(1785051494.815:6680): avc: denied { write } for pid=13751 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.619965][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 826.627549][T13737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.661406][ T28] audit: type=1400 audit(1785051494.862:6681): avc: denied { write } for pid=13732 comm="syz.4.13865" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.853461][ T28] audit: type=1400 audit(1785051495.049:6682): avc: denied { write } for pid=13755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.922272][ T28] audit: type=1400 audit(1785051495.114:6683): avc: denied { write } for pid=13766 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.976516][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 827.120755][ T28] audit: type=1400 audit(1785051495.301:6684): avc: denied { write } for pid=13768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.190890][ T28] audit: type=1400 audit(1785051495.358:6685): avc: denied { write } for pid=13779 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.410236][ T28] audit: type=1400 audit(1785051495.573:6686): avc: denied { write } for pid=13782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.941519][T13827] lo: Caught tx_queue_len zero misconfig [ 828.235409][T13842] loop8: detected capacity change from 0 to 512 [ 828.278173][T13842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.325627][T13842] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.340635][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13878'. [ 828.415541][T13737] Set syz1 is full, maxelem 65536 reached [ 828.444985][T24392] smc: removing ib device syz1 [ 828.455713][ T6798] vcan0 speed is unknown, defaulting to 1000 [ 828.466079][ T6798] syz1: Port: 1 Link DOWN [ 828.487115][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.530747][T12311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.573319][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13880'. [ 829.351000][T13922] loop8: detected capacity change from 0 to 164 [ 829.362488][T13922] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 829.411425][T13922] bond4 (unregistering): Released all slaves [ 829.441046][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13896'. [ 829.451369][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13896'. [ 830.057562][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13902'. [ 830.161202][T13954] loop4: detected capacity change from 0 to 1024 [ 830.201041][T13954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 830.217670][T13954] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.295752][T13961] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.13903: lblock 0 mapped to illegal pblock 0 (length 6) [ 830.392167][T13961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 830.414102][T13966] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.13903: lblock 0 mapped to illegal pblock 0 (length 1) [ 830.430107][T13961] EXT4-fs (loop4): This should not happen!! Data will be lost [ 830.430107][T13961] [ 830.459594][T13966] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.13903: lblock 0 mapped to illegal pblock 0 (length 1) [ 830.462296][T13962] infiniband syz0: set down [ 830.494680][T13966] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.13903: lblock 0 mapped to illegal pblock 0 (length 1) [ 830.509732][T13962] infiniband syz0: added ipvlan0 [ 830.527839][T13966] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.13903: lblock 0 mapped to illegal pblock 0 (length 1) [ 830.559310][T13962] RDS/IB: syz0: added [ 830.570570][T13966] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.13903: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 830.581391][T13962] smc: adding ib device syz0 with port count 1 [ 830.597018][T13962] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 830.663321][T13961] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.13903: lblock 3 mapped to illegal pblock 3 (length 2) [ 831.072609][T13986] loop8: detected capacity change from 0 to 4096 [ 831.119250][T13986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.223361][T14001] EXT4-fs (loop8): shut down requested (0) [ 831.400641][T24392] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:90: lblock 8 mapped to illegal pblock 8 (length 8) [ 831.432203][T24392] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 831.459781][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 831.459801][ T28] audit: type=1326 audit(1785051499.353:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.5.13910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 831.497011][T24392] EXT4-fs (loop4): This should not happen!! Data will be lost [ 831.497011][T24392] [ 831.518375][ T28] audit: type=1326 audit(1785051499.353:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.5.13910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 831.551967][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.552478][T24392] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:90: bg 0: block 112: padding at end of block bitmap is not set [ 831.579223][T24392] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 831.593054][ T28] audit: type=1400 audit(1785051499.353:6705): avc: denied { write } for pid=14018 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.617461][ T28] audit: type=1326 audit(1785051499.410:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.5.13910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 831.619840][T24392] EXT4-fs (loop4): This should not happen!! Data will be lost [ 831.619840][T24392] [ 831.687617][ T28] audit: type=1326 audit(1785051499.475:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.5.13910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 831.717058][ T28] audit: type=1326 audit(1785051499.475:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.5.13910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 831.720858][T24392] EXT4-fs (loop4): Total free blocks count 0 [ 831.749244][T24392] EXT4-fs (loop4): Free/Dirty block details [ 831.755228][T24392] EXT4-fs (loop4): free_blocks=0 [ 831.767357][T12311] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 832.078937][ T28] audit: type=1400 audit(1785051499.924:6709): avc: denied { setopt } for pid=14032 comm="syz.4.13918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 832.376132][T14040] loop4: detected capacity change from 0 to 128 [ 832.607236][ T28] audit: type=1400 audit(1785051500.430:6710): avc: denied { write } for pid=14041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.681131][ T28] audit: type=1400 audit(1785051500.486:6711): avc: denied { write } for pid=14057 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.908484][T14061] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.13923'. [ 832.989970][T14063] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.041060][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13924'. [ 833.077353][T14063] bridge_slave_1: left allmulticast mode [ 833.083749][T14063] bridge_slave_1: left promiscuous mode [ 833.089560][T14063] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.098660][T14063] bridge_slave_0: left allmulticast mode [ 833.104679][T14063] bridge_slave_0: left promiscuous mode [ 833.110446][T14063] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.259512][ T28] audit: type=1400 audit(1785051501.038:6712): avc: denied { name_bind } for pid=14070 comm="syz.9.13928" path="socket:[147306]" dev="sockfs" ino=147306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 833.605822][T14078] loop4: detected capacity change from 0 to 8192 [ 835.398829][T14109] netlink: 'syz.5.13942': attribute type 1 has an invalid length. [ 835.417485][T14109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 835.494485][T14112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13942'. [ 835.504690][T14112] netlink: 'syz.5.13942': attribute type 1 has an invalid length. [ 836.442449][T14109] bond1: entered promiscuous mode [ 836.453260][T14109] bond1: entered allmulticast mode [ 836.487852][T14112] bond1: left promiscuous mode [ 836.518599][T14112] bond1: left allmulticast mode [ 836.547875][T14112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 836.758724][T14135] bond2 (unregistering): Released all slaves [ 836.928990][T14149] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13964'. [ 836.982475][T14150] netlink: 76 bytes leftover after parsing attributes in process `syz.8.13964'. [ 837.041194][T14150] bridge0: left promiscuous mode [ 837.056841][T14150] bridge0: left allmulticast mode [ 837.079522][T14150] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13964'. [ 837.192579][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 837.192598][ T28] audit: type=1400 audit(1785051504.725:6770): avc: denied { mount } for pid=14160 comm="syz.8.13959" name="/" dev="hugetlbfs" ino=149564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 837.479055][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13961'. [ 837.533277][T14171] netlink: 30 bytes leftover after parsing attributes in process `syz.1.13961'. [ 837.654374][T14183] loop8: detected capacity change from 0 to 1024 [ 837.685777][T14183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 837.708946][T14183] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.758389][ T28] audit: type=1400 audit(1785051505.249:6771): avc: denied { write } for pid=14181 comm="syz.8.13969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 837.772500][T14198] loop4: detected capacity change from 0 to 512 [ 837.821230][T14198] EXT4-fs (loop4): 1 orphan inode deleted [ 837.836987][T24383] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 837.866519][T14205] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.13969: lblock 0 mapped to illegal pblock 0 (length 6) [ 837.885663][T14198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.908106][T24383] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:81: Failed to release dquot type 1 [ 837.922920][T24383] loop4: lost filesystem error report for type 5 error -117 [ 837.931125][T14198] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.964006][T14207] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: comm syz.8.13969: lblock 0 mapped to illegal pblock 0 (length 1) [ 837.965191][T14205] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 837.994234][T14207] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: comm syz.8.13969: lblock 0 mapped to illegal pblock 0 (length 1) [ 837.996089][T14205] EXT4-fs (loop8): This should not happen!! Data will be lost [ 837.996089][T14205] [ 838.024019][T14198] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 838.024292][T14207] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: comm syz.8.13969: lblock 0 mapped to illegal pblock 0 (length 1) [ 838.086957][T14207] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: comm syz.8.13969: lblock 0 mapped to illegal pblock 0 (length 1) [ 838.140070][T12311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.143569][T14207] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.13969: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 838.219449][T14205] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: block 3: comm syz.8.13969: lblock 3 mapped to illegal pblock 3 (length 2) [ 838.241593][ T28] audit: type=1400 audit(1785051505.679:6772): avc: denied { getattr } for pid=14215 comm="syz.4.13978" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 838.292392][ T28] audit: type=1400 audit(1785051505.754:6773): avc: denied { listen } for pid=14217 comm="syz.9.13979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 838.699034][T24383] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:81: lblock 8 mapped to illegal pblock 8 (length 8) [ 838.720630][T24383] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 838.747616][T24383] EXT4-fs (loop8): This should not happen!! Data will be lost [ 838.747616][T24383] [ 838.796193][T24383] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:81: bg 0: block 112: padding at end of block bitmap is not set [ 838.821468][T24383] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 838.839437][T24383] EXT4-fs (loop8): This should not happen!! Data will be lost [ 838.839437][T24383] [ 838.849638][T24383] EXT4-fs (loop8): Total free blocks count 0 [ 838.886555][T24383] EXT4-fs (loop8): Free/Dirty block details [ 838.905335][T24383] EXT4-fs (loop8): free_blocks=0 [ 838.927424][T14228] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.941718][T14228] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.980230][ T8875] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 839.071509][T14228] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.081325][T14228] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.133917][T14236] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.13982'. [ 839.173891][T14228] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.196962][T14228] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.376062][T14228] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.395082][T14228] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.492047][T14261] loop8: detected capacity change from 0 to 512 [ 839.510962][T14261] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.13997: attempt to clear invalid blocks 2 len 1 [ 839.524707][T14261] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 839.525091][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 839.526258][ T28] audit: type=1326 audit(1785051506.915:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.4.13994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f4cde99 code=0x7ffc0000 [ 839.534898][ C0] EXT4-fs (loop8): initial error at time 1785051506: ext4_clear_blocks:876 [ 839.555419][ T28] audit: type=1326 audit(1785051506.915:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.4.13994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f4cde99 code=0x7ffc0000 [ 839.568517][ C0] : inode 13 [ 839.607393][ C0] EXT4-fs (loop8): last error at time 1785051506: ext4_clear_blocks:876: inode 13 [ 839.618528][T14261] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 839.633820][T14261] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.13997: invalid indirect mapped block 1819239214 (level 0) [ 839.651374][T14261] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 839.652072][T14261] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.13997: invalid indirect mapped block 1819239214 (level 1) [ 839.678423][T14261] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 839.680827][T14261] EXT4-fs (loop8): 1 truncate cleaned up [ 839.685063][ T28] audit: type=1326 audit(1785051506.924:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.4.13994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd1f4cde99 code=0x7ffc0000 [ 839.693261][T14261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.717412][T14265] netlink: 'syz.9.13998': attribute type 1 has an invalid length. [ 839.767493][ T28] audit: type=1326 audit(1785051507.008:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.4.13994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f4cde99 code=0x7ffc0000 [ 839.847889][ T28] audit: type=1326 audit(1785051507.008:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.4.13994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f4cde99 code=0x7ffc0000 [ 839.886008][T14265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.949467][ T7651] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.966411][ T7651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.023375][ T7651] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.035012][ T7651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.067217][ T7651] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.075941][ T7651] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.111419][ T7651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.119805][ T7651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.398346][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.778427][T14332] netlink: 'syz.8.14012': attribute type 1 has an invalid length. [ 840.866470][T14332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 840.897695][T14337] bond4: entered promiscuous mode [ 840.903228][T14337] bond4: entered allmulticast mode [ 840.935173][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14012'. [ 840.944783][T14332] netlink: 'syz.8.14012': attribute type 1 has an invalid length. [ 840.953386][T14332] bond4: left promiscuous mode [ 840.970085][T14332] bond4: left allmulticast mode [ 840.975851][T14332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.562496][T14375] loop4: detected capacity change from 0 to 512 [ 841.599861][T14375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.623571][T14375] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.705824][T12311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.166292][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.174847][T14410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.186473][T14410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.196947][T14410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.214784][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14043'. [ 843.235651][T14445] sch_tbf: burst 12 is lower than device bridge1 mtu (1514) ! [ 844.016221][T14485] tmpfs: Bad value for 'mpol' [ 844.122809][T14490] netlink: 'syz.1.14060': attribute type 1 has an invalid length. [ 844.148695][T14490] 8021q: adding VLAN 0 to HW filter on device bond7 [ 844.227574][T14490] bond7: (slave ip6gretap0): making interface the new active one [ 844.237048][T14490] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 844.481486][T14504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.520079][T14504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.878408][T14520] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14073'. [ 844.904317][T14520] netlink: 59 bytes leftover after parsing attributes in process `syz.5.14073'. [ 844.929608][T14520] netlink: 59 bytes leftover after parsing attributes in process `syz.5.14073'. [ 845.157974][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14078'. [ 845.635970][T14536] loop8: detected capacity change from 0 to 4096 [ 845.659265][T14536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.697492][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 845.697512][ T28] audit: type=1400 audit(1785051512.679:6789): avc: denied { write } for pid=14535 comm="syz.8.14079" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 845.765089][T14542] 9p: Bad value for 'rfdno' [ 845.946236][T14544] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 846.168994][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.488413][T14567] uprobe: syz.8.14092:14567 failed to unregister, leaking uprobe [ 846.517349][T14567] uprobe: syz.8.14092:14567 failed to unregister, leaking uprobe [ 846.721522][T14580] netlink: 'syz.9.14096': attribute type 39 has an invalid length. [ 846.849587][T14585] netlink: 68 bytes leftover after parsing attributes in process `syz.8.14098'. [ 847.430760][ T28] audit: type=1326 audit(1785051514.298:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.1.14104" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x0 [ 848.207590][T14626] netlink: 'syz.8.14113': attribute type 1 has an invalid length. [ 848.233364][T14626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 848.359917][T14628] bond5: (slave ip6gretap1): making interface the new active one [ 848.384900][T14628] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 848.475188][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14114'. [ 848.634162][T14630] team0: Port device team_slave_0 removed [ 848.692678][T14640] loop8: detected capacity change from 0 to 128 [ 848.709540][T14640] FAT-fs (loop8): bogus number of reserved sectors [ 848.753252][T14640] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 848.768448][T14640] FAT-fs (loop8): Can't find a valid FAT filesystem [ 849.502511][T14668] netlink: 'syz.5.14129': attribute type 1 has an invalid length. [ 849.533950][T14668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 849.650644][T14668] bond2: (slave ip6gretap1): making interface the new active one [ 849.690252][T14668] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 850.264408][T14689] nfs: Unknown parameter '' [ 850.312095][ T28] audit: type=1400 audit(1785051517.003:6791): avc: denied { accept } for pid=14700 comm="syz.4.14143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 851.820251][T14757] bond0: (slave bond_slave_0): Releasing backup interface [ 851.849501][T14757] bond0: (slave bond_slave_1): Releasing backup interface [ 851.894802][T14757] team0: Port device team_slave_0 removed [ 851.937212][T14757] team0: Port device team_slave_1 removed [ 851.971506][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.000107][T14757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.011522][T14757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.020661][T14757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.038139][T14757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 852.128050][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14168'. [ 852.764627][ T28] audit: type=1400 audit(1785051519.286:6792): avc: denied { bind } for pid=14803 comm="syz.8.14177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 853.028537][T14823] bond2: option ad_actor_sys_prio: invalid value (0) [ 853.037984][T14823] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 853.053309][T14823] bond2 (unregistering): Released all slaves [ 856.148688][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14206'. [ 856.183291][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14206'. [ 856.316409][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.324219][T14892] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.432000][T14892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.442468][T14892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.557406][T24383] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.600121][T24383] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.632209][T24383] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.654972][ T7645] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.705520][T14907] ref_ctr increment failed for inode: 0x6f0 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119d4aa00 [ 856.729167][T14906] uprobe: syz.8.14214:14906 failed to unregister, leaking uprobe [ 857.868488][T14936] netlink: 'syz.5.14226': attribute type 4 has an invalid length. [ 857.922751][T14943] netlink: 'syz.5.14226': attribute type 4 has an invalid length. [ 858.081782][T14957] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 858.092645][ T28] audit: type=1400 audit(1785051524.274:6793): avc: denied { relabelto } for pid=14956 comm="syz.9.14233" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.176929][ T28] audit: type=1400 audit(1785051524.274:6794): avc: denied { associate } for pid=14956 comm="syz.9.14233" name="107" dev="tmpfs" ino=572 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 858.224808][T14960] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 858.244812][T14960] bond2: entered allmulticast mode [ 858.251201][ T28] audit: type=1400 audit(1785051524.358:6795): avc: denied { write } for pid=12954 comm="syz-executor" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.251242][ T28] audit: type=1400 audit(1785051524.358:6796): avc: denied { remove_name } for pid=12954 comm="syz-executor" name="binderfs" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.251278][ T28] audit: type=1400 audit(1785051524.358:6797): avc: denied { write } for pid=12954 comm="syz-executor" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.251386][ T28] audit: type=1400 audit(1785051524.358:6798): avc: denied { write } for pid=12954 comm="syz-executor" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.359141][ T28] audit: type=1400 audit(1785051524.358:6799): avc: denied { write } for pid=12954 comm="syz-executor" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.373139][T14963] ip6gretap1: entered promiscuous mode [ 858.394308][ T28] audit: type=1400 audit(1785051524.358:6800): avc: denied { rmdir } for pid=12954 comm="syz-executor" name="107" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 858.424738][T14963] ip6gretap1: entered allmulticast mode [ 858.447652][T14963] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 858.549802][T14982] bridge_slave_0: left allmulticast mode [ 858.569165][T14982] bridge_slave_0: left promiscuous mode [ 858.575301][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.585750][T14982] bridge_slave_1: left allmulticast mode [ 858.598228][T14982] bridge_slave_1: left promiscuous mode [ 858.605100][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.614180][T14982] bond0: (slave bond_slave_0): Releasing backup interface [ 858.623728][T14982] bond0: (slave bond_slave_1): Releasing backup interface [ 858.633132][T14982] team0: Port device team_slave_0 removed [ 858.639731][T14982] team0: Port device team_slave_1 removed [ 858.646809][T14982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.654573][T14982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.662425][T14982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 858.953199][ T28] audit: type=1400 audit(1785051525.088:6801): avc: denied { write } for pid=15002 comm="syz.8.14245" name="file0" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 859.011194][ T28] audit: type=1400 audit(1785051525.116:6802): avc: denied { ioctl } for pid=15002 comm="syz.8.14245" path="/345/file0" dev="tmpfs" ino=1802 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 859.092807][T15012] netlink: 'syz.8.14248': attribute type 1 has an invalid length. [ 859.108808][T15012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 859.128889][T15012] vlan3: entered allmulticast mode [ 859.134357][T15012] bond6: entered allmulticast mode [ 859.152199][T15012] bond6: (slave geneve2): making interface the new active one [ 859.175779][T15012] geneve2: entered allmulticast mode [ 859.204194][T15012] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 859.232354][ T28] audit: type=1400 audit(1785051525.341:6803): avc: denied { connect } for pid=15015 comm="syz.1.14249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 859.406058][T15024] loop8: detected capacity change from 0 to 128 [ 859.442570][T15024] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 859.456588][T15024] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.482419][ T8875] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.485138][T15074] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14267'. [ 860.630533][T15089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.640217][T15089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.983824][T15101] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14278'. [ 861.095412][T15105] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 861.121549][T15105] bond1: entered allmulticast mode [ 861.143881][T15105] ip6gretap1: entered promiscuous mode [ 861.152084][T15105] ip6gretap1: entered allmulticast mode [ 861.158225][T15105] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 862.458980][T15155] bond8: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 862.498561][T15155] bond8: entered allmulticast mode [ 862.512422][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14295'. [ 862.566985][T15155] ip6gretap1: entered promiscuous mode [ 862.578318][T15155] ip6gretap1: entered allmulticast mode [ 862.584565][T15155] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 863.677535][ T28] kauditd_printk_skb: 2541 callbacks suppressed [ 863.677567][ T28] audit: type=1400 audit(1785051529.514:9345): avc: denied { write } for pid=11662 comm="syz-executor" name="191" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 863.682724][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14313'. [ 863.686456][ T28] audit: type=1400 audit(1785051529.514:9346): avc: denied { write } for pid=11662 comm="syz-executor" name="191" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 863.767458][ T28] audit: type=1400 audit(1785051529.580:9347): avc: denied { write } for pid=11662 comm="syz-executor" name="191" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 863.797355][ T28] audit: type=1400 audit(1785051529.580:9348): avc: denied { write } for pid=11662 comm="syz-executor" name="191" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 863.845408][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14316'. [ 863.858065][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14316'. [ 864.413293][T15223] veth1_to_bond: left promiscuous mode [ 864.419075][T15223] veth1_to_bond: left allmulticast mode [ 864.729524][T15236] netlink: 'syz.5.14322': attribute type 1 has an invalid length. [ 865.061305][T15223] geneve1: left promiscuous mode [ 865.315642][T15223] geneve2: left allmulticast mode [ 865.871215][T15254] loop8: detected capacity change from 0 to 8192 [ 865.921356][T15254] loop8: p3 p4[EZD] [ 865.926149][T15254] loop8: p3 start 458783 is beyond EOD, truncated [ 865.938379][T15254] loop8: p4 size 100663296 extends beyond EOD, truncated [ 865.946458][T15223] team1: left promiscuous mode [ 865.951946][T15223] team1: left allmulticast mode [ 866.001068][T15223] xfrm1: left allmulticast mode [ 866.006877][T12389] udevd[12389]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 866.020277][T15223] bond0: left promiscuous mode [ 866.078672][T15257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.087667][T15257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.151352][T15257] loop8: detected capacity change from 0 to 512 [ 866.190324][T15257] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 866.313835][T15223] gretap2: left promiscuous mode [ 866.422055][T15223] team2: left promiscuous mode [ 866.427102][T15223] team2: left allmulticast mode [ 866.435086][T15223] team3: left promiscuous mode [ 866.441411][T15223] team3: left allmulticast mode [ 866.462979][T15223] bond8: left allmulticast mode [ 866.471048][T15223] ip6gretap1: left allmulticast mode [ 866.478083][T15223] ip6gretap1: left promiscuous mode [ 866.489011][T15236] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 866.506310][ T7646] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.530162][ T7646] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.548888][ T7646] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.559617][ T7646] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.576873][ T7646] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.585626][ T7646] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.595932][ T7646] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 866.604856][ T7646] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.613318][ T7646] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 866.623096][ T7646] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 866.634202][ T7646] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 866.659090][T15277] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 866.669272][T15277] sch_tbf: burst 593 is lower than device lo mtu (65550) ! [ 866.684636][ T7646] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 866.743212][T15278] veth0: entered promiscuous mode [ 866.767750][T15276] veth0: left promiscuous mode [ 866.848046][T15289] netlink: 'syz.5.14335': attribute type 1 has an invalid length. [ 866.871370][T15289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 866.902532][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14336'. [ 866.927885][T15289] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 867.003959][T15289] macvlan2: entered promiscuous mode [ 867.028697][T15289] macvlan2: entered allmulticast mode [ 867.043832][T15289] bond3: entered promiscuous mode [ 867.049069][T15289] veth0_to_bond: entered promiscuous mode [ 867.055494][ T28] audit: type=1400 audit(1785051532.659:9349): avc: denied { shutdown } for pid=15295 comm="syz.8.14337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 867.065676][T15296] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 867.078804][T15289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 867.097342][T15289] bond3: left promiscuous mode [ 867.102740][T15289] veth0_to_bond: left promiscuous mode [ 867.138070][T15300] netlink: 'syz.1.14338': attribute type 13 has an invalid length. [ 867.591846][T15324] netdevsim netdevsim9: Direct firmware load for  failed with error -2 [ 868.209685][T15364] loop8: detected capacity change from 0 to 512 [ 868.243185][T15364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.268049][T15364] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.337634][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.410967][ T28] audit: type=1326 audit(1785051533.941:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15370 comm="syz.8.14365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89cd54de99 code=0x0 [ 868.691642][T15381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.703726][T15381] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 868.739125][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.777653][T15381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.798143][T15381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 868.917457][T15381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.934080][T15381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 868.982140][ T28] audit: type=1400 audit(1785051534.474:9351): avc: denied { connect } for pid=15394 comm="syz.9.14373" lport=35488 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 869.018735][T15399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14375'. [ 869.071588][T15405] netlink: 'syz.1.14386': attribute type 1 has an invalid length. [ 869.227180][T15381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.239582][T15381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 869.258306][T15405] 8021q: adding VLAN 0 to HW filter on device bond9 [ 869.284463][T15409] bond9: (slave veth13): Enslaving as an active interface with a down link [ 869.335252][T15412] erspan0: left promiscuous mode [ 869.341764][T15416] loop4: detected capacity change from 0 to 7 [ 869.349367][T15416] loop4: [ 869.488280][T15412] veth0_to_team: left promiscuous mode [ 869.541016][T15412] veth1_vlan: left promiscuous mode [ 869.559779][T15412] veth0_vlan: left promiscuous mode [ 869.579949][T15412] veth0_vlan: entered promiscuous mode [ 869.600958][T15412] veth1_vlan: entered promiscuous mode [ 869.622025][T15412] veth1_macvtap: left promiscuous mode [ 869.639063][T15412] veth0_macvtap: left promiscuous mode [ 869.656037][T15412] veth0_macvtap: entered promiscuous mode [ 869.669166][T15412] veth1_macvtap: entered promiscuous mode [ 869.701773][T15412] 8021q: adding VLAN 0 to HW filter on device  [ 869.709564][T15412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.720364][T15412] veth0_to_team: entered promiscuous mode [ 869.731018][T15412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 869.831575][T15412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 869.847789][T15412] 8021q: adding VLAN 0 to HW filter on device team1 [ 869.895944][T15412] erspan0: entered promiscuous mode [ 869.912571][T15412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.928189][T15412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 869.944231][T15412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.088225][T15412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 870.150472][T15412] 8021q: adding VLAN 0 to HW filter on device team2 [ 870.161617][T15412] 8021q: adding VLAN 0 to HW filter on device team3 [ 870.173911][T15412] netdevsim netdevsim1 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 870.185673][T15412] 8021q: adding VLAN 0 to HW filter on device eth0 [ 870.198521][T15412] netdevsim netdevsim1 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 870.212294][T15412] 8021q: adding VLAN 0 to HW filter on device eth1 [ 870.224609][T15412] netdevsim netdevsim1 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 870.240127][T15412] 8021q: adding VLAN 0 to HW filter on device eth2 [ 870.251859][T15412] netdevsim netdevsim1 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 870.266252][T15412] 8021q: adding VLAN 0 to HW filter on device eth3 [ 870.282430][ T28] audit: type=1326 audit(1785051535.691:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15425 comm="syz.9.14382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x0 [ 870.311109][T15412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 870.326891][T15412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 870.332915][T24383] bond8: (slave ip6gretap1): link status down again after 0 ms [ 870.342901][T15414] veth0_virt_wifi: entered promiscuous mode [ 870.357036][T15414] bond9: (slave veth0_virt_wifi): making interface the new active one [ 870.369296][T15414] bond9: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 870.433163][T24392] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.442927][T24392] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.452102][T24392] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.460685][T24392] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.472158][T24392] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.480932][T24392] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.530401][T15431] bond10: option ad_actor_sys_prio: invalid value (0) [ 870.538307][T15431] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 870.551307][T15431] bond10 (unregistering): Released all slaves [ 870.564810][T24392] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.574748][T24392] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.585246][T24392] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.596310][T24392] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 870.608016][T24392] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.618402][T24392] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 870.635293][T24392] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 870.650000][T24392] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 870.671565][T24392] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 870.693588][ T7645] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 870.704402][ T7645] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 870.735578][ T7646] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 870.746073][ T7646] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 870.769093][ T7646] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 870.780424][ T7646] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 870.803283][ T7646] bond8: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 870.812530][ T7646] bond8: active interface up! [ 870.862508][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14390'. [ 870.930797][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14390'. [ 871.048841][ T28] audit: type=1400 audit(1785051536.402:9353): avc: denied { mounton } for pid=15445 comm="syz.5.14391" path="/203/file1" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 871.154742][T15452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 871.269354][ T28] audit: type=1400 audit(1785051536.608:9354): avc: denied { setopt } for pid=15459 comm="syz.9.14398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 872.057200][T15493] loop8: detected capacity change from 0 to 4096 [ 872.083135][T15493] ext4: Unknown parameter 'dont_appraise' [ 872.147157][ T28] audit: type=1400 audit(1785051537.431:9355): avc: denied { map } for pid=15489 comm="syz.8.14406" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 872.322089][ T7651] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 872.339850][ T7651] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 872.365394][ T7651] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 872.390955][ T7651] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 872.676072][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14420'. [ 872.686957][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14420'. [ 873.128127][T15526] bond1: left promiscuous mode [ 873.138080][T15526] veth3: left promiscuous mode [ 873.233066][T15526] vlan3: left allmulticast mode [ 873.238254][T15526] bond6: left allmulticast mode [ 873.243857][T15526] geneve2: left allmulticast mode [ 873.256704][ T7645] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.273056][ T7645] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.295931][ T7645] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.328163][ T7645] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.355940][ T7645] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.374230][ T7645] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.419100][ T7645] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.448395][ T7645] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.860636][T15563] 9p: Bad value for 'rfdno' [ 874.890026][ T28] audit: type=1326 audit(1785051540.005:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.9.14435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 874.953393][T15569] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 874.978294][ T28] audit: type=1326 audit(1785051540.033:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.9.14435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 875.021404][T15569] sch_tbf: burst 593 is lower than device lo mtu (11337746) ! [ 875.062072][ T28] audit: type=1326 audit(1785051540.033:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.9.14435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 875.143111][ T28] audit: type=1326 audit(1785051540.154:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.9.14435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 875.196870][ T28] audit: type=1326 audit(1785051540.164:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.9.14435" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 875.293043][T15581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14440'. [ 875.690766][ T28] audit: type=1326 audit(1785051540.753:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.1.14444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 875.726190][ T28] audit: type=1326 audit(1785051540.753:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.1.14444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 875.755168][ T28] audit: type=1326 audit(1785051540.781:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.1.14444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 875.782054][ T28] audit: type=1326 audit(1785051540.781:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15590 comm="syz.1.14444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 876.613393][T15631] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 876.754209][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14464'. [ 876.827218][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14466'. [ 876.852395][T15646] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14466'. [ 877.224353][T15672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14472'. [ 877.451718][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14475'. [ 877.462953][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14475'. [ 877.495561][T15680] loop8: detected capacity change from 0 to 1024 [ 877.502406][T15680] EXT4-fs: Ignoring removed bh option [ 877.774543][T15680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.877266][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.884872][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.238517][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.620048][T15711] loop8: detected capacity change from 0 to 136 [ 879.046515][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14493'. [ 879.117491][T15678] bond1: left allmulticast mode [ 879.122725][T15678] ip6gretap1: left allmulticast mode [ 879.130597][T15678] ip6gretap1: left promiscuous mode [ 879.184533][T24383] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.198061][T24383] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.218853][T24383] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.238995][T24383] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.253322][T24383] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.263501][T24383] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.272757][T24383] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 879.281964][T24383] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 879.311736][T15729] tipc: Started in network mode [ 879.323353][T15729] tipc: Node identity , cluster identity 4711 [ 879.338000][T15729] tipc: Failed to obtain node identity [ 879.355905][T15729] tipc: Enabling of bearer rejected, failed to enable media [ 879.748377][T15753] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14505'. [ 879.773605][T15755] veth0_macvtap: Caught tx_queue_len zero misconfig [ 879.967143][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14511'. [ 880.525043][T15789] loop8: detected capacity change from 0 to 512 [ 880.547916][T15789] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.14518: iget: bad extended attribute block 1 [ 880.561865][T15789] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 880.562420][T15789] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.14518: couldn't read orphan inode 15 (err -117) [ 880.571909][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 880.571934][ C0] EXT4-fs (loop8): initial error at time 1785051545: ext4_orphan_get:1399: inode 15 [ 880.571968][ C0] EXT4-fs (loop8): last error at time 1785051545: ext4_orphan_get:1399: inode 15 [ 880.610821][T15789] loop8: lost filesystem error report for type 5 error -117 [ 880.612531][T15789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.639404][T15789] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 13: comm syz.8.14518: lblock 0 mapped to illegal pblock 13 (length 1) [ 880.711223][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.745597][T15805] bridge5: entered promiscuous mode [ 880.753927][T15805] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 880.823793][T15809] netlink: 'syz.8.14526': attribute type 21 has an invalid length. [ 880.865500][T15809] __nla_validate_parse: 3 callbacks suppressed [ 880.865564][T15809] netlink: 164 bytes leftover after parsing attributes in process `syz.8.14526'. [ 881.146694][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.155721][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.376530][T15844] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 881.376663][T15835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14534'. [ 881.529935][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14540'. [ 881.571571][T15851] netlink: 'syz.1.14540': attribute type 7 has an invalid length. [ 881.587058][T15851] netlink: 'syz.1.14540': attribute type 8 has an invalid length. [ 881.606830][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14540'. [ 882.142123][ T28] audit: type=1400 audit(1785051546.780:9365): avc: denied { nlmsg_read } for pid=15875 comm="syz.9.14548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 882.270797][T15882] sctp: [Deprecated]: syz.9.14551 (pid 15882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.270797][T15882] Use struct sctp_sack_info instead [ 882.317360][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14552'. [ 882.364806][T15886] 8021q: adding VLAN 0 to HW filter on device bond11 [ 882.406217][T15886] team0: Failed to send port change of device bond11 via netlink (err -105) [ 882.421693][T15886] team0: Failed to send options change via netlink (err -105) [ 882.444715][T15886] team0: Port device bond11 added [ 882.452298][ T7646] team0: Failed to send port change of device bond11 via netlink (err -105) [ 882.733603][T15910] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 882.744611][T15910] ref_ctr increment failed for inode: 0x453 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881091c3f00 [ 882.757697][T15908] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 882.768393][T15908] ref_ctr decrement failed for inode: 0x453 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881091c3f00 [ 882.790355][T15908] uprobe: syz.4.14562:15908 failed to unregister, leaking uprobe [ 883.141050][T15942] netlink: 'syz.5.14574': attribute type 1 has an invalid length. [ 883.163492][T15945] nftables ruleset with unbound chain [ 883.197470][T15942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 883.206414][T15942] bond4: (slave bond5): making interface the new active one [ 883.214681][T15942] bond4: (slave bond5): Enslaving as an active interface with an up link [ 883.322890][T15956] netlink: 106 bytes leftover after parsing attributes in process `syz.4.14576'. [ 883.420287][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14574'. [ 883.566440][T15942] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 883.580841][T15961] 8021q: adding VLAN 0 to HW filter on device bond4 [ 883.591784][T15967] netlink: 'syz.1.14583': attribute type 28 has an invalid length. [ 883.600047][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14583'. [ 884.437979][T16007] bond0: entered allmulticast mode [ 884.453165][T16006] bond0: left allmulticast mode [ 884.612560][ T28] audit: type=1400 audit(1785051549.101:9366): avc: denied { getopt } for pid=16021 comm="syz.4.14607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 884.873121][T15974] Set syz1 is full, maxelem 65536 reached [ 885.550049][T16063] loop8: detected capacity change from 0 to 1024 [ 885.930902][T16099] netlink: 'syz.4.14622': attribute type 10 has an invalid length. [ 885.939958][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.948143][T16099] bond0: (slave team0): Enslaving as an active interface with an up link [ 885.969576][ T28] audit: type=1326 audit(1785051550.327:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x0 [ 886.080072][ T28] audit: type=1326 audit(1785051550.467:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.130019][ T28] audit: type=1326 audit(1785051550.467:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.157860][ T28] audit: type=1326 audit(1785051550.467:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.186209][ T28] audit: type=1326 audit(1785051550.467:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.212545][ T28] audit: type=1326 audit(1785051550.514:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.240751][ T28] audit: type=1326 audit(1785051550.523:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 886.275928][T16063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.278778][ T28] audit: type=1326 audit(1785051550.523:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16102 comm="syz.1.14623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10ca8ae6ce code=0x7ffc0000 [ 886.655385][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.815343][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14628'. [ 887.069658][T16201] netlink: 'syz.1.14631': attribute type 1 has an invalid length. [ 887.102006][T16201] bond12: entered promiscuous mode [ 887.113612][T16201] 8021q: adding VLAN 0 to HW filter on device bond12 [ 887.158346][T16201] bond12: (slave bridge6): making interface the new active one [ 887.166108][T16201] bridge6: entered promiscuous mode [ 887.173074][T16201] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 887.568868][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 887.568934][ T28] audit: type=1400 audit(1785051551.861:9624): avc: denied { link } for pid=16213 comm="syz.9.14637" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 887.765276][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14639'. [ 887.950371][ T28] audit: type=1400 audit(1785051552.217:9625): avc: denied { mounton } for pid=16234 comm="syz.5.14644" path="/file0" dev="bpf" ino=154888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=file permissive=1 [ 887.991760][T16239] netlink: 'syz.1.14645': attribute type 39 has an invalid length. [ 888.071571][ T28] audit: type=1400 audit(1785051552.329:9626): avc: denied { execute } for pid=16244 comm="syz.5.14648" path="/file1" dev="ramfs" ino=154909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 888.330876][T16252] netlink: 'syz.5.14650': attribute type 1 has an invalid length. [ 888.361326][T16252] 8021q: adding VLAN 0 to HW filter on device bond6 [ 888.417103][T16252] bond6: (slave veth5): Enslaving as an active interface with a down link [ 888.432426][ T28] audit: type=1400 audit(1785051552.666:9627): avc: denied { unlink } for pid=12954 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 888.587900][T16258] veth0_virt_wifi: entered promiscuous mode [ 888.599866][T16258] bond6: (slave veth0_virt_wifi): making interface the new active one [ 888.655616][T16258] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 888.716443][ T7649] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 888.828652][T16273] macvlan2: entered promiscuous mode [ 888.996406][T16273] bridge0: entered promiscuous mode [ 890.936559][T16337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14680'. [ 891.933827][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14687'. [ 892.002260][ T28] audit: type=1400 audit(1785051556.007:9628): avc: denied { ioctl } for pid=16367 comm="syz.1.14700" path="socket:[155562]" dev="sockfs" ino=155562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 892.200462][ T28] audit: type=1400 audit(1785051556.194:9629): avc: denied { connect } for pid=16376 comm="syz.1.14692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 892.456618][ T28] audit: type=1400 audit(1785051556.428:9630): avc: denied { getopt } for pid=16384 comm="syz.8.14695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 893.263122][ T28] audit: type=1326 audit(1785051557.177:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.4.14713" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f4cde99 code=0x0 [ 893.428356][T16434] syzkaller0: entered promiscuous mode [ 893.433940][T16434] syzkaller0: entered allmulticast mode [ 893.522873][T16440] loop8: detected capacity change from 0 to 512 [ 893.529697][T16440] EXT4-fs: Ignoring removed nobh option [ 893.538061][T16440] EXT4-fs (loop8): orphan cleanup on readonly fs [ 893.545185][T16440] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #11: block 1: comm syz.8.14719: lblock 0 mapped to illegal pblock 1 (length 1) [ 893.560310][T16440] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 893.560579][T16440] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 893.560878][T16442] netlink: 'syz.5.14717': attribute type 13 has an invalid length. [ 893.569870][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 893.569900][ C1] EXT4-fs (loop8): initial error at time 1785051557: ext4_map_blocks:791: inode 11: block 1 [ 893.569957][ C1] EXT4-fs (loop8): last error at time 1785051557: ext4_map_blocks:791: inode 11: block 1 [ 893.570137][T16440] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.14719: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 893.570211][T16440] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 893.575003][T16440] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.14719: ea_inode dec ref err=-117 [ 893.584572][T16442] netlink: 'syz.5.14717': attribute type 17 has an invalid length. [ 893.594064][T16440] EXT4-fs (loop8): 1 orphan inode deleted [ 893.673085][T16440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 894.070393][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.585957][ T28] audit: type=1400 audit(1785051558.421:9632): avc: denied { name_bind } for pid=16465 comm="syz.5.14728" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 894.636804][T16470] netlink: 'syz.8.14729': attribute type 4 has an invalid length. [ 894.653799][T16470] netlink: 'syz.8.14729': attribute type 4 has an invalid length. [ 895.113276][T16481] netlink: 'syz.4.14732': attribute type 20 has an invalid length. [ 895.130465][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14732'. [ 895.181322][T16481] netlink: 'syz.4.14732': attribute type 20 has an invalid length. [ 895.189899][T24383] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.198221][T24383] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.218832][T24383] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.238389][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14732'. [ 895.253391][T24383] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 896.265681][ T6818] IPVS: starting estimator thread 0... [ 896.365306][T16530] IPVS: using max 2352 ests per chain, 117600 per kthread [ 897.305273][T16558] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 897.458486][T16561] tipc: Failed to remove unknown binding: 66,0,0/0:1104350112/1104350113 [ 897.472123][T16561] tipc: Failed to remove unknown binding: 66,0,0/0:1104350112/1104350113 [ 897.664958][T16566] syzkaller0: Caught tx_queue_len zero misconfig [ 898.326388][ T28] audit: type=1400 audit(1785051561.930:9633): avc: denied { bind } for pid=16589 comm="syz.9.14771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 898.955553][T16618] xt_NFQUEUE: number of total queues is 0 [ 900.751764][T16665] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.14795'. [ 900.876088][T16676] bond0: (slave team0): Releasing backup interface [ 900.886210][T16676] bridge_slave_0: left allmulticast mode [ 900.892179][T16676] bridge_slave_0: left promiscuous mode [ 900.898589][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.906968][T16676] bridge_slave_1: left allmulticast mode [ 900.912730][T16676] bridge_slave_1: left promiscuous mode [ 900.920141][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.932258][T16676] bond0: (slave bond_slave_0): Releasing backup interface [ 900.945409][T16676] bond0: (slave bond_slave_1): Releasing backup interface [ 900.956833][T16676] team0: Port device team_slave_1 removed [ 900.964890][T16676] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 900.987176][T16681] team0: Port device xfrm0 added [ 901.005581][T16676] tipc: Enabled bearer , priority 0 [ 901.032632][T16685] netlink: 'syz.4.14804': attribute type 2 has an invalid length. [ 901.288064][ T7645] veth0_virt_wifi: left promiscuous mode [ 902.244597][ T6640] tipc: Node number set to 2499680936 [ 902.850419][T16704] xt_connbytes: Forcing CT accounting to be enabled [ 902.889330][ T23] IPVS: starting estimator thread 0... [ 903.010981][T16716] IPVS: using max 2496 ests per chain, 124800 per kthread [ 903.023942][T16704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 903.188319][ T28] audit: type=1326 audit(1785051566.478:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x0 [ 903.309641][ T28] audit: type=1326 audit(1785051566.591:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.363969][ T28] audit: type=1326 audit(1785051566.591:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.433073][ T28] audit: type=1326 audit(1785051566.591:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.473983][ T28] audit: type=1326 audit(1785051566.591:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.503501][ T28] audit: type=1326 audit(1785051566.600:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.537266][ T28] audit: type=1326 audit(1785051566.637:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.563923][ T28] audit: type=1326 audit(1785051566.637:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 903.591259][ T28] audit: type=1326 audit(1785051566.647:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f90c289e6ce code=0x7ffc0000 [ 903.617845][ T28] audit: type=1326 audit(1785051566.647:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16724 comm="syz.5.14816" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c28dde99 code=0x7ffc0000 [ 904.049990][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14827'. [ 904.061220][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14827'. [ 904.681589][T16765] netlink: 'syz.5.14828': attribute type 322 has an invalid length. [ 904.982160][T16793] netlink: 'syz.4.14838': attribute type 1 has an invalid length. [ 905.037786][T16793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 905.086281][T16793] bond2: (slave bond3): making interface the new active one [ 905.104174][T16793] bond2: (slave bond3): Enslaving as an active interface with an up link [ 905.140712][T16800] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 905.382908][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14841'. [ 905.839592][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14845'. [ 905.850000][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14845'. [ 905.889939][T16824] x_tables: duplicate entry at hook 3 [ 905.925822][T16827] netlink: 'syz.8.14859': attribute type 1 has an invalid length. [ 905.944358][T16827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 906.061352][T16827] bond7: (slave veth5): Enslaving as an active interface with a down link [ 906.073484][T16827] netlink: 'syz.8.14859': attribute type 10 has an invalid length. [ 906.081879][T16827] netlink: 40 bytes leftover after parsing attributes in process `syz.8.14859'. [ 906.091466][T16827] : entered promiscuous mode [ 906.100084][T16827] team0: Port device  removed [ 906.128349][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14851'. [ 906.260086][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14851'. [ 906.472464][T16856] 9pnet_fd: p9_fd_create_unix (16856): problem connecting socket: ./file0: -111 [ 906.523376][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14855'. [ 907.796284][T16871] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 908.108789][T16897] netlink: 'syz.4.14867': attribute type 13 has an invalid length. [ 908.121412][T16897] netlink: 'syz.4.14867': attribute type 17 has an invalid length. [ 908.232581][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14870'. [ 908.272331][T16897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.293704][T16897] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.365236][T16897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 908.377026][T16897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.391601][T16897] veth1_vlan: left promiscuous mode [ 908.405775][T16897] veth0_vlan: left promiscuous mode [ 908.421267][T16897] veth0_vlan: entered promiscuous mode [ 908.436389][T16897] veth1_vlan: entered promiscuous mode [ 908.447330][T16897] veth1_macvtap: left promiscuous mode [ 908.462304][T16897] veth0_macvtap: left promiscuous mode [ 908.468640][T16906] netlink: 14 bytes leftover after parsing attributes in process `syz.9.14872'. [ 908.478731][T16897] veth0_macvtap: entered promiscuous mode [ 908.489523][T16897] veth1_macvtap: entered promiscuous mode [ 908.564534][T16897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 908.571535][ T7649] bond1: (slave ip6gretap1): link status down again after 0 ms [ 908.606211][T16897] 8021q: adding VLAN 0 to HW filter on device eth0 [ 908.621625][T16897] 8021q: adding VLAN 0 to HW filter on device eth1 [ 908.634339][T16897] 8021q: adding VLAN 0 to HW filter on device eth2 [ 908.654014][T16897] 8021q: adding VLAN 0 to HW filter on device eth3 [ 908.671159][T16897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.777004][T16902] netlink: 'syz.1.14870': attribute type 5 has an invalid length. [ 908.796454][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14870'. [ 908.838542][T24383] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.849609][T24383] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.875341][T24383] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.905422][T24383] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.964044][T24383] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.972395][T24383] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 908.983605][T24383] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.992955][T24383] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 909.017013][ T7645] bond1: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 909.044820][ T7645] bond1: active interface up! [ 910.379359][T16939] netlink: 'syz.8.14883': attribute type 10 has an invalid length. [ 910.652761][T16945] netlink: 14 bytes leftover after parsing attributes in process `syz.8.14886'. [ 912.002727][T16993] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14905'. [ 912.133630][T16998] xt_hashlimit: size too large, truncated to 1048576 [ 912.972023][T17026] netlink: 'syz.1.14927': attribute type 322 has an invalid length. [ 913.137148][T17007] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 913.279485][T17033] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 913.560909][T17047] tipc: Failed to remove unknown binding: 66,0,0/2923113771:4076804110/4076804112 [ 913.578077][T17047] tipc: Failed to remove unknown binding: 66,0,0/2923113771:4076804110/4076804111 [ 913.613234][T17047] tipc: Failed to remove unknown binding: 66,0,0/2923113771:4076804110/4076804112 [ 913.637494][T17047] tipc: Failed to remove unknown binding: 66,0,0/2923113771:4076804110/4076804111 [ 913.699786][T17053] netlink: 'syz.4.14929': attribute type 83 has an invalid length. [ 913.822716][T17061] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 913.843330][T17060] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 914.699109][T17080] netlink: 'syz.4.14939': attribute type 4 has an invalid length. [ 914.951173][T17094] veth0_vlan: entered allmulticast mode [ 914.963447][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14943'. [ 915.263460][T17110] xt_hashlimit: size too large, truncated to 1048576 [ 915.420014][T17094] veth0_vlan (unregistering): left allmulticast mode [ 915.726676][T17123] loop8: detected capacity change from 0 to 1024 [ 915.749345][T17123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 915.778336][T17123] EXT4-fs: Ignoring removed orlov option [ 915.836798][T17123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.877869][ T28] kauditd_printk_skb: 348 callbacks suppressed [ 915.877967][ T28] audit: type=1400 audit(1785051578.363:9992): avc: denied { write } for pid=17122 comm="syz.8.14951" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 916.001498][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.164911][T17165] tipc: Failed to remove unknown binding: 66,0,0/2923113771:3659439856/3659439858 [ 917.176455][T17165] tipc: Failed to remove unknown binding: 66,0,0/2923113771:3659439856/3659439857 [ 917.190209][T17165] tipc: Failed to remove unknown binding: 66,0,0/2923113771:3659439856/3659439858 [ 917.199796][T17165] tipc: Failed to remove unknown binding: 66,0,0/2923113771:3659439856/3659439857 [ 917.280766][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14967'. [ 917.348514][T17168] netlink: 'syz.8.14967': attribute type 5 has an invalid length. [ 917.367859][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14967'. [ 917.460084][T17172] IPVS: Unknown mcast interface: vcan0 [ 917.494842][T17172] netlink: 'syz.8.14969': attribute type 2 has an invalid length. [ 917.527113][T17172] 0: entered promiscuous mode [ 917.922639][ T28] audit: type=1326 audit(1785051580.272:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17156 comm="syz.5.14963" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f90c28d7c17 code=0x0 [ 917.989930][T17181] loop8: detected capacity change from 0 to 128 [ 918.951670][T17208] tipc: Failed to remove unknown binding: 66,0,0/2923113771:154543840/154543841 [ 918.982189][T17208] tipc: Failed to remove unknown binding: 66,0,0/2923113771:154543840/154543841 [ 919.196482][T17212] netlink: 'syz.8.14983': attribute type 322 has an invalid length. [ 919.268478][T17210] loop8: detected capacity change from 0 to 512 [ 919.325940][T17210] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.14983: corrupted inode contents [ 919.344682][T17210] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.345011][T17210] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 919.354653][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 919.354758][ C1] EXT4-fs (loop8): initial error at time 1785051581: ext4_do_update_inode:5742: inode 15 [ 919.355324][ C1] EXT4-fs (loop8): last error at time 1785051581: ext4_do_update_inode:5742: inode 15 [ 919.393337][T17199] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 919.399286][T17210] loop8: lost filesystem error report for type 5 error -117 [ 919.418842][T17210] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.14983: corrupted inode contents [ 919.443085][T17210] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.446772][T17210] EXT4-fs error (device loop8): ext4_evict_inode:315: inode #15: comm syz.8.14983: mark_inode_dirty error [ 919.472493][T17210] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.479709][T17210] EXT4-fs (loop8): 1 orphan inode deleted [ 919.529992][T17210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.611747][T17221] --map-set only usable from mangle table [ 919.696703][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.754555][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14989'. [ 921.014528][T17253] netlink: 'syz.5.14998': attribute type 2 has an invalid length. [ 921.024597][T17254] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 921.127006][T17253] 0: entered promiscuous mode [ 921.229074][T17266] 9pnet_fd: p9_fd_create_unix (17266): problem connecting socket: ./file0: -111 [ 921.317714][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15005'. [ 921.939036][T17277] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 922.408290][T17290] netlink: 'syz.9.15013': attribute type 322 has an invalid length. [ 922.533267][T17303] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 922.544640][T17301] netlink: 'syz.9.15016': attribute type 2 has an invalid length. [ 922.591377][T17301] 0: entered promiscuous mode [ 922.790448][T17278] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 926.194403][T17347] loop8: detected capacity change from 0 to 256 [ 926.778955][T17363] team0: Port device xfrm0 removed [ 926.796488][T17363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 926.843673][T17365] team0: Mode changed to "activebackup" [ 926.871244][ T7647] tipc: Resetting bearer [ 927.788430][T17385] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15046'. [ 927.864546][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15047'. [ 927.904098][T17387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17387 comm=syz.9.15047 [ 928.364920][T17389] loop8: detected capacity change from 0 to 1024 [ 928.422622][ T7340] ------------[ cut here ]------------ [ 928.428183][ T7340] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x26c/0x550, CPU#1: kworker/u8:12/7340 [ 928.439664][ T7340] Modules linked in: [ 928.443609][ T7340] CPU: 1 UID: 0 PID: 7340 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(lazy) [ 928.453198][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 928.463499][ T7340] Workqueue: iou_exit io_ring_exit_work [ 928.469114][ T7340] RIP: 0010:io_ring_exit_work+0x26c/0x550 [ 928.475124][ T7340] Code: fc 78 21 e8 26 f0 36 00 48 8b 7c 24 30 4c 89 ee e8 c9 92 7a 04 48 85 c0 75 1b e8 0f f0 36 00 e9 54 fe ff ff e8 05 f0 36 00 90 <0f> 0b 90 41 bd 70 17 00 00 eb d3 4c 8d 7c 24 48 4c 89 ff e8 9c d1 [ 928.495506][ T7340] RSP: 0000:ffffc900019a7cd8 EFLAGS: 00010293 [ 928.501817][ T7340] RAX: ffffffff812267ab RBX: ffff88810a257000 RCX: ffff888104a6d640 [ 928.509933][ T7340] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 928.517943][ T7340] RBP: 0000000000002000 R08: 0001c900019a7c97 R09: 0000000000000000 [ 928.526054][ T7340] R10: 0001c900019a7c90 R11: 0001c900019a7c97 R12: 000000010000ea33 [ 928.534223][ T7340] R13: 0000000000000005 R14: ffff88810a257040 R15: 000000010000ea34 [ 928.542253][ T7340] FS: 0000000000000000(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 928.551447][ T7340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.558161][ T7340] CR2: 0000001b2ee1fff8 CR3: 000000013799c000 CR4: 00000000003506f0 [ 928.566523][ T7340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 928.574636][ T7340] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 928.582762][ T7340] Call Trace: [ 928.586074][ T7340] [ 928.589036][ T7340] process_scheduled_works+0x4d4/0x9a0 [ 928.594711][ T7340] worker_thread+0x569/0x750 [ 928.599514][ T7340] ? __pfx_worker_thread+0x10/0x10 [ 928.604694][ T7340] kthread+0x221/0x270 [ 928.608794][ T7340] ? __pfx_kthread+0x10/0x10 [ 928.614025][ T7340] ret_from_fork+0x146/0x330 [ 928.618912][ T7340] ? __pfx_kthread+0x10/0x10 [ 928.623715][ T7340] ret_from_fork_asm+0x1a/0x30 [ 928.628603][ T7340] [ 928.631662][ T7340] ---[ end trace 0000000000000000 ]--- [ 929.151651][T17389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.301103][ T28] audit: type=1400 audit(1785051590.912:9994): avc: denied { write } for pid=17388 comm="syz.8.15048" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 929.571128][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.750232][ T28] audit: type=1400 audit(1785051591.324:9995): avc: denied { getopt } for pid=17412 comm="syz.8.15058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 930.776518][T17432] netlink: 'syz.4.15064': attribute type 7 has an invalid length. [ 930.880660][T17432] netlink: 140 bytes leftover after parsing attributes in process `syz.4.15064'. [ 931.660547][T17475] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15079'. [ 932.243931][T17490] bond3: (slave veth0_to_bond): Releasing backup interface [ 932.277729][T17490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 932.294985][T17492] team0: No ports can be present during mode change [ 932.316179][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15086'. [ 932.423648][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15090'. [ 932.460852][T17502] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17502 comm=syz.1.15090 [ 932.544650][T17512] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15091'. [ 932.786182][T17514] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 932.820374][T17530] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 932.951757][T17522] infiniband syz1: set active [ 932.962211][T17522] infiniband syz1: added syz_tun [ 933.002466][T17522] RDS/IB: syz1: added [ 933.086285][T17522] smc: adding ib device syz1 with port count 1 [ 933.100577][T17522] smc: ib device syz1 port 1 has no pnetid [ 934.494954][T17578] tipc: Resetting bearer [ 934.746863][T17578] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 935.098129][T17598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15117'. [ 935.883813][T17614] rdma_rxe: rxe_newlink: failed to add syz_tun [ 936.056008][T17627] netlink: 380 bytes leftover after parsing attributes in process `syz.5.15128'. [ 936.083351][ T28] audit: type=1326 audit(1785051597.257:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.8.15126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cd54de99 code=0x7ffc0000 [ 936.202084][ T28] audit: type=1326 audit(1785051597.257:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.8.15126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cd54de99 code=0x7ffc0000 [ 936.256322][ T28] audit: type=1326 audit(1785051597.257:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.8.15126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89cd54de99 code=0x7ffc0000 [ 936.323724][T17635] tipc: Enabling of bearer rejected, failed to enable media [ 936.327259][ T28] audit: type=1326 audit(1785051597.257:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.8.15126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cd54de99 code=0x7ffc0000 [ 936.572611][T17643] tipc: Enabling of bearer rejected, failed to enable media [ 937.800417][T17682] netlink: 380 bytes leftover after parsing attributes in process `syz.4.15147'. [ 937.874498][T17686] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15149'. [ 937.889298][T17686] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15149'. [ 938.078081][ T28] audit: type=1326 audit(1785051599.128:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 938.162435][ T28] audit: type=1326 audit(1785051599.128:10001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 938.251665][ T28] audit: type=1326 audit(1785051599.128:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 938.326254][ T28] audit: type=1326 audit(1785051599.128:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 938.376747][ T28] audit: type=1326 audit(1785051599.185:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97d94de99 code=0x7ffc0000 [ 938.434041][ T28] audit: type=1326 audit(1785051599.185:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17689 comm="syz.9.15151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe97d90e6ce code=0x7ffc0000 [ 938.685213][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15164'. [ 938.714988][T17732] team1: entered promiscuous mode [ 938.720212][T17732] team1: entered allmulticast mode [ 938.726719][T17732] 8021q: adding VLAN 0 to HW filter on device team1 [ 938.736929][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15164'. [ 938.749645][T17732] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 938.769959][T17739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15167'. [ 938.769963][T17732] team2: entered promiscuous mode [ 938.784653][T17732] team2: entered allmulticast mode [ 938.790968][T17732] 8021q: adding VLAN 0 to HW filter on device team2 [ 938.845564][T17737] ip6t_REJECT: ECHOREPLY is not supported [ 938.872205][T17739] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17739 comm=syz.1.15167 [ 939.175797][T17757] netlink: 'syz.8.15175': attribute type 16 has an invalid length. [ 939.189278][T17757] netlink: 'syz.8.15175': attribute type 17 has an invalid length. [ 939.215639][T17757] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.224925][T17757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.271984][T17757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.295805][T17757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.320726][T17757] veth1_vlan: left promiscuous mode [ 939.328983][T17757] veth0_vlan: left promiscuous mode [ 939.338188][T17757] veth0_vlan: entered promiscuous mode [ 939.345869][T17757] veth1_vlan: entered promiscuous mode [ 939.357391][T17757] veth1_macvtap: left promiscuous mode [ 939.364161][T17757] veth0_macvtap: left promiscuous mode [ 939.371512][T17757] veth0_macvtap: entered promiscuous mode [ 939.378759][T17757] veth1_macvtap: entered promiscuous mode [ 939.389056][T17757] 8021q: adding VLAN 0 to HW filter on device eth0 [ 939.399066][T17757] 8021q: adding VLAN 0 to HW filter on device eth1 [ 939.408364][T17757] 8021q: adding VLAN 0 to HW filter on device eth2 [ 939.417114][T17757] 8021q: adding VLAN 0 to HW filter on device eth3 [ 939.427684][T17757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 939.442362][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.451347][T17757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 939.463054][T17757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 939.471262][T17757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 939.480012][T17757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 939.492463][T17757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 939.569105][ T7647] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.578980][ T7647] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.587889][ T7647] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.599189][ T7647] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.613153][ T7647] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.626757][ T7647] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.636337][ T7647] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.646920][ T7647] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.666449][ T7649] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 939.676775][ T7649] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 939.728640][ T7649] bond1: active interface up! [ 939.751368][ T7649] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 939.760708][ T7649] bond7: (slave veth5): making interface the new active one [ 939.786588][ T7649] bond7: active interface up! [ 939.940913][T17781] ip6t_REJECT: ECHOREPLY is not supported [ 940.384115][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15191'. [ 940.406674][T17804] netlink: 32 bytes leftover after parsing attributes in process `syz.9.15191'. [ 940.674292][T17817] __nla_validate_parse: 2 callbacks suppressed [ 940.674325][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15197'. [ 941.165270][T17825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15200'. [ 941.183351][T17827] loop8: detected capacity change from 0 to 512 [ 941.201916][T17825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17825 comm=syz.4.15200 [ 941.238917][T17827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.255998][T17834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15203'. [ 941.262372][T17827] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.268728][T17834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15203'. [ 941.444982][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.478500][T17845] netlink: 'syz.5.15207': attribute type 21 has an invalid length. [ 941.499024][T17845] IPv6: NLM_F_CREATE should be specified when creating new route [ 941.530911][T17845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.561892][T17845] IPv6: NLM_F_CREATE should be set when creating new route [ 941.569572][T17845] IPv6: NLM_F_CREATE should be set when creating new route [ 941.576991][T17845] IPv6: NLM_F_CREATE should be set when creating new route [ 941.609832][T17841] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 941.636579][T17846] netlink: 'syz.5.15207': attribute type 21 has an invalid length. [ 941.701532][T17846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 941.784783][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15206'. [ 941.818607][T17851] netlink: 32 bytes leftover after parsing attributes in process `syz.8.15206'. [ 941.845418][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15206'. [ 941.871777][T17851] netlink: 32 bytes leftover after parsing attributes in process `syz.8.15206'. [ 942.233734][T17883] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 942.289045][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 942.289064][ T28] audit: type=1326 audit(1785051603.068:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.1.15217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 942.379179][ T28] audit: type=1326 audit(1785051603.096:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.1.15217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 942.541699][ T28] audit: type=1326 audit(1785051603.311:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.1.15217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 942.614968][ T28] audit: type=1326 audit(1785051603.311:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17878 comm="syz.1.15217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 943.828389][ T28] audit: type=1326 audit(1785051604.509:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 943.894605][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15234'. [ 943.899469][ T28] audit: type=1326 audit(1785051604.537:10067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 943.926567][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15234'. [ 943.968905][ T28] audit: type=1326 audit(1785051604.537:10068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 944.062740][ T28] audit: type=1326 audit(1785051604.537:10069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f10ca8ede99 code=0x7ffc0000 [ 944.114337][ T28] audit: type=1326 audit(1785051604.622:10070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10ca8ae6ce code=0x7ffc0000 [ 944.171896][ T28] audit: type=1326 audit(1785051604.622:10071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.15230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10ca8ae6ce code=0x7ffc0000 [ 944.280458][T17942] loop8: detected capacity change from 0 to 8192 [ 944.321402][T17942] msdos: Unknown parameter 'dos1Ífloppy' [ 944.434755][T17939] x_tables: duplicate underflow at hook 2 [ 944.558220][T17936] netlink: 'syz.8.15236': attribute type 9 has an invalid length. [ 944.589970][T17936] netlink: 'syz.8.15236': attribute type 7 has an invalid length. [ 944.603550][T17936] netlink: 'syz.8.15236': attribute type 8 has an invalid length. [ 945.122159][ T7646] vlan2: left allmulticast mode [ 945.167360][ T7646] geneve0: left allmulticast mode [ 945.210113][ T7646] bridge0: port 1(vlan2) entered disabled state [ 945.288666][ T7646] team0: left allmulticast mode [ 945.295763][ T7646] team_slave_0: left allmulticast mode [ 945.301510][ T7646] team_slave_1: left allmulticast mode [ 945.310094][ T7646] team0: left promiscuous mode [ 945.315028][ T7646] team_slave_0: left promiscuous mode [ 945.325662][ T7646] team_slave_1: left promiscuous mode [ 945.334414][ T7646] : port 1(team0) entered disabled state [ 945.364010][ T7646] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 945.380993][ T7646] ip6gre2 (unregistering): left promiscuous mode [ 945.398677][ T7646] bond3 (unregistering): (slave ip6gre3): Releasing backup interface [ 945.456911][ T7646] ip6gre3 (unregistering): left promiscuous mode [ 945.588634][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.600340][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.611942][ T7646] bond0 (unregistering): Released all slaves [ 945.620628][ T7646] bond1 (unregistering): Released all slaves [ 945.630558][ T7646] bond2 (unregistering): Released all slaves [ 945.639508][ T7646] bond3 (unregistering): Released all slaves [ 945.650236][ T7646] bond4 (unregistering): (slave veth3): Releasing active interface [ 945.659887][ T7646] bond4 (unregistering): Released all slaves [ 945.669701][ T7646] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 945.679312][ T7646] bond5 (unregistering): Released all slaves [ 945.690600][ T7646] bond6 (unregistering): (slave veth11): Releasing backup interface [ 945.699679][ T7646] veth11: left promiscuous mode [ 945.706266][ T7646] bond6 (unregistering): Released all slaves [ 945.716560][ T7646] bond7 (unregistering): Released all slaves [ 945.801066][T17962] tipc: Started in network mode [ 945.806224][T17962] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 945.816961][T17962] tipc: Enabling of bearer rejected, failed to enable media [ 945.837864][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 946.063567][T18028] __nla_validate_parse: 4 callbacks suppressed [ 946.063586][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15265'. [ 946.185973][ T7646] hsr_slave_0: left promiscuous mode [ 946.221563][ T7646] hsr_slave_1: left promiscuous mode [ 946.236263][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.573135][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 946.591716][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 946.677072][T18047] lo: Caught tx_queue_len zero misconfig [ 946.687283][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 946.697177][T18049] tipc: Enabling of bearer rejected, failed to enable media [ 947.036080][T18087] tipc: Resetting bearer [ 947.073751][T18087] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 947.342075][ T7646] IPVS: stop unused estimator thread 0... [ 947.435641][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 948.052388][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 948.072804][ T28] audit: type=1400 audit(1785051608.458:10120): avc: denied { write } for pid=18110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.228394][ T28] audit: type=1400 audit(1785051608.617:10121): avc: denied { write } for pid=18134 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.332226][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 948.567805][T18143] tmpfs: Bad value for 'mpol' [ 948.712459][T18150] tipc: Enabling of bearer rejected, failed to enable media [ 948.776190][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15289'. [ 948.817319][T18154] team1: entered promiscuous mode [ 948.826115][T18154] team1: entered allmulticast mode [ 948.832185][T18154] 8021q: adding VLAN 0 to HW filter on device team1 [ 948.862434][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15289'. [ 948.887239][T18155] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 948.970835][T18155] team2: entered promiscuous mode [ 948.991891][T18155] team2: entered allmulticast mode [ 949.001773][T18155] 8021q: adding VLAN 0 to HW filter on device team2 [ 950.359989][T18183] netlink: 'syz.5.15299': attribute type 1 has an invalid length. [ 950.416291][T18183] bridge0: entered promiscuous mode [ 950.427062][T18183] bond7: (slave bridge0): making interface the new active one [ 950.442470][T18183] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 951.873631][T18195] netlink: 'syz.4.15303': attribute type 1 has an invalid length. [ 951.888454][T18195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 951.903495][T18195] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 952.376480][T18195] bond4: entered allmulticast mode [ 952.425499][T18197] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 952.637807][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15310'. [ 953.308271][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15318'. [ 953.328574][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15318'. [ 953.494660][ T28] audit: type=1400 audit(1785051613.549:10122): avc: denied { cmd } for pid=18242 comm="syz.4.15321" path="/357/file0" dev="tmpfs" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 953.646290][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15322'. [ 953.886229][T18248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15323'. [ 953.968012][T18248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18248 comm=syz.4.15323 [ 954.104379][T18265] netlink: 'syz.8.15328': attribute type 21 has an invalid length. [ 954.126898][T18265] IPv6: NLM_F_CREATE should be specified when creating new route [ 954.147350][T18265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 954.155076][T18265] IPv6: NLM_F_CREATE should be set when creating new route [ 954.162726][T18265] IPv6: NLM_F_CREATE should be set when creating new route [ 954.170284][T18265] IPv6: NLM_F_CREATE should be set when creating new route [ 954.234264][T18270] netlink: 'syz.8.15328': attribute type 21 has an invalid length. [ 954.256013][T18270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 954.324192][T18265] vlan4: entered promiscuous mode [ 954.341037][T18265] bridge0: entered promiscuous mode [ 955.392446][T18304] netlink: 165 bytes leftover after parsing attributes in process `syz.8.15340'. [ 955.406543][T18304] loop8: detected capacity change from 0 to 512 [ 955.467185][T18304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 955.495288][T18306] 9p: Could not find request transport: 0x0000000000000005 [ 955.540317][T18304] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.687898][T18304] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.817314][ T8875] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.498610][T18323] ================================================================== [ 956.507991][T18323] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 956.517073][T18323] [ 956.519431][T18323] write to 0xffff88811657b9a0 of 8 bytes by task 18319 on cpu 1: [ 956.527265][T18323] shmem_file_splice_read+0x401/0x590 [ 956.533224][T18323] splice_direct_to_actor+0x261/0x680 [ 956.540981][T18323] do_splice_direct+0x119/0x1a0 [ 956.546136][T18323] do_sendfile+0x37d/0x640 [ 956.550770][T18323] __x64_sys_sendfile64+0x105/0x150 [ 956.556265][T18323] x64_sys_call+0x2dc4/0x3020 [ 956.561165][T18323] do_syscall_64+0x136/0x3c0 [ 956.566189][T18323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.573518][T18323] [ 956.575958][T18323] write to 0xffff88811657b9a0 of 8 bytes by task 18323 on cpu 0: [ 956.583723][T18323] shmem_file_splice_read+0x401/0x590 [ 956.589780][T18323] splice_direct_to_actor+0x261/0x680 [ 956.595394][T18323] do_splice_direct+0x119/0x1a0 [ 956.600539][T18323] do_sendfile+0x37d/0x640 [ 956.604999][T18323] __x64_sys_sendfile64+0x105/0x150 [ 956.610451][T18323] x64_sys_call+0x2dc4/0x3020 [ 956.615335][T18323] do_syscall_64+0x136/0x3c0 [ 956.619979][T18323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.626117][T18323] [ 956.628471][T18323] value changed: 0x0000000000003a39 -> 0x0000000000003a42 [ 956.635954][T18323] [ 956.638399][T18323] Reported by Kernel Concurrency Sanitizer on: [ 956.644682][T18323] CPU: 0 UID: 0 PID: 18323 Comm: syz.1.15343 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 956.655905][T18323] Tainted: [W]=WARN [ 956.659720][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 956.670049][T18323] ================================================================== [ 959.386540][ T28] audit: type=1400 audit(1785051619.070:10123): avc: denied { write } for pid=18347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.410021][ T28] audit: type=1400 audit(1785051619.070:10124): avc: denied { write } for pid=18358 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.227557][ T28] audit: type=1400 audit(1785051619.856:10125): avc: denied { write } for pid=18361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 960.252662][ T28] audit: type=1400 audit(1785051619.885:10126): avc: denied { write } for pid=18372 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.947799][ T28] audit: type=1400 audit(1785051621.466:10127): avc: denied { write } for pid=18375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.972912][ T28] audit: type=1400 audit(1785051621.494:10128): avc: denied { write } for pid=18386 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.092113][ T28] audit: type=1400 audit(1785051621.597:10129): avc: denied { write } for pid=18389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.117670][ T28] audit: type=1400 audit(1785051621.616:10130): avc: denied { write } for pid=18400 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1