last executing test programs: 10m2.580686533s ago: executing program 32 (id=128): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0), 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x7}, 0x38) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r0, 0x7ff, 0x3) 9m54.975016064s ago: executing program 33 (id=278): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x84000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 9m6.024250869s ago: executing program 34 (id=791): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) syz_open_procfs(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) 9m4.396210421s ago: executing program 35 (id=813): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 8m23.075069706s ago: executing program 36 (id=1459): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) 6m19.265869078s ago: executing program 37 (id=3419): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x1, 0x7, "88fc39", 0x92, 0x8}) 6m11.752350427s ago: executing program 38 (id=3559): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) shutdown(0xffffffffffffffff, 0x0) creat(0x0, 0x0) setpriority(0x2, 0x0, 0xb842) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m11.183899135s ago: executing program 39 (id=3576): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) 5m14.807443048s ago: executing program 40 (id=4388): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) 4m51.064132731s ago: executing program 0 (id=4734): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4m51.036349952s ago: executing program 0 (id=4737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x7, 0x80, 0x0, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m50.960394993s ago: executing program 0 (id=4738): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x6d) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000001480)="f0", 0x1, 0x20000085, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0), 0x8) 4m50.863697454s ago: executing program 0 (id=4739): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 4m50.808282515s ago: executing program 0 (id=4741): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x10000}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) iopl(0x2) iopl(0x8) 4m49.925623996s ago: executing program 0 (id=4742): socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0x0, 0x4, 0x3, 0x5, 0x88001, 0x4945, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) socket(0x2, 0x2, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000004000/0x2000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 4m49.839901178s ago: executing program 41 (id=4742): socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0x0, 0x4, 0x3, 0x5, 0x88001, 0x4945, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) socket(0x2, 0x2, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000004000/0x2000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 4m25.280092221s ago: executing program 1 (id=5088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffedfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xffff, 0xffff}, {0x8, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x600448d9}, 0x0) 4m25.146336083s ago: executing program 1 (id=5091): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8}]}}}}}}}, 0x0) 4m25.090432524s ago: executing program 1 (id=5092): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m24.102265817s ago: executing program 1 (id=5103): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m24.054971907s ago: executing program 1 (id=5105): r0 = fsopen(&(0x7f0000000280)='nfs\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 4m23.992887238s ago: executing program 1 (id=5106): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 4m23.971074559s ago: executing program 42 (id=5106): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 4m21.153927106s ago: executing program 7 (id=5144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 4m21.060032647s ago: executing program 7 (id=5145): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048084) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x20000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80046, 0xfffffffe, 0x7}) io_setup(0x7, 0x0) 4m20.597327923s ago: executing program 7 (id=5151): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x80000006, 0x4) 4m19.30006577s ago: executing program 7 (id=5162): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 4m18.937354725s ago: executing program 7 (id=5165): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x2) fchdir(r2) r3 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) 4m18.016123017s ago: executing program 7 (id=5179): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$usbfs(0x0, 0x200, 0xa401) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x26) dup2(r1, r1) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) syz_clone3(0x0, 0x0) 4m17.998126968s ago: executing program 43 (id=5179): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$usbfs(0x0, 0x200, 0xa401) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x26) dup2(r1, r1) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) syz_clone3(0x0, 0x0) 3m20.092133691s ago: executing program 9 (id=6071): r0 = io_uring_setup(0x1006, &(0x7f0000000100)={0x0, 0x5f3d, 0x40, 0x1, 0x13b}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m19.920091383s ago: executing program 9 (id=6075): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000600)='logon\x00', &(0x7f0000000640)='./file0\x00', r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 3m19.900954714s ago: executing program 9 (id=6076): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 3m19.816168855s ago: executing program 9 (id=6078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m19.804698995s ago: executing program 9 (id=6079): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) r0 = memfd_create(0x0, 0x5) lseek(r0, 0x8000000000000004, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) 3m19.551805668s ago: executing program 9 (id=6081): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 3m19.509319439s ago: executing program 44 (id=6081): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 2m34.232029636s ago: executing program 4 (id=6671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000070000000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa06a, 0x4c7}, 0x1005, 0x0, 0xfffffffe, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&-0\t||') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) 2m34.176242417s ago: executing program 4 (id=6673): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m34.059846348s ago: executing program 4 (id=6677): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xffffffff, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000007, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvvUGkVhB9Kqj1PcZkE0I22ZDd1CYUTfEDCCIq+OSTL4IfQJB+BBEK+i5aFNFWH3zQjuzsxDbpbpI2abZ38/vB6ZwzM3v+50yTMzuZw0wAZ9bbEXEtIoYi4p2IKBfr0yLNFqm938MHt+fbKYksu/H3JJJi3W5d7fJwRFyIiJ2IGImIb3w14tvJ03GbW9src/V6baMoV1ur69Xm1vaV5dW5pdpSbW16eur9mQ9m3puZzArH6ufFiLj65fs//sEvvnL1N5/9zh9n/3r5u+1mfeHjnXZHxPyz1Dd6xP06dZfyY7GrfYw2niXYS2yo6E+p3w0BAOBIxiPiUkR8Kv/+X46h/NscAAAAMEiyL47Gf5KIDAAAABhYaT6XNUkrxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcWOnNex6KULi7Xa5PFXOGxKCXt8lSef1x+d195OiJej4gflc/l5cp8o77Q7z9+AAAAwBlx4a291///Kqd5HgAAABgwYz0LAAAAwKBwyQ8AAACDz/U/AAAADLSvXb/eTtnue7wXbm5trjRuXlmoNVcqq5vzlfnGxnplqdFYyp/Zt3pYffVGY/1zsbZ5q9qqNVvV5tb27Gpjc601u7znFdgAAADAKXr9rbt/SCJi5/Pn8hTFcwAB9vhzvxsAnKShfjcA6JvhfjcA6JvSoXsYIWDQJYds7zl557cn3xYAAODFmPjE0/f/XzFTH84Ec30A4Ox57rt7r55sO4DTVzIDEM688c6i51n9+Pf/s+yZGwUAAJyo0TwlaaW4FzgaaVqpRLyWvxaglCwu12uTEfGRiPh9ufRquzyVfzI5dM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlkAAAAwECLSP+S5E/zj5goj4/u//vAK8m/y3G/KPzsxk9uzbVaG1Pt9f8o59sjovXTYv27mVcCAAAAwEugc51eLKf63RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs3DB7fnd9Npxv3blyJirFv84RjJlyNRiojz/0xi+InPJRExdALxd+5ExBvd4ifxKMuysaIV3eKfe8Hxx/JD0z1+GhEXTiA+nGV32+PPtW6/f2m8nS9HkqTL799wkY6r9/iX/n/8G+ox/rx2xBgX7/2q2jP+nYiLw93Hn9343frfXnfpiPG/9c3t7V7bsp9HTHQ9/yR7YlVbq+vV5tb2leXVuaXaUm1tenrq/ZkPZt6bmawuLtdrxb9dY/zwk79+dFD/z/eIP3ZI/8e7VdhlUP7vvVsPPtrJlrrFv3yp+/n3jR7x0+Lc9+ki394+sZvf6eSf9OYvf/fmQf1f6NH/w/7/L/eqdJ93vv79Px1xVwDgFDS3tlfm6vXaxgGZkSPs83yZF1ezzIcrk32v8/N4vHqO+fGnMlm/D0sfM/0emQAAgJP2+Et/v1sCAAAAAAAAAAAAAAAAAAAAZ9dpPE5sf8yd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBA/wsAAP//bzveBg==") bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m33.493916475s ago: executing program 4 (id=6688): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 2m32.988927342s ago: executing program 4 (id=6696): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m32.079330414s ago: executing program 4 (id=6714): r0 = open(&(0x7f0000000300)='.\x00', 0x205000, 0x30681c0a41d3fb1b) fcntl$setlease(r0, 0x400, 0x33a5d842c8b06942) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x7, 0x1c0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48c5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r1, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2m31.973324866s ago: executing program 45 (id=6714): r0 = open(&(0x7f0000000300)='.\x00', 0x205000, 0x30681c0a41d3fb1b) fcntl$setlease(r0, 0x400, 0x33a5d842c8b06942) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x7, 0x1c0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48c5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r1, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.917554481s ago: executing program 2 (id=8508): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000238000/0x3000)=nil, &(0x7f0000063000/0x3000)=nil, &(0x7f00002db000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005a2000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4801) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 2.660930784s ago: executing program 6 (id=8511): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.579992146s ago: executing program 6 (id=8513): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r3, 0x1) 2.172750211s ago: executing program 8 (id=8521): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000740)=[{0x0}, {0x0}], 0x2}, 0x40080) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='b', @ANYRESDEC=0x0], 0xe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa1, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f7, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 2.065401552s ago: executing program 2 (id=8525): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 2.065192792s ago: executing program 8 (id=8526): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) io_uring_setup(0x89c, 0x0) syz_open_dev$usbmon(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x200, 0xd0a}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) listen(0xffffffffffffffff, 0x4) socket(0x28, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.601108739s ago: executing program 2 (id=8528): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.600896059s ago: executing program 6 (id=8529): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f0000000080)) munmap$IORING_OFF_CQ_RING(r2, 0x7) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x2, 0x0, &(0x7f0000000280)=[0xffffffffffffffff]}, 0x1) 1.52491903s ago: executing program 6 (id=8531): timer_create(0x0, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000b80), 0xd52, 0x200) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) r0 = gettid() tkill(r0, 0x24) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040084) 1.5239608s ago: executing program 2 (id=8533): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.354639422s ago: executing program 3 (id=8534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x50, r0, 0x204c1000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.329892892s ago: executing program 6 (id=8535): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.175274774s ago: executing program 5 (id=8536): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) uname(&(0x7f0000000080)=""/209) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r3}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 1.171430154s ago: executing program 3 (id=8537): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 1.148978875s ago: executing program 8 (id=8539): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 1.104018595s ago: executing program 5 (id=8540): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048044) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2088002, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48810) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.103558945s ago: executing program 3 (id=8541): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.042989696s ago: executing program 5 (id=8542): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mlockall(0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xcf00}, {0x0, 0xe00}], 0x10000000000000fb) 1.042423526s ago: executing program 3 (id=8543): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 850.937558ms ago: executing program 3 (id=8544): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 821.189469ms ago: executing program 5 (id=8545): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 707.766741ms ago: executing program 5 (id=8546): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) 707.393681ms ago: executing program 3 (id=8547): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4120, 0x1018}], 0x1, 0x8fe, 0x0) unshare(0x28040600) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) 477.877033ms ago: executing program 2 (id=8548): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x24004004) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f0000000100)) 410.942074ms ago: executing program 6 (id=8549): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 386.619165ms ago: executing program 8 (id=8550): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8006f, 0x1, @perf_config_ext={0xe98, 0x7}, 0x10c0e8, 0x0, 0x0, 0x8, 0x4, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x18000, &(0x7f0000000ac0)={[{@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4a464f54}}, {@quota}, {@noload}, {@barrier}, {@errors_continue}, {@jqfmt_vfsv1}, {@quota}, {@auto_da_alloc}]}, 0x1, 0x644, &(0x7f0000000440)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r1, r2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x24, 0x0) 256.390386ms ago: executing program 2 (id=8551): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) syz_emit_ethernet(0xbe, 0x0, 0x0) 255.316206ms ago: executing program 5 (id=8552): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) 100.131878ms ago: executing program 8 (id=8553): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x40000) ioctl$TCSETA(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 0s ago: executing program 8 (id=8554): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) kernel console output (not intermixed with test programs): oop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.123777][T27431] netlink: 'syz.5.7503': attribute type 4 has an invalid length. [ 558.138984][T27427] loop6: detected capacity change from 0 to 512 [ 558.147215][ T28] audit: type=1326 audit(1782599904.882:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27416 comm="syz.2.7497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 558.185888][T27433] netlink: 'syz.5.7503': attribute type 4 has an invalid length. [ 558.200807][T27427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.201684][T27423] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.7500: lblock 0 mapped to illegal pblock 4 (length 1) [ 558.208412][ T28] audit: type=1326 audit(1782599904.882:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27416 comm="syz.2.7497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 558.208449][ T28] audit: type=1326 audit(1782599904.882:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27416 comm="syz.2.7497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 558.208515][ T28] audit: type=1326 audit(1782599904.882:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27416 comm="syz.2.7497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 558.315687][T27427] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 558.325270][T27423] EXT4-fs (loop3): Remounting filesystem read-only [ 558.335899][T27427] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.7501: corrupted in-inode xattr: e_value size too large [ 558.380369][T27427] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 558.382042][T27427] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.7501: couldn't read orphan inode 15 (err -117) [ 558.391654][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 558.391682][ C0] EXT4-fs (loop6): initial error at time 1782599905: ext4_iget_extra_inode:5180: inode 15 [ 558.391714][ C0] EXT4-fs (loop6): last error at time 1782599905: ext4_iget_extra_inode:5180: inode 15 [ 558.432605][T27427] loop6: lost filesystem error report for type 5 error -117 [ 558.435117][T27427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.474712][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.500831][T27440] netlink: 'syz.5.7504': attribute type 21 has an invalid length. [ 558.510592][T27440] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.519644][T27440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.527182][T27440] IPv6: NLM_F_CREATE should be set when creating new route [ 558.534602][T27440] IPv6: NLM_F_CREATE should be set when creating new route [ 558.541999][T27440] IPv6: NLM_F_CREATE should be set when creating new route [ 558.551970][T27441] netlink: 'syz.5.7504': attribute type 21 has an invalid length. [ 558.562831][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.579113][T27441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.596259][T27443] tipc: Failed to remove unknown binding: 66,0,0/0:4017388492/4017388494 [ 558.625217][T27443] tipc: Failed to remove unknown binding: 66,0,0/0:4017388492/4017388493 [ 558.643485][T27443] tipc: Failed to remove unknown binding: 66,0,0/0:4017388492/4017388494 [ 558.663798][T27443] tipc: Failed to remove unknown binding: 66,0,0/0:4017388492/4017388493 [ 558.676306][T27441] vlan0: entered promiscuous mode [ 558.693867][T27441] bridge0: entered promiscuous mode [ 558.941385][T27459] ipvlan2: entered promiscuous mode [ 559.007696][T27459] bridge0: port 1(ipvlan2) entered blocking state [ 559.017020][T27459] bridge0: port 1(ipvlan2) entered disabled state [ 559.033914][T27459] ipvlan2: entered allmulticast mode [ 559.039919][T27459] bridge0: entered allmulticast mode [ 559.054695][T27459] ipvlan2: left allmulticast mode [ 559.061153][T27459] bridge0: left allmulticast mode [ 559.269610][T27475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7518'. [ 559.300741][T27475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27475 comm=syz.3.7518 [ 559.324440][T27479] bridge0: entered allmulticast mode [ 559.603472][T27502] netlink: 'syz.2.7529': attribute type 4 has an invalid length. [ 559.629886][T27502] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7529'. [ 559.867978][T27516] ipvlan2: entered promiscuous mode [ 559.873886][T27516] bridge0: port 2(ipvlan2) entered blocking state [ 559.885380][T27516] bridge0: port 2(ipvlan2) entered disabled state [ 559.899895][T27516] ipvlan2: entered allmulticast mode [ 559.911423][T27516] bridge0: entered allmulticast mode [ 559.923980][T27516] ipvlan2: left allmulticast mode [ 559.935604][T27516] bridge0: left allmulticast mode [ 560.062916][T11273] Process accounting resumed [ 560.435340][ T3426] net_ratelimit: 18 callbacks suppressed [ 560.435360][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.462951][T27550] netlink: 380 bytes leftover after parsing attributes in process `syz.3.7544'. [ 560.547057][T27550] loop3: detected capacity change from 0 to 764 [ 560.585193][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.715700][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.834518][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.944384][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 560.996000][T27556] lo speed is unknown, defaulting to 1000 [ 561.054876][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 561.178043][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 561.305467][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 561.424485][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 561.564488][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 561.779273][T27594] loop6: detected capacity change from 0 to 164 [ 561.891663][T27598] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 562.406432][T11270] IPVS: starting estimator thread 0... [ 562.480718][T27615] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7567'. [ 562.504531][T27613] IPVS: using max 1728 ests per chain, 86400 per kthread [ 562.556182][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 562.556223][ T28] audit: type=1400 audit(1782599909.302:3273): avc: denied { getopt } for pid=27616 comm="syz.3.7568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.622179][T27615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27615 comm=syz.8.7567 [ 562.711985][ T28] audit: type=1326 audit(1782599909.452:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 562.836263][ T28] audit: type=1326 audit(1782599909.452:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 562.922439][T27629] loop3: detected capacity change from 0 to 8192 [ 562.965982][ T28] audit: type=1326 audit(1782599909.482:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 562.973455][T27631] netlink: 6 bytes leftover after parsing attributes in process `syz.8.7571'. [ 563.002837][ T28] audit: type=1326 audit(1782599909.482:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.127372][ T28] audit: type=1326 audit(1782599909.482:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.196193][T27636] loop6: detected capacity change from 0 to 512 [ 563.240866][T27636] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 563.259367][ T28] audit: type=1326 audit(1782599909.532:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.302841][T27636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 563.347448][T27636] block device autoloading is deprecated and will be removed. [ 563.378403][T27636] EXT4-fs (loop6): couldn't read superblock of external journal [ 563.391296][ T28] audit: type=1326 audit(1782599909.532:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.431201][ T28] audit: type=1326 audit(1782599909.532:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.479955][ T28] audit: type=1326 audit(1782599909.532:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27622 comm="syz.6.7570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 563.524471][T27644] blkio.reset_stats is deprecated [ 563.780845][T27659] loop2: detected capacity change from 0 to 764 [ 563.796984][T27659] rock: directory entry would overflow storage [ 563.815200][T27659] rock: sig=0x4654, size=5, remaining=4 [ 563.892565][T27659] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7583'. [ 563.932630][T27667] lo speed is unknown, defaulting to 1000 [ 563.964662][T27671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.982119][T27671] team0: Port device bond0 added [ 564.018672][T27671] bridge0: port 2(team0) entered blocking state [ 564.033121][T27671] bridge0: port 2(team0) entered disabled state [ 564.046187][T27671] team0: entered allmulticast mode [ 564.053436][T27671] bond0: entered allmulticast mode [ 564.059372][T27671] team0: entered promiscuous mode [ 564.065271][T27671] bond0: entered promiscuous mode [ 565.444360][ T4539] net_ratelimit: 33 callbacks suppressed [ 565.444381][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.567944][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.695813][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.774851][T27735] ip6gre1: entered promiscuous mode [ 565.780256][T27735] ip6gre1: entered allmulticast mode [ 565.798513][T27735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.873082][T27737] bond5: (slave dummy0): Releasing active interface [ 565.897286][T27737] bond5: (slave veth7): making interface the new active one [ 565.940442][T27737] bridge_slave_0: left allmulticast mode [ 565.946712][T27737] bridge_slave_0: left promiscuous mode [ 565.952630][T27737] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.988132][T27737] bridge_slave_1: left allmulticast mode [ 566.007896][T27737] bridge_slave_1: left promiscuous mode [ 566.013927][T27737] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.039725][T27737] bond4: (slave veth0_to_bond): Releasing backup interface [ 566.059382][T27737] bond0: (slave bond_slave_0): Releasing backup interface [ 566.073627][T27737] bond0: (slave bond_slave_1): Releasing backup interface [ 566.125303][T27737] team0: Port device team_slave_0 removed [ 566.162199][T27737] team0: Port device team_slave_1 removed [ 566.191003][T27737] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.219572][T27740] team0: Port device xfrm0 added [ 566.227066][T27747] tipc: Started in network mode [ 566.233722][T27747] tipc: Node identity 82f678fb78fa, cluster identity 4711 [ 566.248456][T27747] tipc: Enabled bearer , priority 0 [ 566.264584][T10366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.272325][T10366] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.295130][T11283] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.336272][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 566.464407][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 566.487545][T27787] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.490861][T27779] loop3: detected capacity change from 0 to 128 [ 566.533230][T27787] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.616709][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 566.702842][T27787] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.724203][T27787] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.747440][T27779] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.785376][T27779] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.797993][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 566.820055][T27787] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.847348][T27787] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.901969][T20169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.912847][T27787] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.940351][T27787] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.995027][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 567.084593][T11289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.115800][ T3426] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.129068][ T3426] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.165692][ T3426] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.193129][ T3426] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.219283][T27808] lo speed is unknown, defaulting to 1000 [ 567.231581][ T3426] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.250579][T11287] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.263714][ T3426] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.296476][T27816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.306857][ T3426] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.343523][ T3426] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.355518][T27816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.366525][T27817] bond0: left promiscuous mode [ 567.381932][T27817] bond0: left allmulticast mode [ 567.400098][T27817] team0: Port device bond0 removed [ 567.428553][T27817] team0: left allmulticast mode [ 567.441015][T27817] team0: left promiscuous mode [ 567.453040][T27817] bridge0: port 2(team0) entered disabled state [ 567.465877][T27817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 567.493081][T27823] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa [ 567.503240][T27820] team0: Device xfrm0 failed to enter team mode [ 567.518896][T27820] team0: Device xfrm0 failed to enter team mode [ 567.543238][T11273] tipc: Node number set to 4195121403 [ 567.559528][T27821] tipc: Started in network mode [ 567.565726][T27821] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 567.579407][T27821] tipc: Enabled bearer , priority 0 [ 567.609155][T27828] netlink: 'syz.2.7640': attribute type 4 has an invalid length. [ 567.807237][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 567.807257][ T28] audit: type=1400 audit(1782599914.552:3423): avc: denied { bind } for pid=27839 comm="syz.6.7644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.955137][T27852] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7643'. [ 567.978995][T27838] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7643'. [ 567.991289][T27847] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7643'. [ 568.151783][T27860] lo speed is unknown, defaulting to 1000 [ 568.599972][ T28] audit: type=1326 audit(1782599915.332:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.670034][ T28] audit: type=1326 audit(1782599915.332:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.697060][ T127] tipc: Node number set to 11578026 [ 568.704276][ T28] audit: type=1326 audit(1782599915.332:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.731827][ T28] audit: type=1326 audit(1782599915.332:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.757905][ T28] audit: type=1326 audit(1782599915.332:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.796809][T27874] bond3: (slave dummy0): Releasing active interface [ 568.803675][ T28] audit: type=1326 audit(1782599915.382:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.832049][T27874] bond3: (slave veth3): making interface the new active one [ 568.880369][T27874] bridge_slave_1: left allmulticast mode [ 568.896000][T27874] bridge_slave_1: left promiscuous mode [ 568.928335][ T28] audit: type=1326 audit(1782599915.382:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2406ce59 code=0x7ffc0000 [ 568.967956][T27874] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.978044][ T28] audit: type=1326 audit(1782599915.392:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f2402d68e code=0x7ffc0000 [ 569.008398][ T28] audit: type=1326 audit(1782599915.392:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.6.7649" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f2402d68e code=0x7ffc0000 [ 569.039502][T27874] bond0: (slave bond_slave_0): Releasing backup interface [ 569.066749][T27874] bond0: (slave bond_slave_1): Releasing backup interface [ 569.095900][T27874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.103738][T27874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.113162][T27874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.121203][T27874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.157466][T27884] tipc: Enabling of bearer rejected, failed to enable media [ 569.163862][T27886] netlink: 277 bytes leftover after parsing attributes in process `syz.5.7667'. [ 569.354547][T27898] lo speed is unknown, defaulting to 1000 [ 570.479998][ T4539] net_ratelimit: 14 callbacks suppressed [ 570.480019][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.604416][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.616909][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.644282][T27911] loop3: detected capacity change from 0 to 128 [ 570.827921][T27928] loop6: detected capacity change from 0 to 764 [ 570.845466][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.859526][T27928] rock: directory entry would overflow storage [ 570.884612][T27928] rock: sig=0x4654, size=5, remaining=4 [ 570.984679][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.166071][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.185704][T27932] netlink: 277 bytes leftover after parsing attributes in process `syz.6.7672'. [ 571.231496][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'. [ 571.246699][T27935] syz.8.7669 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 571.286432][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'. [ 571.309445][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'. [ 571.330024][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'. [ 571.340020][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7671'. [ 571.354630][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.475861][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.585069][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.593196][T27950] loop6: detected capacity change from 0 to 512 [ 571.641956][T27954] lo speed is unknown, defaulting to 1000 [ 571.661363][T27950] EXT4-fs (loop6): orphan cleanup on readonly fs [ 571.684655][T27950] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7681: ea_inode with extended attributes [ 571.706164][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.727524][T27950] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 571.734337][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 571.751077][ C0] EXT4-fs (loop6): initial error at time 1782599918: ext4_xattr_inode_iget:441: inode 11 [ 571.762556][ C0] EXT4-fs (loop6): last error at time 1782599918: ext4_xattr_inode_iget:441: inode 11 [ 571.776315][T27950] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7681: error while reading EA inode 11 err=-117 [ 571.804830][T27950] loop6: lost filesystem error report for type 5 error -117 [ 571.813101][T27950] EXT4-fs (loop6): 1 orphan inode deleted [ 571.884242][T27950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 571.914417][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 572.034564][ T8228] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.103823][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.148031][T27965] tipc: Resetting bearer [ 572.304651][T11286] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.317279][T11289] syz2: Port: 1 Link DOWN [ 572.322053][ T3429] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.343648][ T3429] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.370091][ T3429] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.381326][ T3429] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.452247][T27969] syzkaller0: entered promiscuous mode [ 572.465612][T27969] syzkaller0: entered allmulticast mode [ 572.478118][ T4539] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.491499][ T4539] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.501636][ T4539] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.512207][ T4539] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.815077][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 572.815096][ T28] audit: type=1326 audit(1782599919.562:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 572.849539][ T28] audit: type=1326 audit(1782599919.592:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 572.881141][ T28] audit: type=1326 audit(1782599919.592:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 572.917419][ T28] audit: type=1326 audit(1782599919.592:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 572.943737][ T28] audit: type=1326 audit(1782599919.592:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 573.005082][ T3426] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.028480][ T28] audit: type=1326 audit(1782599919.622:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 573.055604][ T28] audit: type=1326 audit(1782599919.622:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28002 comm="syz.2.7697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 573.109624][T28010] lo speed is unknown, defaulting to 1000 [ 573.286240][T28021] loop3: detected capacity change from 0 to 128 [ 573.321775][T28021] FAT-fs (loop3): bogus number of FAT sectors [ 573.337851][T28021] FAT-fs (loop3): Can't find a valid FAT filesystem [ 573.631158][T28032] __nla_validate_parse: 38 callbacks suppressed [ 573.631192][T28032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7706'. [ 573.717648][T28034] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28034 comm=syz.8.7706 [ 574.045719][ T3429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.134652][ T3429] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.358514][T28051] loop3: detected capacity change from 0 to 512 [ 574.390131][T28051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 574.432022][T28051] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.7714: iget: bad i_size value: 38620345925642 [ 574.516050][T28051] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 574.517333][T28051] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7714: couldn't read orphan inode 15 (err -117) [ 574.527524][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 574.527563][ C1] EXT4-fs (loop3): initial error at time 1782599921: ext4_orphan_get:1399: inode 15 [ 574.527600][ C1] EXT4-fs (loop3): last error at time 1782599921: ext4_orphan_get:1399: inode 15 [ 574.579229][T28051] loop3: lost filesystem error report for type 5 error -117 [ 574.581250][T28051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.605177][T11287] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.633452][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.737422][T28067] netlink: 15743 bytes leftover after parsing attributes in process `syz.8.7719'. [ 574.754123][T28069] netlink: 'syz.3.7720': attribute type 2 has an invalid length. [ 574.754208][T28070] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 574.802718][T28069] 0: entered promiscuous mode [ 574.819824][ T28] audit: type=1400 audit(1782599921.562:3572): avc: denied { bind } for pid=28073 comm="syz.8.7723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 574.871935][T11287] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 574.881853][T11287] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.050858][T28095] netlink: 'syz.2.7730': attribute type 1 has an invalid length. [ 575.095911][T28095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.119429][T28099] loop3: detected capacity change from 0 to 512 [ 575.155908][ T28] audit: type=1326 audit(1782599921.892:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28092 comm="syz.8.7729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8524ce59 code=0x7ffc0000 [ 575.190631][T28103] bond4: (slave ip6gretap2): making interface the new active one [ 575.202502][T28099] ext4: Unknown parameter 'appraise_type' [ 575.261410][T28103] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 575.362648][ T28] audit: type=1326 audit(1782599921.892:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28092 comm="syz.8.7729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8524ce59 code=0x7ffc0000 [ 575.429189][T28112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.458469][T28112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.545908][ T4539] net_ratelimit: 24 callbacks suppressed [ 575.545933][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.553225][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 575.627836][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7736'. [ 575.665374][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.774432][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.886670][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.004892][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.114401][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.224492][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.334425][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.449164][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.564606][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 576.829286][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7749'. [ 576.874716][T28160] loop3: detected capacity change from 0 to 512 [ 577.092864][T28167] loop2: detected capacity change from 0 to 512 [ 577.100966][T28160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.124970][T28167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.187111][T28167] EXT4-fs (loop2): 1 truncate cleaned up [ 577.219634][T28160] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.240538][T28167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.345793][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.447283][T28176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7751'. [ 577.530587][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.964426][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.015882][T28201] loop2: detected capacity change from 0 to 256 [ 578.225924][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 578.225945][ T28] audit: type=1326 audit(1782599924.972:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 578.351478][ T28] audit: type=1326 audit(1782599924.972:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 578.440471][ T28] audit: type=1326 audit(1782599924.972:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 578.550358][ T28] audit: type=1326 audit(1782599924.972:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 578.664429][ T28] audit: type=1326 audit(1782599925.022:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 578.757003][ T28] audit: type=1326 audit(1782599925.022:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 578.827900][ T28] audit: type=1326 audit(1782599925.032:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 578.912167][T28234] netlink: 'syz.8.7776': attribute type 1 has an invalid length. [ 578.922224][ T28] audit: type=1326 audit(1782599925.032:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 578.978060][T28234] bond11: entered promiscuous mode [ 578.993823][T28234] 8021q: adding VLAN 0 to HW filter on device bond11 [ 579.004420][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.054042][T28237] vlan2: entered allmulticast mode [ 579.076390][ T28] audit: type=1326 audit(1782599925.032:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 579.126112][T28237] bond11: entered allmulticast mode [ 579.174242][T28234] bond11: (slave bridge8): making interface the new active one [ 579.199964][T28234] bridge8: entered promiscuous mode [ 579.210051][ T28] audit: type=1326 audit(1782599925.032:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28202 comm="syz.2.7766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 579.238987][T28234] bridge8: entered allmulticast mode [ 579.249418][T28234] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 579.355575][T28248] netlink: 380 bytes leftover after parsing attributes in process `syz.5.7782'. [ 580.367638][T28276] lo speed is unknown, defaulting to 1000 [ 580.409405][T28279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7793'. [ 580.676957][ T3426] net_ratelimit: 33 callbacks suppressed [ 580.676980][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.704849][T28287] loop2: detected capacity change from 0 to 512 [ 580.795834][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.800427][T28287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 580.854059][T28287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.7798: ea_inode with extended attributes [ 580.890207][T28287] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 580.892847][T28287] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.7798: error while reading EA inode 11 err=-117 [ 580.902871][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 580.902928][ C0] EXT4-fs (loop2): initial error at time 1782599927: ext4_xattr_inode_iget:441: inode 11 [ 580.903252][ C0] EXT4-fs (loop2): last error at time 1782599927: ext4_xattr_inode_iget:441: inode 11 [ 580.947789][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.960429][T28287] loop2: lost filesystem error report for type 5 error -117 [ 580.966500][T28287] EXT4-fs (loop2): 1 orphan inode deleted [ 581.004265][T28287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 581.065518][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.123762][T28287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7798'. [ 581.174623][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.251229][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.285344][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.408685][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.534427][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.645805][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 581.775817][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 582.050591][T28319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7808'. [ 582.107744][T28319] bond_slave_0: entered promiscuous mode [ 582.115802][T28319] bond_slave_0: entered allmulticast mode [ 582.416625][T28356] --map-set only usable from mangle table [ 582.732451][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7821'. [ 582.761860][T28386] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1509159385/1509159386 [ 582.777314][T28386] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1509159385/1509159386 [ 583.110541][T28413] loop6: detected capacity change from 0 to 2048 [ 583.152675][T28413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.175964][T28413] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.286165][T28413] veth0_macvtap: left promiscuous mode [ 583.375013][T28421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 583.390840][T28421] EXT4-fs (loop6): Remounting filesystem read-only [ 583.414196][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.521184][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 583.521207][ T28] audit: type=1400 audit(1782599930.262:3720): avc: denied { write } for pid=28426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.677304][ T28] audit: type=1400 audit(1782599930.422:3721): avc: denied { write } for pid=28452 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.743923][ T3019] veth0_macvtap: entered promiscuous mode [ 583.750191][ T3019] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.901532][T28470] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7846'. [ 584.101243][T28485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7851'. [ 584.125069][T28485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.177203][T28485] bond5: entered promiscuous mode [ 584.184693][T28485] bond5: entered allmulticast mode [ 584.212750][T28485] bond0: entered promiscuous mode [ 584.231027][T28485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.250971][T28485] bond0: entered allmulticast mode [ 584.263409][T28485] bond5: (slave bond0): Enslaving as an active interface with an up link [ 584.300600][ T28] audit: type=1400 audit(1782599931.042:3722): avc: denied { write } for pid=28482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.398729][ T28] audit: type=1400 audit(1782599931.142:3723): avc: denied { write } for pid=28503 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.919741][T28534] loop2: detected capacity change from 0 to 512 [ 584.940073][T28534] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 584.968017][T28534] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 584.977617][T28534] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 584.988451][T28534] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 584.997107][T28534] System zones: 0-2, 18-18, 34-35 [ 585.050945][T28534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.303677][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.405616][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.546039][T28573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7874'. [ 585.581780][T28573] bond3: entered promiscuous mode [ 585.599288][T28573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.633210][T28578] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.645838][T28578] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 585.658837][T28578] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 585.681968][T28573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.689433][T28573] IPv6: NLM_F_CREATE should be set when creating new route [ 585.696697][T28573] IPv6: NLM_F_CREATE should be set when creating new route [ 585.705409][ T3426] net_ratelimit: 31 callbacks suppressed [ 585.705431][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.765555][T28573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.818417][T28573] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 585.846463][T28573] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 585.894454][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.940899][ T28] audit: type=1326 audit(1782599932.682:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28586 comm="syz.2.7878" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7fc00000 [ 586.001109][ T28] audit: type=1326 audit(1782599932.682:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28586 comm="syz.2.7878" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47d3e2ce59 code=0x7fc00000 [ 586.014692][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.169512][T28601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7882'. [ 586.194348][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.314391][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.424393][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.508040][T28614] netlink: 'syz.5.7896': attribute type 10 has an invalid length. [ 586.535233][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.550299][T28614] team0: Port device dummy0 added [ 586.572209][T28614] netlink: 'syz.5.7896': attribute type 10 has an invalid length. [ 586.635382][T28614] team0: Port device dummy0 removed [ 586.667345][T28614] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 586.725420][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.837426][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.933296][T28637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7895'. [ 586.934824][T28628] loop3: detected capacity change from 0 to 164 [ 586.964528][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 587.074365][T18672] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 587.101303][T28628] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 587.134388][T18672] CPU: 1 UID: 0 PID: 18672 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 587.134500][T18672] Tainted: [W]=WARN [ 587.134509][T18672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.134524][T18672] Call Trace: [ 587.134553][T18672] [ 587.134564][T18672] __dump_stack+0x1d/0x30 [ 587.134701][T18672] dump_stack_lvl+0x95/0xd0 [ 587.134728][T18672] dump_stack+0x15/0x1b [ 587.134756][T18672] dump_header+0x80/0x240 [ 587.134785][T18672] oom_kill_process+0x295/0x350 [ 587.134884][T18672] out_of_memory+0x981/0xbc0 [ 587.134921][T18672] try_charge_memcg+0x621/0xa00 [ 587.134975][T18672] charge_memcg+0x6d/0x120 [ 587.135042][T18672] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 587.135082][T18672] swap_cache_alloc_folio+0x47b/0x5e0 [ 587.135154][T18672] swap_cluster_readahead+0x2b1/0x460 [ 587.135201][T18672] swapin_readahead+0xd8/0x8a0 [ 587.135241][T18672] ? tick_program_event+0x79/0xc0 [ 587.135277][T18672] ? _raw_spin_unlock+0x9/0x30 [ 587.135324][T18672] ? __rcu_read_unlock+0x4e/0x70 [ 587.135434][T18672] ? swap_cache_get_folio+0x1f7/0x200 [ 587.135549][T18672] do_swap_page+0x2a2/0x1ec0 [ 587.135588][T18672] ? __schedule+0x799/0xd10 [ 587.135617][T18672] ? __rcu_read_lock+0x36/0x50 [ 587.135648][T18672] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 587.135681][T18672] handle_mm_fault+0xb3c/0x2da0 [ 587.135795][T18672] do_user_addr_fault+0x634/0x1060 [ 587.135834][T18672] ? trace_page_fault_user+0x1f/0xa0 [ 587.135954][T18672] exc_page_fault+0x62/0xa0 [ 587.136096][T18672] asm_exc_page_fault+0x26/0x30 [ 587.136125][T18672] RIP: 0033:0x7fe0c6927fd7 [ 587.136149][T18672] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 587.136213][T18672] RSP: 002b:00007ffdd7fc6570 EFLAGS: 00010202 [ 587.136236][T18672] RAX: 0000000000000000 RBX: 000055558bb8c500 RCX: 00007fe0c6927fd7 [ 587.136259][T18672] RDX: 00007ffdd7fc65b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 587.136273][T18672] RBP: 00007ffdd7fc661c R08: 0000000000000000 R09: 0000000000000000 [ 587.136287][T18672] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 587.136325][T18672] R13: 00000000000927c0 R14: 000000000008f457 R15: 00007ffdd7fc6670 [ 587.136354][T18672] [ 587.136382][T18672] memory: usage 307200kB, limit 307200kB, failcnt 804 [ 587.501325][T18672] memory+swap: usage 67596kB, limit 9007199254740988kB, failcnt 0 [ 587.509805][T18672] kmem: usage 54536kB, limit 9007199254740988kB, failcnt 0 [ 587.573697][T18672] Memory cgroup stats for /syz5: [ 587.573997][T18672] cache 0 [ 587.600507][T18672] rss 0 [ 587.603679][T18672] shmem 0 [ 587.607225][T18672] mapped_file 0 [ 587.610989][T18672] dirty 0 [ 587.615786][T18672] writeback 0 [ 587.619807][T18672] workingset_refault_anon 1598 [ 587.625854][T18672] workingset_refault_file 0 [ 587.631203][T18672] swap 651264 [ 587.634946][T18672] swapcached 24305664 [ 587.642150][T18672] pgpgin 267422 [ 587.647111][T18672] pgpgout 267421 [ 587.652878][T18672] pgfault 273103 [ 587.657361][T18672] pgmajfault 2401 [ 587.677135][T18672] inactive_anon 0 [ 587.682089][T18672] active_anon 4096 [ 587.686408][T18672] inactive_file 0 [ 587.690588][T18672] active_file 0 [ 587.694204][T18672] unevictable 0 [ 587.698221][T18672] hierarchical_memory_limit 314572800 [ 587.721554][T18672] hierarchical_memsw_limit 9223372036854771712 [ 587.729437][T18672] total_cache 0 [ 587.733086][T18672] total_rss 0 [ 587.736655][T18672] total_shmem 0 [ 587.740485][T18672] total_mapped_file 0 [ 587.741188][T28658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.753270][T18672] total_dirty 0 [ 587.757539][T18672] total_writeback 0 [ 587.761858][T18672] total_workingset_refault_anon 1598 [ 587.768157][T18672] total_workingset_refault_file 0 [ 587.775623][T18672] total_swap 651264 [ 587.780428][T18672] total_swapcached 24305664 [ 587.787924][T18672] total_pgpgin 267422 [ 587.793599][T18672] total_pgpgout 267421 [ 587.795331][T28658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.806622][T18672] total_pgfault 273103 [ 587.811364][T18672] total_pgmajfault 2401 [ 587.819248][T18672] total_inactive_anon 0 [ 587.824170][T18672] total_active_anon 4096 [ 587.831830][T18672] total_inactive_file 0 [ 587.842090][T18672] total_active_file 0 [ 587.849488][T18672] total_unevictable 0 [ 587.854682][T18672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7891,pid=28625,uid=0 [ 587.872315][T18672] Memory cgroup out of memory: Killed process 28625 (syz.5.7891) total-vm:94168kB, anon-rss:1228kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 588.082914][T28668] lo speed is unknown, defaulting to 1000 [ 588.108677][ T28] audit: type=1400 audit(1782599934.852:3726): avc: denied { ioctl } for pid=28669 comm="syz.3.7909" path="socket:[105788]" dev="sockfs" ino=105788 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 588.186881][T28674] netlink: 796 bytes leftover after parsing attributes in process `syz.3.7910'. [ 588.207190][T28674] netlink: 796 bytes leftover after parsing attributes in process `syz.3.7910'. [ 588.743192][T28690] loop2: detected capacity change from 0 to 128 [ 588.799279][T28690] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 588.886716][T28688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7915'. [ 588.906107][T28690] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 589.139099][T28703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7920'. [ 589.166408][T10366] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 589.311059][T28716] netlink: 'syz.5.7923': attribute type 1 has an invalid length. [ 589.333351][T28719] netlink: 'syz.2.7925': attribute type 1 has an invalid length. [ 589.354850][T28716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.380782][T28719] bond6: entered promiscuous mode [ 589.394250][T28719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.422798][T28716] bond6: (slave gretap1): making interface the new active one [ 589.452750][T28716] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 589.524147][T28724] bond6: (slave bridge6): making interface the new active one [ 589.543893][T28724] bridge6: entered promiscuous mode [ 589.561831][T28724] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 589.595316][T28719] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 589.605821][T28719] bridge6: left promiscuous mode [ 589.612388][T28719] bond6 (unregistering): Released all slaves [ 589.635013][T28731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.644804][T28731] team0: Port device bond0 added [ 589.722588][T28735] dummy0: entered allmulticast mode [ 589.746854][T28735] dummy0: left allmulticast mode [ 589.786141][T28741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7932'. [ 589.862729][T28749] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3570218993/3570218994 [ 590.116802][T28763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7941'. [ 590.137740][T28763] team1: entered promiscuous mode [ 590.153959][T28763] team1: entered allmulticast mode [ 590.167710][T28766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7941'. [ 590.172854][T28763] 8021q: adding VLAN 0 to HW filter on device team1 [ 590.195130][T28766] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 590.211956][T28766] team2: entered promiscuous mode [ 590.220251][T28766] team2: entered allmulticast mode [ 590.220714][T28768] netlink: 'syz.6.7943': attribute type 1 has an invalid length. [ 590.225874][T28766] 8021q: adding VLAN 0 to HW filter on device team2 [ 590.390303][T28773] loop3: detected capacity change from 0 to 128 [ 590.408881][T28773] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 590.441148][T28773] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.495661][ T28] audit: type=1400 audit(1782599937.242:3727): avc: denied { write } for pid=28772 comm="syz.3.7945" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.557944][T28777] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7946'. [ 590.597738][T20169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 590.603542][T28781] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7948'. [ 590.654352][T28785] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7950'. [ 590.741516][T28785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28785 comm=syz.8.7950 [ 590.755222][ T4539] net_ratelimit: 27 callbacks suppressed [ 590.755242][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.776238][T28796] loop3: detected capacity change from 0 to 512 [ 590.794877][T28796] EXT4-fs: Ignoring removed nobh option [ 590.830422][T28796] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7952: invalid indirect mapped block 256 (level 2) [ 590.861038][T28796] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 590.861521][T28796] EXT4-fs (loop3): Remounting filesystem read-only [ 590.871757][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 590.871783][ C1] EXT4-fs (loop3): initial error at time 1782599937: ext4_free_branches:1023: inode 11 [ 590.871811][ C1] EXT4-fs (loop3): last error at time 1782599937: ext4_free_branches:1023: inode 11 [ 590.914538][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.951889][T28798] loop2: detected capacity change from 0 to 512 [ 590.987752][T28796] EXT4-fs (loop3): 2 truncates cleaned up [ 590.996016][T28796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.018659][T28798] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7954: corrupted in-inode xattr: e_value out of bounds [ 591.029901][T28796] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 591.034208][ T28] audit: type=1400 audit(1782599937.772:3728): avc: denied { write } for pid=28790 comm="syz.3.7952" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 591.066755][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.084562][T28798] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 591.086042][T28798] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7954: couldn't read orphan inode 15 (err -117) [ 591.095611][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 591.095744][ C0] EXT4-fs (loop2): initial error at time 1782599937: ext4_iget_extra_inode:5180: inode 15 [ 591.095957][ C0] EXT4-fs (loop2): last error at time 1782599937: ext4_iget_extra_inode:5180: inode 15 [ 591.135757][T28798] loop2: lost filesystem error report for type 5 error -117 [ 591.152351][T28798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.194830][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.316142][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.435081][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.544657][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.654449][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.684141][T28814] syzkaller0: entered promiscuous mode [ 591.693857][T28814] syzkaller0: entered allmulticast mode [ 591.744140][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.753723][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.774959][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.835774][T28821] loop6: detected capacity change from 0 to 1024 [ 591.869966][T28821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 591.884411][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.895303][T28821] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.917755][ T28] audit: type=1400 audit(1782599938.662:3729): avc: denied { write } for pid=28818 comm="syz.6.7961" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 591.994773][T10366] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:30: lblock 0 mapped to illegal pblock 0 (length 6) [ 592.081876][T10366] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 592.108025][T28839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7965'. [ 592.123328][T10366] EXT4-fs (loop6): This should not happen!! Data will be lost [ 592.123328][T10366] [ 592.161197][T10366] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:30: lblock 8 mapped to illegal pblock 8 (length 8) [ 592.196602][T10366] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 592.197454][T28834] loop2: detected capacity change from 0 to 256 [ 592.223752][T10366] EXT4-fs (loop6): This should not happen!! Data will be lost [ 592.223752][T10366] [ 592.240966][T28839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28839 comm=syz.3.7965 [ 592.621984][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 592.631831][T28857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7969'. [ 592.669681][T28821] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7961: bg 0: block 112: padding at end of block bitmap is not set [ 592.685628][T28856] bond9: entered promiscuous mode [ 592.690982][T28856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 592.707155][T28821] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 592.725771][T28821] EXT4-fs (loop6): This should not happen!! Data will be lost [ 592.725771][T28821] [ 592.751542][T28857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28857 comm=syz.5.7969 [ 592.757980][T28821] EXT4-fs (loop6): Total free blocks count 0 [ 592.784522][T28821] EXT4-fs (loop6): Free/Dirty block details [ 592.790601][T28821] EXT4-fs (loop6): free_blocks=0 [ 592.798838][T28856] veth13: entered promiscuous mode [ 592.805406][T28856] bond9: (slave veth13): Enslaving as an active interface with an up link [ 592.816487][ T28] audit: type=1326 audit(1782599939.562:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28859 comm="syz.2.7972" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47d3e2ce59 code=0x0 [ 592.913688][T24927] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 593.152603][T28884] ip_vti0: entered promiscuous mode [ 593.168594][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7979'. [ 593.312592][T28893] netlink: 'syz.5.7984': attribute type 1 has an invalid length. [ 593.353070][T28893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 593.408520][T28897] bond7: (slave veth11): Enslaving as an active interface with a down link [ 593.428149][T28898] loop6: detected capacity change from 0 to 512 [ 593.443878][T28893] veth0_virt_wifi: entered promiscuous mode [ 593.459075][T28898] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.503086][T28893] bond7: (slave veth0_virt_wifi): making interface the new active one [ 593.525737][T28898] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.7985: corrupted in-inode xattr: invalid ea_ino [ 593.545113][T28893] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 593.568546][T28897] bond7: (slave veth0_virt_wifi): Releasing active interface [ 593.576725][T28898] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 593.577008][T28898] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.7985: couldn't read orphan inode 15 (err -117) [ 593.586444][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 593.586469][ C0] EXT4-fs (loop6): initial error at time 1782599940: ext4_iget_extra_inode:5180: inode 15 [ 593.586528][ C0] EXT4-fs (loop6): last error at time 1782599940: ext4_iget_extra_inode:5180: inode 15 [ 593.626618][T28898] loop6: lost filesystem error report for type 5 error -117 [ 593.628004][T28898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.664994][ T28] audit: type=1400 audit(1782599940.402:3731): avc: denied { create } for pid=28900 comm="syz.2.7986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 593.804607][ T28] audit: type=1400 audit(1782599940.542:3732): avc: denied { write } for pid=28895 comm="syz.6.7985" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 593.808547][T28896] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.7985: deleted inode referenced: 15 [ 593.841056][ T28] audit: type=1400 audit(1782599940.572:3733): avc: denied { ioctl } for pid=28917 comm="syz.3.7991" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=106209 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 593.947432][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.038846][ T28] audit: type=1400 audit(1782599940.782:3734): avc: denied { write } for pid=28902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.110770][ T28] audit: type=1400 audit(1782599940.852:3735): avc: denied { write } for pid=28938 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.133672][T28929] loop3: detected capacity change from 0 to 1024 [ 594.450169][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8000'. [ 594.471347][T28929] EXT4-fs (loop3): filesystem is read-only [ 594.575697][ T28] audit: type=1400 audit(1782599941.312:3736): avc: denied { write } for pid=28949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.997117][T29000] syzkaller1: entered allmulticast mode [ 595.133220][T29012] netlink: 'syz.2.8011': attribute type 7 has an invalid length. [ 595.255338][T29012] netlink: 'syz.2.8011': attribute type 7 has an invalid length. [ 595.456929][T29037] loop3: detected capacity change from 0 to 512 [ 595.491999][T29037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.522386][T29037] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.548687][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 595.548709][ T28] audit: type=1400 audit(1782599942.292:3742): avc: denied { write } for pid=29036 comm="syz.3.8014" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 595.604406][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.724835][T29046] loop3: detected capacity change from 0 to 512 [ 595.787697][T29046] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 595.804954][ T3426] net_ratelimit: 29 callbacks suppressed [ 595.804977][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.827163][T29046] EXT4-fs (loop3): orphan cleanup on readonly fs [ 595.911102][T29046] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 595.951324][T29051] bond1: left promiscuous mode [ 595.981610][T29051] gre1: left promiscuous mode [ 595.998915][T29046] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 596.026244][T29051] gre3: left promiscuous mode [ 596.040106][T29051] team1: left promiscuous mode [ 596.054466][T29051] team1: left allmulticast mode [ 596.059912][T29051] bond3: left promiscuous mode [ 596.065530][T29051] vti0: left promiscuous mode [ 596.071344][T29051] team2: left promiscuous mode [ 596.076906][T29051] team2: left allmulticast mode [ 596.093667][T29046] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 596.093790][T29051] bond9: left promiscuous mode [ 596.106909][T29046] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.8016: inode has both inline data and extents flags [ 596.120489][T29051] bridge7: left promiscuous mode [ 596.136717][T29046] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 596.137931][T29051] bond11: left promiscuous mode [ 596.154301][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 596.161101][ C1] EXT4-fs (loop3): initial error at time 1782599942: ext4_orphan_get:1399: inode 16 [ 596.169096][T29051] bridge8: left promiscuous mode [ 596.170931][ C1] EXT4-fs (loop3): last error at time 1782599942: ext4_orphan_get:1399: inode 16 [ 596.186766][T29046] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.8016: couldn't read orphan inode 16 (err -117) [ 596.188567][T29051] vlan2: left allmulticast mode [ 596.223961][T29046] loop3: lost filesystem error report for type 5 error -117 [ 596.225418][T29051] bond11: left allmulticast mode [ 596.252100][T29051] bridge8: left allmulticast mode [ 596.269030][T29046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.284381][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.305400][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.415874][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.416945][T29065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8023'. [ 596.481292][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.524378][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.657967][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.774714][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.821266][T29089] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2875257317/2875257319 [ 596.844306][T29089] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2875257317/2875257318 [ 596.880036][T29089] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2875257317/2875257319 [ 596.885949][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.922866][T29089] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2875257317/2875257318 [ 597.015579][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.059049][T29107] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 597.071607][T29106] netlink: 'syz.5.8039': attribute type 2 has an invalid length. [ 597.132374][T29106] 0: entered promiscuous mode [ 597.154464][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.265875][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 597.327633][T29117] netlink: 'syz.3.8041': attribute type 1 has an invalid length. [ 597.369696][T29117] 8021q: adding VLAN 0 to HW filter on device bond10 [ 597.392547][T29119] bond10: (slave veth15): Enslaving as an active interface with a down link [ 597.541735][T29117] veth0_virt_wifi: entered promiscuous mode [ 597.552972][T29117] bond10: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 597.587745][T29117] bond10: (slave veth0_virt_wifi): Releasing active interface [ 597.792220][T29132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8048'. [ 597.841045][T29132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.873161][T29132] bond5 (unregistering): Released all slaves [ 598.018547][T29138] loop2: detected capacity change from 0 to 128 [ 598.028305][T29138] FAT-fs (loop2): bogus number of FAT sectors [ 598.040890][T29138] FAT-fs (loop2): Can't find a valid FAT filesystem [ 598.055639][T29137] loop6: detected capacity change from 0 to 128 [ 598.088791][T29141] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 598.107175][T29140] netlink: 'syz.8.8051': attribute type 2 has an invalid length. [ 598.149293][T29137] serio: Serial port ptm0 [ 598.155880][T29140] 0: entered promiscuous mode [ 598.249247][T29144] ip_vti0: entered promiscuous mode [ 598.260438][T29144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8052'. [ 598.402947][T29137] serio: Serial port ptm0 [ 598.562995][ T28] audit: type=1326 audit(1782599945.302:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x0 [ 598.641817][T29170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.653501][T29170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.674969][ T28] audit: type=1326 audit(1782599945.412:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 598.715619][ T28] audit: type=1326 audit(1782599945.412:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 598.744200][ T28] audit: type=1326 audit(1782599945.412:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 598.772458][ T28] audit: type=1326 audit(1782599945.412:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 598.812043][ T28] audit: type=1326 audit(1782599945.412:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f47d3e2ce59 code=0x7ffc0000 [ 598.840357][ T28] audit: type=1326 audit(1782599945.462:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 598.868483][ T28] audit: type=1326 audit(1782599945.472:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.2.8060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d3ded68e code=0x7ffc0000 [ 599.589115][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8071'. [ 599.692906][T29189] loop2: detected capacity change from 0 to 512 [ 599.755602][T29189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 599.785952][T29189] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.8069: ea_inode with extended attributes [ 599.799705][T29189] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 599.807915][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 599.824524][ C1] EXT4-fs (loop2): initial error at time 1782599946: ext4_xattr_inode_iget:441: inode 11 [ 599.835714][ C1] EXT4-fs (loop2): last error at time 1782599946: ext4_xattr_inode_iget:441: inode 11 [ 599.846986][T29189] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.8069: error while reading EA inode 11 err=-117 [ 599.861283][T29189] loop2: lost filesystem error report for type 5 error -117 [ 599.867275][T29189] EXT4-fs (loop2): 1 orphan inode deleted [ 599.913519][T29189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 599.934099][T29213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.947219][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8078'. [ 600.001054][T29213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.139941][T11289] IPVS: starting estimator thread 0... [ 600.155185][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.220666][T29224] ip6gretap0: entered promiscuous mode [ 600.228929][T29224] syzk: entered promiscuous mode [ 600.235293][T29222] IPVS: using max 2304 ests per chain, 115200 per kthread [ 600.258318][T29229] tipc: Failed to remove unknown binding: 66,0,0/2886997007:771542162/771542164 [ 600.278490][T29229] tipc: Failed to remove unknown binding: 66,0,0/2886997007:771542162/771542163 [ 600.350181][T29240] tipc: Failed to remove unknown binding: 66,0,0/11578026:1648289411/1648289413 [ 600.363448][T29240] tipc: Failed to remove unknown binding: 66,0,0/11578026:1648289411/1648289412 [ 600.377602][T29240] tipc: Failed to remove unknown binding: 66,0,0/11578026:1648289411/1648289413 [ 600.387210][T29240] tipc: Failed to remove unknown binding: 66,0,0/11578026:1648289411/1648289412 [ 600.630182][ T28] kauditd_printk_skb: 447 callbacks suppressed [ 600.630202][ T28] audit: type=1400 audit(1782599947.372:4198): avc: denied { create } for pid=29250 comm="syz.3.8092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 600.800917][T29258] loop3: detected capacity change from 0 to 512 [ 600.821562][T29258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.849014][T29258] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.8094: corrupted in-inode xattr: invalid ea_ino [ 600.866190][T29258] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.867068][T29258] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.8094: couldn't read orphan inode 15 (err -117) [ 600.888187][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 600.888212][ C1] EXT4-fs (loop3): initial error at time 1782599947: ext4_iget_extra_inode:5180: inode 15 [ 600.888246][ C1] EXT4-fs (loop3): last error at time 1782599947: ext4_iget_extra_inode:5180: inode 15 [ 600.917290][ T3426] net_ratelimit: 30 callbacks suppressed [ 600.917311][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.944922][T29258] loop3: lost filesystem error report for type 5 error -117 [ 600.945547][T29258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.979694][ T28] audit: type=1326 audit(1782599947.722:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 601.037550][ T28] audit: type=1326 audit(1782599947.722:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 601.076975][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.117315][ T28] audit: type=1326 audit(1782599947.752:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 601.176161][ T28] audit: type=1326 audit(1782599947.752:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 601.187181][T29257] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.8094: deleted inode referenced: 15 [ 601.205372][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.281809][ T28] audit: type=1326 audit(1782599947.752:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 601.344431][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.395444][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.404622][ T28] audit: type=1326 audit(1782599947.822:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 601.404680][ T28] audit: type=1326 audit(1782599947.832:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 601.404722][ T28] audit: type=1326 audit(1782599947.832:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 601.404761][ T28] audit: type=1326 audit(1782599947.832:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29263 comm="syz.5.8095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 601.508461][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.514902][T29273] loop6: detected capacity change from 0 to 1024 [ 601.537364][T29273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 601.565720][T29273] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 601.594472][T29273] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 601.614823][T29273] EXT4-fs (loop6): orphan cleanup on readonly fs [ 601.623595][T29273] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.8098: Freeing blocks not in datazone - block = 0, count = 4096 [ 601.626205][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.693673][T29273] loop6: lost filesystem error report for type 5 error -117 [ 601.694484][T29273] EXT4-fs (loop6): 1 orphan inode deleted [ 601.708224][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 601.708257][ C1] EXT4-fs (loop6): initial error at time 1782599948: ext4_free_blocks:6718 [ 601.708358][ C1] EXT4-fs (loop6): last error at time 1782599948: ext4_free_blocks:6718 [ 601.740206][T29273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 601.795620][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.853898][T29282] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3299320407/3299320409 [ 601.874569][T29282] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3299320407/3299320408 [ 601.891487][T29282] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3299320407/3299320409 [ 601.900864][T29282] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3299320407/3299320408 [ 601.914623][ T3426] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.212886][ T112] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.228463][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.272139][T29296] netlink: 'syz.8.8107': attribute type 1 has an invalid length. [ 602.283188][T29297] loop2: detected capacity change from 0 to 512 [ 602.312947][T29297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.349573][T29297] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.361296][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 602.378378][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8107'. [ 602.466929][T29319] loop6: detected capacity change from 0 to 512 [ 602.468079][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.500395][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8108'. [ 602.535219][T29319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.576976][T29319] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.735601][T29336] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1370167219/1370167221 [ 602.744051][T29312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8110'. [ 602.759986][T29336] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1370167219/1370167220 [ 602.779911][T29336] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1370167219/1370167221 [ 602.799278][T29336] tipc: Failed to remove unknown binding: 66,0,0/4195121403:1370167219/1370167220 [ 602.844611][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.983181][T29343] loop6: detected capacity change from 0 to 512 [ 603.020095][T29343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.036339][T29343] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.105941][T29348] loop3: detected capacity change from 0 to 512 [ 603.123801][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.133732][T29348] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 603.174956][T29348] EXT4-fs (loop3): 1 truncate cleaned up [ 603.200209][T29348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.298561][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.609451][T29370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8129'. [ 604.659428][T29374] loop3: detected capacity change from 0 to 1024 [ 604.687052][T29377] netlink: 'syz.8.8131': attribute type 1 has an invalid length. [ 604.689389][T29374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 604.717218][T29377] 8021q: adding VLAN 0 to HW filter on device bond12 [ 604.720312][T29374] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.817984][ T4535] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:20: lblock 0 mapped to illegal pblock 0 (length 6) [ 604.839390][ T4535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 604.866658][ T4535] EXT4-fs (loop3): This should not happen!! Data will be lost [ 604.866658][ T4535] [ 604.888512][ T4535] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:20: lblock 8 mapped to illegal pblock 8 (length 8) [ 604.933370][ T4535] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 604.948800][ T4535] EXT4-fs (loop3): This should not happen!! Data will be lost [ 604.948800][ T4535] [ 606.056017][T10369] net_ratelimit: 25 callbacks suppressed [ 606.056043][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.172177][T29374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8130: bg 0: block 112: padding at end of block bitmap is not set [ 606.190669][T29374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 200 with max blocks 2048 with error 28 [ 606.215519][T29374] EXT4-fs (loop3): This should not happen!! Data will be lost [ 606.215519][T29374] [ 606.237999][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.266799][T29374] EXT4-fs (loop3): Total free blocks count 0 [ 606.287221][T29374] EXT4-fs (loop3): Free/Dirty block details [ 606.319029][T29374] EXT4-fs (loop3): free_blocks=0 [ 606.384650][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.506844][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.635173][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.745074][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.874408][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.994389][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 607.032314][T20169] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 607.125789][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 607.234757][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 607.273819][T29411] syzkaller0: entered promiscuous mode [ 607.296065][T29411] syzkaller0: entered allmulticast mode [ 607.556046][T29429] syzkaller0: entered promiscuous mode [ 607.563248][T29429] syzkaller0: entered allmulticast mode [ 607.638800][T29449] netlink: 'syz.5.8157': attribute type 1 has an invalid length. [ 607.660366][T29449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 607.701251][T29449] bond8: entered promiscuous mode [ 607.707686][T29449] bond8: entered allmulticast mode [ 607.721500][T29460] loop2: detected capacity change from 0 to 128 [ 607.924690][T29474] lo speed is unknown, defaulting to 1000 [ 608.113138][T29488] loop2: detected capacity change from 0 to 512 [ 608.138005][T29488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 608.169042][T29488] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.8165: corrupted in-inode xattr: invalid ea_ino [ 608.173087][T29495] tipc: Failed to remove unknown binding: 66,0,0/3342577086:563449415/563449416 [ 608.192869][T29488] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.193011][T29488] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.8165: couldn't read orphan inode 15 (err -117) [ 608.202038][T29499] netlink: 'syz.3.8169': attribute type 1 has an invalid length. [ 608.202497][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 608.228980][ C0] EXT4-fs (loop2): initial error at time 1782599954: ext4_iget_extra_inode:5180: inode 15 [ 608.238985][ C0] EXT4-fs (loop2): last error at time 1782599954: ext4_iget_extra_inode:5180: inode 15 [ 608.256987][T29488] loop2: lost filesystem error report for type 5 error -117 [ 608.257136][T29495] tipc: Failed to remove unknown binding: 66,0,0/3342577086:563449415/563449416 [ 608.270690][T29499] netlink: 'syz.3.8169': attribute type 4 has an invalid length. [ 608.275237][T29488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.319300][T29499] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.8169'. [ 608.431568][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 608.431589][ T28] audit: type=1400 audit(1782599955.162:4276): avc: denied { write } for pid=29482 comm="syz.2.8165" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.432468][T29483] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.8165: deleted inode referenced: 15 [ 608.498342][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.833539][T29527] loop6: detected capacity change from 0 to 128 [ 608.858129][T29527] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 608.887160][T29527] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 609.123261][T10369] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.137678][T10369] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.148781][T10369] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.158633][ T4539] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 609.169182][T10369] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.224981][ T28] audit: type=1400 audit(1782599955.962:4277): avc: denied { watch watch_reads } for pid=29538 comm="syz.2.8195" path="/" dev="ramfs" ino=108110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 609.552791][T29553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8190'. [ 609.819489][ T28] audit: type=1400 audit(1782599956.562:4278): avc: denied { append } for pid=29564 comm="syz.2.8196" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 610.341087][T29576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8199'. [ 610.343831][T29577] Invalid ELF header magic: != ELF [ 611.166173][ T3429] net_ratelimit: 30 callbacks suppressed [ 611.166191][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.335485][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.444608][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.554433][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.678139][ T4535] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.761439][T29624] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8216'. [ 611.794895][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.924448][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.034589][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.116198][T29614] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 612.175492][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.285016][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.814204][T29631] netlink: 'syz.2.8218': attribute type 1 has an invalid length. [ 612.843031][T29631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.120205][ T28] audit: type=1107 audit(1782599959.862:4279): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 613.251054][T29650] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8223'. [ 613.472375][T29631] bond6: entered promiscuous mode [ 613.487615][T29631] bond6: entered allmulticast mode [ 613.816352][T29678] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8233'. [ 613.882229][T29681] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8234'. [ 614.236119][T29689] loop6: detected capacity change from 0 to 512 [ 614.361154][T29695] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8238'. [ 614.417851][T29695] 8021q: adding VLAN 0 to HW filter on device bond14 [ 614.435093][T29695] bond14 (unregistering): Released all slaves [ 614.493916][T29700] netlink: 'syz.6.8239': attribute type 1 has an invalid length. [ 614.538594][T29700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.583775][T29706] bond5: entered promiscuous mode [ 614.596231][T29706] bond5: entered allmulticast mode [ 614.667621][T29708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.841691][T29725] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8259'. [ 615.784764][T29742] loop6: detected capacity change from 0 to 512 [ 615.801852][T29742] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 615.811568][T29742] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 615.837234][T29742] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 615.857028][T29742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 615.865372][T29742] System zones: 0-2, 18-18, 34-35 [ 615.875017][T29742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.105758][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.264374][T10369] net_ratelimit: 28 callbacks suppressed [ 616.264398][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.384461][ T4539] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.435024][T29757] netlink: 'syz.8.8256': attribute type 1 has an invalid length. [ 616.451051][T29757] 8021q: adding VLAN 0 to HW filter on device bond14 [ 616.472782][T29757] bond14: entered promiscuous mode [ 616.478958][T29757] bond14: entered allmulticast mode [ 616.516489][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.536480][ T28] audit: type=1107 audit(1782599963.272:4280): pid=29759 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 616.618532][T29766] syzkaller0: entered promiscuous mode [ 616.629465][T29766] syzkaller0: entered allmulticast mode [ 616.638669][T29766] tipc: Enabled bearer , priority 0 [ 616.647893][T29766] tipc: Resetting bearer [ 616.662417][T29766] tipc: Disabling bearer [ 616.696066][T29770] veth1_to_bond: invalid flags given to default FDB implementation [ 616.704552][T10369] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.734021][T29775] netlink: 796 bytes leftover after parsing attributes in process `syz.6.8266'. [ 616.743905][T29775] netlink: 796 bytes leftover after parsing attributes in process `syz.6.8266'. [ 616.788747][T29781] netlink: 'syz.3.8268': attribute type 10 has an invalid length. [ 616.802279][T29781] team0: Device dummy0 is of different type [ 616.814451][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.828532][T29781] netlink: 'syz.3.8268': attribute type 10 has an invalid length. [ 616.870937][T29781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 616.937489][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.997735][T29792] netlink: 'syz.3.8273': attribute type 1 has an invalid length. [ 617.019511][T29795] vlan0: entered allmulticast mode [ 617.025763][T29795] veth0_to_bond: entered allmulticast mode [ 617.076070][T29792] 8021q: adding VLAN 0 to HW filter on device bond11 [ 617.098914][T29798] bond11: entered promiscuous mode [ 617.104965][T29798] bond11: entered allmulticast mode [ 617.130495][T29785] bond5: (slave bond0): Releasing backup interface [ 617.141620][T29785] bond0: left promiscuous mode [ 617.148598][T29785] bond0: left allmulticast mode [ 617.166263][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 617.203576][T29805] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 617.256837][T29809] loop3: detected capacity change from 0 to 164 [ 617.284468][T10366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 617.339906][T29811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8292'. [ 617.355093][T29813] loop3: detected capacity change from 0 to 512 [ 617.376808][T29813] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.8282: corrupted in-inode xattr: e_value out of bounds [ 617.391780][T29817] loop2: detected capacity change from 0 to 164 [ 617.398517][T29813] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 617.399092][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 617.414391][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 617.422355][ C1] EXT4-fs (loop3): initial error at time 1782599964: ext4_iget_extra_inode:5180: inode 15 [ 617.432366][ C1] EXT4-fs (loop3): last error at time 1782599964: ext4_iget_extra_inode:5180: inode 15 [ 617.443042][T29813] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.8282: couldn't read orphan inode 15 (err -117) [ 617.455589][T29813] loop3: lost filesystem error report for type 5 error -117 [ 617.458369][T29813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.511902][T29817] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 617.524420][ T3429] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 617.890724][T29825] netlink: 'syz.2.8285': attribute type 10 has an invalid length. [ 617.920337][T29825] netlink: 'syz.2.8285': attribute type 10 has an invalid length. [ 617.959571][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.994440][T29825] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.009996][T29829] syz_tun: entered allmulticast mode [ 618.034042][T29829] bond0: entered promiscuous mode [ 618.056791][T29829] dummy0: entered promiscuous mode [ 618.064879][T29832] netlink: 'syz.2.8288': attribute type 1 has an invalid length. [ 618.095548][T29832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 618.148370][T29832] bond7: (slave gretap2): making interface the new active one [ 618.168446][T29832] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 618.419208][T29838] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 618.836335][T29847] loop6: detected capacity change from 0 to 128 [ 618.843838][T29848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8291'. [ 618.866230][T29847] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 618.896382][T29847] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.921814][ T28] audit: type=1400 audit(1782599965.662:4281): avc: denied { write } for pid=29842 comm="syz.6.8293" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.017470][T24927] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 619.053096][T29866] netlink: 'syz.8.8302': attribute type 10 has an invalid length. [ 619.121260][T29873] netlink: 'syz.8.8302': attribute type 10 has an invalid length. [ 619.123341][T29856] batman_adv: batadv0: Adding interface: macvtap1 [ 619.143237][T29856] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.173258][T29856] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 619.196032][T29866] team0: Port device dummy0 added [ 619.245260][T29881] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8306'. [ 619.264207][T29873] team0: Port device dummy0 removed [ 620.101384][T29912] loop6: detected capacity change from 0 to 512 [ 620.120780][T29912] EXT4-fs: test_dummy_encryption option not supported [ 620.230470][T29915] tipc: Failed to remove unknown binding: 66,0,0/3342577086:2798163978/2798163979 [ 620.345505][T29919] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8320'. [ 620.363185][T29922] bond0: left promiscuous mode [ 620.376535][T29922] dummy0: left promiscuous mode [ 620.391809][T29922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.422701][T29922] team0: Device bond0 is of different type [ 620.564558][T29930] netlink: 'syz.6.8321': attribute type 10 has an invalid length. [ 620.573983][T29928] syzkaller0: entered promiscuous mode [ 620.579842][T29928] syzkaller0: entered allmulticast mode [ 620.591151][T29930] team0: Device dummy0 is of different type [ 620.635372][T29930] netlink: 'syz.6.8321': attribute type 10 has an invalid length. [ 620.726165][T29930] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 620.873859][T29940] loop3: detected capacity change from 0 to 512 [ 620.918710][T29940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.007832][T29940] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.072092][ T28] audit: type=1400 audit(1782599967.812:4282): avc: denied { write } for pid=29939 comm="syz.3.8327" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 621.191847][T29951] tipc: Failed to remove unknown binding: 66,0,0/11578026:945013010/945013011 [ 621.471121][T29956] batman_adv: batadv0: Interface deactivated: gretap1 [ 621.536694][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.567049][ T3429] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.597787][ T3429] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.629925][ T3429] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.666380][ T3429] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.691005][ T3429] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.699839][ T3429] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.711493][ T3429] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.720470][ T3429] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.946428][ T28] audit: type=1400 audit(1782599968.692:4283): avc: denied { write } for pid=29964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.067519][ T28] audit: type=1400 audit(1782599968.812:4284): avc: denied { write } for pid=29992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.176864][ T28] audit: type=1326 audit(1782599968.842:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 622.291808][T29999] loop2: detected capacity change from 0 to 4096 [ 622.306208][ T28] audit: type=1326 audit(1782599968.842:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 622.368446][T29999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.525422][ T28] audit: type=1326 audit(1782599968.842:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 622.558963][ T28] audit: type=1326 audit(1782599968.842:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 622.585165][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8344'. [ 622.598203][ T28] audit: type=1326 audit(1782599968.842:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0c696ce59 code=0x7ffc0000 [ 622.693766][ T28] audit: type=1326 audit(1782599968.892:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 622.729819][T30019] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30019 comm=syz.8.8344 [ 622.868352][ T28] audit: type=1326 audit(1782599968.892:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 622.984515][ T28] audit: type=1326 audit(1782599968.902:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29990 comm="syz.5.8342" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0c692d68e code=0x7ffc0000 [ 623.170734][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.935197][T30056] net_ratelimit: 26 callbacks suppressed [ 623.935219][T30056] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 624.105718][T30060] tipc: Resetting bearer [ 624.338890][T30062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8354'. [ 624.363221][T10366] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.373371][T10366] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.426459][T10366] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.470620][T10366] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.524531][T30070] lo speed is unknown, defaulting to 1000 [ 624.537470][T30089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8360'. [ 624.628914][T30089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30089 comm=syz.5.8360 [ 624.758817][T30104] bond0: entered promiscuous mode [ 624.768545][T30104] dummy0: entered promiscuous mode [ 624.941717][T30119] netlink: 'syz.2.8369': attribute type 10 has an invalid length. [ 625.009705][T30121] netlink: 'syz.2.8369': attribute type 10 has an invalid length. [ 625.040169][T30119] bond0: (slave dummy0): Releasing backup interface [ 625.310211][T30126] loop6: detected capacity change from 0 to 1024 [ 625.443935][T30126] EXT4-fs: Ignoring removed orlov option [ 625.632780][T30126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.669458][T30121] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 625.709245][T30126] netlink: 'syz.6.8371': attribute type 4 has an invalid length. [ 625.797943][T30126] netlink: 'syz.6.8371': attribute type 4 has an invalid length. [ 625.866546][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8373'. [ 625.903739][T30147] loop2: detected capacity change from 0 to 256 [ 625.927737][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.111319][T30165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.304161][T30180] bond0: entered promiscuous mode [ 626.312504][T30180] dummy0: entered promiscuous mode [ 626.509283][T30186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.520396][T30186] team0: Device bond0 is of different type [ 626.569569][T30191] veth0_virt_wifi: left promiscuous mode [ 626.583531][T30191] bond3: left promiscuous mode [ 626.590341][T30191] vlan1: left promiscuous mode [ 626.596439][T30191] bridge0: left promiscuous mode [ 626.603538][T30191] team1: left promiscuous mode [ 626.610564][T30191] team1: left allmulticast mode [ 626.616345][T30191] team2: left promiscuous mode [ 626.621356][T30191] team2: left allmulticast mode [ 626.631227][T30191] bond9: left promiscuous mode [ 626.642031][T30191] veth13: left promiscuous mode [ 626.661603][T30191] bond11: left promiscuous mode [ 626.667493][T30191] bond11: left allmulticast mode [ 626.700949][T30197] netlink: 188 bytes leftover after parsing attributes in process `syz.8.8385'. [ 626.762976][T30190] loop2: detected capacity change from 0 to 4096 [ 626.776069][T30203] bond0: left promiscuous mode [ 626.783923][T30203] dummy0: left promiscuous mode [ 626.805891][T30203] bridge0: port 1(team0) entered blocking state [ 626.815279][T30203] bridge0: port 1(team0) entered disabled state [ 626.866819][T30203] team0: entered allmulticast mode [ 626.873857][T30203] bond0: entered allmulticast mode [ 626.881302][T30203] dummy0: entered allmulticast mode [ 626.898507][T30203] team0: entered promiscuous mode [ 626.906048][T30203] bond0: entered promiscuous mode [ 626.911703][T30203] dummy0: entered promiscuous mode [ 627.002825][T30190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.220848][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.484442][T30237] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8400'. [ 627.653584][T30239] netlink: 'syz.3.8401': attribute type 7 has an invalid length. [ 627.805992][T30242] netlink: 'syz.3.8402': attribute type 4 has an invalid length. [ 627.818067][T30242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8402'. [ 627.838832][T30242] .`: renamed from bond0 [ 628.156230][T30253] loop6: detected capacity change from 0 to 512 [ 628.212003][T30253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 628.258369][T30253] EXT4-fs (loop6): orphan cleanup on readonly fs [ 628.280967][T30253] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 628.348691][T30253] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 628.381989][T30253] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.8405: bad orphan inode 768 [ 628.404438][T30253] loop6: lost filesystem error report for type 5 error -117 [ 628.414305][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 628.428935][ C0] EXT4-fs (loop6): initial error at time 1782599975: ext4_orphan_get:1425 [ 628.438346][ C0] EXT4-fs (loop6): last error at time 1782599975: ext4_orphan_get:1425 [ 628.450080][T30253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.491361][T30250] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 628.558328][T30250] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 628.635863][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 628.635951][ T28] audit: type=1326 audit(1782599975.382:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30269 comm="syz.3.8412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c2c89ce59 code=0x0 [ 628.856862][T30275] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8413'. [ 629.104134][T24927] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.632011][T30301] vlan4: entered allmulticast mode [ 629.667819][T30301] veth0_to_bond: entered allmulticast mode [ 629.760228][T30305] xt_hashlimit: size too large, truncated to 1048576 [ 630.051611][T30329] loop2: detected capacity change from 0 to 512 [ 630.068546][T30329] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 630.084292][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 630.087787][T30329] EXT4-fs (loop2): Remounting filesystem read-only [ 630.096252][ C0] EXT4-fs (loop2): initial error at time 1782599976: ext4_mb_generate_buddy:1317 [ 630.096288][ C0] EXT4-fs (loop2): last error at time 1782599976: ext4_mb_generate_buddy:1317 [ 630.123662][T30329] EXT4-fs (loop2): 1 truncate cleaned up [ 630.131470][T30329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.335947][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.647988][T30342] netlink: 'syz.2.8432': attribute type 7 has an invalid length. [ 630.704654][T30346] loop2: detected capacity change from 0 to 256 [ 630.851538][T30346] FAT-fs (loop2): Directory bread(block 64) failed [ 630.864079][T30346] FAT-fs (loop2): Directory bread(block 65) failed [ 630.876163][T30346] FAT-fs (loop2): Directory bread(block 66) failed [ 630.888942][T30346] FAT-fs (loop2): Directory bread(block 67) failed [ 630.923072][T30346] FAT-fs (loop2): Directory bread(block 68) failed [ 630.933957][T30346] FAT-fs (loop2): Directory bread(block 69) failed [ 630.948275][T30346] FAT-fs (loop2): Directory bread(block 70) failed [ 630.957055][T30346] FAT-fs (loop2): Directory bread(block 71) failed [ 630.978036][T30346] FAT-fs (loop2): Directory bread(block 72) failed [ 630.992147][T30346] FAT-fs (loop2): Directory bread(block 73) failed [ 631.123714][T30346] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 631.157066][T30346] FAT-fs (loop2): Filesystem has been set read-only [ 631.190635][T30346] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 631.240741][T30346] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 631.297222][T30348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.310616][T30348] team0: Port device bond0 added [ 631.360084][T30348] bridge0: port 2(team0) entered blocking state [ 631.381909][T30348] bridge0: port 2(team0) entered disabled state [ 631.401544][T30348] team0: entered allmulticast mode [ 631.410762][T30348] bond0: entered allmulticast mode [ 631.441795][T30348] team0: entered promiscuous mode [ 631.452691][T30348] bond0: entered promiscuous mode [ 631.592619][T30355] loop2: detected capacity change from 0 to 128 [ 631.700274][T30355] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 631.762609][T30355] ext4 filesystem being mounted at /652/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.986923][ T28] audit: type=1400 audit(1782599978.722:4367): avc: denied { write } for pid=30351 comm="syz.2.8446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 632.020894][T30366] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8440'. [ 632.502654][T20166] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 632.540594][T30373] vlan3: entered allmulticast mode [ 632.547340][T30373] veth0_to_bond: entered allmulticast mode [ 632.571670][T30375] netlink: 'syz.8.8444': attribute type 7 has an invalid length. [ 632.739693][T30380] batman_adv: batadv0: Adding interface: macvtap0 [ 632.746323][T30380] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.774358][T30380] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 633.532705][T30390] syzkaller0: entered promiscuous mode [ 633.550126][T30390] syzkaller0: entered allmulticast mode [ 633.609828][ T3426] Bluetooth: hci0: Frame reassembly failed (-84) [ 634.807817][T30413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8466'. [ 635.247079][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8460'. [ 635.258749][T30432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8460'. [ 635.268244][T30432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8460'. [ 635.588910][T30438] loop6: detected capacity change from 0 to 164 [ 635.600959][T30438] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 635.644355][ T3697] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 635.644577][T30396] Bluetooth: hci0: command 0x1003 tx timeout [ 635.734110][T30440] syzkaller0: entered promiscuous mode [ 635.744961][T30440] syzkaller0: entered allmulticast mode [ 636.058490][T30444] loop2: detected capacity change from 0 to 1024 [ 636.130169][T30444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 636.165287][T30444] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 636.209729][T30444] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 636.245080][T30444] EXT4-fs (loop2): orphan cleanup on readonly fs [ 636.280505][T30444] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.8467: Freeing blocks not in datazone - block = 0, count = 4096 [ 636.315337][T30444] loop2: lost filesystem error report for type 5 error -117 [ 636.316649][T30444] EXT4-fs (loop2): 1 orphan inode deleted [ 636.325218][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 636.325282][ C1] EXT4-fs (loop2): initial error at time 1782599983: ext4_free_blocks:6718 [ 636.325415][ C1] EXT4-fs (loop2): last error at time 1782599983: ext4_free_blocks:6718 [ 636.384494][T30444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.440097][T30453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8469'. [ 636.645012][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.704268][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8473'. [ 637.721701][T30491] lo speed is unknown, defaulting to 1000 [ 638.012444][T30508] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8483'. [ 638.149445][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8488'. [ 638.418991][T30541] ip_vti0: left promiscuous mode [ 638.436852][T30541] veth0_virt_wifi: left promiscuous mode [ 638.446958][T30541] bond2: left allmulticast mode [ 638.461758][T30541] bond5: left allmulticast mode [ 638.471046][T30541] ip6gretap2: left allmulticast mode [ 638.481445][T30541] ip6gretap2: left promiscuous mode [ 638.493393][T30541] ip6gre1: left promiscuous mode [ 638.499486][T30541] ip6gre1: left allmulticast mode [ 638.505506][T30541] bond8: left promiscuous mode [ 638.510543][ T3426] Bluetooth: hci0: Frame reassembly failed (-84) [ 638.519878][T30541] bond8: left allmulticast mode [ 638.538252][T30541] vlan0: left allmulticast mode [ 638.543416][T30541] veth0_to_bond: left allmulticast mode [ 640.241059][T30561] loop3: detected capacity change from 0 to 256 [ 640.524395][ T3697] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 640.524422][T30396] Bluetooth: hci0: command 0x1003 tx timeout [ 640.818708][T30577] loop6: detected capacity change from 0 to 8192 [ 640.903970][T30579] loop3: detected capacity change from 0 to 256 [ 641.020736][T30579] FAT-fs (loop3): data area starts beyond volume (32 > 0) [ 641.038884][T30579] FAT-fs (loop3): Can't find a valid FAT filesystem [ 641.165156][T30591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8515'. [ 641.254931][T30588] netlink: 'syz.6.8507': attribute type 7 has an invalid length. [ 641.279218][ T28] audit: type=1400 audit(1782599988.022:4368): avc: denied { write } for pid=30592 comm="syz.8.8509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 641.478651][T30608] xt_hashlimit: size too large, truncated to 1048576 [ 641.622023][T30616] batman_adv: batadv0: Adding interface: macvtap1 [ 641.645056][T30616] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 641.690143][T30590] loop2: detected capacity change from 0 to 1024 [ 641.722964][T30590] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 641.767982][T30590] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 641.789772][T30590] EXT4-fs (loop2): invalid journal inode [ 641.799953][T30590] EXT4-fs (loop2): can't get journal size [ 641.821157][T30590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 641.916683][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.989320][T30632] netlink: 'syz.5.8523': attribute type 7 has an invalid length. [ 642.462406][T30645] lo speed is unknown, defaulting to 1000 [ 642.551005][T30653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.643665][T30661] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 642.995324][T30681] loop3: detected capacity change from 0 to 512 [ 643.012770][T30681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 643.036740][T30681] EXT4-fs (loop3): 1 truncate cleaned up [ 643.045011][T30681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.066973][ T28] audit: type=1400 audit(1782599989.812:4369): avc: denied { write } for pid=30679 comm="syz.3.8543" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.091864][ T28] audit: type=1400 audit(1782599989.822:4370): avc: denied { write } for pid=30679 comm="syz.3.8543" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.180538][T20169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.492063][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8546'. [ 643.679340][T30700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.698580][T30700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.730774][T30702] netlink: 'syz.6.8549': attribute type 1 has an invalid length. [ 643.750786][T30702] netlink: 'syz.6.8549': attribute type 4 has an invalid length. [ 643.770174][T30702] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.8549'. [ 643.806537][T30705] loop2: detected capacity change from 0 to 4096 [ 643.817205][T30705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.832843][ T28] audit: type=1400 audit(1782599990.572:4371): avc: denied { write } for pid=30703 comm="syz.2.8551" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.040178][T30710] ================================================================== [ 644.048634][T30710] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 644.055840][T30710] [ 644.058325][T30710] write to 0xffff888105e01b4c of 4 bytes by task 30705 on cpu 1: [ 644.066454][T30710] xas_set_mark+0x12b/0x140 [ 644.071210][T30710] __folio_start_writeback+0x16a/0x350 [ 644.076737][T30710] ext4_bio_write_folio+0x5a2/0xa10 [ 644.082114][T30710] mpage_process_page_bufs+0x487/0x600 [ 644.087723][T30710] mpage_prepare_extent_to_map+0x79e/0xc00 [ 644.093764][T30710] ext4_do_writepages+0x6ec/0x2720 [ 644.098945][T30710] ext4_writepages+0x18f/0x300 [ 644.103805][T30710] do_writepages+0x1b9/0x300 [ 644.108458][T30710] file_write_and_wait_range+0x178/0x2f0 [ 644.114158][T30710] mmb_fsync_noflush+0x48/0x140 [ 644.119172][T30710] ext4_sync_file+0x1f2/0x6d0 [ 644.124014][T30710] vfs_fsync_range+0xc5/0xe0 [ 644.128679][T30710] ext4_buffered_write_iter+0x426/0x480 [ 644.134292][T30710] ext4_file_write_iter+0x38e/0xef0 [ 644.139777][T30710] iter_file_splice_write+0x6a0/0xa60 [ 644.146172][T30710] direct_splice_actor+0x156/0x280 [ 644.151356][T30710] splice_direct_to_actor+0x2f9/0x680 [ 644.156787][T30710] do_splice_direct+0x119/0x1a0 [ 644.162407][T30710] do_sendfile+0x37d/0x640 [ 644.167063][T30710] __x64_sys_sendfile64+0x105/0x150 [ 644.172882][T30710] x64_sys_call+0x2dc4/0x3020 [ 644.177617][T30710] do_syscall_64+0x136/0x3c0 [ 644.182294][T30710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.189981][T30710] [ 644.192362][T30710] read to 0xffff888105e01b4c of 4 bytes by task 30710 on cpu 0: [ 644.200837][T30710] xas_find_marked+0x602/0x650 [ 644.205680][T30710] filemap_get_folios_tag+0xf7/0x400 [ 644.211120][T30710] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 644.217108][T30710] ext4_do_writepages+0x6ec/0x2720 [ 644.222752][T30710] ext4_writepages+0x18f/0x300 [ 644.227592][T30710] do_writepages+0x1b9/0x300 [ 644.232616][T30710] file_write_and_wait_range+0x178/0x2f0 [ 644.239889][T30710] mmb_fsync_noflush+0x48/0x140 [ 644.245328][T30710] ext4_sync_file+0x1f2/0x6d0 [ 644.250071][T30710] vfs_fsync_range+0xc5/0xe0 [ 644.255455][T30710] ext4_buffered_write_iter+0x426/0x480 [ 644.261190][T30710] ext4_file_write_iter+0x38e/0xef0 [ 644.267664][T30710] iter_file_splice_write+0x6a0/0xa60 [ 644.273569][T30710] direct_splice_actor+0x156/0x280 [ 644.279095][T30710] splice_direct_to_actor+0x2f9/0x680 [ 644.286179][T30710] do_splice_direct+0x119/0x1a0 [ 644.291891][T30710] do_sendfile+0x37d/0x640 [ 644.296457][T30710] __x64_sys_sendfile64+0x105/0x150 [ 644.301898][T30710] x64_sys_call+0x2dc4/0x3020 [ 644.306788][T30710] do_syscall_64+0x136/0x3c0 [ 644.312027][T30710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.319387][T30710] [ 644.321757][T30710] value changed: 0x0a000021 -> 0x04000021 [ 644.328390][T30710] [ 644.331374][T30710] Reported by Kernel Concurrency Sanitizer on: [ 644.337845][T30710] CPU: 0 UID: 0 PID: 30710 Comm: syz.2.8551 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 644.349195][T30710] Tainted: [W]=WARN [ 644.353410][T30710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.365255][T30710] ================================================================== [ 644.666107][T20166] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.886082][ T4535] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.936018][ T4535] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.005884][ T4535] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0