last executing test programs: 3m7.802129767s ago: executing program 1 (id=122): r0 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="7493e3", 0x3}], 0x1}}], 0x1, 0x4004890) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 3m7.764173558s ago: executing program 1 (id=123): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400fe8000000000000000000000000000aa3c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002800c00028005000100860000002c0001801400030000000000000000000000000000000000140004"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1b8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_FRAME_MATCH={0x95, 0x5b, "0b315d4222f7d321995edf6de50c6c076ba4de82f3b78e37aa8aaf14ae58d727fdf00d9b2c289d0f35d4e1bb05e92d0c540280d73764c2c462b063c6904268a154301dc7327e984055a6b7a8542d947d85a7557cbcc0bc0ce0ffc2e49b87df9c4890a45c91d7b24b23e19b66198adb1c605eed310135e6001e112f0e772c2d6f38ba88090383e057ac6ca67b91e8086ea6"}, @NL80211_ATTR_FRAME_MATCH={0xfe, 0x5b, "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"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7660c3e2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x40a0) 3m7.714536969s ago: executing program 1 (id=126): syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 3m7.517946484s ago: executing program 4 (id=134): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) write(r0, &(0x7f0000001100)='md', 0x2) 3m7.483920665s ago: executing program 1 (id=135): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3m7.483337375s ago: executing program 4 (id=136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 3m7.429849516s ago: executing program 4 (id=137): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m7.366489998s ago: executing program 4 (id=138): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0xe078, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x14cf, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@quota}, {@sysvgroups}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 3m7.302071419s ago: executing program 1 (id=139): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@netfilter={0x1, 0x0, 0x49, 0x1}}, 0x20) prlimit64(0x0, 0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) 3m6.81448909s ago: executing program 1 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) unshare(0x22020600) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d854) shutdown(r0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m6.81424835s ago: executing program 32 (id=141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) unshare(0x22020600) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d854) shutdown(r0, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m6.749519762s ago: executing program 4 (id=144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000002140)={@val={0xa, 0xb3f0}, @void, @eth={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="e9f4f8c2659e", @loopback, @local, @dev={0xac, 0x14, 0x14, 0x28}}}}}}, 0x2e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 3m6.579912696s ago: executing program 4 (id=148): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x1, 0x6, 0xa266bad711752454) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x10383c, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', @random="00009e0c1100"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0xb}) 3m6.547315467s ago: executing program 33 (id=148): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x1, 0x6, 0xa266bad711752454) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x10383c, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000040)={'macvtap0\x00', @random="00009e0c1100"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0xb}) 2m38.265628407s ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) 2m38.202548358s ago: executing program 0 (id=581): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 2m38.099840901s ago: executing program 0 (id=584): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000800) 2m37.996737213s ago: executing program 5 (id=585): ioperm(0x3, 0x5, 0x7) r0 = gettid() bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 2m37.983724633s ago: executing program 0 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 2m37.878160266s ago: executing program 0 (id=588): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) io_uring_setup(0x4a86, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2m37.654118391s ago: executing program 0 (id=593): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000080)={'tunl0\x00', @ifru_map={0x10001, 0x1ff, 0x6, 0x80, 0x0, 0x40}}) unshare(0x2c020400) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0) close(r0) 2m37.649995401s ago: executing program 34 (id=593): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000080)={'tunl0\x00', @ifru_map={0x10001, 0x1ff, 0x6, 0x80, 0x0, 0x40}}) unshare(0x2c020400) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2022, 0x0) close(r0) 2m37.139659843s ago: executing program 5 (id=599): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2m37.042235735s ago: executing program 5 (id=600): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) fallocate(r1, 0x3, 0x52a9, 0x20008000c61) 2m36.186209865s ago: executing program 5 (id=603): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.517245621s ago: executing program 5 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=0x1], 0x50) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6160d1d7) 2m34.218351621s ago: executing program 5 (id=615): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) 2m19.163436022s ago: executing program 35 (id=615): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) 18.393517591s ago: executing program 2 (id=2321): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 18.359183701s ago: executing program 2 (id=2324): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888ca", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.091422571s ago: executing program 2 (id=2334): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 15.573657236s ago: executing program 2 (id=2361): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) 15.523347958s ago: executing program 2 (id=2362): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0) 15.465399999s ago: executing program 2 (id=2364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 15.44626844s ago: executing program 36 (id=2364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 10.050043215s ago: executing program 6 (id=2395): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c082}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0) 8.910293192s ago: executing program 6 (id=2397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x3, 0x2, 0x1, 0xd0, 0x6, 0x0, 0xa3, 0x70, 0x1, 0x2b, 0xd, 0x92d1, 0xa, 0x1, 0x10000002, [0x3, 0x408]}}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000807, 0x0) 7.676598921s ago: executing program 7 (id=2399): syz_open_dev$sg(0x0, 0x6f5e, 0xa0001) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) vmsplice(r0, &(0x7f0000000780)=[{0x0}], 0x1, 0x8) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 7.675633801s ago: executing program 8 (id=2400): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r1 = socket(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 7.675404961s ago: executing program 3 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x85, 0xd, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x18090) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 7.675129471s ago: executing program 6 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0) 6.338802222s ago: executing program 7 (id=2403): r0 = timerfd_create(0x0, 0x0) iopl(0x3) futex(0xfffffffffffffffc, 0x80, 0x3, 0x0, 0x0, 0x2) timerfd_settime(r0, 0x3, &(0x7f0000000640)={{0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup3(r1, 0xffffffffffffffff, 0x0) connect$inet(r2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, 0xffffffffffffffff, 0x18fbf000) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffffc}) 6.338580412s ago: executing program 8 (id=2404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000003480)={&(0x7f0000003440)=[{&(0x7f0000000280)="a2ebe5552aaad4af6ddf2776ce90baf54a08cc47870cc8f2ade8a9ae72712c31a5dd1187e288d7d3173e3eb29d83b2503d6486f0face6bcde8bcfb9f72cc80a025a0571335ea23f60b0dec218efe", 0x4e}, {0x0}, {&(0x7f0000002440)}], 0x3, 0x9, 0x0, 0x40, 0x5, 0x10000, 0x2, 0x4}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x1, 0x6, 0x8004, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4) 6.338329412s ago: executing program 3 (id=2405): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x4, 0xe}, 0x4288, 0xa4, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) ppoll(&(0x7f0000000180)=[{r3, 0x1101}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000026c0)='.\x00', &(0x7f0000002680)='ramfs\x00', 0x1000040, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r4, &(0x7f0000000640)='\x00', 0x81101) 4.914075275s ago: executing program 7 (id=2406): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffe6c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 4.911679745s ago: executing program 8 (id=2407): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x4be2, 0x16, 0x0, 0x0) 4.911440325s ago: executing program 3 (id=2408): mkdirat(0xffffffffffffff9c, 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x28) unshare(0x26020480) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.370887031s ago: executing program 7 (id=2409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48000) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x20000000000000a9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xf) r2 = socket$kcm(0x2d, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x30, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan1\x00', &(0x7f00000004c0)=@ethtool_link_settings={0x4c, 0x2, 0x4, 0xbd, 0x8, 0x5, 0x4, 0x6, 0x1, 0x4, [0x9, 0x9, 0xff, 0x5, 0x0, 0x7fff, 0x81, 0x401]}}) 3.370382571s ago: executing program 8 (id=2410): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x35c}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 3.370180261s ago: executing program 3 (id=2411): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200) 3.369930041s ago: executing program 6 (id=2412): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x120) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 1.726407529s ago: executing program 7 (id=2413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040005) socket$inet(0x2, 0x3, 0x81) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x1102a9, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES64, @ANYRES64, @ANYRESDEC], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x20000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4008890) 1.726130249s ago: executing program 8 (id=2414): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0x6, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0x5, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.723274s ago: executing program 3 (id=2415): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000840)={&(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x45}, 0x0) 1.7228049s ago: executing program 6 (id=2416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000580), &(0x7f0000000ac0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x0, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x400002, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x539881, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff03076804268c989e14f088a8", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 720.169µs ago: executing program 7 (id=2417): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 464.1µs ago: executing program 8 (id=2418): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1bc, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x20008800) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x81}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x5, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd25, 0x3504}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0xc880) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34005500000000040100c910fc02"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 197µs ago: executing program 3 (id=2419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 6 (id=2420): r0 = socket(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0xffffffff, {{0xa, 0x4e20, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x108) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61a, &(0x7f0000000800)="$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") setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e20, 0x5, @empty, 0x8001}, {0xa, 0x4e21, 0xe33c, @mcast1, 0x7fff}, 0xffffffffffffffff, {[0x3, 0x401, 0xfffffffa, 0x9, 0x9, 0x800, 0x7f, 0x3]}}, 0x5c) kernel console output (not intermixed with test programs): [ T7620] veth0_to_bond: entered promiscuous mode [ 121.221497][ T7620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.232225][ T7620] bond2: left promiscuous mode [ 121.237602][ T7620] veth0_to_bond: left promiscuous mode [ 121.351433][ T7636] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.555076][ T7638] loop7: detected capacity change from 0 to 8192 [ 121.605790][ T7638] loop7: p3 p4[EZD] [ 121.609986][ T7638] loop7: p3 start 458783 is beyond EOD, truncated [ 121.626211][ T7638] loop7: p4 size 100663296 extends beyond EOD, truncated [ 121.669886][ T7644] netlink: 'syz.8.1225': attribute type 21 has an invalid length. [ 121.694970][ T7644] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1225'. [ 121.707966][ T7644] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1225'. [ 121.720042][ T4333] udevd[4333]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 121.797136][ T28] audit: type=1400 audit(1785372333.445:1093): avc: denied { read } for pid=7648 comm="syz.7.1236" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.889421][ T7658] xt_hashlimit: size too large, truncated to 1048576 [ 121.933774][ T7660] netlink: 'syz.8.1230': attribute type 11 has an invalid length. [ 122.732677][ T7688] loop7: detected capacity change from 0 to 512 [ 122.748890][ T7688] EXT4-fs: inline encryption not supported [ 122.768013][ T7688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 122.780600][ T7688] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1241: corrupted in-inode xattr: e_value size too large [ 122.813924][ T7688] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.815155][ T7688] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1241: couldn't read orphan inode 15 (err -117) [ 122.824413][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 122.824436][ C1] EXT4-fs (loop7): initial error at time 1785372334: ext4_iget_extra_inode:5180: inode 15 [ 122.824480][ C1] EXT4-fs (loop7): last error at time 1785372334: ext4_iget_extra_inode:5180: inode 15 [ 122.942918][ T7688] fserror_report: 1 callbacks suppressed [ 122.942938][ T7688] loop7: lost filesystem error report for type 5 error -117 [ 122.979021][ T7688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.244265][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1241'. [ 124.449316][ T7705] loop6: detected capacity change from 0 to 512 [ 124.478644][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.514113][ T7707] tmpfs: Bad value for 'size' [ 124.551546][ T28] audit: type=1326 audit(1785372336.205:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1249" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x0 [ 124.577042][ T7709] xt_hashlimit: size too large, truncated to 1048576 [ 124.602970][ T7713] mmap: syz.2.1256 (7713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.628647][ T7707] loop8: detected capacity change from 0 to 512 [ 124.668893][ T7707] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 124.705055][ T7707] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1248: bg 0: block 255: padding at end of block bitmap is not set [ 124.727033][ T7707] loop8: lost filesystem error report for type 5 error -117 [ 124.730474][ T7707] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 124.738504][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 124.738569][ C1] EXT4-fs (loop8): initial error at time 1785372336: ext4_validate_block_bitmap:441 [ 124.738631][ C1] EXT4-fs (loop8): last error at time 1785372336: ext4_validate_block_bitmap:441 [ 124.759440][ T7705] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.1246: ea_inode file size=458758 entry size=16777216 [ 124.764687][ T7707] loop8: lost filesystem error report for type 5 error -117 [ 124.765262][ T7707] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1248: invalid indirect mapped block 1 (level 1) [ 124.765311][ T7707] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.767027][ T7707] EXT4-fs (loop8): 1 truncate cleaned up [ 124.828067][ T7707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.864172][ T28] audit: type=1400 audit(1785372336.525:1095): avc: denied { read append } for pid=7706 comm="syz.8.1248" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.881656][ T7705] ------------[ cut here ]------------ [ 124.898692][ T7705] EA inode 11 i_nlink=2 [ 124.899069][ T7705] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.6.1246/7705 [ 124.916530][ T7705] Modules linked in: [ 124.921631][ T7705] CPU: 1 UID: 0 PID: 7705 Comm: syz.6.1246 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.932212][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.944089][ T7705] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 124.949872][ T28] audit: type=1400 audit(1785372336.525:1096): avc: denied { open } for pid=7706 comm="syz.8.1248" path="/84/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.952529][ T7705] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 124.997182][ T7705] RSP: 0018:ffffc9000160f7f8 EFLAGS: 00010246 [ 125.005077][ T7705] RAX: ffff888100bcd030 RBX: ffff8881071c6f38 RCX: ffffffff81c29d46 [ 125.033911][ T7705] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3630 [ 125.045254][ T7705] RBP: 000000000000000b R08: 00018881071c6eeb R09: 0000000000000000 [ 125.054211][ T7705] R10: 0000000000000406 R11: 0000000000000002 R12: ffff8881071c6ee8 [ 125.064069][ T7705] R13: ffffffff871d3630 R14: ffff8881071c6ea0 R15: 0000000000000001 [ 125.072931][ T7705] FS: 00007f32dc3c76c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 125.083104][ T7705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.090892][ T7705] CR2: 00007f8bf5246d58 CR3: 00000001371c4000 CR4: 00000000003506f0 [ 125.100491][ T7705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.109080][ T7705] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.118361][ T7705] Call Trace: [ 125.122568][ T7705] [ 125.126621][ T7705] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 125.134501][ T7705] ext4_xattr_delete_inode+0x6b5/0x790 [ 125.147732][ T7705] ext4_evict_inode+0xb18/0xdf0 [ 125.166508][ T7705] ? __pfx_ext4_evict_inode+0x10/0x10 [ 125.174391][ T7705] evict+0x2a5/0x510 [ 125.180392][ T7705] iput+0x430/0x5a0 [ 125.187777][ T7705] ext4_process_orphan+0x1a4/0x1c0 [ 125.194501][ T7705] ext4_orphan_cleanup+0x6a6/0xa10 [ 125.201848][ T7705] ? ext4_register_li_request+0x14c/0x440 [ 125.211341][ T7705] ext4_fill_super+0x33ab/0x3760 [ 125.225990][ T7705] ? set_blocksize+0x14c/0x270 [ 125.232122][ T7705] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.239941][ T7705] get_tree_bdev_flags+0x291/0x300 [ 125.249020][ T7705] ? __pfx_ext4_fill_super+0x10/0x10 [ 125.257071][ T7705] get_tree_bdev+0x1f/0x30 [ 125.264072][ T7705] ext4_get_tree+0x1c/0x30 [ 125.271461][ T7705] vfs_get_tree+0x57/0x1d0 [ 125.278468][ T7705] do_new_mount+0x288/0x8d0 [ 125.284670][ T7705] path_mount+0x4ad/0xb90 [ 125.290621][ T7705] __se_sys_mount+0x28c/0x2e0 [ 125.297031][ T7705] __x64_sys_mount+0x67/0x80 [ 125.303201][ T7705] x64_sys_call+0x2d61/0x3020 [ 125.308611][ T7705] do_syscall_64+0x136/0x3c0 [ 125.314181][ T7705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.322038][ T7705] RIP: 0033:0x7f32dd96f20a [ 125.327670][ T7705] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.362371][ T7705] RSP: 002b:00007f32dc3c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.372401][ T7705] RAX: ffffffffffffffda RBX: 00007f32dc3c6ee0 RCX: 00007f32dd96f20a [ 125.381982][ T7705] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f32dc3c6ea0 [ 125.390982][ T7705] RBP: 00002000000009c0 R08: 00007f32dc3c6ee0 R09: 0000000000800718 [ 125.400000][ T7705] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 125.412550][ T7705] R13: 00007f32dc3c6ea0 R14: 000000000000048d R15: 0000200000000200 [ 125.427464][ T7705] [ 125.431181][ T7705] ---[ end trace 0000000000000000 ]--- [ 125.453996][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.486333][ T7705] EXT4-fs (loop6): 1 orphan inode deleted [ 125.552424][ T7705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.761438][ T7740] loop7: detected capacity change from 0 to 8192 [ 125.769476][ T7740] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 126.173750][ T7722] syz.7.1250 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 126.217094][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.7.1250 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 126.217129][ T7722] Tainted: [W]=WARN [ 126.217136][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.217154][ T7722] Call Trace: [ 126.217163][ T7722] [ 126.217173][ T7722] __dump_stack+0x1d/0x30 [ 126.217214][ T7722] dump_stack_lvl+0x95/0xd0 [ 126.217243][ T7722] dump_stack+0x15/0x1b [ 126.217275][ T7722] dump_header+0x80/0x240 [ 126.217297][ T7722] oom_kill_process+0x295/0x350 [ 126.217337][ T7722] out_of_memory+0x981/0xbc0 [ 126.217376][ T7722] try_charge_memcg+0x621/0xa00 [ 126.217476][ T7722] __memcg_kmem_charge_page+0x199/0x3a0 [ 126.217518][ T7722] __alloc_frozen_pages_noprof+0x18a/0x350 [ 126.217598][ T7722] alloc_pages_bulk_noprof+0x4c3/0x550 [ 126.217632][ T7722] ? policy_nodemask+0x417/0x5e0 [ 126.217673][ T7722] alloc_pages_bulk_mempolicy_noprof+0x358/0xe90 [ 126.217779][ T7722] ? alloc_pages_mpol+0xd9/0x1d0 [ 126.217829][ T7722] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 126.217869][ T7722] __kvmalloc_node_noprof+0x3a0/0x590 [ 126.217897][ T7722] ? futex_hash_allocate+0x192/0x920 [ 126.218010][ T7722] ? futex_hash_allocate+0x192/0x920 [ 126.218032][ T7722] ? futex_hash_allocate+0x192/0x920 [ 126.218112][ T7722] futex_hash_allocate+0x192/0x920 [ 126.218152][ T7722] ? cap_task_prctl+0x13f/0x6b0 [ 126.218190][ T7722] futex_hash_prctl+0xd8/0xf0 [ 126.218267][ T7722] __se_sys_prctl+0x4f4/0x13b0 [ 126.218298][ T7722] __x64_sys_prctl+0x67/0x80 [ 126.218334][ T7722] x64_sys_call+0x2533/0x3020 [ 126.218367][ T7722] do_syscall_64+0x136/0x3c0 [ 126.218457][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.218483][ T7722] RIP: 0033:0x7f7c6e42df99 [ 126.218499][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.218521][ T7722] RSP: 002b:00007f7c6ce66028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 126.218542][ T7722] RAX: ffffffffffffffda RBX: 00007f7c6e6b6090 RCX: 00007f7c6e42df99 [ 126.218569][ T7722] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 126.218587][ T7722] RBP: 00007f7c6e4c4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 126.218605][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.218658][ T7722] R13: 00007f7c6e6b6128 R14: 00007f7c6e6b6090 R15: 00007ffda0f73d18 [ 126.218727][ T7722] [ 126.218764][ T7722] memory: usage 307200kB, limit 307200kB, failcnt 188 [ 126.476054][ T7722] memory+swap: usage 164764kB, limit 9007199254740988kB, failcnt 0 [ 126.512669][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.553336][ T7722] kmem: usage 67224kB, limit 9007199254740988kB, failcnt 0 [ 126.577066][ T7722] Memory cgroup stats for /syz7: [ 126.577341][ T7722] cache 35876864 [ 126.618938][ T7722] rss 20017152 [ 126.623861][ T7722] shmem 0 [ 126.640993][ T7722] mapped_file 35876864 [ 126.645578][ T7722] dirty 0 [ 126.649092][ T7722] writeback 0 [ 126.653398][ T7722] workingset_refault_anon 1303 [ 126.658296][ T7722] workingset_refault_file 0 [ 126.663285][ T7722] swap 45056 [ 126.666706][ T7722] swapcached 5382144 [ 126.671337][ T7722] pgpgin 77826 [ 126.675250][ T7722] pgpgout 64180 [ 126.685283][ T7722] pgfault 47710 [ 126.708118][ T7722] pgmajfault 168 [ 126.715533][ T7722] inactive_anon 0 [ 126.725515][ T28] audit: type=1326 audit(1785372338.375:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.3.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 126.754950][ T7722] active_anon 0 [ 126.760787][ T7722] inactive_file 0 [ 126.764584][ T7722] active_file 0 [ 126.768093][ T7722] unevictable 55894016 [ 126.787609][ T7722] hierarchical_memory_limit 314572800 [ 126.793384][ T7722] hierarchical_memsw_limit 9223372036854771712 [ 126.799996][ T28] audit: type=1326 audit(1785372338.375:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.3.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 126.830315][ T7722] total_cache 35876864 [ 126.835125][ T7722] total_rss 20017152 [ 126.839157][ T7722] total_shmem 0 [ 126.842831][ T7764] tipc: Started in network mode [ 126.847738][ T7722] total_mapped_file 35876864 [ 126.852689][ T7722] total_dirty 0 [ 126.856277][ T7764] tipc: Node identity 2007ff, cluster identity 4711 [ 126.863605][ T7722] total_writeback 0 [ 126.867621][ T28] audit: type=1400 audit(1785372338.415:1099): avc: denied { connect } for pid=7755 comm="syz.8.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.888703][ T7722] total_workingset_refault_anon 1303 [ 126.894379][ T7764] tipc: Node number set to 2099199 [ 126.899639][ T7722] total_workingset_refault_file 0 [ 126.904755][ T7722] total_swap 45056 [ 126.908648][ T7722] total_swapcached 5382144 [ 126.913215][ T28] audit: type=1326 audit(1785372338.495:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.3.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 126.939280][ T7722] total_pgpgin 77826 [ 126.950648][ T7722] total_pgpgout 64180 [ 126.956425][ T7722] total_pgfault 47710 [ 126.965238][ T7722] total_pgmajfault 168 [ 126.978237][ T7722] total_inactive_anon 0 [ 127.002203][ T7722] total_active_anon 0 [ 127.007514][ T28] audit: type=1326 audit(1785372338.495:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7745 comm="syz.3.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 127.033544][ T7722] total_inactive_file 0 [ 127.038046][ T7722] total_active_file 0 [ 127.044475][ T7722] total_unevictable 55894016 [ 127.053612][ T7722] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1250,pid=7720,uid=0 [ 127.081997][ T7722] Memory cgroup out of memory: Killed process 7722 (syz.7.1250) total-vm:96364kB, anon-rss:20784kB, file-rss:66296kB, shmem-rss:0kB, UID:0 pgtables:240kB oom_score_adj:1000 [ 127.357796][ T28] audit: type=1326 audit(1785372339.015:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.6.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 127.388572][ T28] audit: type=1326 audit(1785372339.015:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.6.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 127.421197][ T28] audit: type=1326 audit(1785372339.045:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.6.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 127.457589][ T28] audit: type=1326 audit(1785372339.045:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.6.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 127.493440][ T28] audit: type=1326 audit(1785372339.045:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7780 comm="syz.6.1270" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 128.324454][ T7803] tipc: Started in network mode [ 128.339013][ T7803] tipc: Node identity , cluster identity 4711 [ 128.350845][ T7803] tipc: Failed to obtain node identity [ 128.362811][ T7803] tipc: Enabling of bearer rejected, failed to enable media [ 128.524387][ T7822] tipc: Started in network mode [ 128.531536][ T7822] tipc: Node identity 2007ff, cluster identity 4711 [ 128.551852][ T7822] tipc: Node number set to 2099199 [ 128.959417][ T7839] tmpfs: Bad value for 'mpol' [ 129.440417][ T7867] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1302'. [ 129.971498][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.000501][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1300'. [ 130.025326][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.028308][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1300'. [ 130.067018][ T7882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.187127][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.239488][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.259695][ T7882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.272032][ T7882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.294290][ T7882] veth1_vlan: left promiscuous mode [ 130.308838][ T7882] veth0_vlan: left promiscuous mode [ 130.325589][ T7882] veth0_vlan: entered promiscuous mode [ 130.340139][ T7882] veth1_vlan: entered promiscuous mode [ 130.360059][ T7882] veth1_macvtap: left promiscuous mode [ 130.367982][ T7882] veth0_macvtap: left promiscuous mode [ 130.374502][ T7882] veth0_macvtap: entered promiscuous mode [ 130.381279][ T7882] veth1_macvtap: entered promiscuous mode [ 130.392161][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.400960][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.409721][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.418271][ T7882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.429560][ T7882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.439406][ T7882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.454325][ T7882] bond4: left promiscuous mode [ 130.499504][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.506857][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.531647][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.539348][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.695639][ T842] syz0: Port: 1 Link ACTIVE [ 130.703591][ T360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.719335][ T360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.745079][ T360] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.755430][ T360] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.951397][ T7924] loop6: detected capacity change from 0 to 512 [ 130.975048][ T7924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.988558][ T7924] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.025425][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.409160][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 131.734431][ T28] kauditd_printk_skb: 6644 callbacks suppressed [ 131.734450][ T28] audit: type=1400 audit(1785372343.395:7751): avc: denied { mounton } for pid=7950 comm="syz.2.1334" path="/file0" dev="autofs" ino=19980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 131.789569][ T7953] ref_ctr increment failed for inode: 0x416 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881050b3100 [ 131.804095][ T7952] uprobe: syz.2.1335:7952 failed to unregister, leaking uprobe [ 132.795326][ T7987] netlink: 'syz.6.1348': attribute type 1 has an invalid length. [ 132.827570][ T7987] bond5: entered promiscuous mode [ 132.845192][ T7987] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.894205][ T7987] bond5: (slave bridge1): making interface the new active one [ 132.918650][ T7987] bridge1: entered promiscuous mode [ 132.941793][ T7987] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 133.198378][ T28] audit: type=1400 audit(1785372344.855:7752): avc: denied { create } for pid=8004 comm="syz.6.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.224488][ T28] audit: type=1400 audit(1785372344.885:7753): avc: denied { bind } for pid=8004 comm="syz.6.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.644333][ T8072] uprobe: syz.6.1382:8072 failed to unregister, leaking uprobe [ 134.674640][ T8072] uprobe: syz.6.1382:8072 failed to unregister, leaking uprobe [ 134.702257][ T28] audit: type=1400 audit(1785372346.355:7754): avc: denied { watch } for pid=8073 comm="syz.8.1383" path="/106/file1" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.769852][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 134.798684][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 134.841964][ T8022] process 'syz.2.1359' launched './file0' with NULL argv: empty string added [ 134.874539][ T28] audit: type=1400 audit(1785372346.535:7755): avc: denied { execute_no_trans } for pid=8021 comm="syz.2.1359" path="/205/file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.232544][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1400'. [ 138.231910][ T8126] IPVS: set_ctl: invalid protocol: 44 172.20.20.20:20004 [ 138.243275][ T28] audit: type=1400 audit(1785372349.905:7756): avc: denied { mounton } for pid=8128 comm="syz.8.1405" path="/111/file1" dev="tmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 138.658020][ T8148] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1412'. [ 138.691490][ T28] audit: type=1400 audit(1785372350.335:7757): avc: denied { read } for pid=8133 comm="syz.2.1407" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.150991][ T8170] loop8: detected capacity change from 0 to 256 [ 139.164560][ T8170] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.319129][ T8180] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1420'. [ 139.354476][ T8183] netlink: 'syz.6.1424': attribute type 1 has an invalid length. [ 139.358212][ T8180] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1420'. [ 139.385666][ T8173] loop7: detected capacity change from 0 to 1024 [ 139.423953][ T8183] 8021q: adding VLAN 0 to HW filter on device bond6 [ 139.483135][ T8183] bond6: (slave veth3): Enslaving as an active interface with a down link [ 139.523244][ T8173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.574820][ T28] audit: type=1400 audit(1785372351.235:7758): avc: denied { write } for pid=8172 comm="syz.7.1421" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.630694][ T8192] veth0_virt_wifi: entered promiscuous mode [ 139.634359][ T28] audit: type=1400 audit(1785372351.265:7759): avc: denied { append } for pid=8172 comm="syz.7.1421" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.706123][ T8192] bond6: (slave veth0_virt_wifi): making interface the new active one [ 139.728717][ T8192] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 139.744021][ T36] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 139.791107][ T8198] team0: Port device xfrm0 added [ 139.846988][ T8198] tipc: Enabled bearer , priority 0 [ 139.985512][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.006576][ T8219] netlink: 'syz.6.1436': attribute type 1 has an invalid length. [ 140.055454][ T8219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 140.102633][ T8227] bond7: entered promiscuous mode [ 140.112437][ T8227] bond7: entered allmulticast mode [ 140.192403][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1436'. [ 140.219992][ T8219] netlink: 'syz.6.1436': attribute type 1 has an invalid length. [ 140.237230][ T8219] bond7: left promiscuous mode [ 140.246132][ T8219] bond7: left allmulticast mode [ 140.253732][ T8219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 140.335500][ T8246] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.361358][ T8239] 9p: Could not find request transport: Б [ 140.411950][ T28] audit: type=1326 audit(1785372352.065:7760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.3.1446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x0 [ 140.647290][ T8255] loop6: detected capacity change from 0 to 512 [ 140.739165][ T28] audit: type=1400 audit(1785372352.395:7761): avc: denied { mounton } for pid=8259 comm="syz.8.1448" path="/file0" dev="bpf" ino=21540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=file permissive=1 [ 141.089757][ T8255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.103778][ T8255] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.146550][ T28] audit: type=1400 audit(1785372352.805:7762): avc: denied { write } for pid=8254 comm="syz.6.1447" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.181793][ T28] audit: type=1400 audit(1785372352.835:7763): avc: denied { append } for pid=8254 comm="syz.6.1447" path="/258/bus/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.253969][ T28] audit: type=1400 audit(1785372352.905:7764): avc: denied { map } for pid=8254 comm="syz.6.1447" path="/258/bus/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.360522][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1450'. [ 141.589345][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.899774][ T8303] nftables ruleset with unbound chain [ 141.942793][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1462'. [ 141.998023][ T8313] xt_hashlimit: size too large, truncated to 1048576 [ 142.084211][ T28] audit: type=1400 audit(1785372353.745:7765): avc: denied { getopt } for pid=8317 comm="syz.8.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.379819][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 142.983112][ T8337] netlink: 'syz.7.1475': attribute type 2 has an invalid length. [ 143.077785][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1480'. [ 143.117164][ T8354] loop8: detected capacity change from 0 to 128 [ 143.135183][ T8354] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.327981][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 143.327998][ T28] audit: type=1400 audit(1785372354.985:7770): avc: denied { connect } for pid=8364 comm="syz.3.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.412469][ T28] audit: type=1400 audit(1785372355.065:7771): avc: denied { read } for pid=8364 comm="syz.3.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.099283][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.107193][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.324480][ T8402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.371754][ T8402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.548837][ T1870] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.560266][ T1870] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.597573][ T1870] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.612616][ T1870] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.083152][ T8446] bridge0: port 3(syz_tun) entered blocking state [ 146.090164][ T8446] bridge0: port 3(syz_tun) entered listening state [ 146.128238][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.150156][ T8446] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.174647][ T8446] dummy0: left promiscuous mode [ 146.196318][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.269375][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.317685][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.339307][ T8446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.352035][ T8446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.371028][ T8446] veth1_vlan: left promiscuous mode [ 146.385594][ T8446] veth0_vlan: left promiscuous mode [ 146.396727][ T8446] veth0_vlan: entered promiscuous mode [ 146.406740][ T8446] veth1_vlan: entered promiscuous mode [ 146.426449][ T8446] veth1_macvtap: left promiscuous mode [ 146.433710][ T8446] veth0_macvtap: left promiscuous mode [ 146.440460][ T8446] veth0_macvtap: entered promiscuous mode [ 146.447720][ T8446] veth1_macvtap: entered promiscuous mode [ 146.457167][ T8446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.468569][ T8446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.480081][ T8446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.490194][ T8446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.505201][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.595121][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.602785][ T30] bridge0: port 1(bridge_slave_0) entered listening state [ 146.631241][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.639042][ T30] bridge0: port 2(bridge_slave_1) entered listening state [ 146.748080][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.758432][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.830948][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.859628][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.892867][ T12] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 146.918001][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.985416][ T12] bond1: active interface up! [ 146.993934][ T8470] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1513'. [ 147.358533][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1525'. [ 147.390297][ T8507] uprobe: syz.2.1534:8507 failed to unregister, leaking uprobe [ 147.405234][ T8507] uprobe: syz.2.1534:8507 failed to unregister, leaking uprobe [ 147.906177][ T8525] tipc: Resetting bearer [ 148.164927][ T8525] ipvlan2: left allmulticast mode [ 148.170284][ T8525] veth0_vlan: left allmulticast mode [ 148.220178][ T8528] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 148.264053][ T8528] bond1: entered allmulticast mode [ 148.322639][ T8529] ip6gretap1: entered promiscuous mode [ 148.361767][ T8529] ip6gretap1: entered allmulticast mode [ 148.382267][ T8529] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.411967][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.432321][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.453978][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.493128][ T8544] loop7: detected capacity change from 0 to 512 [ 148.524617][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.524884][ T8544] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.553794][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.586745][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.619752][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.651517][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.657754][ T8544] EXT4-fs (loop7): 1 truncate cleaned up [ 148.811123][ T8554] loop8: detected capacity change from 0 to 764 [ 148.814702][ T8544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.908943][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1539'. [ 148.960598][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 149.046211][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 149.075758][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.243898][ T28] audit: type=1400 audit(1785372360.905:7772): avc: denied { map } for pid=8573 comm="syz.6.1550" path="socket:[22803]" dev="sockfs" ino=22803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.322191][ T28] audit: type=1400 audit(1785372360.905:7773): avc: denied { read } for pid=8573 comm="syz.6.1550" path="socket:[22803]" dev="sockfs" ino=22803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 149.419000][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 149.458153][ T28] audit: type=1400 audit(1785372361.115:7774): avc: denied { write } for pid=8593 comm="syz.6.1557" name="usb_gadget" dev="configfs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.492966][ T8594] UDC core: g1: couldn't find an available UDC or it's busy [ 149.530487][ T28] audit: type=1400 audit(1785372361.115:7775): avc: denied { add_name } for pid=8593 comm="syz.6.1557" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.581559][ T28] audit: type=1400 audit(1785372361.115:7776): avc: denied { create } for pid=8593 comm="syz.6.1557" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 149.673341][ T28] audit: type=1400 audit(1785372361.145:7777): avc: denied { write } for pid=8593 comm="syz.6.1557" name="functions" dev="configfs" ino=22027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.714050][ T28] audit: type=1400 audit(1785372361.145:7778): avc: denied { write } for pid=8593 comm="syz.6.1557" name="configs" dev="configfs" ino=22028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.739893][ T8605] syzkaller0: entered promiscuous mode [ 149.739918][ T8605] syzkaller0: entered allmulticast mode [ 149.825128][ T28] audit: type=1400 audit(1785372361.145:7779): avc: denied { write } for pid=8593 comm="syz.6.1557" name="c.1" dev="configfs" ino=22033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.915535][ T28] audit: type=1400 audit(1785372361.145:7780): avc: denied { create } for pid=8593 comm="syz.6.1557" name="gser.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 149.946993][ T28] audit: type=1400 audit(1785372361.145:7781): avc: denied { write } for pid=8593 comm="syz.6.1557" name="c.1" dev="configfs" ino=22033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.978159][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 150.136968][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 150.156130][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 150.167271][ T8626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 150.221239][ T8629] bridge0: port 3(syz_tun) entered disabled state [ 150.236135][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.243683][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.289824][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.307778][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.346296][ T8640] loop6: detected capacity change from 0 to 128 [ 150.359684][ T8637] loop7: detected capacity change from 0 to 128 [ 150.421406][ T68] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.435803][ T8640] syz.6.1573: attempt to access beyond end of device [ 150.435803][ T8640] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 150.485577][ T68] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.500729][ T8640] syz.6.1573: attempt to access beyond end of device [ 150.500729][ T8640] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 150.527425][ T68] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.547438][ T8640] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 150.558677][ T68] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.568828][ T8640] syz.6.1573: attempt to access beyond end of device [ 150.568828][ T8640] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 150.591717][ T68] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.607331][ T68] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.625160][ T68] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.625773][ T8640] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 150.651251][ T68] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.924564][ T8661] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 151.969651][ T8671] macvlan2: entered promiscuous mode [ 151.994492][ T8671] bridge0: entered promiscuous mode [ 152.198911][ T8691] bond0: (slave bond_slave_1): Releasing backup interface [ 152.354094][ T8699] team0: Port device syz_tun added [ 152.775425][ T8710] __nla_validate_parse: 1 callbacks suppressed [ 152.775510][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'. [ 153.272700][ T8724] loop6: detected capacity change from 0 to 512 [ 153.292165][ T8724] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 153.349541][ T8724] EXT4-fs (loop6): 1 truncate cleaned up [ 153.362594][ T8724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.462326][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.477907][ T8731] sctp: [Deprecated]: syz.7.1615 (pid 8731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.477907][ T8731] Use struct sctp_sack_info instead [ 153.501781][ T8733] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1604'. [ 153.539301][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.567617][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.322736][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1616'. [ 154.728324][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 154.728423][ T28] audit: type=1400 audit(1785372366.385:7790): avc: denied { setopt } for pid=8771 comm="syz.6.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 154.931032][ T8781] file system registered [ 154.935816][ T28] audit: type=1400 audit(1785372366.585:7791): avc: denied { write } for pid=8780 comm="syz.8.1627" name="functions" dev="configfs" ino=22027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.970617][ T28] audit: type=1400 audit(1785372366.625:7792): avc: denied { mount } for pid=8780 comm="syz.8.1627" name="/" dev="functionfs" ino=23108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 154.997160][ T8781] read descriptors [ 155.026549][ T28] audit: type=1400 audit(1785372366.685:7793): avc: denied { unmount } for pid=6306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 155.028128][ T6306] ffs_data_put(): freeing [ 155.431119][ T28] audit: type=1400 audit(1785372367.085:7794): avc: denied { open } for pid=8798 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.465181][ T28] audit: type=1400 audit(1785372367.085:7795): avc: denied { kernel } for pid=8798 comm="syz.3.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 155.608558][ T28] audit: type=1400 audit(1785372367.265:7796): avc: denied { create } for pid=8805 comm="syz.7.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.629853][ T8807] netlink: 'syz.3.1638': attribute type 10 has an invalid length. [ 155.638892][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.646270][ T28] audit: type=1400 audit(1785372367.265:7797): avc: denied { setopt } for pid=8805 comm="syz.7.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.675605][ T8807] bond0: (slave team0): Enslaving as an active interface with an up link [ 155.705852][ T28] audit: type=1400 audit(1785372367.295:7798): avc: denied { write } for pid=8805 comm="syz.7.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.770958][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1639'. [ 155.871353][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 155.947754][ T8821] loop7: detected capacity change from 0 to 1024 [ 156.069105][ T28] audit: type=1400 audit(1785372367.725:7799): avc: denied { sys_module } for pid=8816 comm="syz.8.1642" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 156.160598][ T8823] syzkaller0: entered promiscuous mode [ 156.179725][ T8823] syzkaller0: entered allmulticast mode [ 156.388160][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1658'. [ 157.155205][ T8853] macvlan2: entered promiscuous mode [ 157.205738][ T8853] bridge0: entered promiscuous mode [ 157.424260][ T8860] netlink: 'syz.6.1651': attribute type 4 has an invalid length. [ 157.473478][ T8851] netlink: 'syz.6.1651': attribute type 4 has an invalid length. [ 157.567512][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.575282][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.663053][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.685402][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.901825][ T1870] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.911521][ T1870] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.928149][ T1870] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.944763][ T1870] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.979855][ T35] syz0: Port: 1 Link DOWN [ 157.984634][ T1870] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.999213][ T1870] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.022053][ T1870] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.045602][ T1870] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.434731][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1662'. [ 158.457686][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1662'. [ 158.807153][ T8888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.815984][ T8888] team0: Device bond3 is of different type [ 158.833730][ T8888] bond3 (unregistering): Released all slaves [ 158.903410][ T8857] Set syz1 is full, maxelem 65536 reached [ 160.011819][ T8945] loop6: detected capacity change from 0 to 512 [ 160.062351][ T8954] netlink: 'syz.2.1679': attribute type 10 has an invalid length. [ 160.071777][ T8945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.071886][ T8945] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.090818][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 160.090871][ T28] audit: type=1400 audit(1785372371.745:7812): avc: denied { write } for pid=8942 comm="syz.6.1678" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.107929][ T8954] tipc: Resetting bearer [ 160.133563][ T8954] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.143110][ T8954] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.165184][ T28] audit: type=1400 audit(1785372371.745:7813): avc: denied { create } for pid=8942 comm="syz.6.1678" name="mysys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 160.189050][ T28] audit: type=1400 audit(1785372371.795:7814): avc: denied { write } for pid=8942 comm="syz.6.1678" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.227497][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.452903][ T178] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.466118][ T178] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.498276][ T178] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.516806][ T178] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 160.569501][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1688'. [ 160.601531][ T8983] team1: entered promiscuous mode [ 160.606809][ T8983] team1: entered allmulticast mode [ 160.613933][ T8983] 8021q: adding VLAN 0 to HW filter on device team1 [ 160.682699][ T28] audit: type=1400 audit(1785372372.335:7815): avc: denied { read write } for pid=8987 comm="syz.6.1691" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.711061][ T28] audit: type=1400 audit(1785372372.335:7816): avc: denied { open } for pid=8987 comm="syz.6.1691" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.719012][ T8408] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 160.762672][ T8408] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.174610][ T9002] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1695'. [ 161.318632][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 161.493308][ T9030] tipc: Cannot configure node identity twice [ 161.516500][ T9030] tipc: Enabling of bearer rejected, failed to enable media [ 161.611841][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 161.630570][ T9040] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1709'. [ 161.690132][ T28] audit: type=1400 audit(1785372373.345:7817): avc: denied { unmount } for pid=9043 comm="syz.3.1710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 162.342773][ T9051] macvlan2: entered promiscuous mode [ 162.353501][ T9051] bridge0: entered promiscuous mode [ 162.394582][ T9056] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 162.783824][ T28] audit: type=1400 audit(1785372374.435:7818): avc: denied { setopt } for pid=9075 comm="syz.8.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.315349][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.324925][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.334645][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.345097][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 163.711386][ T28] audit: type=1400 audit(1785372375.365:7819): avc: denied { create } for pid=9112 comm="syz.2.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.937028][ T8426] IPVS: starting estimator thread 0... [ 164.000086][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.011287][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.032585][ T9131] IPVS: using max 2208 ests per chain, 110400 per kthread [ 164.049351][ T28] audit: type=1326 audit(1785372375.705:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9138 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 164.080582][ T28] audit: type=1326 audit(1785372375.735:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9138 comm="syz.6.1745" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 164.184137][ T9148] loop6: detected capacity change from 0 to 128 [ 164.197969][ T9148] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.215012][ T9148] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.416778][ T3926] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.629658][ T9165] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1753'. [ 164.870015][ T9173] geneve2: entered promiscuous mode [ 165.146944][ T9170] syz.6.1756 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 165.193810][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.6.1756 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 165.193858][ T9170] Tainted: [W]=WARN [ 165.193868][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.193886][ T9170] Call Trace: [ 165.193894][ T9170] [ 165.193904][ T9170] __dump_stack+0x1d/0x30 [ 165.193936][ T9170] dump_stack_lvl+0x95/0xd0 [ 165.193972][ T9170] dump_stack+0x15/0x1b [ 165.194084][ T9170] dump_header+0x80/0x240 [ 165.194122][ T9170] oom_kill_process+0x295/0x350 [ 165.194169][ T9170] out_of_memory+0x981/0xbc0 [ 165.194278][ T9170] try_charge_memcg+0x621/0xa00 [ 165.194322][ T9170] charge_memcg+0x6d/0x120 [ 165.194560][ T9170] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 165.194693][ T9170] swap_cache_alloc_folio+0x47b/0x5e0 [ 165.194740][ T9170] swap_cluster_readahead+0x2b1/0x460 [ 165.194854][ T9170] swapin_readahead+0xd8/0x8a0 [ 165.194896][ T9170] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 165.194942][ T9170] ? __rcu_read_unlock+0x4e/0x70 [ 165.195031][ T9170] ? swap_cache_get_folio+0x1f7/0x200 [ 165.195065][ T9170] do_swap_page+0x2a2/0x1ec0 [ 165.195144][ T9170] ? mtree_range_walk+0x1ba/0x480 [ 165.195185][ T9170] ? __rcu_read_lock+0x36/0x50 [ 165.195237][ T9170] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 165.195288][ T9170] handle_mm_fault+0xb3c/0x2da0 [ 165.195344][ T9170] do_user_addr_fault+0x634/0x1060 [ 165.195553][ T9170] ? arch_exit_work+0x30/0x40 [ 165.195649][ T9170] ? irqentry_exit+0x40/0x610 [ 165.195692][ T9170] ? trace_page_fault_user+0x1f/0xa0 [ 165.195728][ T9170] exc_page_fault+0x62/0xa0 [ 165.195813][ T9170] asm_exc_page_fault+0x26/0x30 [ 165.195842][ T9170] RIP: 0033:0x7f32dd83b830 [ 165.195863][ T9170] Code: c4 4c 0f 42 e0 83 3d 9a c5 3b 00 00 0f 8e d9 fd ff ff e8 e3 7f fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 5e 9e ee 00 e8 03 00 00 48 8d 1d 5f a7 3b 00 e8 6a 32 13 00 [ 165.195894][ T9170] RSP: 002b:00007ffc9e123a40 EFLAGS: 00010212 [ 165.195921][ T9170] RAX: 00000000000284c4 RBX: 00007f32ddbf7da0 RCX: 0000000000028488 [ 165.195941][ T9170] RDX: 000000000000003c RSI: 00007ffc9e123a20 RDI: 0000000000000001 [ 165.195960][ T9170] RBP: 00007f32ddbf7da0 R08: 00000000039d9444 R09: 3fffffffffffffff [ 165.195979][ T9170] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000028661 [ 165.196114][ T9170] R13: 00007f32ddbf5fac R14: 0000000000028362 R15: 00007ffc9e123b40 [ 165.196145][ T9170] [ 165.196410][ T9170] memory: usage 307200kB, limit 307200kB, failcnt 106 [ 165.494083][ T9170] memory+swap: usage 302496kB, limit 9007199254740988kB, failcnt 0 [ 165.524057][ T9170] kmem: usage 267676kB, limit 9007199254740988kB, failcnt 0 [ 165.546880][ T9170] Memory cgroup stats for /syz6: [ 165.547304][ T9170] cache 0 [ 165.580273][ T9170] rss 0 [ 165.591869][ T9170] shmem 0 [ 165.596622][ T9170] mapped_file 0 [ 165.614015][ T9170] dirty 0 [ 165.618795][ T9170] writeback 0 [ 165.636959][ T9170] workingset_refault_anon 23 [ 165.645115][ T9170] workingset_refault_file 0 [ 165.661857][ T9170] swap 507904 [ 165.673645][ T9170] swapcached 606208 [ 165.685842][ T9170] pgpgin 92762 [ 165.697126][ T9170] pgpgout 92761 [ 165.708711][ T9170] pgfault 102962 [ 165.720156][ T9170] pgmajfault 8 [ 165.731626][ T9170] inactive_anon 0 [ 165.752763][ T9170] active_anon 4096 [ 165.757390][ T9170] inactive_file 0 [ 165.770088][ T9077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.779522][ T9170] active_file 0 [ 165.790109][ T9170] unevictable 0 [ 165.794970][ T9170] hierarchical_memory_limit 314572800 [ 165.800763][ T9170] hierarchical_memsw_limit 9223372036854771712 [ 165.807651][ T9170] total_cache 0 [ 165.811511][ T9170] total_rss 0 [ 165.815273][ T9170] total_shmem 0 [ 165.818979][ T9170] total_mapped_file 0 [ 165.852287][ T9170] total_dirty 0 [ 165.858998][ T9170] total_writeback 0 [ 165.868512][ T9170] total_workingset_refault_anon 23 [ 165.882840][ T9170] total_workingset_refault_file 0 [ 165.923878][ T9170] total_swap 507904 [ 165.931886][ T8418] IPVS: starting estimator thread 0... [ 165.943709][ T9170] total_swapcached 606208 [ 165.971797][ T9170] total_pgpgin 92762 [ 165.975822][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 165.975929][ T28] audit: type=1400 audit(1785372377.635:7838): avc: denied { search } for pid=9190 comm="syz.8.1765" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 165.977593][ T28] audit: type=1400 audit(1785372377.635:7839): avc: denied { write } for pid=9190 comm="syz.8.1765" name="trace_marker" dev="tracefs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 166.053115][ T9170] total_pgpgout 92761 [ 166.054068][ T9188] IPVS: using max 1824 ests per chain, 91200 per kthread [ 166.067501][ T28] audit: type=1400 audit(1785372377.635:7840): avc: denied { open } for pid=9190 comm="syz.8.1765" path="/180/dir0/trace_marker" dev="tracefs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 166.099069][ T9170] total_pgfault 102962 [ 166.105580][ T9185] xt_hashlimit: size too large, truncated to 1048576 [ 166.108449][ T28] audit: type=1400 audit(1785372377.715:7841): avc: denied { unmount } for pid=6306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 166.151959][ T9170] total_pgmajfault 8 [ 166.181340][ T9170] total_inactive_anon 0 [ 166.197989][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1776'. [ 166.216999][ T9170] total_active_anon 4096 [ 166.245857][ T9170] total_inactive_file 0 [ 166.298293][ T9170] total_active_file 0 [ 166.312625][ T9170] total_unevictable 0 [ 166.333546][ T9170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1756,pid=9170,uid=0 [ 166.408094][ T9170] Memory cgroup out of memory: Killed process 9170 (syz.6.1756) total-vm:94052kB, anon-rss:1240kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 166.488545][ T9171] syz.6.1756 (9171) used greatest stack depth: 8704 bytes left [ 166.490539][ T9214] netlink: 'syz.8.1770': attribute type 10 has an invalid length. [ 166.523753][ T9214] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1770'. [ 166.688487][ T28] audit: type=1400 audit(1785372378.345:7842): avc: denied { unmount } for pid=6306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 166.766397][ T9226] loop8: detected capacity change from 0 to 512 [ 166.782498][ T9226] EXT4-fs: Ignoring removed nobh option [ 166.826029][ T9226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.845535][ T9226] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.973527][ T28] audit: type=1400 audit(1785372378.635:7843): avc: denied { ioctl } for pid=9225 comm="syz.8.1775" path="/185/bus/file0" dev="loop8" ino=15 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.974879][ T9226] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 3: comm syz.8.1775: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 167.021398][ T28] audit: type=1400 audit(1785372378.635:7844): avc: denied { write } for pid=9225 comm="syz.8.1775" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.087011][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.329235][ T9248] 9p: Bad value for 'rfdno' [ 167.433339][ T9256] loop8: detected capacity change from 0 to 128 [ 168.105140][ T9272] loop7: detected capacity change from 0 to 1024 [ 168.112961][ T9272] EXT4-fs: Ignoring removed bh option [ 168.146657][ T9272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.187419][ T28] audit: type=1400 audit(1785372379.845:7845): avc: denied { write } for pid=9270 comm="syz.7.1792" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.215250][ T28] audit: type=1400 audit(1785372379.855:7846): avc: denied { map } for pid=9270 comm="syz.7.1792" path="/225/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.240752][ T28] audit: type=1400 audit(1785372379.855:7847): avc: denied { execute } for pid=9270 comm="syz.7.1792" path="/225/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.307864][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.763625][ T9295] loop8: detected capacity change from 0 to 512 [ 168.812103][ T9295] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 168.855207][ T9295] EXT4-fs (loop8): orphan cleanup on readonly fs [ 168.948342][ T9295] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.016393][ T9295] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 169.067981][ T9295] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #16: comm syz.8.1801: inode has both inline data and extents flags [ 169.114340][ T9295] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 169.121446][ T9295] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1801: couldn't read orphan inode 16 (err -117) [ 169.122814][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 169.122843][ C0] EXT4-fs (loop8): initial error at time 1785372380: ext4_orphan_get:1399: inode 16 [ 169.123304][ C0] EXT4-fs (loop8): last error at time 1785372380: ext4_orphan_get:1399: inode 16 [ 169.221763][ T9295] loop8: lost filesystem error report for type 5 error -117 [ 169.268424][ T9295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.560326][ T9295] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.616057][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.689033][ T9332] loop6: detected capacity change from 0 to 128 [ 169.734214][ T9336] netlink: 'syz.8.1813': attribute type 20 has an invalid length. [ 169.749337][ T9338] bridge0: port 1(syz_tun) entered blocking state [ 169.767410][ T9332] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.799101][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1813'. [ 169.812437][ T9338] bridge0: port 1(syz_tun) entered disabled state [ 169.826993][ T9332] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.852618][ T9338] syz_tun: entered allmulticast mode [ 169.858918][ T9338] syz_tun: entered promiscuous mode [ 169.864794][ T9338] bridge0: port 1(syz_tun) entered blocking state [ 169.871437][ T9338] bridge0: port 1(syz_tun) entered forwarding state [ 169.883657][ T9336] netlink: 'syz.8.1813': attribute type 20 has an invalid length. [ 169.892892][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1813'. [ 169.906549][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.915647][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.925608][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.978347][ T178] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.076555][ T9344] tipc: Failed to remove unknown binding: 66,0,0/2099199:2826247591/2826247593 [ 170.086824][ T3926] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.098019][ T9344] tipc: Failed to remove unknown binding: 66,0,0/2099199:2826247591/2826247592 [ 170.104226][ T9338] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 170.130246][ T9344] tipc: Failed to remove unknown binding: 66,0,0/2099199:2826247591/2826247593 [ 170.184118][ T9344] tipc: Failed to remove unknown binding: 66,0,0/2099199:2826247591/2826247592 [ 170.296738][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1824'. [ 170.521506][ T9375] ALSA: seq fatal error: cannot create timer (-19) [ 171.088031][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 171.088050][ T28] audit: type=1400 audit(1785372382.745:7858): avc: denied { connect } for pid=9398 comm="syz.6.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.128789][ T28] audit: type=1400 audit(1785372382.785:7859): avc: denied { read } for pid=9395 comm="syz.2.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 171.567515][ T28] audit: type=1400 audit(1785372383.225:7860): avc: denied { cpu } for pid=9422 comm="syz.8.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.212288][ T9433] tipc: Failed to remove unknown binding: 66,0,0/0:1778898706/1778898708 [ 172.247516][ T9433] tipc: Failed to remove unknown binding: 66,0,0/0:1778898706/1778898707 [ 172.275112][ T9433] tipc: Failed to remove unknown binding: 66,0,0/0:1778898706/1778898708 [ 172.303769][ T9433] tipc: Failed to remove unknown binding: 66,0,0/0:1778898706/1778898707 [ 172.423731][ T28] audit: type=1400 audit(1785372384.085:7861): avc: denied { bind } for pid=9441 comm="syz.6.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.465474][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1849'. [ 172.477804][ T9446] tipc: Failed to remove unknown binding: 66,0,0/2099199:1471839215/1471839216 [ 172.506276][ T9446] tipc: Failed to remove unknown binding: 66,0,0/2099199:1471839215/1471839216 [ 172.639456][ T28] audit: type=1400 audit(1785372384.295:7862): avc: denied { ioctl } for pid=9452 comm="syz.8.1854" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 172.736084][ T28] audit: type=1326 audit(1785372384.385:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 172.790324][ T28] audit: type=1326 audit(1785372384.385:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 172.828375][ T9465] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 172.844712][ T28] audit: type=1326 audit(1785372384.385:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 172.910481][ T28] audit: type=1326 audit(1785372384.385:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 172.944696][ T28] audit: type=1326 audit(1785372384.385:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9461 comm="syz.3.1857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf680df99 code=0x7ffc0000 [ 173.258695][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1862'. [ 173.284737][ T9476] loop8: detected capacity change from 0 to 512 [ 173.292306][ T9476] EXT4-fs: inline encryption not supported [ 173.317110][ T9475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9475 comm=syz.2.1862 [ 173.331472][ T9476] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 173.366134][ T9476] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1871: invalid indirect mapped block 2683928664 (level 1) [ 173.429360][ T9476] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 173.430623][ T9476] EXT4-fs (loop8): 1 truncate cleaned up [ 173.440599][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 173.440647][ C1] EXT4-fs (loop8): initial error at time 1785372385: ext4_free_branches:1023: inode 13 [ 173.440724][ C1] EXT4-fs (loop8): last error at time 1785372385: ext4_free_branches:1023: inode 13 [ 173.516202][ T9476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.570962][ T9483] bridge0: port 1(syz_tun) entered blocking state [ 173.589334][ T9483] bridge0: port 1(syz_tun) entered disabled state [ 173.601209][ T9483] syz_tun: entered allmulticast mode [ 173.611237][ T9483] syz_tun: entered promiscuous mode [ 174.229638][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.258735][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1872'. [ 174.268792][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1872'. [ 174.515183][ T9526] 9p: Could not find request transport: 0x0000000000000005 [ 174.836736][ T9544] loop6: detected capacity change from 0 to 128 [ 175.247939][ T9558] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.1890'. [ 175.275466][ T9558] openvswitch: netlink: Key type 386 is out of range max 32 [ 175.490179][ T9580] tipc: Failed to remove unknown binding: 66,0,0/0:3234210999/3234211000 [ 175.508573][ T9580] tipc: Failed to remove unknown binding: 66,0,0/0:3234210999/3234211000 [ 176.276936][ T9610] loop8: detected capacity change from 0 to 1024 [ 176.291540][ T9610] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 176.308708][ T9610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 176.331794][ T9610] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 176.352012][ T9610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.413398][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.631532][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1912'. [ 176.821739][ T9621] bridge0: port 1(syz_tun) entered disabled state [ 176.953037][ T9630] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.005309][ T9630] Cannot find add_set index 0 as target [ 177.075089][ T9621] macvlan2: left promiscuous mode [ 177.081673][ T9621] geneve2: left promiscuous mode [ 177.098215][ T1691] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.120372][ T1691] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.151104][ T1691] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.171155][ T1691] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.598990][ T9661] --map-set only usable from mangle table [ 177.611917][ T3356] IPVS: starting estimator thread 0... [ 177.713537][ T9665] IPVS: using max 2208 ests per chain, 110400 per kthread [ 177.856440][ T9674] loop6: detected capacity change from 0 to 1024 [ 177.871101][ T9674] EXT4-fs: Ignoring removed bh option [ 177.896280][ T9674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.931125][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 177.931144][ T28] audit: type=1400 audit(1785372389.585:7937): avc: denied { write } for pid=9673 comm="syz.6.1929" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.015745][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.229662][ T9686] loop6: detected capacity change from 0 to 2048 [ 178.299731][ T9686] Alternate GPT is invalid, using primary GPT. [ 178.306335][ T9686] loop6: p2 p3 p7 [ 178.412398][ T9690] loop8: detected capacity change from 0 to 4096 [ 178.437445][ T9690] EXT4-fs error (device loop8): ext4_init_orphan_info:583: comm syz.8.1934: inode #0: comm syz.8.1934: iget: illegal inode # [ 178.464469][ T9690] loop8: lost filesystem error report for type 5 error -117 [ 178.466483][ T9690] EXT4-fs (loop8): get orphan inode failed [ 178.474140][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 178.474180][ C0] EXT4-fs (loop8): initial error at time 1785372390: ext4_init_orphan_info:583 [ 178.474201][ C0] EXT4-fs (loop8): last error at time 1785372390: ext4_init_orphan_info:583 [ 178.504876][ T9690] EXT4-fs (loop8): mount failed [ 179.071696][ T9705] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1938'. [ 179.349791][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1939'. [ 179.359671][ T9711] netlink: 'syz.6.1939': attribute type 10 has an invalid length. [ 179.368582][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1939'. [ 179.398065][ T9711] geneve4: entered promiscuous mode [ 179.411239][ T9711] geneve4: entered allmulticast mode [ 179.427771][ T178] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.443194][ T178] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.470502][ T178] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.502378][ T178] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 179.615054][ T9682] x_tables: duplicate underflow at hook 2 [ 179.621866][ T28] audit: type=1400 audit(1785372391.275:7938): avc: denied { create } for pid=9712 comm="syz.8.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.650970][ T9682] netlink: 'syz.2.1931': attribute type 9 has an invalid length. [ 179.668233][ T9682] netlink: 'syz.2.1931': attribute type 7 has an invalid length. [ 179.721345][ T9682] netlink: 'syz.2.1931': attribute type 8 has an invalid length. [ 179.775259][ T28] audit: type=1400 audit(1785372391.425:7939): avc: denied { lock } for pid=9715 comm="syz.8.1941" path="socket:[26069]" dev="sockfs" ino=26069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 179.910935][ T9722] loop8: detected capacity change from 0 to 512 [ 179.919955][ T9722] EXT4-fs: dax option not supported [ 179.984480][ T28] audit: type=1400 audit(1785372391.645:7940): avc: denied { unmount } for pid=6306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 180.027781][ T9726] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1945'. [ 180.280685][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1950'. [ 180.329860][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1950'. [ 180.336712][ T9735] team2: entered promiscuous mode [ 180.382620][ T9735] team2: entered allmulticast mode [ 180.391320][ T9735] 8021q: adding VLAN 0 to HW filter on device team2 [ 180.425304][ T9738] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 180.477498][ T9738] team3: entered promiscuous mode [ 180.519308][ T9738] team3: entered allmulticast mode [ 180.545938][ T9738] 8021q: adding VLAN 0 to HW filter on device team3 [ 180.777890][ T9743] loop7: detected capacity change from 0 to 764 [ 180.959034][ T9743] rock: directory entry would overflow storage [ 181.022958][ T9743] rock: sig=0x5245, size=8, remaining=5 [ 181.209931][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1957'. [ 181.272310][ T9758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9758 comm=syz.3.1957 [ 181.274899][ T28] audit: type=1400 audit(1785372392.935:7941): avc: denied { audit_read } for pid=9754 comm="syz.7.1956" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.342008][ T9762] loop8: detected capacity change from 0 to 512 [ 181.431765][ T9762] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1958: casefold flag without casefold feature [ 181.445525][ T9762] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.448477][ T9762] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1958: couldn't read orphan inode 15 (err -117) [ 181.458366][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 181.458388][ C1] EXT4-fs (loop8): initial error at time 1785372393: ext4_orphan_get:1399: inode 15 [ 181.458442][ C1] EXT4-fs (loop8): last error at time 1785372393: ext4_orphan_get:1399: inode 15 [ 181.496947][ T9762] loop8: lost filesystem error report for type 5 error -117 [ 181.498058][ T9762] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.564898][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.294639][ T9798] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 182.305541][ T9797] netlink: 'syz.3.1971': attribute type 2 has an invalid length. [ 182.323380][ T9797] 0: entered promiscuous mode [ 182.546528][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1979'. [ 182.573263][ T9818] syz_tun (unregistering): left allmulticast mode [ 182.576790][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1982'. [ 183.231596][ T9834] loop7: detected capacity change from 0 to 1024 [ 183.247261][ T28] audit: type=1400 audit(1785372394.905:7942): avc: denied { mount } for pid=9837 comm="syz.6.1988" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 183.287923][ T9834] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 183.332041][ T9834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 183.343478][ T9834] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 183.354636][ T9834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.392319][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.498194][ T9847] 9pnet_fd: p9_fd_create_unix (9847): problem connecting socket: ./file0: -111 [ 183.592385][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1991'. [ 184.299803][ T28] audit: type=1400 audit(1785372395.945:7943): avc: denied { create } for pid=9865 comm="syz.8.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 184.357308][ T9870] macvlan0: entered allmulticast mode [ 184.367491][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2001'. [ 184.380158][ T9870] macvlan0 (unregistering): left allmulticast mode [ 184.693607][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2008'. [ 185.436351][ T9904] syzkaller0: entered promiscuous mode [ 185.452254][ T9904] syzkaller0: entered allmulticast mode [ 185.691805][ T28] audit: type=1400 audit(1785372397.345:7944): avc: denied { execute } for pid=9908 comm="syz.7.2012" path="/file1" dev="ramfs" ino=25594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 185.932636][ T28] audit: type=1400 audit(1785372397.585:7945): avc: denied { create } for pid=9913 comm="syz.2.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 186.278809][ T9938] netlink: 'syz.2.2022': attribute type 1 has an invalid length. [ 186.299297][ T9934] netlink: 'syz.6.2021': attribute type 16 has an invalid length. [ 186.317821][ T9934] netlink: 'syz.6.2021': attribute type 17 has an invalid length. [ 186.356620][ T9927] loop8: detected capacity change from 0 to 512 [ 186.376631][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.388044][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.404573][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.450045][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.459910][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.461075][ T9927] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 186.475262][ T9934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.479076][ T9927] EXT4-fs (loop8): orphan cleanup on readonly fs [ 186.487540][ T9934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.490480][ T9934] veth0_virt_wifi: left promiscuous mode [ 186.512349][ T9934] veth1_vlan: left promiscuous mode [ 186.518622][ T9934] veth0_vlan: left promiscuous mode [ 186.527108][ T9934] veth0_vlan: entered promiscuous mode [ 186.527719][ T9927] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 186.534202][ T9934] veth1_vlan: entered promiscuous mode [ 186.539875][ T9934] veth1_macvtap: left promiscuous mode [ 186.557396][ T9934] veth0_macvtap: left promiscuous mode [ 186.557747][ T9927] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.580104][ T9934] veth0_macvtap: entered promiscuous mode [ 186.580854][ T9934] veth1_macvtap: entered promiscuous mode [ 186.593395][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.603462][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.612363][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.621754][ T9934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.628309][ T9927] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 186.634330][ T9934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.647875][ T9927] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #16: comm syz.8.2019: inode has both inline data and extents flags [ 186.662361][ T9934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.669393][ T9927] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.672688][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 186.689828][ C1] EXT4-fs (loop8): initial error at time 1785372398: ext4_orphan_get:1399: inode 16 [ 186.700430][ C1] EXT4-fs (loop8): last error at time 1785372398: ext4_orphan_get:1399: inode 16 [ 186.721040][ T9934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.721226][ T9927] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2019: couldn't read orphan inode 16 (err -117) [ 186.755035][ T9934] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.756878][ T9927] loop8: lost filesystem error report for type 5 error -117 [ 186.777411][ T9934] bond5: left promiscuous mode [ 186.778157][ T9927] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.794284][ T9934] bridge1: left promiscuous mode [ 186.794676][ T9934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.818776][ T9934] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.831521][ T9934] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.839579][ T9934] team1: left promiscuous mode [ 186.839603][ T9934] team1: left allmulticast mode [ 186.842612][ T9934] geneve4: left promiscuous mode [ 186.842713][ T9934] geneve4: left allmulticast mode [ 186.843220][ T9934] team2: left promiscuous mode [ 186.843351][ T9934] team2: left allmulticast mode [ 186.846850][ T9934] team3: left promiscuous mode [ 186.902118][ T9934] team3: left allmulticast mode [ 186.943620][ T9941] bond3: (slave bridge4): making interface the new active one [ 186.952942][ T9941] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 186.987987][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.995163][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.025754][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.033056][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.120823][ T9631] syz0: Port: 1 Link ACTIVE [ 187.121330][ T178] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.136767][ T178] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.152994][ T9953] netlink: 'syz.3.2024': attribute type 322 has an invalid length. [ 187.172140][ T178] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.187194][ T178] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.198722][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.355360][ T9965] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2031'. [ 187.381701][ T9968] tipc: Failed to remove unknown binding: 66,0,0/0:3021498127/3021498128 [ 187.403930][ T9968] tipc: Failed to remove unknown binding: 66,0,0/0:3021498127/3021498128 [ 187.628267][ T28] audit: type=1400 audit(1785372399.285:7946): avc: denied { bind } for pid=9991 comm="syz.6.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 187.771573][ T9999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2047'. [ 187.810920][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2048'. [ 187.833966][T10004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 188.393389][T10024] 9pnet_fd: p9_fd_create_unix (10024): problem connecting socket: ./file0: -111 [ 188.463727][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 188.494122][T10028] loop8: detected capacity change from 0 to 1024 [ 188.527585][T10028] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.582921][ T28] audit: type=1400 audit(1785372400.225:7947): avc: denied { ioctl } for pid=10034 comm="syz.2.2058" path="socket:[26622]" dev="sockfs" ino=26622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.618914][T10033] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 188.784443][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.890165][ T28] audit: type=1400 audit(1785372400.545:7948): avc: denied { bind } for pid=10055 comm="syz.3.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.010238][T10066] 9pnet_fd: p9_fd_create_unix (10066): problem connecting socket: ./file0: -111 [ 189.159139][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2069'. [ 189.879815][T10087] loop6: detected capacity change from 0 to 512 [ 189.904042][T10087] EXT4-fs: Ignoring removed bh option [ 189.922922][T10087] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 189.942319][T10087] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2075: iget: bad i_size value: 3298534883338 [ 189.955350][T10087] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.956922][T10087] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2075: couldn't read orphan inode 15 (err -117) [ 189.966125][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 189.966151][ C1] EXT4-fs (loop6): initial error at time 1785372401: ext4_orphan_get:1399: inode 15 [ 189.966190][ C1] EXT4-fs (loop6): last error at time 1785372401: ext4_orphan_get:1399: inode 15 [ 190.005534][T10087] loop6: lost filesystem error report for type 5 error -117 [ 190.007587][T10087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.060322][ T28] audit: type=1400 audit(1785372401.715:7949): avc: denied { getopt } for pid=10084 comm="syz.6.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.116823][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.227815][T10092] infiniband syz1: set down [ 190.233446][T10092] infiniband syz1: added syz_tun [ 190.253930][T10092] RDS/IB: syz1: added [ 190.258232][T10092] smc: adding ib device syz1 with port count 1 [ 190.268121][T10092] smc: ib device syz1 port 1 has no pnetid [ 190.413834][T10112] tipc: Enabling of bearer rejected, failed to enable media [ 190.969035][ T28] audit: type=1400 audit(1785372402.625:7950): avc: denied { mounton } for pid=10127 comm="syz.7.2091" path=2F3237382FE91F7189591E9233614B dev="tmpfs" ino=1467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 191.021816][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2092'. [ 191.052363][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2093'. [ 191.136899][T10137] loop6: detected capacity change from 0 to 8192 [ 191.143966][ T28] audit: type=1400 audit(1785372402.805:7951): avc: denied { remount } for pid=10136 comm="syz.6.2095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.316279][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 191.328068][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 191.577089][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2100'. [ 191.620183][T10152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10152 comm=syz.2.2100 [ 191.802332][T10167] loop6: detected capacity change from 0 to 512 [ 191.830423][T10167] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 191.855439][T10167] EXT4-fs (loop6): 1 truncate cleaned up [ 191.862387][T10167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.936879][ T28] audit: type=1400 audit(1785372403.585:7952): avc: denied { write } for pid=10162 comm="syz.6.2105" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.244483][ T28] audit: type=1400 audit(1785372403.905:7953): avc: denied { cmd } for pid=10172 comm="syz.8.2108" path="/249/file0" dev="tmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 192.787289][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2112'. [ 192.856667][T10185] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10185 comm=syz.7.2112 [ 192.876445][ T3926] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.960705][T10191] syzkaller0: entered promiscuous mode [ 192.971764][T10191] syzkaller0: entered allmulticast mode [ 193.140682][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2118'. [ 193.244483][T10200] team0: Failed to send options change via netlink (err -105) [ 193.276116][T10200] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 193.288755][T10200] team0: Port device team_slave_0 removed [ 194.123994][T10224] option changes via remount are deprecated (pid=10216 comm=syz.6.2124) [ 194.321070][T10236] loop8: detected capacity change from 0 to 128 [ 194.538612][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 194.594175][T10244] netlink: 'syz.3.2135': attribute type 5 has an invalid length. [ 194.604696][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 194.764815][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 194.811796][T10247] syz_tun (unregistering): left allmulticast mode [ 194.825726][T10247] syz_tun (unregistering): left promiscuous mode [ 194.843829][T10247] bridge0: port 3(syz_tun) entered disabled state [ 195.216042][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 195.469742][ T28] audit: type=1400 audit(1785372407.125:7954): avc: denied { write } for pid=10269 comm="syz.7.2146" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 195.806013][T10281] loop8: detected capacity change from 0 to 512 [ 195.825365][T10281] EXT4-fs: Ignoring removed bh option [ 195.833634][T10281] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 195.849391][T10281] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2149: iget: bad i_size value: 3298534883338 [ 195.866816][T10281] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.867427][T10281] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2149: couldn't read orphan inode 15 (err -117) [ 195.877406][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 195.877456][ C1] EXT4-fs (loop8): initial error at time 1785372407: ext4_orphan_get:1399: inode 15 [ 195.877527][ C1] EXT4-fs (loop8): last error at time 1785372407: ext4_orphan_get:1399: inode 15 [ 195.921819][T10281] loop8: lost filesystem error report for type 5 error -117 [ 195.929261][T10281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.968004][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.486459][ T28] audit: type=1400 audit(1785372408.145:7955): avc: denied { map } for pid=10316 comm="syz.3.2163" path="socket:[28123]" dev="sockfs" ino=28123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 196.885183][ T28] audit: type=1326 audit(1785372408.545:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 196.936744][ T28] audit: type=1326 audit(1785372408.545:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.004461][ T28] audit: type=1326 audit(1785372408.545:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.062150][ T28] audit: type=1326 audit(1785372408.545:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.123663][ T28] audit: type=1326 audit(1785372408.595:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.206818][ T28] audit: type=1326 audit(1785372408.595:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.292469][ T28] audit: type=1326 audit(1785372408.595:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.341965][ T28] audit: type=1326 audit(1785372408.595:7963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 197.383847][T10343] netlink: 'syz.2.2172': attribute type 13 has an invalid length. [ 197.396238][T10343] netlink: 'syz.2.2172': attribute type 17 has an invalid length. [ 197.468521][T10345] loop7: detected capacity change from 0 to 1024 [ 197.500929][T10345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.542715][T10343] bridge0: port 1(syz_tun) entered blocking state [ 197.549432][T10343] bridge0: port 1(syz_tun) entered forwarding state [ 197.571056][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.580332][T10343] tipc: Resetting bearer [ 197.587591][T10343] tipc: Resetting bearer [ 197.614627][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.633149][T10321] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 197.707272][T10343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.730931][T10343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.758209][T10343] veth1_vlan: left promiscuous mode [ 197.770060][T10343] veth0_vlan: left promiscuous mode [ 197.790151][T10343] veth0_vlan: entered promiscuous mode [ 197.805418][T10343] veth1_vlan: entered promiscuous mode [ 197.831455][T10343] veth1_macvtap: left promiscuous mode [ 197.841314][T10343] veth0_macvtap: left promiscuous mode [ 197.848515][T10343] veth0_macvtap: entered promiscuous mode [ 197.870339][T10343] veth1_macvtap: entered promiscuous mode [ 197.884521][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.898356][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.925192][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.946695][T10343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.967490][T10343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.970025][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.979694][T10343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.040706][T10343] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.097946][ T178] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.107079][ T178] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.117285][ T178] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.127206][ T178] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.150750][ T178] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.160288][ T178] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.170909][ T178] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.180546][ T178] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 198.242909][T10378] loop7: detected capacity change from 0 to 512 [ 198.278771][T10378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.308446][T10378] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.423123][ T5619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.493638][T10396] netlink: 'syz.7.2186': attribute type 11 has an invalid length. [ 199.187876][T10429] ffs_data_put(): freeing [ 199.275950][T10432] xt_connbytes: Forcing CT accounting to be enabled [ 199.299910][T10432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.151213][T10467] loop8: detected capacity change from 0 to 128 [ 200.163018][T10467] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.236216][T10467] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.379684][ T68] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 200.521831][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 200.521852][ T28] audit: type=1400 audit(1785372412.175:8029): avc: denied { write } for pid=10475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.644188][ T28] audit: type=1400 audit(1785372412.305:8030): avc: denied { write } for pid=10497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.844781][T10513] loop8: detected capacity change from 0 to 1024 [ 200.870497][T10513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.904125][ T28] audit: type=1400 audit(1785372412.565:8031): avc: denied { write } for pid=10501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.922688][T10513] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.974978][ T28] audit: type=1400 audit(1785372412.595:8032): avc: denied { write } for pid=10512 comm="syz.8.2224" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.007226][ T28] audit: type=1400 audit(1785372412.635:8033): avc: denied { write } for pid=10522 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.024105][ T30] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 201.087131][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 201.133392][ T30] EXT4-fs (loop8): This should not happen!! Data will be lost [ 201.133392][ T30] [ 201.181882][ T30] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 201.214749][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 201.248200][ T30] EXT4-fs (loop8): This should not happen!! Data will be lost [ 201.248200][ T30] [ 201.368552][ T28] audit: type=1400 audit(1785372413.025:8034): avc: denied { write } for pid=10529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.465269][ T28] audit: type=1400 audit(1785372413.085:8035): avc: denied { append } for pid=10547 comm="syz.6.2227" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.542077][ T28] audit: type=1400 audit(1785372413.115:8036): avc: denied { write } for pid=10551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.623999][ T28] audit: type=1400 audit(1785372413.145:8037): avc: denied { read } for pid=10547 comm="syz.6.2227" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.675826][T10513] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2224: bg 0: block 112: padding at end of block bitmap is not set [ 201.694906][ T28] audit: type=1400 audit(1785372413.145:8038): avc: denied { open } for pid=10547 comm="syz.6.2227" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.725861][T10556] loop7: detected capacity change from 0 to 164 [ 201.746196][T10513] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1687 with max blocks 2048 with error 28 [ 201.782451][T10513] EXT4-fs (loop8): This should not happen!! Data will be lost [ 201.782451][T10513] [ 201.797749][T10513] EXT4-fs (loop8): Total free blocks count 0 [ 201.811543][T10513] EXT4-fs (loop8): Free/Dirty block details [ 201.824201][T10513] EXT4-fs (loop8): free_blocks=0 [ 204.434187][ T6306] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 205.525565][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 205.525583][ T28] audit: type=1326 audit(1785372417.185:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.584802][ T28] audit: type=1326 audit(1785372417.185:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.611520][ T28] audit: type=1326 audit(1785372417.185:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.637755][ T28] audit: type=1326 audit(1785372417.185:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.678007][ T28] audit: type=1326 audit(1785372417.185:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.720466][ T28] audit: type=1326 audit(1785372417.215:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.777281][ T28] audit: type=1326 audit(1785372417.215:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.812661][ T28] audit: type=1326 audit(1785372417.215:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.858357][ T28] audit: type=1326 audit(1785372417.215:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 205.910642][ T28] audit: type=1326 audit(1785372417.215:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.2.2245" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e41fdf99 code=0x7ffc0000 [ 206.237115][T10642] loop8: detected capacity change from 0 to 512 [ 206.263017][T10642] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 206.329794][T10642] EXT4-fs (loop8): 1 truncate cleaned up [ 206.353328][T10642] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.332243][ T6306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.027253][T10727] netlink: 'syz.6.2283': attribute type 4 has an invalid length. [ 210.061197][T10727] netlink: 'syz.6.2283': attribute type 4 has an invalid length. [ 210.194461][T10727] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.201870][T10727] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.252416][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2286'. [ 210.261985][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2286'. [ 210.269748][T10727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.281697][T10727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.904801][ T3392] syz0: Port: 1 Link DOWN [ 210.909246][ T360] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.918557][ T360] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 210.928144][ T360] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 210.937395][ T360] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.946439][ T360] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 210.955779][ T360] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 210.964923][ T360] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.974171][ T360] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 210.985417][ T360] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 210.994550][ T360] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.034735][ T360] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 211.043827][ T360] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 211.121197][T10745] loop7: detected capacity change from 0 to 128 [ 211.130635][T10745] syz.7.2289: attempt to access beyond end of device [ 211.130635][T10745] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 211.144759][T10745] syz.7.2289: attempt to access beyond end of device [ 211.144759][T10745] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 211.192573][T10745] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 211.219361][T10745] syz.7.2289: attempt to access beyond end of device [ 211.219361][T10745] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 211.254331][T10745] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 212.354421][T10766] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 212.415918][T10745] syz.7.2289: attempt to access beyond end of device [ 212.415918][T10745] loop7: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 212.470763][T10745] Buffer I/O error on dev loop7, logical block 77, lost async page write [ 212.503066][T10745] syz.7.2289: attempt to access beyond end of device [ 212.503066][T10745] loop7: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 212.543312][T10745] Buffer I/O error on dev loop7, logical block 78, lost async page write [ 212.560538][T10778] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 212.571317][T10745] syz.7.2289: attempt to access beyond end of device [ 212.571317][T10745] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 212.594786][T10745] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 212.605380][T10745] syz.7.2289: attempt to access beyond end of device [ 212.605380][T10745] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 212.619495][T10745] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 212.795579][T10790] 0: reclassify loop, rule prio 0, protocol 03 [ 213.696169][T10814] ip6t_REJECT: ECHOREPLY is not supported [ 214.159530][T10827] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 214.573662][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2328'. [ 214.673655][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 214.673674][ T28] audit: type=1326 audit(1785372426.335:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.727029][ T28] audit: type=1326 audit(1785372426.365:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.760547][ T28] audit: type=1326 audit(1785372426.365:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.787888][ T28] audit: type=1326 audit(1785372426.365:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.814722][ T28] audit: type=1326 audit(1785372426.365:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.841186][ T28] audit: type=1326 audit(1785372426.365:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.868241][ T28] audit: type=1326 audit(1785372426.365:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.895007][ T28] audit: type=1326 audit(1785372426.365:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.921400][ T28] audit: type=1326 audit(1785372426.365:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 214.949106][ T28] audit: type=1326 audit(1785372426.365:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.6.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dd96df99 code=0x7ffc0000 [ 215.694447][T10851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.854115][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 217.316729][ T6041] bridge0: port 1(syz_tun) entered disabled state [ 217.328058][ T6041] syz_tun (unregistering): left allmulticast mode [ 217.335999][ T6041] syz_tun (unregistering): left promiscuous mode [ 217.342699][ T6041] bridge0: port 1(syz_tun) entered disabled state [ 217.353168][T10943] netlink: 'syz.7.2363': attribute type 4 has an invalid length. [ 217.363981][T10943] netlink: 'syz.7.2363': attribute type 4 has an invalid length. [ 217.429648][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.441743][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.453563][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.504874][T10952] netlink: 'syz.8.2368': attribute type 21 has an invalid length. [ 217.528857][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.540047][T10952] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.558040][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.568904][T10952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.576178][T10952] IPv6: NLM_F_CREATE should be set when creating new route [ 217.583442][T10952] IPv6: NLM_F_CREATE should be set when creating new route [ 217.590768][T10952] IPv6: NLM_F_CREATE should be set when creating new route [ 217.599134][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.611172][T10955] netlink: 'syz.8.2368': attribute type 21 has an invalid length. [ 217.619274][T10955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.633279][T10952] vlan2: entered promiscuous mode [ 217.646076][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.657738][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.669177][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.725587][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.736637][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 217.747310][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 217.938256][ T68] team0: Port device xfrm0 removed [ 217.952029][ T68] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 217.984782][ T68] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 218.031478][ T68] bond0 (unregistering): (slave team0): Releasing backup interface [ 218.040367][ T68] tipc: Resetting bearer [ 218.065030][ T68] tipc: Resetting bearer [ 218.079841][ T68] bond0 (unregistering): Released all slaves [ 218.089361][ T68] bond1 (unregistering): (slave bond2): Releasing backup interface [ 218.098082][ T68] bond1 (unregistering): Released all slaves [ 218.108121][ T68] bond2 (unregistering): Released all slaves [ 218.118479][ T68] bond3 (unregistering): Released all slaves [ 218.168303][ T68] tipc: Disabling bearer [ 218.177842][ T68] tipc: Left network mode [ 218.249114][ T68] hsr_slave_0: left promiscuous mode [ 218.255420][ T68] hsr_slave_1: left promiscuous mode [ 218.265491][ T68] veth1_macvtap: left promiscuous mode [ 218.271297][ T68] veth0_macvtap: left promiscuous mode [ 218.278087][ T68] veth1_vlan: left promiscuous mode [ 218.283840][ T68] veth0_vlan: left promiscuous mode [ 218.696896][ T68] IPVS: stop unused estimator thread 0... [ 219.682655][ T28] kauditd_printk_skb: 10579 callbacks suppressed [ 219.682671][ T28] audit: type=1400 audit(1785372431.334:18691): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.698170][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.717957][ T3021] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 219.722675][ T28] audit: type=1400 audit(1785372431.334:18692): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.727018][ T3021] audit: backlog limit exceeded [ 219.756883][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.763656][ T3021] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 219.771411][ T3021] audit: backlog limit exceeded [ 219.774053][ T28] audit: type=1400 audit(1785372431.334:18693): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 219.777468][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 221.770285][T11005] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 221.778730][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2390'. [ 221.810370][T11009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11009 comm=syz.3.2390 [ 222.848970][T11016] syzkaller0: entered promiscuous mode [ 222.857909][T11016] syzkaller0: entered allmulticast mode [ 223.954119][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2398'. [ 223.981392][T11024] bridge0: port 3(team0) entered blocking state [ 223.991800][T11024] bridge0: port 3(team0) entered disabled state [ 224.007710][T11024] team0: entered allmulticast mode [ 224.020781][T11024] team_slave_1: entered allmulticast mode [ 224.033447][T11024] syz_tun: entered allmulticast mode [ 224.048556][T11024] team0: entered promiscuous mode [ 224.062585][T11024] team_slave_1: entered promiscuous mode [ 224.076611][T11024] syz_tun: entered promiscuous mode [ 224.692531][ T28] kauditd_printk_skb: 41384 callbacks suppressed [ 224.692546][ T28] audit: type=1400 audit(1785372436.344:58594): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.709673][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.722321][ T28] audit: type=1400 audit(1785372436.344:58595): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.729036][ T3021] audit: audit_lost=498 audit_rate_limit=0 audit_backlog_limit=64 [ 224.754524][ T28] audit: type=1400 audit(1785372436.354:58596): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.757183][ T3021] audit: backlog limit exceeded [ 224.782047][ T28] audit: type=1400 audit(1785372436.354:58597): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.789026][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.807114][ T28] audit: type=1400 audit(1785372436.354:58598): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.812376][ T3021] audit: audit_lost=499 audit_rate_limit=0 audit_backlog_limit=64 [ 229.702577][ T28] kauditd_printk_skb: 41014 callbacks suppressed [ 229.702595][ T28] audit: type=1400 audit(1785372697.353:99567): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.731265][ T28] audit: type=1400 audit(1785372697.363:99568): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.753390][ T28] audit: type=1400 audit(1785372697.363:99569): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.775027][ T28] audit: type=1400 audit(1785372697.363:99570): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.796776][ T28] audit: type=1400 audit(1785372697.363:99571): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.819226][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.823936][ T28] audit: type=1400 audit(1785372697.363:99572): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.829589][ T3021] audit: audit_lost=515 audit_rate_limit=0 audit_backlog_limit=64 [ 229.847143][ T28] audit: type=1400 audit(1785372697.363:99573): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 229.847183][ T28] audit: type=1400 audit(1785372697.363:99574): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 233.583556][T11081] ================================================================== [ 233.591937][T11081] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 233.600635][T11081] [ 233.603000][T11081] write to 0xffff88810b06b0a0 of 8 bytes by task 11086 on cpu 0: [ 233.610767][T11081] shmem_file_splice_read+0x401/0x590 [ 233.616214][T11081] splice_direct_to_actor+0x261/0x680 [ 233.621629][T11081] do_splice_direct+0x119/0x1a0 [ 233.627139][T11081] do_sendfile+0x37d/0x640 [ 233.631636][T11081] __x64_sys_sendfile64+0x105/0x150 [ 233.636974][T11081] x64_sys_call+0x2dc4/0x3020 [ 233.641696][T11081] do_syscall_64+0x136/0x3c0 [ 233.646329][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.652399][T11081] [ 233.654848][T11081] write to 0xffff88810b06b0a0 of 8 bytes by task 11081 on cpu 1: [ 233.662598][T11081] shmem_file_splice_read+0x401/0x590 [ 233.668236][T11081] splice_direct_to_actor+0x261/0x680 [ 233.673743][T11081] do_splice_direct+0x119/0x1a0 [ 233.678645][T11081] do_sendfile+0x37d/0x640 [ 233.683106][T11081] __x64_sys_sendfile64+0x105/0x150 [ 233.688342][T11081] x64_sys_call+0x2dc4/0x3020 [ 233.693066][T11081] do_syscall_64+0x136/0x3c0 [ 233.697739][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.703907][T11081] [ 233.706284][T11081] value changed: 0x0000000000009d6f -> 0x0000000000009d72 [ 233.713528][T11081] [ 233.716075][T11081] Reported by Kernel Concurrency Sanitizer on: [ 233.722379][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.7.2417 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 233.733548][T11081] Tainted: [W]=WARN [ 233.737521][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 233.748491][T11081] ================================================================== [ 234.712599][ T28] kauditd_printk_skb: 40957 callbacks suppressed [ 234.712618][ T28] audit: type=1400 audit(1785372702.363:140531): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.754593][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.763379][ T6306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.771081][ T3021] audit: audit_lost=516 audit_rate_limit=0 audit_backlog_limit=64 [ 234.780083][ T6306] audit: audit_lost=517 audit_rate_limit=0 audit_backlog_limit=64 [ 234.789593][ T28] audit: type=1400 audit(1785372702.373:140532): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.814401][ T6306] audit: backlog limit exceeded [ 234.816786][ T3021] audit: backlog limit exceeded [ 234.845028][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.864694][ T28] audit: type=1400 audit(1785372702.373:140533): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.900157][ T5619] syz_tun (unregistering): left allmulticast mode [ 234.924751][ T5619] syz_tun (unregistering): left promiscuous mode [ 234.946865][ T5619] bridge0: port 1(syz_tun) entered disabled state [ 234.996454][ T12] smc: removing ib device syz1 [ 235.024435][ T7457] syz_tun (unregistering): left promiscuous mode [ 235.034820][ T7457] syz_tun (unregistering): left allmulticast mode [ 235.067506][ T7457] team0: Port device syz_tun removed [ 239.723143][ T28] kauditd_printk_skb: 41903 callbacks suppressed [ 239.723163][ T28] audit: type=1400 audit(1785372707.373:181307): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.739701][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.755144][ T28] audit: type=1400 audit(1785372707.383:181308): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.757476][ T3021] audit: audit_lost=895 audit_rate_limit=0 audit_backlog_limit=64 [ 239.757492][ T3021] audit: backlog limit exceeded [ 239.757874][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.782225][ T28] audit: type=1400 audit(1785372707.383:181309): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.787261][ T3021] audit: audit_lost=896 audit_rate_limit=0 audit_backlog_limit=64 [ 239.787312][ T3021] audit: backlog limit exceeded [ 239.787759][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64