last executing test programs: 12m27.673710867s ago: executing program 32 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000640)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0x3, 0x6, "6c15ca", 0x10, 0x21, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e23, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 'RKJ', 0x0, "954e24"}}}}}}}}, 0x0) 12m26.950526152s ago: executing program 33 (id=84): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) chmod(&(0x7f0000000000)='./file0/file0\x00', 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 11m52.696958091s ago: executing program 34 (id=1112): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700000426bd7000000000000a01010200000000000000000000000000000000ff000000ac141429000000000000000000000000000000000000000000000000000000017f0000010000000000000000000000004e210000000004840a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fc"], 0x128}}, 0x10008854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 11m51.836746869s ago: executing program 35 (id=1143): rt_sigprocmask(0x2, &(0x7f0000000400)={[0x9]}, 0x0, 0x8) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x9}}, 0x0) 11m13.426525806s ago: executing program 36 (id=2134): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x47}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0x1b8, 0x560, 0x2e0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x570) 10m13.530459781s ago: executing program 37 (id=3591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {}, {0xd}}}, 0x24}}, 0x4) 9m44.306450373s ago: executing program 38 (id=4341): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 9m33.470423653s ago: executing program 39 (id=4527): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3ff, 0x1, 0x1ff, 0x1, 0x6, 0x6}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 7m7.258711004s ago: executing program 40 (id=7309): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000011e000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m5.390968474s ago: executing program 41 (id=7331): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) close(0x4) 6m57.310995775s ago: executing program 42 (id=7637): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m31.183748881s ago: executing program 43 (id=7888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfc4e, 0x5, 0x101}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x40) 6m10.026236721s ago: executing program 44 (id=8602): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200008, &(0x7f0000000440)={[{@noload}, {@noinit_itable}, {@inlinecrypt}, {@resgid={'resgid', 0x3d, 0xee00}}, {@norecovery}, {@resuid}, {@noblock_validity}, {@dioread_nolock}]}, 0xfe, 0x575, &(0x7f0000000ec0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x8) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 5m37.65509023s ago: executing program 45 (id=9190): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8900, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 5m35.482506366s ago: executing program 46 (id=8996): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007cc0)=""/64, 0x40}, 0xfffffffd}], 0x1, 0x1000400000de, 0x0) 5m34.269586922s ago: executing program 47 (id=9238): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @remote}, 0x10) 5m6.090356801s ago: executing program 48 (id=9668): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 4m55.731953382s ago: executing program 49 (id=9849): syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") 4m53.363621412s ago: executing program 50 (id=9879): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 4m25.853972428s ago: executing program 51 (id=10354): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x3, 0x2, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc804) 4m5.98901446s ago: executing program 52 (id=10414): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000540)={'a', ' *:* ', 'wm\x00'}, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 3m56.12173427s ago: executing program 53 (id=10789): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10efc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 3m47.574472492s ago: executing program 54 (id=10943): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0xb, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3m22.1933468s ago: executing program 2 (id=11379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000001c40)='u', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="cb5c", 0x2}], 0x1}}], 0x2, 0x2404c4c4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m22.16116497s ago: executing program 2 (id=11381): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES32=r0], 0xfdef) 3m22.029281333s ago: executing program 2 (id=11384): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff65d, 0x6409b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x35, 0x5, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 3m21.077981103s ago: executing program 2 (id=11392): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 3m21.077075563s ago: executing program 2 (id=11393): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) write$selinux_load(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="8cff7cf908"], 0x10) 3m20.983888615s ago: executing program 2 (id=11398): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/236, 0xec, 0x60, 0x0, 0x0) 3m20.956248446s ago: executing program 55 (id=11398): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/236, 0xec, 0x60, 0x0, 0x0) 3m17.852068801s ago: executing program 9 (id=11447): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3m17.808266362s ago: executing program 9 (id=11448): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3m17.367880532s ago: executing program 9 (id=11460): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0), 0x0, 0x9f1e}}, 0x40) 3m17.292530604s ago: executing program 9 (id=11461): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 3m17.233891375s ago: executing program 9 (id=11462): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000100)=0xfc, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3m17.00099841s ago: executing program 9 (id=11468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m16.99719764s ago: executing program 56 (id=11468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m15.945498492s ago: executing program 4 (id=11494): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) 3m15.898925463s ago: executing program 4 (id=11495): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000740)='lon\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3m15.608242079s ago: executing program 4 (id=11499): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0), 0x0, 0x9f1e}}, 0x40) 3m15.402098624s ago: executing program 4 (id=11502): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x124) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m15.009920562s ago: executing program 4 (id=11505): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10e4ed, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, 0x8}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m14.720566638s ago: executing program 4 (id=11508): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m14.63851513s ago: executing program 57 (id=11508): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m4.387220656s ago: executing program 6 (id=11660): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 3m4.108005263s ago: executing program 6 (id=11666): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e24, 0x0, @local, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x1ff, 0x2e, 0x40, 0xffffffff, 0x2, 0x81]}}, 0x5c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_getres(0x8, 0x0) 3m4.058558244s ago: executing program 6 (id=11668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x9, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8804) 3m3.905871307s ago: executing program 6 (id=11672): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m3.666591482s ago: executing program 6 (id=11674): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 3m3.26082844s ago: executing program 6 (id=11678): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x314ff, 0xae19, 0x8000008, 0x1000003, 0x9, 0xfffffffd, 0x0, 0x7cce8c743ee810dc}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80001) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 3m3.26064759s ago: executing program 58 (id=11678): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x314ff, 0xae19, 0x8000008, 0x1000003, 0x9, 0xfffffffd, 0x0, 0x7cce8c743ee810dc}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80001) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 2m43.746743003s ago: executing program 5 (id=12082): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) 2m43.572251357s ago: executing program 5 (id=12085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2m43.534860228s ago: executing program 5 (id=12087): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x12, &(0x7f0000000000)={@private1}, 0x14) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 2m43.473832349s ago: executing program 5 (id=12089): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m43.41033429s ago: executing program 5 (id=12091): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2m43.310572043s ago: executing program 5 (id=12095): lstat(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000051, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x1, 0x37d, &(0x7f0000000d40)="$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") r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 2m43.310280112s ago: executing program 59 (id=12095): lstat(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000051, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x1, 0x37d, &(0x7f0000000d40)="$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") r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 6.512870011s ago: executing program 3 (id=14591): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {0x0}], 0x2) 5.948959514s ago: executing program 3 (id=14596): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 5.070106052s ago: executing program 3 (id=14597): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x3, 0x0, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x2000c800, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 5.069796632s ago: executing program 8 (id=14598): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2a, 0x0, @empty=0x1000000}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xf, 0x4}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x72, &(0x7f0000000000)=r7, 0xc) 4.374331317s ago: executing program 3 (id=14603): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1000, 0x830d}, 0x1116c8, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.158763532s ago: executing program 8 (id=14604): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x9, 0xfffa}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4.144015522s ago: executing program 1 (id=14607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xffffffff, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x4, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x6, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x7, 0x400, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x8000001, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0xc, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0xfffffff7, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x1000006a, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x9, 0x4, 0x0, 0x3, 0x7fffffff, 0x8000, 0x1ff, 0x4, 0x8f7, 0x5, 0x8001, 0x1, 0x58, 0x9, 0xf9a6, 0x1, 0x6, 0x8f3d, 0x9, 0x400, 0x8, 0x58b2, 0x9, 0x3, 0x3, 0x5, 0x7fffffff, 0x898b, 0x3, 0x400, 0x7, 0xc6a5, 0xffffffc0, 0x3, 0x0, 0x4, 0x7ff, 0x3, 0x0, 0xfffffffd, 0x9, 0x1, 0xa, 0x1, 0x3, 0x1, 0x8, 0x7, 0x80, 0x5, 0x9, 0x5, 0x0, 0x8899, 0x889, 0x200, 0x4, 0x2, 0x2, 0x1c, 0x629, 0x7e46, 0x869, 0x80, 0xb1, 0x5, 0x40, 0x2, 0x8, 0x9, 0x8, 0x8, 0x3, 0x0, 0x7ff, 0x4, 0x10, 0x749, 0x37fc, 0x22f, 0x2, 0x1, 0x4, 0x0, 0x4, 0x1, 0x439, 0x1ff, 0x4, 0x0, 0x2, 0x2, 0x400, 0xe, 0xfffffff8, 0x0, 0x4800000, 0x8, 0x7, 0x7, 0x5, 0x80, 0xb, 0x8, 0x8, 0x93a, 0x8a6, 0xb, 0x9, 0x8, 0x6, 0x78, 0x3, 0x7f, 0x2, 0x5, 0x7, 0x10000, 0xc4c, 0x7, 0x40, 0x1, 0x7, 0x0, 0x4, 0x5, 0x400, 0x8, 0x4, 0xc320, 0xfffffffb, 0x7, 0x1, 0x4, 0x100, 0x1, 0x4, 0xe, 0xd20b, 0x2322, 0x3, 0x0, 0x4, 0x1, 0x4, 0x82c, 0x10001, 0x1, 0x4, 0x3, 0x4, 0x6, 0x401, 0x7, 0x3, 0x2, 0x1, 0x8001, 0x7ff, 0xfffffff8, 0x4, 0x1, 0x2363, 0x5, 0x3, 0xfffffffc, 0x800, 0x4, 0x0, 0xf, 0xb, 0x9, 0x9, 0x4, 0x7, 0x200, 0x2, 0x0, 0x7, 0x5, 0x7fffffff, 0x10000, 0x294, 0x2, 0xdf38, 0x4, 0x6, 0x1, 0x3, 0x1, 0x8, 0x8c, 0xcb0, 0x1, 0x7, 0x3, 0x3, 0xed, 0xa21, 0xb3fb, 0x2, 0x3, 0x9, 0x2e, 0x80000000, 0xe, 0x800, 0x7fff, 0x5f, 0x100, 0x70, 0xff, 0x8, 0xe, 0x10000, 0x0, 0xffffff9c, 0x800, 0x100, 0x9, 0x4, 0x0, 0x3, 0x8, 0x5, 0x7, 0x3ff, 0x8, 0x5, 0x6, 0xfffffff8, 0xee1d, 0x0, 0x79b, 0xbbb, 0x4, 0x0, 0x3, 0x40, 0x1910, 0xb37, 0xffffffff, 0x9, 0x8, 0x80000, 0x2, 0x5, 0x4, 0x2, 0x1, 0x7, 0x43d9, 0x4, 0x7, 0xe, 0x5fd]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) 4.118613522s ago: executing program 1 (id=14608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 4.102095653s ago: executing program 8 (id=14609): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x21) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x100005, 0x40000180}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 3.958660646s ago: executing program 8 (id=14610): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.484488106s ago: executing program 7 (id=14613): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016"], 0x50}}, 0x4080) 3.430664407s ago: executing program 3 (id=14614): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) 3.423483307s ago: executing program 7 (id=14615): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x6674, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, 0x0, 0xfe) waitid(0x0, 0x0, &(0x7f00000001c0), 0x40000000, &(0x7f0000000980)) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000440)=0x10) 3.320637359s ago: executing program 0 (id=14617): syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x6000) r2 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) 3.2757596s ago: executing program 0 (id=14618): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x10000007) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x47c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RTAB={0x404, 0x2, [0x4a, 0x100, 0x6f5e895f, 0xf, 0x1, 0x7, 0x4a187b7a, 0x5, 0x7, 0x6, 0x10000, 0x8, 0x1, 0xf, 0x100, 0x2, 0x0, 0x3, 0x800, 0x2c1, 0x3, 0x101, 0x7d, 0x7fff, 0x0, 0x0, 0x606, 0x5, 0x0, 0xaf3, 0x8000, 0xd, 0x80000000, 0x9, 0x10, 0x8, 0x8, 0x0, 0x2, 0x5, 0x5, 0x7, 0x6, 0x0, 0x7, 0xfffff53b, 0x8, 0x41fe, 0x4, 0x8, 0x0, 0x9, 0x43c, 0xfffffffd, 0xffff, 0xffffff21, 0xf, 0x8, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, 0xd406, 0x2, 0x7fff, 0x4, 0x4, 0xd59, 0x1, 0x7, 0x4, 0xffff, 0x3, 0x3448575b, 0xca, 0x3, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x200, 0x800, 0x5, 0x4, 0x4, 0x40, 0x1, 0x8, 0xe, 0x1, 0x7fffffff, 0x1, 0x0, 0x10000, 0xff, 0x5, 0xa5, 0xffffff20, 0xc79, 0x1459, 0x4, 0xff, 0x0, 0x3, 0x4, 0xe, 0x200004, 0x9, 0x0, 0xe3d, 0x4, 0x0, 0xf2, 0xc, 0x80000001, 0x4, 0x7, 0x9, 0x3, 0x5, 0x7, 0x68, 0x7c, 0x8, 0xc, 0x7ff, 0x5, 0x7, 0x4, 0x2, 0x3, 0xffff, 0x8001, 0x8, 0x57, 0x4, 0x7fffffff, 0x3ff, 0x1, 0x7, 0x800, 0x8, 0x0, 0x189, 0x80, 0x3, 0x1, 0xffffffff, 0x4d, 0x0, 0xfff, 0x7, 0x0, 0x1, 0x4, 0x8670, 0xd, 0x40, 0x6, 0x3, 0x3d1f9312, 0x16, 0x499, 0x101, 0x5, 0x1, 0x9, 0x400, 0x4, 0x1ff, 0x1, 0x7, 0xa, 0x21e, 0xb8, 0xc, 0x240000, 0x1, 0x9, 0x0, 0x857e, 0x200, 0xfffffff7, 0x4, 0x7, 0x7, 0xfffffff9, 0x7, 0x3, 0x1000, 0x8, 0xffff, 0x8, 0xffffffff, 0x800000, 0x2, 0xc, 0x9, 0xd, 0x0, 0x101, 0x1000, 0x40, 0x6c, 0x5, 0x9, 0x9, 0x28478204, 0x6, 0x1284c4f0, 0x5, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x2000, 0x8, 0xfffffffb, 0x8de4, 0x116d80, 0x1, 0x5, 0x8, 0x8, 0x6, 0x1, 0xa, 0x9, 0x1, 0x5, 0x10001, 0x7033, 0xe, 0xec, 0x0, 0x3, 0xf0, 0x2, 0x82b, 0x2, 0x5, 0x7fff, 0x8, 0xe, 0x1000, 0x2, 0xfffffc00, 0x4, 0x0, 0xcfd, 0x0, 0x4, 0x1a]}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.061458465s ago: executing program 8 (id=14619): syz_emit_ethernet(0x88, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61bc4a0600202f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060002ff0700007d27010088a800b90080d5db64ec000086dd81"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='oom_adj\x00') exit(0xffff) pread64(r1, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@errors_remount}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000240)}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.896597008s ago: executing program 1 (id=14620): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x8, 0x10001}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x7ffe, 0x8000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) acct(0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8575327dcd3bbca00b09000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x4008054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000141401002abd7000fe"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 2.755677301s ago: executing program 1 (id=14621): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8006f, 0x1, @perf_config_ext={0xe98, 0x7}, 0x10c0e8, 0x0, 0x0, 0x8, 0x4, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x18000, &(0x7f0000000ac0)={[{@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4a464f54}}, {@quota}, {@noload}, {@barrier}, {@errors_continue}, {@jqfmt_vfsv1}, {@quota}, {@auto_da_alloc}]}, 0x1, 0x644, &(0x7f0000000440)="$eJzs3c9rG9kdAPDvjGzHTtw6KaU0oaWGHhIoUew0NG1PSXqoD4EGmkMpPcTEdmqi/CB2IEkDcaCHFloopddScuk/UHotvpbeSqHNreeF7LJkdw+7S7TMaGQrsmQrlmU5mc8HpHnzZqT3vho9vzczGk8ApTWdPaURxyPiWhIx1bJsMhoLp4v1Xn74+Hr2SKJe/+kHSSRFXnP9V8X0SPaUNF7z70sRX6lsLXfl4aOb87V6w5OIM6u37p5Zefjo9PKt+RuLNxZvz579/rnzMz+Y/efexHmkmM5d/sk3fv/rX35v6T+100lciKujv1qItjj2ynTj040sxNb8kYg4nyU6fC6wnyrF93E0Ir4WU1HJ5xqmYvl3Q60cMFD1SqN/qo/VgdJJYtg1AIajOQ5o7tsPYj/4IHtxMXt+0CH+kWLvfTzfNzr8MmnZM8pyI47uQflrEfH54xN/zh7R5TjEyB6U07X8pxHx9U7bP8njP5pHmsWfRtryuiw9UxzbyOr3oz7qkLSke/v+PemjtNe9Sfyt2yGL/0IxzfIvdXn/nQ7xTLfNb5Sf7DYiANjZ+sWiI88GIrHZ/2Ujw+b4J9rHP/W/5+eG2vuu3eja/7022hicfPw30qn/b/b343kfnraNw5JY+/hK57ccbc/4/2/n/tit/OmW8V/2yMpvjgV70PfQ8MXTiBNt8f8m/+iTje2fdBj/Zqtc2+Z9W0doP/7v+3Pd1usz/r7Vn0Wc7Lj/szkAy1Jt5yeTaJ6fPDd7Zmm5tjjTeO5Yxj/+9Yu/di58+PFn2/9wl/i32/5Z3t0ey/jblWe3GqlDW5ZN7hh/+t5YcjVPjeXPm81rLLlcrNKYPJhfXb13dvu6NNfJp7ON+E99u3P77xJ//tWeaP7J7MHdn413Xdbn9n9V73HFbrL4F95k+483l0b8occyPvn5/W92W7Y1/s1jEhP9BAYAAAAAAAAllObnYJO0upFO02px4u2rcTit3VlZ/c7Snfu3FyJO5b+HHE2bZ7qnGvNJNj9b/B62OX+2bf67EXEsIv5Umcjnq9fv1BaGHTwAAAAAAAAAAAAAAAAAAAAcEEeK6/9fFfcD+6iSptXqsGsF7JtB3mAOONi0fyivvP33dr+1ne5nCrxl9P9QXh3bvz8KUAqaOpTXyMZtfYGy0f9DeWn/UFZz49o/lFf39r9lydNB1wUAAAAA2DPHvrX+fCQi1n44kT8yY8Wy0aHWDBg0bRzKy/W8UF4bJ/h7u/wfeIf0NP7/tPjngIOvDjAESafMfHBQ377xr3d8JQAAAAAAAAAAAAAwACePrz9PXP8PpeSyPyiv3V3/X9n9S4EDo9O//nc7ECgH+/hQcj0cBOh6f2DX/wMAAAAAAAAAAADAvpnMH0laLX4GPBlpWq1GfCkijsZosrRcW5yJiC9HxP8qo4ey+dlhVxoAAAAAAAAAAAAAAAAAAADeMSsPH92cr9UW77UmPtuS824nmnc8PSj1aU1EMvAi0mjLmYiIgxD7YBIjLTlJxFq25ffinZP+vz9xED6fIjHkP0wAAAAAAAAAAAAAAAAAAFBCLdced3biL/tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYf5v3/98xUXmTlYvEoWHHBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vb4IAAD//xrsOW8=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r1, r2, 0x0) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0xac9}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@init_itable}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x24, 0x0) 2.575980345s ago: executing program 7 (id=14622): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2804400, &(0x7f0000000080)={[{@bh}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}, {r0, 0x40}], 0x2, 0x5e5f) shutdown(r0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000100)={0x1, 0x4, 0x10}) dup3(r2, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0xb842) io_setup(0x2, &(0x7f0000000400)) 2.259844652s ago: executing program 8 (id=14623): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 433.796951ms ago: executing program 0 (id=14624): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x200000, 0x81}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x3800) 402.828381ms ago: executing program 1 (id=14625): listen(0xffffffffffffffff, 0x2005) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000001800), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 380.519442ms ago: executing program 7 (id=14626): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40001, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xb) 349.781032ms ago: executing program 0 (id=14627): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200fdff8500000027000000950000000000000000000000a7600000000000aff605f4832ed2b0c4f7d661152b782a531c5c6870859a6ef6df9576e4a1ff42c076fb285313b2fcf86a933fdbe71d79422a95ee70319e7764c517bd83f4f96dd96f9dcbf57c5367572f6c491070ce9fa176b15d94d03085244882fb34"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xffff162d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0441, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 347.106912ms ago: executing program 7 (id=14628): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000000000011, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x8, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 310.081423ms ago: executing program 3 (id=14629): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) syz_emit_ethernet(0xbe, 0x0, 0x0) 241.593675ms ago: executing program 7 (id=14630): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 240.905055ms ago: executing program 0 (id=14631): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0xfffffffffffffffd, 0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2d0, &(0x7f0000000dc0)="$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") r1 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) r2 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000080)='nicvf0\x00', 0x1000000000000005, 0x8000, 0x7}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, 0x0, 0x40400d4) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(r1, 0x0, 0x0) 36.425829ms ago: executing program 1 (id=14632): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x683}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 0s ago: executing program 0 (id=14633): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) timer_create(0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): error (device loop3): ext4_xattr_delete_inode:3001: inode #18: comm syz.3.13722: mark_inode_dirty error [ 712.967597][T13297] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 712.967793][T13297] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #18: comm syz.3.13722: mark inode dirty (error -117) [ 712.989704][T13297] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 712.989866][T13297] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 713.079110][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.210177][T13321] netlink: 'syz.7.13730': attribute type 1 has an invalid length. [ 713.225838][T13321] 8021q: adding VLAN 0 to HW filter on device bond6 [ 713.447262][T13332] syzkaller0: entered promiscuous mode [ 713.462976][T13332] syzkaller0: entered allmulticast mode [ 713.979257][T13362] netlink: 'syz.1.13745': attribute type 1 has an invalid length. [ 713.999789][T13362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 714.061264][T13362] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 714.118918][T13362] macvlan0: entered promiscuous mode [ 714.125534][T13362] macvlan0: entered allmulticast mode [ 714.134533][T13362] bond4: entered promiscuous mode [ 714.140178][T13362] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 714.151373][T13362] bond4: left promiscuous mode [ 714.194685][T13369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13748'. [ 714.388251][T13382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.393088][T13377] loop3: detected capacity change from 0 to 512 [ 714.402518][T13382] bridge0: port 4(bond5) entered blocking state [ 714.408872][T13382] bridge0: port 4(bond5) entered disabled state [ 714.415751][T13382] bond5: entered allmulticast mode [ 714.423518][T13382] bond5: entered promiscuous mode [ 714.445100][T13377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 714.462823][T13377] EXT4-fs (loop3): Remounting filesystem read-only [ 714.469873][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 714.476318][ C0] EXT4-fs (loop3): initial error at time 1782888647: ext4_mb_generate_buddy:1317 [ 714.485485][ C0] EXT4-fs (loop3): last error at time 1782888647: ext4_mb_generate_buddy:1317 [ 714.499277][T13377] EXT4-fs (loop3): 1 truncate cleaned up [ 714.507746][T13377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.601684][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.758742][T13411] netlink: 'syz.8.13765': attribute type 1 has an invalid length. [ 714.791018][T13411] bond5: entered promiscuous mode [ 714.802486][T13411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.813499][T13421] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 714.851510][T13421] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 714.862430][T13421] bond5: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 714.892010][T13411] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 714.904619][T13411] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 715.032055][T13429] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 715.112129][T13439] netlink: 'syz.1.13774': attribute type 1 has an invalid length. [ 715.142707][T13439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 715.216102][T13444] loop0: detected capacity change from 0 to 512 [ 715.279593][T13444] EXT4-fs (loop0): unable to read superblock [ 715.986733][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13782'. [ 716.022471][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13782'. [ 716.325220][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13787'. [ 716.341926][T13477] loop1: detected capacity change from 0 to 512 [ 716.376050][T13477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.390894][T13477] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.421621][T16535] bond4: (slave ip6gretap1): link status up again after 0 ms [ 716.454925][T30552] bond4: (slave ip6gretap1): link status up again after 0 ms [ 716.463030][T30552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 716.489095][T13477] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #18: comm syz.1.13788: corrupted inode contents [ 716.516964][T13477] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 716.517162][T13477] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #18: comm syz.1.13788: mark_inode_dirty error [ 716.540021][T13477] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 716.543125][T13477] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #18: comm syz.1.13788: corrupted inode contents [ 716.567471][T13477] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 716.568721][T13477] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #18: comm syz.1.13788: mark_inode_dirty error [ 716.590945][T13477] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 716.591599][T13477] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #18: comm syz.1.13788: mark inode dirty (error -117) [ 716.614390][T13477] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 716.615941][T13477] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 716.619986][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 716.703795][ T3734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.770023][T30552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 716.815835][T13508] netlink: 'syz.7.13798': attribute type 1 has an invalid length. [ 716.831393][T13508] 8021q: adding VLAN 0 to HW filter on device bond7 [ 716.848003][T13508] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 716.879645][T13508] macvlan2: entered promiscuous mode [ 716.892257][T13508] macvlan2: entered allmulticast mode [ 716.900761][T13508] bond7: entered promiscuous mode [ 716.905939][T13508] veth0_to_bond: entered promiscuous mode [ 716.912703][T13508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 716.921798][T13508] bond7: left promiscuous mode [ 716.926659][T13508] veth0_to_bond: left promiscuous mode [ 716.964108][T13514] bond7: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 716.974133][T13514] bond7: entered allmulticast mode [ 716.991017][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 717.013454][T13514] ip6gretap0: entered promiscuous mode [ 717.021270][T13514] ip6gretap0: entered allmulticast mode [ 717.027185][T13514] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link [ 717.110222][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 717.169066][T13527] __nla_validate_parse: 2 callbacks suppressed [ 717.169173][T13527] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13805'. [ 717.229900][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 717.303744][T13531] SELinux: failed to load policy [ 717.340185][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 717.442969][T13546] netlink: 'syz.3.13813': attribute type 1 has an invalid length. [ 717.450071][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 717.482735][T13546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 717.503460][T13546] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 717.518439][T13546] macvlan2: entered promiscuous mode [ 717.523799][T13546] macvlan2: entered allmulticast mode [ 717.529925][T13546] bond6: entered promiscuous mode [ 717.534978][T13546] veth0_to_bond: entered promiscuous mode [ 717.541313][T13546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 717.553839][T13546] bond6: left promiscuous mode [ 717.558732][T13546] veth0_to_bond: left promiscuous mode [ 717.592377][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 717.592392][ T28] audit: type=1326 audit(1782888651.060:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46c6acde59 code=0x0 [ 717.720874][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13818'. [ 717.752055][ T28] audit: type=1326 audit(1782888651.210:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c6acde59 code=0x7ffc0000 [ 717.839953][ T28] audit: type=1326 audit(1782888651.220:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c6acde59 code=0x7ffc0000 [ 717.866745][ T28] audit: type=1326 audit(1782888651.220:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c6acde59 code=0x7ffc0000 [ 717.892881][ T28] audit: type=1326 audit(1782888651.220:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f46c6acde59 code=0x7ffc0000 [ 717.919875][ T28] audit: type=1326 audit(1782888651.290:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c6a8e68e code=0x7ffc0000 [ 717.945729][ T28] audit: type=1326 audit(1782888651.300:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c6a8e68e code=0x7ffc0000 [ 717.976919][ T28] audit: type=1326 audit(1782888651.310:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c6a8e68e code=0x7ffc0000 [ 718.012355][T13567] bond8: (slave ip6gretap1): making interface the new active one [ 718.036829][ T28] audit: type=1326 audit(1782888651.320:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c6a8e68e code=0x7ffc0000 [ 718.083773][T13567] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 718.094255][ T28] audit: type=1326 audit(1782888651.320:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13551 comm="syz.7.13815" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46c6a8e68e code=0x7ffc0000 [ 718.259414][T30524] Bluetooth: hci0: Frame reassembly failed (-84) [ 718.464564][T13589] 8021q: adding VLAN 0 to HW filter on device bond8 [ 718.472373][T13589] bridge0: port 3(bond8) entered blocking state [ 718.478711][T13589] bridge0: port 3(bond8) entered disabled state [ 718.486247][T13589] bond8: entered allmulticast mode [ 718.493794][T13589] bond8: entered promiscuous mode [ 718.502611][T13593] netlink: 'syz.0.13829': attribute type 1 has an invalid length. [ 718.522580][T13593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 718.546215][T13593] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 718.580123][T13593] macvlan0: entered promiscuous mode [ 718.585544][T13593] macvlan0: entered allmulticast mode [ 718.591629][T13593] bond3: entered promiscuous mode [ 718.596728][T13593] veth0_to_bond: entered promiscuous mode [ 718.603142][T13593] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 718.627918][T13599] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13831'. [ 718.639231][T13593] bond3: left promiscuous mode [ 718.644120][T13593] veth0_to_bond: left promiscuous mode [ 718.751591][T13608] syzkaller0: entered promiscuous mode [ 718.757146][T13608] syzkaller0: entered allmulticast mode [ 719.743982][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13839'. [ 719.854157][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13842'. [ 719.948045][T13632] netlink: 92 bytes leftover after parsing attributes in process `syz.8.13844'. [ 720.078671][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13849'. [ 720.106665][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13849'. [ 720.289901][ T4008] Bluetooth: hci0: command 0x1003 tx timeout [ 720.290057][ T3783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 720.945297][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13864'. [ 721.017790][T13690] netlink: 'syz.3.13868': attribute type 1 has an invalid length. [ 721.054837][T13690] bond7: entered promiscuous mode [ 721.060299][T13690] 8021q: adding VLAN 0 to HW filter on device bond7 [ 721.082370][T13690] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.095221][T13690] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 721.105816][T13690] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 721.129705][T13697] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.142194][T13697] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 721.382441][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13875'. [ 721.439923][T30691] net_ratelimit: 30 callbacks suppressed [ 721.439941][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 721.582278][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 721.690563][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 721.801313][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 721.910574][T30691] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.019946][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.139957][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.234543][T13750] netlink: 'syz.7.13885': attribute type 1 has an invalid length. [ 722.251303][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.284368][T13750] bond9: entered promiscuous mode [ 722.296169][T13750] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.326627][T13753] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 722.339076][T13753] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 722.358393][T13753] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 722.378418][T13750] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 722.392349][T13750] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 722.429966][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.559931][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 722.647630][ T28] kauditd_printk_skb: 238 callbacks suppressed [ 722.647644][ T28] audit: type=1326 audit(1782888656.110:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.697366][ T28] audit: type=1326 audit(1782888656.110:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.723898][ T28] audit: type=1326 audit(1782888656.150:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.794853][ T28] audit: type=1326 audit(1782888656.150:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.836020][ T28] audit: type=1326 audit(1782888656.150:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.893232][ T28] audit: type=1326 audit(1782888656.150:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.921736][ T28] audit: type=1326 audit(1782888656.150:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.950262][ T28] audit: type=1326 audit(1782888656.150:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 722.976763][ T28] audit: type=1326 audit(1782888656.150:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 723.014000][ T28] audit: type=1326 audit(1782888656.150:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.8.13888" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 723.295992][T13797] loop0: detected capacity change from 0 to 1024 [ 723.329051][T13797] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 723.356986][T13797] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 723.373247][T13797] EXT4-fs (loop0): orphan cleanup on readonly fs [ 723.390081][T13797] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 723.425690][T13797] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 723.443162][T13797] EXT4-fs (loop0): 1 truncate cleaned up [ 723.453431][T13806] netlink: 'syz.7.13906': attribute type 1 has an invalid length. [ 723.474689][T13797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.499798][T13806] bond10: (slave veth11): Enslaving as an active interface with a down link [ 723.552698][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.574141][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.594759][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.641302][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.665632][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.684457][T13806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 723.704714][T13806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.719972][T13806] veth1_macvtap: left promiscuous mode [ 723.726135][T13806] veth0_macvtap: left promiscuous mode [ 723.732470][T13806] veth0_macvtap: entered promiscuous mode [ 723.733580][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.739178][T13806] veth1_macvtap: entered promiscuous mode [ 723.758206][T13806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.781603][T13806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.790974][T13806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 723.804456][T13806] 8021q: adding VLAN 0 to HW filter on device eth0 [ 723.812578][T13806] 8021q: adding VLAN 0 to HW filter on device eth1 [ 723.822277][T13806] 8021q: adding VLAN 0 to HW filter on device eth2 [ 723.831434][T13806] 8021q: adding VLAN 0 to HW filter on device eth3 [ 723.846422][T13806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 723.856726][T13806] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 723.865039][T13806] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 723.874421][T13806] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 723.884070][T13806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 723.896426][T13806] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.907227][ T35] team_slave_0: entered promiscuous mode [ 723.912922][ T35] team_slave_1: entered promiscuous mode [ 723.926215][T30539] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.933340][T30539] bridge0: port 1(bridge_slave_0) entered listening state [ 723.943865][T30539] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.950958][T30539] bridge0: port 2(bridge_slave_1) entered listening state [ 723.984749][T13808] bond2: (slave dummy0): Releasing active interface [ 723.995367][T13808] bond10: (slave dummy0): making interface the new active one [ 724.004299][T13808] dummy0: entered promiscuous mode [ 724.009704][T13808] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 724.018632][T30536] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.027036][T30536] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.035521][T30536] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.044409][T30536] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.091847][T30536] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.100823][T30536] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.109079][T30536] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.117670][T30536] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.141590][T16535] bond10: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 724.270141][T13843] __nla_validate_parse: 1 callbacks suppressed [ 724.270158][T13843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13916'. [ 724.398458][T13851] loop3: detected capacity change from 0 to 1024 [ 724.441030][T13851] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 724.466374][T13851] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 724.478663][T13851] EXT4-fs (loop3): orphan cleanup on readonly fs [ 724.493621][T13851] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 724.513406][T13851] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 724.543458][T13851] EXT4-fs (loop3): 1 truncate cleaned up [ 724.551601][T13851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.695837][T13858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13922'. [ 724.719069][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.725522][T13860] netlink: 'syz.8.13923': attribute type 1 has an invalid length. [ 724.737496][T13860] netlink: 'syz.8.13923': attribute type 2 has an invalid length. [ 724.814157][T13862] IPVS: persistence engine module ip_vs_pe_• not found [ 724.832617][T13869] xt_hashlimit: size too large, truncated to 1048576 [ 725.082967][T13889] netlink: 'syz.3.13943': attribute type 1 has an invalid length. [ 725.123411][T13889] 8021q: adding VLAN 0 to HW filter on device bond9 [ 725.131925][T13889] bond8: (slave bond9): making interface the new active one [ 725.139682][T13889] bond8: (slave bond9): Enslaving as an active interface with an up link [ 725.155287][T13889] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 725.165707][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13943'. [ 725.176159][T13889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 725.805814][T13900] loop3: detected capacity change from 0 to 736 [ 725.984476][T13913] loop8: detected capacity change from 0 to 1024 [ 726.032316][T13913] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 726.066107][T13913] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 726.076819][T13913] EXT4-fs (loop8): orphan cleanup on readonly fs [ 726.083543][T13913] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 726.098340][T13913] EXT4-fs (loop8): Cannot turn on quotas: error -5 [ 726.106324][T13913] EXT4-fs (loop8): 1 truncate cleaned up [ 726.112696][T13913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.334313][T13911] loop0: detected capacity change from 0 to 128 [ 726.469900][T30552] net_ratelimit: 28 callbacks suppressed [ 726.469936][T30552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 726.609992][T30552] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 726.675051][ T7267] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.731686][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 726.840071][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 726.951423][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.001705][T13931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13942'. [ 727.080020][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.199921][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.309912][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.430474][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.486502][T13948] vlan0: entered promiscuous mode [ 727.492696][T13948] bridge0: entered promiscuous mode [ 727.539997][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 727.646023][T13959] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13954'. [ 727.721821][T13963] netlink: 'syz.3.13955': attribute type 1 has an invalid length. [ 727.751000][T13965] IPVS: persistence engine module ip_vs_pe_• not found [ 727.790070][T13972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13957'. [ 727.799542][T13963] bond10: (slave veth21): Enslaving as an active interface with a down link [ 727.852689][T13963] erspan0: left promiscuous mode [ 727.866269][T13963] bridge0: port 2(gretap0) entered blocking state [ 727.872775][T13963] bridge0: port 2(gretap0) entered listening state [ 727.882501][T13963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.890793][T13963] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.922740][T13963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 727.934012][T13963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.948530][T13963] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 727.958210][T13963] veth1_vlan: left promiscuous mode [ 727.964329][T13963] veth0_vlan: left promiscuous mode [ 727.975584][T13963] veth0_vlan: entered promiscuous mode [ 727.984600][T13963] veth1_vlan: entered promiscuous mode [ 727.992822][T13963] veth1_macvtap: left promiscuous mode [ 728.000153][T13963] veth0_macvtap: left promiscuous mode [ 728.028620][T13963] veth0_macvtap: entered promiscuous mode [ 728.038216][T13963] veth1_macvtap: entered promiscuous mode [ 728.047889][T13963] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 728.061010][T13963] 8021q: adding VLAN 0 to HW filter on device eth0 [ 728.069044][T13963] 8021q: adding VLAN 0 to HW filter on device eth1 [ 728.077204][T13963] 8021q: adding VLAN 0 to HW filter on device eth2 [ 728.085479][T13963] 8021q: adding VLAN 0 to HW filter on device eth3 [ 728.093246][T13963] erspan0: entered promiscuous mode [ 728.100018][T13963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.108926][T13963] 8021q: adding VLAN 0 to HW filter on device team1 [ 728.123161][T13963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.136327][T13963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.174619][T13963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.201838][T13963] 8021q: adding VLAN 0 to HW filter on device bond10 [ 728.316096][T13980] bond10: (slave dummy0): making interface the new active one [ 728.324636][T13980] dummy0: entered promiscuous mode [ 728.330292][T13980] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 728.339227][T30536] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.347522][T30536] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.356066][T30536] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.364803][T30536] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.382362][T30536] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.398878][T30536] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.408775][T16535] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.417251][T16535] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.436192][T13996] netlink: 'syz.0.13975': attribute type 1 has an invalid length. [ 728.478520][T13996] bond4: (slave veth9): Enslaving as an active interface with a down link [ 728.505940][T13993] vlan0: entered promiscuous mode [ 728.511800][T13993] bridge0: entered promiscuous mode [ 728.620254][T13996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.640288][T13996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 728.691253][T14001] bond4: (slave dummy0): making interface the new active one [ 728.727668][T14001] dummy0: entered promiscuous mode [ 728.740440][T14001] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 728.780729][T16535] bond10: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 728.830851][T30524] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 728.958357][T14015] bond11: (slave ip6gretap1): making interface the new active one [ 728.966776][T14015] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 729.045933][T14025] random: crng reseeded on system resumption [ 729.080640][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 729.080652][ T28] audit: type=1400 audit(1782888662.550:4649): avc: denied { getopt } for pid=14026 comm="syz.1.13973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 729.238039][T14034] geneve2: entered promiscuous mode [ 729.251580][T14034] geneve2: entered allmulticast mode [ 729.635332][T14041] loop0: detected capacity change from 0 to 736 [ 729.826823][T14047] netlink: 'syz.0.13983': attribute type 1 has an invalid length. [ 729.837429][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13983'. [ 730.089075][T14052] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 730.501732][T14068] tipc: Started in network mode [ 730.512245][T14068] tipc: Node identity 2e2bc12f7399, cluster identity 4711 [ 730.528584][T14068] tipc: Enabled bearer , priority 0 [ 730.638199][T14068] syzkaller0: entered promiscuous mode [ 730.652608][T14068] syzkaller0: entered allmulticast mode [ 730.680027][T14067] tipc: Resetting bearer [ 730.719514][T14067] tipc: Disabling bearer [ 730.745031][T14076] netlink: 830 bytes leftover after parsing attributes in process `syz.3.13990'. [ 730.787697][T14079] netlink: 'syz.1.13991': attribute type 1 has an invalid length. [ 730.864945][T14079] bond9: (slave veth13): Enslaving as an active interface with a down link [ 730.903654][T14079] bridge0: port 3(team0) entered blocking state [ 730.910206][T14079] bridge0: port 3(team0) entered listening state [ 730.916701][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.923772][T14079] bridge0: port 2(bridge_slave_1) entered listening state [ 730.931009][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.938115][T14079] bridge0: port 1(bridge_slave_0) entered listening state [ 730.952889][T14084] netlink: 'syz.0.13993': attribute type 1 has an invalid length. [ 730.989633][T14079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.003398][T14079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 731.025958][T14079] 8021q: adding VLAN 0 to HW filter on device bond7 [ 731.047684][T14079] 8021q: adding VLAN 0 to HW filter on device bond8 [ 731.138791][T14096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13993'. [ 731.166654][T14079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 731.200130][T30703] bond7: (slave ip6gretap0): link status definitely up, 0 Mbps full duplex [ 731.209011][T30703] bond7: active interface up! [ 731.234096][T14086] bond9: (slave dummy0): making interface the new active one [ 731.251281][T14086] dummy0: entered promiscuous mode [ 731.262624][T14086] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 731.308336][T14091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.316886][T14091] bond5: (slave bond6): making interface the new active one [ 731.332100][T14091] bond5: (slave bond6): Enslaving as an active interface with an up link [ 731.353723][T14094] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 731.367668][T14096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.431057][T30539] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 731.551825][T30524] net_ratelimit: 23 callbacks suppressed [ 731.551849][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 731.679899][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 731.789909][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 731.901291][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.010005][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.130151][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.239895][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.266746][T14132] loop8: detected capacity change from 0 to 128 [ 732.349951][T30539] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.479907][T30703] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.601811][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 732.917839][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.936722][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.971932][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14014'. [ 732.982155][T14147] vlan3: entered promiscuous mode [ 732.988097][T14147] bridge0: entered promiscuous mode [ 733.013632][T14149] 8021q: adding VLAN 0 to HW filter on device bond12 [ 733.037424][T14149] bond12 (unregistering): Released all slaves [ 733.083005][T14153] loop8: detected capacity change from 0 to 512 [ 733.092708][T14153] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 733.131439][T14153] EXT4-fs (loop8): 1 truncate cleaned up [ 733.140306][T14153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.211520][ T7267] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.261415][T14162] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 733.304942][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14031'. [ 733.323251][T14170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14170 comm=syz.3.14031 [ 733.608153][T14184] loop5: detected capacity change from 0 to 7 [ 734.226423][T14190] vlan1: entered promiscuous mode [ 734.240539][T14190] bridge0: entered promiscuous mode [ 735.070062][ T28] audit: type=1400 audit(1782888668.530:4650): avc: denied { bind } for pid=14219 comm="syz.0.14041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 735.150890][T16535] dummy0: left promiscuous mode [ 735.279923][T14222] loop0: detected capacity change from 0 to 512 [ 735.302644][T14222] EXT4-fs: Ignoring removed nobh option [ 735.341434][T14222] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 735.356020][T14222] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.14042: inode has both inline data and extents flags [ 735.372630][T14222] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 735.373236][T14222] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.14042: couldn't read orphan inode 13 (err -117) [ 735.382538][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 735.382628][ C0] EXT4-fs (loop0): initial error at time 1782888668: ext4_orphan_get:1399: inode 13 [ 735.382688][ C0] EXT4-fs (loop0): last error at time 1782888668: ext4_orphan_get:1399: inode 13 [ 735.421725][T14222] loop0: lost filesystem error report for type 5 error -117 [ 735.430564][T14222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.483033][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.526012][ T28] audit: type=1400 audit(1782888668.990:4651): avc: denied { create } for pid=14232 comm="syz.8.14048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 735.745607][T14252] syzkaller0: entered promiscuous mode [ 735.772027][T14252] syzkaller0: entered allmulticast mode [ 735.872782][T14256] netlink: 'syz.8.14055': attribute type 10 has an invalid length. [ 735.894888][T14256] netlink: 16154 bytes leftover after parsing attributes in process `syz.8.14055'. [ 736.042115][T14269] loop0: detected capacity change from 0 to 512 [ 736.046158][ T28] audit: type=1400 audit(1782888669.500:4652): avc: denied { getopt } for pid=14265 comm="syz.8.14056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 736.113615][T14269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.137282][T14269] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.172923][ T28] audit: type=1400 audit(1782888669.630:4653): avc: denied { write } for pid=14268 comm="syz.0.14057" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 736.595209][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.670369][T30701] net_ratelimit: 34 callbacks suppressed [ 736.670385][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 736.708398][T14322] netlink: 'syz.7.14059': attribute type 6 has an invalid length. [ 736.811190][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 736.932479][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.052229][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.170661][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.289977][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.400946][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.519909][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.639924][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.750115][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 737.880549][T14371] netlink: 'syz.8.14078': attribute type 1 has an invalid length. [ 737.953388][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.955608][T14371] bond6: (slave veth11): Enslaving as an active interface with a down link [ 737.973526][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.988873][ T28] audit: type=1326 audit(1782888671.450:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.3.14088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77b840de59 code=0x0 [ 738.087902][T14371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.106934][T14371] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.177578][T14371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 738.194493][T14371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 738.207735][T14371] veth1_vlan: left promiscuous mode [ 738.214130][T14371] veth0_vlan: left promiscuous mode [ 738.221480][T14371] veth0_vlan: entered promiscuous mode [ 738.228821][T14371] veth1_vlan: entered promiscuous mode [ 738.237825][T14371] veth1_macvtap: left promiscuous mode [ 738.244098][T14371] veth0_macvtap: left promiscuous mode [ 738.250690][T14371] veth0_macvtap: entered promiscuous mode [ 738.257790][T14371] veth1_macvtap: entered promiscuous mode [ 738.268048][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.276834][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.286721][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.296054][T14371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.343780][T14371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.354550][T14371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.364598][T14371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.377463][T14371] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 738.391728][T14371] 8021q: adding VLAN 0 to HW filter on device bond6 [ 738.407316][T14382] bond6: (slave dummy0): making interface the new active one [ 738.416266][T14382] dummy0: entered promiscuous mode [ 738.422022][T14382] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 738.435073][T30556] bridge0: port 3(team0) entered blocking state [ 738.441501][T30556] bridge0: port 3(team0) entered listening state [ 738.462158][T30556] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.469248][T30556] bridge0: port 1(bridge_slave_0) entered listening state [ 738.479623][T30556] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.486770][T30556] bridge0: port 2(bridge_slave_1) entered listening state [ 738.574264][T30525] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.585204][T30701] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.602923][T30701] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.615540][T30701] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.630298][T30525] bond6: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 738.650214][T30701] bond3: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 738.660095][T30701] bond3: active interface up! [ 738.682572][T14392] loop0: detected capacity change from 0 to 1024 [ 738.701709][T14392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 738.715085][T14392] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.743457][ T28] audit: type=1400 audit(1782888672.210:4655): avc: denied { write } for pid=14390 comm="syz.0.14085" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 738.823869][T30525] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:36: lblock 0 mapped to illegal pblock 0 (length 6) [ 738.859219][T30525] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 738.877830][T30525] EXT4-fs (loop0): This should not happen!! Data will be lost [ 738.877830][T30525] [ 738.899607][T30525] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:36: lblock 8 mapped to illegal pblock 8 (length 8) [ 738.925317][T30525] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 738.948147][T30525] EXT4-fs (loop0): This should not happen!! Data will be lost [ 738.948147][T30525] [ 738.979544][T14406] loop3: detected capacity change from 0 to 8192 [ 739.079106][T14416] gretap0: left allmulticast mode [ 739.085797][T14416] gretap0: left promiscuous mode [ 739.093994][T14416] bridge0: port 2(gretap0) entered disabled state [ 739.114865][T14416] bond10: (slave dummy0): Releasing active interface [ 739.122387][T14416] dummy0: left promiscuous mode [ 739.130663][T14416] bond10: (slave veth21): making interface the new active one [ 739.153619][T14416] bond6: (slave veth0_to_bond): Releasing backup interface [ 739.193972][T14417] team0: Port device xfrm0 added [ 739.212452][T14418] tipc: Enabled bearer , priority 0 [ 739.274690][T14392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14085: bg 0: block 112: padding at end of block bitmap is not set [ 739.289676][T14392] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 739.294185][T14420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14092'. [ 739.312999][T14392] EXT4-fs (loop0): This should not happen!! Data will be lost [ 739.312999][T14392] [ 739.323034][T14392] EXT4-fs (loop0): Total free blocks count 0 [ 739.329057][T14392] EXT4-fs (loop0): Free/Dirty block details [ 739.335181][T14392] EXT4-fs (loop0): free_blocks=0 [ 739.422836][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14095'. [ 739.441993][ T8554] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 739.461049][T14424] netlink: 'syz.3.14093': attribute type 1 has an invalid length. [ 739.477114][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14095'. [ 739.546839][T14424] bond12: (slave veth25): Enslaving as an active interface with a down link [ 739.600903][ T28] audit: type=1400 audit(1782888673.070:4656): avc: denied { write } for pid=3734 comm="syz-executor" name="629" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 739.675228][T14438] xt_hashlimit: size too large, truncated to 1048576 [ 739.695032][ T28] audit: type=1400 audit(1782888673.100:4657): avc: denied { write } for pid=3734 comm="syz-executor" name="629" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 739.725878][ T28] audit: type=1400 audit(1782888673.100:4658): avc: denied { write } for pid=3734 comm="syz-executor" name="629" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 739.745622][T14433] 8021q: adding VLAN 0 to HW filter on device bond11 [ 739.757273][ T28] audit: type=1400 audit(1782888673.100:4659): avc: denied { write } for pid=3734 comm="syz-executor" name="629" dev="tmpfs" ino=3268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 739.784206][T14433] 8021q: adding VLAN 0 to HW filter on device bond12 [ 739.810853][T30555] bond12: (slave veth25): link status definitely up, 10000 Mbps full duplex [ 739.820363][T30555] bond12: (slave veth25): making interface the new active one [ 739.837217][T30555] bond12: active interface up! [ 739.879014][T14424] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 739.915725][T14446] syzkaller0: entered promiscuous mode [ 739.924437][T14446] syzkaller0: entered allmulticast mode [ 740.031366][T14456] netlink: 'syz.1.14105': attribute type 1 has an invalid length. [ 740.190853][T30555] dummy0: left promiscuous mode [ 740.218665][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14110'. [ 740.271971][ T28] audit: type=1326 audit(1782888673.740:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.0.14120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd974dede59 code=0x0 [ 740.306987][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14110'. [ 740.414152][ T28] audit: type=1400 audit(1782888673.880:4661): avc: denied { write } for pid=29126 comm="syz-executor" name="1039" dev="tmpfs" ino=5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 740.462977][ T28] audit: type=1400 audit(1782888673.880:4662): avc: denied { write } for pid=29126 comm="syz-executor" name="1039" dev="tmpfs" ino=5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 740.490116][ T28] audit: type=1400 audit(1782888673.880:4663): avc: denied { write } for pid=29126 comm="syz-executor" name="1039" dev="tmpfs" ino=5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 740.517145][ T28] audit: type=1400 audit(1782888673.880:4664): avc: denied { write } for pid=29126 comm="syz-executor" name="1039" dev="tmpfs" ino=5411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 740.665891][T14490] netlink: 'syz.1.14115': attribute type 1 has an invalid length. [ 740.701018][T14490] bond10: (slave veth15): Enslaving as an active interface with a down link [ 740.809375][T14490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 740.831628][T14496] bond9: (slave dummy0): Releasing active interface [ 740.841008][T14496] dummy0: left promiscuous mode [ 740.849039][T14496] bond9: (slave veth13): making interface the new active one [ 740.867391][T14496] bond10: (slave dummy0): making interface the new active one [ 740.874947][ T28] audit: type=1326 audit(1782888674.340:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 740.891065][T14496] dummy0: entered promiscuous mode [ 740.902435][ T28] audit: type=1326 audit(1782888674.340:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 740.933573][ T28] audit: type=1326 audit(1782888674.340:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 740.933577][T14496] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 740.933628][ T28] audit: type=1326 audit(1782888674.340:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 741.000540][T30525] bond10: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 741.021747][ T28] audit: type=1326 audit(1782888674.400:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14494 comm="syz.3.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 741.131135][T14508] loop0: detected capacity change from 0 to 164 [ 741.179523][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14123'. [ 741.201607][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14123'. [ 741.296021][T14521] loop8: detected capacity change from 0 to 8192 [ 741.319906][T14523] syzkaller0: entered promiscuous mode [ 741.329044][T14523] syzkaller0: entered allmulticast mode [ 741.460177][T14530] netlink: 'syz.0.14135': attribute type 1 has an invalid length. [ 741.543667][T14530] bond7: (slave veth11): Enslaving as an active interface with a down link [ 741.667848][T14530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 741.680472][T30525] net_ratelimit: 38 callbacks suppressed [ 741.680486][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 741.708771][T14541] bond4: (slave dummy0): Releasing active interface [ 741.721197][T14541] bond4: (slave veth9): making interface the new active one [ 741.734052][T14541] bond7: (slave dummy0): making interface the new active one [ 741.743926][T14541] dummy0: entered promiscuous mode [ 741.749386][T14541] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 741.772274][T30556] bond7: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 741.810330][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 741.918585][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14140'. [ 741.919894][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 741.959586][T14551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14551 comm=syz.8.14140 [ 742.041670][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.160225][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.269925][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.291448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.379956][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.464559][T14558] syzkaller0: entered promiscuous mode [ 742.465082][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14141'. [ 742.478527][T14558] syzkaller0: entered allmulticast mode [ 742.488427][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14141'. [ 742.498552][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.508569][T14557] loop5: detected capacity change from 0 to 7 [ 742.577236][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14145'. [ 742.596068][T14569] team1: entered promiscuous mode [ 742.606681][T14569] team1: entered allmulticast mode [ 742.613686][T14569] 8021q: adding VLAN 0 to HW filter on device team1 [ 742.625919][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14145'. [ 742.643004][T14576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.645673][T14572] vlan0: entered promiscuous mode [ 742.662219][T14569] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 742.667447][T14576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.688808][T14569] team2: entered promiscuous mode [ 742.695167][T14569] team2: entered allmulticast mode [ 742.700715][T14569] 8021q: adding VLAN 0 to HW filter on device team2 [ 742.721094][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 742.841235][T14589] loop5: detected capacity change from 0 to 7 [ 742.923891][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14159'. [ 742.929400][T14599] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14160'. [ 742.986706][T14599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14599 comm=syz.7.14160 [ 743.001081][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14159'. [ 743.074989][T14604] tipc: Enabling of bearer rejected, failed to enable media [ 743.335501][T14619] loop1: detected capacity change from 0 to 736 [ 743.415180][T14625] loop0: detected capacity change from 0 to 8192 [ 743.552438][T14631] loop1: detected capacity change from 0 to 1024 [ 743.579944][T14631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 743.596571][T14635] netlink: 'syz.0.14172': attribute type 1 has an invalid length. [ 743.599255][T14631] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.631046][T14638] tipc: Enabled bearer , priority 0 [ 743.729295][T30555] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:60: lblock 0 mapped to illegal pblock 0 (length 6) [ 743.790613][T30555] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 743.830795][T30555] EXT4-fs (loop1): This should not happen!! Data will be lost [ 743.830795][T30555] [ 743.845379][T14638] syzkaller0: entered promiscuous mode [ 743.851137][T14638] syzkaller0: entered allmulticast mode [ 743.858507][T30555] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:60: lblock 8 mapped to illegal pblock 8 (length 8) [ 743.891871][T30555] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 743.906537][T14637] tipc: Resetting bearer [ 743.922197][T30555] EXT4-fs (loop1): This should not happen!! Data will be lost [ 743.922197][T30555] [ 743.945221][T14637] tipc: Disabling bearer [ 744.288861][T14670] lo: Caught tx_queue_len zero misconfig [ 744.473341][T14631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14173: bg 0: block 112: padding at end of block bitmap is not set [ 744.499217][T14631] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1760 with max blocks 2048 with error 28 [ 744.514809][T14631] EXT4-fs (loop1): This should not happen!! Data will be lost [ 744.514809][T14631] [ 744.521746][T14682] bond0: (slave bond_slave_0): Releasing backup interface [ 744.531532][T14631] EXT4-fs (loop1): Total free blocks count 0 [ 744.536950][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.542532][T14631] EXT4-fs (loop1): Free/Dirty block details [ 744.562550][T14631] EXT4-fs (loop1): free_blocks=0 [ 744.567015][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.619071][T14682] bond_slave_0: entered promiscuous mode [ 744.622779][ T3734] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 744.625068][T14682] bond_slave_0: entered allmulticast mode [ 745.000302][T14723] loop0: detected capacity change from 0 to 512 [ 745.042340][T14723] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.14198: Failed to acquire dquot type 1 [ 745.099423][T14723] loop0: lost filesystem error report for type 5 error -117 [ 745.099863][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 745.113816][ C0] EXT4-fs (loop0): initial error at time 1782888678: ext4_acquire_dquot:7041 [ 745.122806][ C0] EXT4-fs (loop0): last error at time 1782888678: ext4_acquire_dquot:7041 [ 745.134140][T14723] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14198: bg 0: block 495: padding at end of block bitmap is not set [ 745.193222][T14723] loop0: lost filesystem error report for type 5 error -117 [ 745.194335][T14723] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 745.221314][T14723] loop0: lost filesystem error report for type 5 error -117 [ 745.223396][T14723] EXT4-fs (loop0): 1 truncate cleaned up [ 745.239549][T14723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.258673][T14723] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.281819][T14723] ext4: Unknown parameter '€Â' [ 745.299115][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.343984][T14735] bond10: (slave dummy0): Releasing active interface [ 745.353372][T14735] bond10: (slave veth11): making interface the new active one [ 745.388023][T14735] bridge_slave_0: left allmulticast mode [ 745.414317][T14735] bridge_slave_0: left promiscuous mode [ 745.443145][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.487537][T14735] bridge_slave_1: left allmulticast mode [ 745.509116][T14735] bridge_slave_1: left promiscuous mode [ 745.527030][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.569267][T14735] bond7: (slave veth0_to_bond): Releasing backup interface [ 745.602283][T14735] bond0: (slave bond_slave_0): Releasing backup interface [ 745.634229][T14735] bond0: (slave bond_slave_1): Releasing backup interface [ 745.665404][T14735] team_slave_0: left promiscuous mode [ 745.681099][T14735] team0: Port device team_slave_0 removed [ 745.715774][T14735] team_slave_1: left promiscuous mode [ 745.735229][T14735] team0: Port device team_slave_1 removed [ 745.765949][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.796326][T14735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 745.811874][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.834728][T14735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.867246][T14740] team0: Refused to change device type [ 745.906157][T14742] tipc: Started in network mode [ 745.944411][T14742] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 745.961126][T14742] tipc: Enabled bearer , priority 0 [ 745.992385][T30555] tipc: Resetting bearer [ 746.108042][T14755] loop1: detected capacity change from 0 to 256 [ 746.199284][T14757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14757 comm=syz.7.14212 [ 746.456686][T14786] __nla_validate_parse: 3 callbacks suppressed [ 746.456699][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14223'. [ 746.499264][T14786] bond8: entered promiscuous mode [ 746.504892][T14786] 8021q: adding VLAN 0 to HW filter on device bond8 [ 746.524610][T14792] syzkaller0: entered promiscuous mode [ 746.532100][T14792] syzkaller0: entered allmulticast mode [ 746.558678][T14786] veth13: entered promiscuous mode [ 746.579510][T14786] bond8: (slave veth13): Enslaving as an active interface with an up link [ 746.739890][T30556] net_ratelimit: 28 callbacks suppressed [ 746.739905][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 746.816609][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14229'. [ 747.479043][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14235'. [ 747.620026][T18529] tipc: Node number set to 11578026 [ 747.670064][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14237'. [ 747.679191][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 747.724729][T14832] netlink: 'syz.7.14239': attribute type 21 has an invalid length. [ 747.741979][T14833] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 747.744642][T14832] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.761405][T14832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.768662][T14832] IPv6: NLM_F_CREATE should be set when creating new route [ 747.776011][T14832] IPv6: NLM_F_CREATE should be set when creating new route [ 747.777144][T14838] netlink: 'syz.7.14239': attribute type 21 has an invalid length. [ 747.783303][T14832] IPv6: NLM_F_CREATE should be set when creating new route [ 747.799217][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 747.801999][T14838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.807091][T14827] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14237'. [ 747.829395][T14827] bond11: entered promiscuous mode [ 747.842185][T14827] bridge6: entered promiscuous mode [ 747.847664][T14827] bond11: entered allmulticast mode [ 747.853567][T14827] bridge6: entered allmulticast mode [ 747.860474][T14827] 8021q: adding VLAN 0 to HW filter on device bond11 [ 747.921586][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 747.972037][T14851] loop1: detected capacity change from 0 to 1024 [ 748.012631][T14851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.030213][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.052225][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 748.052240][ T28] audit: type=1400 audit(1782888681.520:4691): avc: denied { write } for pid=14849 comm="syz.1.14256" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 748.151318][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.175564][T14860] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14248'. [ 748.221848][T14860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14860 comm=syz.7.14248 [ 748.259930][T16535] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.295565][T14864] loop0: detected capacity change from 0 to 2048 [ 748.332076][T14864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.362668][T14864] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.380324][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.402016][ T28] audit: type=1400 audit(1782888681.870:4692): avc: denied { write } for pid=14863 comm="syz.0.14250" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 748.431090][T14864] veth0_macvtap: left promiscuous mode [ 748.489965][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.521114][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.600108][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 748.670600][ T28] audit: type=1400 audit(1782888682.130:4693): avc: denied { write } for pid=14873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.735622][ T28] audit: type=1400 audit(1782888682.200:4694): avc: denied { write } for pid=14888 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.788749][ T3017] veth0_macvtap: entered promiscuous mode [ 748.868885][T30699] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 748.917746][T30699] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28 [ 748.963436][T30699] EXT4-fs (loop1): This should not happen!! Data will be lost [ 748.963436][T30699] [ 748.997701][T30699] EXT4-fs (loop1): Total free blocks count 0 [ 749.025622][T30699] EXT4-fs (loop1): Free/Dirty block details [ 749.048286][T30699] EXT4-fs (loop1): free_blocks=20480 [ 749.050102][ T28] audit: type=1400 audit(1782888682.510:4695): avc: denied { write } for pid=14895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.065857][T30699] EXT4-fs (loop1): dirty_blocks=64 [ 749.110024][T30699] EXT4-fs (loop1): Block reservation details [ 749.116174][T30699] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 749.123054][ T3734] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 749.135389][ T3734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.234548][ T28] audit: type=1400 audit(1782888682.700:4696): avc: denied { write } for pid=14906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.631377][T30525] dummy0: left promiscuous mode [ 750.138242][T14964] loop1: detected capacity change from 0 to 256 [ 750.609358][T14983] loop8: detected capacity change from 0 to 256 [ 750.652372][T14984] loop1: detected capacity change from 0 to 256 [ 750.700082][T14984] FAT-fs (loop1): data area starts beyond volume (32 > 0) [ 750.707692][T14984] FAT-fs (loop1): Can't find a valid FAT filesystem [ 750.736250][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14289'. [ 750.938298][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14285'. [ 750.973244][T14998] bond12: entered promiscuous mode [ 750.990180][T14998] 8021q: adding VLAN 0 to HW filter on device bond12 [ 751.046992][T14998] veth17: entered promiscuous mode [ 751.053303][T14998] bond12: (slave veth17): Enslaving as an active interface with an up link [ 751.099914][T15003] team0: left allmulticast mode [ 751.126903][T15003] team_slave_0: left allmulticast mode [ 751.141633][T15003] team_slave_1: left allmulticast mode [ 751.142323][T15006] netlink: 'syz.1.14290': attribute type 10 has an invalid length. [ 751.147489][T15003] bond0: left allmulticast mode [ 751.163403][T15003] bond_slave_1: left allmulticast mode [ 751.169267][T15003] team0: left promiscuous mode [ 751.174881][T15003] team_slave_0: left promiscuous mode [ 751.181017][T15003] team_slave_1: left promiscuous mode [ 751.188570][T15003] bond0: left promiscuous mode [ 751.197812][T15010] netlink: 'syz.1.14290': attribute type 10 has an invalid length. [ 751.206477][T15003] bond_slave_1: left promiscuous mode [ 751.213017][T15003] bridge0: port 3(team0) entered disabled state [ 751.232842][T15003] bridge_slave_1: left allmulticast mode [ 751.238539][T15003] bridge_slave_1: left promiscuous mode [ 751.244492][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.253004][T15003] bridge_slave_0: left allmulticast mode [ 751.258955][T15003] bridge_slave_0: left promiscuous mode [ 751.265794][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.290123][T15006] bond10: (slave dummy0): Releasing active interface [ 751.297017][T15006] dummy0: left promiscuous mode [ 751.303235][T15006] bond10: (slave veth15): making interface the new active one [ 751.314638][T15006] dummy0: entered promiscuous mode [ 751.320539][T15006] dummy0: entered allmulticast mode [ 751.326835][T15006] team0: Port device dummy0 added [ 751.366323][T15010] dummy0: left promiscuous mode [ 751.380665][T15010] dummy0: left allmulticast mode [ 751.388759][T15010] team0: Port device dummy0 removed [ 751.405002][T15010] dummy0: entered promiscuous mode [ 751.411717][T15010] dummy0: entered allmulticast mode [ 751.437870][T15010] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 751.470850][T15008] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 751.510442][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14294'. [ 751.532408][T15008] bond9: (slave lo): Enslaving as an active interface with an up link [ 751.607538][T15027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15027 comm=syz.1.14294 [ 751.829933][T30699] net_ratelimit: 24 callbacks suppressed [ 751.829966][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 751.949955][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.059966][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.179989][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.300634][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.439962][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.462981][T15046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14301'. [ 752.497876][T15048] netlink: 'syz.7.14302': attribute type 4 has an invalid length. [ 752.518456][T15041] loop8: detected capacity change from 0 to 736 [ 752.559983][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.603236][T15052] loop1: detected capacity change from 0 to 128 [ 752.638638][T15056] syzkaller0: Caught tx_queue_len zero misconfig [ 752.700229][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.820173][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 752.890616][T30701] dummy0: left promiscuous mode [ 752.933493][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 754.022356][T15108] loop0: detected capacity change from 0 to 1024 [ 754.060276][T15108] EXT4-fs (loop0): filesystem is read-only [ 754.233151][T15116] loop1: detected capacity change from 0 to 764 [ 754.244730][T15116] rock: directory entry would overflow storage [ 754.252560][T15116] rock: sig=0x4654, size=5, remaining=4 [ 754.276973][T15116] netlink: 277 bytes leftover after parsing attributes in process `syz.1.14327'. [ 754.769167][ T28] audit: type=1326 audit(1782888688.230:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15117 comm="syz.7.14329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46c6acde59 code=0x0 [ 755.596623][T15139] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.14345'. [ 755.802820][T15149] netlink: 'syz.0.14338': attribute type 1 has an invalid length. [ 755.986939][ T28] audit: type=1400 audit(1782888689.450:4698): avc: denied { write } for pid=15147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.055691][ T28] audit: type=1400 audit(1782888689.520:4699): avc: denied { write } for pid=15170 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.130846][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 756.170857][T15174] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.197259][T15174] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.272539][T15174] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.285117][T15174] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.358631][T15174] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.380110][T15174] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.444723][T15174] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.458823][T15174] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.527120][ T28] audit: type=1400 audit(1782888689.990:4700): avc: denied { write } for pid=15186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.557259][ T28] audit: type=1400 audit(1782888689.990:4701): avc: denied { write } for pid=15204 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.568235][T30699] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.590297][T15200] netlink: 56 bytes leftover after parsing attributes in process `syz.7.14350'. [ 756.595253][T30699] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.622565][T30699] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.657453][T30699] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.666119][T30699] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.675921][T30699] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.685680][T30699] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.694269][T30699] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.741619][T15217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14354'. [ 756.765791][T15217] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15217 comm=syz.1.14354 [ 756.835769][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14357'. [ 756.907721][T15228] bridge0: port 3(team0) entered disabled state [ 756.914795][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.921966][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.943233][T15232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15232 comm=syz.7.14357 [ 757.006519][T15228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.020219][T15228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.129112][T15228] batman_adv: batadv0: Interface deactivated: gretap2 [ 757.186700][T15215] tipc: Enabling of bearer rejected, failed to enable media [ 757.213605][T30701] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.233130][T30701] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.261819][T30701] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.275743][T30701] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.307550][T30701] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.316557][T30701] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.330192][T30701] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.339284][T30701] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.368434][T30701] net_ratelimit: 31 callbacks suppressed [ 757.368449][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 757.437369][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14364'. [ 757.451367][T15255] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14363'. [ 757.468157][T15254] bond7: entered promiscuous mode [ 757.480814][T15254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 757.501594][T15254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 757.512912][T15254] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 757.525165][T15254] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 757.534443][T15264] loop1: detected capacity change from 0 to 256 [ 757.553895][T15266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.561166][T15266] IPv6: NLM_F_CREATE should be set when creating new route [ 757.568379][T15266] IPv6: NLM_F_CREATE should be set when creating new route [ 757.577002][T15264] FAT-fs (loop1): IO charset macroman not found [ 757.585191][T15266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.600188][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 757.617087][T15266] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 757.629633][T15266] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 757.651798][ T28] audit: type=1400 audit(1782888691.120:4702): avc: denied { kill } for pid=15263 comm="syz.1.14365" capability=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 757.720130][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 757.777983][T15280] loop1: detected capacity change from 0 to 512 [ 757.842889][T15280] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 757.860690][T15280] EXT4-fs (loop1): orphan cleanup on readonly fs [ 757.869790][T15280] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 757.882704][T15280] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 757.898757][T15280] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 757.907323][T15278] tipc: Resetting bearer [ 757.907361][T15280] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.14369: inode has both inline data and extents flags [ 757.907414][T15280] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 757.907870][T15280] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14369: couldn't read orphan inode 16 (err -117) [ 757.912880][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 757.912910][ C0] EXT4-fs (loop1): initial error at time 1782888691: ext4_orphan_get:1399: inode 16 [ 757.912980][ C0] EXT4-fs (loop1): last error at time 1782888691: ext4_orphan_get:1399: inode 16 [ 757.918242][T15283] futex_wake_op: syz.8.14370 tries to shift op by -1; fix this program [ 757.927408][T15280] loop1: lost filesystem error report for type 5 error -117 [ 757.931095][T15280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 758.339178][T15278] 8021q: adding VLAN 0 to HW filter on device bond11 [ 758.374813][ T28] audit: type=1400 audit(1782888691.840:4703): avc: denied { write } for pid=15292 comm="syz.3.14372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 758.435200][ T3734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.444289][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.445147][ T28] audit: type=1400 audit(1782888691.900:4704): avc: denied { create } for pid=15291 comm="syz.0.14373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 758.499636][T15299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14376'. [ 758.536609][T15306] netlink: 48 bytes leftover after parsing attributes in process `syz.8.14378'. [ 758.546661][T15306] lo: Caught tx_queue_len zero misconfig [ 758.556061][T15309] netlink: 'syz.7.14377': attribute type 3 has an invalid length. [ 758.564544][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.568417][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14377'. [ 758.691070][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.746591][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14385'. [ 758.758882][T15322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.774627][T15320] 8021q: adding VLAN 0 to HW filter on device bond8 [ 758.789751][T15320] bond8: entered promiscuous mode [ 758.795124][T15320] bond8: entered allmulticast mode [ 758.803025][T15320] bond0: entered promiscuous mode [ 758.808207][T15320] bond_slave_1: entered promiscuous mode [ 758.817033][T15320] team0: Port device bond0 removed [ 758.823563][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.831410][T15320] bond0: entered allmulticast mode [ 758.836676][T15320] bond_slave_1: entered allmulticast mode [ 758.843024][T15320] bond8: (slave bond0): Enslaving as an active interface with an up link [ 758.852486][T15324] erspan0: entered promiscuous mode [ 758.859948][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14384'. [ 758.879948][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 758.989907][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 759.099959][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 759.209938][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 759.270833][T15330] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.281931][T15330] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.352330][T15330] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.365517][T15330] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.449603][T15330] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.465242][T15330] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.543372][T15330] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.560620][T15330] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.572049][T15356] syzkaller0: entered promiscuous mode [ 759.577523][T15356] syzkaller0: entered allmulticast mode [ 759.587737][T15356] tipc: Enabled bearer , priority 0 [ 759.690170][T30536] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.700889][T30536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.737818][T30524] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.761467][T30524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.792923][T15356] tipc: Resetting bearer [ 759.803239][T15356] tipc: Disabling bearer [ 759.818929][T30524] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.869617][T30524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.942673][T30524] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.000500][T30524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.119630][ T28] audit: type=1400 audit(1782888693.580:4705): avc: denied { write } for pid=15367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.174073][ T28] audit: type=1400 audit(1782888693.610:4706): avc: denied { write } for pid=15385 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.208407][T15393] netlink: 'syz.8.14405': attribute type 1 has an invalid length. [ 760.229306][T15389] loop3: detected capacity change from 0 to 512 [ 760.587639][T15423] netlink: 'syz.3.14416': attribute type 20 has an invalid length. [ 760.670980][T15423] netlink: 'syz.3.14416': attribute type 20 has an invalid length. [ 760.716567][T15435] loop0: detected capacity change from 0 to 164 [ 760.750302][T15435] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 760.877338][T15451] syzkaller1: entered promiscuous mode [ 760.900858][T15451] syzkaller1: entered allmulticast mode [ 761.148890][ T28] audit: type=1400 audit(1782888694.610:4707): avc: denied { write } for pid=15464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.233715][ T28] audit: type=1400 audit(1782888694.700:4708): avc: denied { write } for pid=15478 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.329308][T15488] bond13: entered promiscuous mode [ 761.335513][T15488] 8021q: adding VLAN 0 to HW filter on device bond13 [ 761.349963][T15490] netlink: 'syz.8.14435': attribute type 3 has an invalid length. [ 761.362895][T15488] 8021q: adding VLAN 0 to HW filter on device bond13 [ 761.370767][T15488] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 761.383995][T15488] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 761.401810][T15492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 761.409053][T15492] IPv6: NLM_F_CREATE should be set when creating new route [ 761.416268][T15492] IPv6: NLM_F_CREATE should be set when creating new route [ 761.429516][T15492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 761.454843][T15492] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 761.484040][T15492] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 762.276289][ T28] audit: type=1400 audit(1782888695.740:4709): avc: denied { read } for pid=15517 comm="syz.8.14448" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 762.323814][ T28] audit: type=1400 audit(1782888695.740:4710): avc: denied { open } for pid=15517 comm="syz.8.14448" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 762.410922][T30525] net_ratelimit: 24 callbacks suppressed [ 762.410940][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 762.530589][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 762.540055][T15523] netlink: 'syz.3.14449': attribute type 1 has an invalid length. [ 762.563197][T15523] 8021q: adding VLAN 0 to HW filter on device bond14 [ 763.141693][T15525] bond14: (slave veth27): Enslaving as an active interface with a down link [ 763.150688][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.168710][T15523] vlan5: entered allmulticast mode [ 763.176186][T15523] bridge0: entered allmulticast mode [ 763.184608][T15523] bond14: (slave vlan5): Enslaving as an active interface with a down link [ 763.200332][T15531] __nla_validate_parse: 10 callbacks suppressed [ 763.200346][T15531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14452'. [ 763.228046][T15531] bond13: entered promiscuous mode [ 763.234093][T15531] 8021q: adding VLAN 0 to HW filter on device bond13 [ 763.251911][T15538] tipc: Enabling of bearer rejected, failed to enable media [ 763.265502][T15531] 8021q: adding VLAN 0 to HW filter on device bond13 [ 763.273099][T15531] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 763.284727][T15531] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 763.312079][T15542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.319313][T15542] IPv6: NLM_F_CREATE should be set when creating new route [ 763.326539][T15542] IPv6: NLM_F_CREATE should be set when creating new route [ 763.337274][T15542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.351570][T15542] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 763.368793][T15542] bond13: (slave wireguard0): Error -95 calling set_mac_address [ 763.380452][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.447825][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14456'. [ 763.493292][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.557679][T15554] netlink: 'syz.1.14458': attribute type 20 has an invalid length. [ 763.565735][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14458'. [ 763.584304][T15554] netlink: 'syz.1.14458': attribute type 20 has an invalid length. [ 763.603758][T15554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14458'. [ 763.710015][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.820202][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 763.929870][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.012192][T15564] netlink: 'syz.1.14461': attribute type 11 has an invalid length. [ 764.040292][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.149885][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 764.682475][T15575] tipc: Started in network mode [ 764.687385][T15575] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 764.696433][T15575] tipc: Enabling of bearer rejected, failed to enable media [ 764.813509][T15581] blkio.reset_stats is deprecated [ 765.074517][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14470'. [ 765.078171][T15587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14471'. [ 765.111413][T15590] bond10: entered promiscuous mode [ 765.119515][T15590] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.161056][T15592] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.184640][T15592] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 765.197483][T15592] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 765.232977][T15590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.240215][T15590] IPv6: NLM_F_CREATE should be set when creating new route [ 765.247599][T15590] IPv6: NLM_F_CREATE should be set when creating new route [ 765.254088][T15594] loop3: detected capacity change from 0 to 164 [ 765.256389][T15590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.283095][T15590] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 765.301371][T15590] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 765.311466][T15594] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 765.328040][ T28] audit: type=1400 audit(1782888698.790:4711): avc: denied { lock } for pid=15602 comm="syz.1.14475" path="socket:[153631]" dev="sockfs" ino=153631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 765.585124][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14482'. [ 765.594872][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14482'. [ 765.653017][T15622] netlink: 'syz.0.14484': attribute type 1 has an invalid length. [ 765.665680][T15620] futex_wake_op: syz.3.14483 tries to shift op by -1; fix this program [ 765.668314][T15622] 8021q: adding VLAN 0 to HW filter on device bond11 [ 765.725437][T15622] bond11: (slave veth17): Enslaving as an active interface with a down link [ 765.759089][T15622] vlan1: entered allmulticast mode [ 765.764500][T15622] bridge0: entered allmulticast mode [ 765.772113][T15622] bond11: (slave vlan1): making interface the new active one [ 765.781198][T15622] vlan1: entered promiscuous mode [ 765.786864][T15622] bond11: (slave vlan1): Enslaving as an active interface with an up link [ 765.958464][T15635] loop8: detected capacity change from 0 to 164 [ 765.970543][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14489'. [ 765.990189][T15635] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 766.452764][T15652] loop3: detected capacity change from 0 to 512 [ 766.503906][T15652] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 766.520674][T15652] EXT4-fs (loop3): orphan cleanup on readonly fs [ 766.536613][T15652] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 766.558645][T15652] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 766.574605][T15652] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 766.582375][T15652] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.14495: inode has both inline data and extents flags [ 766.596293][T15652] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 766.596854][T15652] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.14495: couldn't read orphan inode 16 (err -117) [ 766.606196][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 766.606245][ C1] EXT4-fs (loop3): initial error at time 1782888700: ext4_orphan_get:1399: inode 16 [ 766.606375][ C1] EXT4-fs (loop3): last error at time 1782888700: ext4_orphan_get:1399: inode 16 [ 766.644753][T15652] loop3: lost filesystem error report for type 5 error -117 [ 766.647473][T15652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 766.735416][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.753702][ T28] audit: type=1400 audit(1782888700.220:4712): avc: denied { ioctl } for pid=15657 comm="syz.1.14497" path="socket:[153728]" dev="sockfs" ino=153728 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 766.847559][T15663] loop1: detected capacity change from 0 to 1024 [ 766.878478][T15663] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 766.905953][T15663] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.14498: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 766.967624][T15663] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 766.967876][T15663] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.14498: couldn't read orphan inode 11 (err -117) [ 766.977045][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 766.977064][ C1] EXT4-fs (loop1): initial error at time 1782888700: ext4_ext_check_inode:521: inode 11 [ 766.977097][ C1] EXT4-fs (loop1): last error at time 1782888700: ext4_ext_check_inode:521: inode 11 [ 767.053086][T15663] loop1: lost filesystem error report for type 5 error -117 [ 767.053574][T15663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.107475][ T28] audit: type=1400 audit(1782888700.570:4713): avc: denied { write } for pid=15662 comm="syz.1.14498" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 767.132388][T15663] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.14498: Invalid block bitmap block 0 in block_group 0 [ 767.160957][T15663] Quota error (device loop1): write_blk: dquota write failed [ 767.175011][ T28] audit: type=1400 audit(1782888700.570:4714): avc: denied { create } for pid=15662 comm="syz.1.14498" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 767.200098][T15663] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 767.223749][T15663] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.14498: Failed to acquire dquot type 0 [ 767.265603][ T3734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.349045][T15682] erspan0: entered promiscuous mode [ 767.363396][T15684] --map-set only usable from mangle table [ 767.366493][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14502'. [ 767.429911][ T28] audit: type=1326 audit(1782888700.890:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.8.14506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x0 [ 767.493938][ T28] audit: type=1326 audit(1782888700.960:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.8.14506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 767.527811][T30701] net_ratelimit: 27 callbacks suppressed [ 767.527825][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 767.554564][ T28] audit: type=1326 audit(1782888700.960:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15685 comm="syz.8.14506" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fed9de59 code=0x7ffc0000 [ 767.592498][T15693] netlink: 'syz.1.14508': attribute type 4 has an invalid length. [ 767.660765][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 767.779946][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 767.909868][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.051077][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.180001][T30536] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 768.460209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.550434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.674065][T15729] netlink: 'syz.1.14522': attribute type 1 has an invalid length. [ 768.846715][T15719] 8021q: adding VLAN 0 to HW filter on device bond9 [ 768.916010][T15719] 8021q: adding VLAN 0 to HW filter on device eth0 [ 768.943114][T15719] 8021q: adding VLAN 0 to HW filter on device eth1 [ 768.972497][T15719] 8021q: adding VLAN 0 to HW filter on device eth2 [ 769.003316][T15719] 8021q: adding VLAN 0 to HW filter on device eth3 [ 769.026098][T15719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 769.069928][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 769.100482][T15729] 8021q: adding VLAN 0 to HW filter on device bond14 [ 769.122057][T15730] bond14: (slave veth23): Enslaving as an active interface with a down link [ 769.132597][T15731] veth0_virt_wifi: entered promiscuous mode [ 769.161686][T15731] bond14: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 769.196692][T15737] netlink: 'syz.7.14524': attribute type 13 has an invalid length. [ 769.206231][T15732] bond14: (slave veth0_virt_wifi): Releasing active interface [ 769.255603][T15741] loop3: detected capacity change from 0 to 128 [ 769.305983][T15741] netlink: 'syz.3.14525': attribute type 21 has an invalid length. [ 769.317411][T15737] tipc: Resetting bearer [ 769.323272][T15748] netlink: 'syz.8.14528': attribute type 7 has an invalid length. [ 769.430815][T15741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14525'. [ 769.466618][T15751] netlink: 380 bytes leftover after parsing attributes in process `syz.7.14529'. [ 769.478123][T30524] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.487129][T30524] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.496930][T30524] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.505859][T15748] netlink: 'syz.8.14528': attribute type 7 has an invalid length. [ 769.514205][T30524] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.527541][T30524] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.536227][T30524] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.545014][T30524] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.553702][T30524] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.720361][T30556] bond11: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 769.749961][T30556] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 770.001911][T15760] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 770.018935][T15759] netlink: 'syz.0.14532': attribute type 2 has an invalid length. [ 770.034627][T15759] 0: entered promiscuous mode [ 770.098335][T15762] loop0: detected capacity change from 0 to 512 [ 770.114056][T15762] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.152317][T15762] EXT4-fs (loop0): 1 truncate cleaned up [ 770.165506][T15762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.186157][T15762] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.14533: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 770.241262][T15762] EXT4-fs (loop0): Remounting filesystem read-only [ 770.260706][T15762] EXT4-fs warning (device loop0): ext4_rename_delete:3739: inode #2: comm syz.0.14533: Deleting old file: nlink 5, error=-117 [ 770.351343][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.360936][T15773] syzkaller0: entered promiscuous mode [ 770.367649][T15773] syzkaller0: entered allmulticast mode [ 770.454175][T15777] syzkaller0: entered promiscuous mode [ 770.454198][T15777] syzkaller0: entered allmulticast mode [ 770.578011][T15793] veth1_to_bond: invalid flags given to default FDB implementation [ 770.674015][ T28] kauditd_printk_skb: 434 callbacks suppressed [ 770.674029][ T28] audit: type=1326 audit(1782888704.140:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 770.706452][ T28] audit: type=1326 audit(1782888704.140:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 770.764507][ T28] audit: type=1326 audit(1782888704.140:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 770.790703][ T28] audit: type=1326 audit(1782888704.140:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 770.818906][ T28] audit: type=1326 audit(1782888704.140:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f77b840de59 code=0x7ffc0000 [ 770.851449][ T28] audit: type=1326 audit(1782888704.200:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 770.880036][T15810] loop3: detected capacity change from 0 to 512 [ 770.898974][T15810] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.14551: inode has both inline data and extents flags [ 770.916590][ T28] audit: type=1326 audit(1782888704.200:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 770.942493][T15810] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 770.943340][ T28] audit: type=1326 audit(1782888704.200:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 770.952511][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 770.952528][ C0] EXT4-fs (loop3): initial error at time 1782888704: ext4_orphan_get:1399: inode 15 [ 770.952561][ C0] EXT4-fs (loop3): last error at time 1782888704: ext4_orphan_get:1399: inode 15 [ 770.985585][T15810] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.14551: couldn't read orphan inode 15 (err -117) [ 770.994051][ T28] audit: type=1326 audit(1782888704.200:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 771.035162][T15810] loop3: lost filesystem error report for type 5 error -117 [ 771.040755][ T28] audit: type=1326 audit(1782888704.200:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.3.14546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77b83ce68e code=0x7ffc0000 [ 771.078643][T15810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.146451][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.192864][T15817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.208675][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.232983][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.320452][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.353030][T15817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 771.366637][T15817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.388996][T15817] veth1_macvtap: left promiscuous mode [ 771.398550][T15817] veth0_macvtap: left promiscuous mode [ 771.408418][T15817] veth0_macvtap: entered promiscuous mode [ 771.424332][T15817] veth1_macvtap: entered promiscuous mode [ 771.445146][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.461401][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.476917][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.500909][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.515101][T15817] 8021q: adding VLAN 0 to HW filter on device team1 [ 772.366380][T15817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 772.384452][T15817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 772.409309][T15817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.428959][T15817] batman_adv: batadv0: Interface activated: gretap2 [ 772.448498][T15817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 772.476068][T15817] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.487501][T15817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 772.504155][T15817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 772.522252][T15817] 8021q: adding VLAN 0 to HW filter on device bond8 [ 772.574901][T15817] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.587631][T15817] 8021q: adding VLAN 0 to HW filter on device bond10 [ 772.598540][T15817] 8021q: adding VLAN 0 to HW filter on device bond11 [ 772.623968][T15817] 8021q: adding VLAN 0 to HW filter on device bond12 [ 772.640802][T15817] 8021q: adding VLAN 0 to HW filter on device bond13 [ 772.655363][T30524] bridge0: port 3(team0) entered blocking state [ 772.661670][T30524] bridge0: port 3(team0) entered listening state [ 772.669188][T15846] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.14560'. [ 772.684805][T30524] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.691913][T30524] bridge0: port 1(bridge_slave_0) entered listening state [ 772.705447][T15848] loop1: detected capacity change from 0 to 128 [ 772.728094][T30524] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.735263][T30524] bridge0: port 2(bridge_slave_1) entered listening state [ 772.805815][T30696] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.815924][T30696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.825820][T30696] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.834413][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14564'. [ 772.835289][T15854] netlink: 'syz.1.14563': attribute type 4 has an invalid length. [ 772.851861][T30696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.885955][T15850] netlink: 'syz.1.14563': attribute type 4 has an invalid length. [ 772.901120][T30696] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.913025][T30696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.925690][T30696] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.960211][T30696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.021990][T30701] net_ratelimit: 11 callbacks suppressed [ 773.022005][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.102047][T30696] bond14: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 773.116294][T30696] bond14: (slave veth23): making interface the new active one [ 773.132932][T30696] bond14: active interface up! [ 773.153607][T30703] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.272300][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.320617][T15871] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 773.332522][T15869] netlink: 'syz.8.14572': attribute type 2 has an invalid length. [ 773.347699][T15869] 0: entered promiscuous mode [ 773.395994][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.404463][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.413635][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.520048][T30696] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.629931][T30703] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.749928][T30703] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.860128][T30703] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 773.971106][T30555] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 774.559900][T30701] bond4: (slave ip6gretap1): link status up again after 0 ms [ 774.654168][T15882] 8021q: adding VLAN 0 to HW filter on device eth0 [ 774.697559][T15882] 8021q: adding VLAN 0 to HW filter on device eth1 [ 774.750284][T15882] 8021q: adding VLAN 0 to HW filter on device eth2 [ 774.832936][T15882] 8021q: adding VLAN 0 to HW filter on device eth3 [ 774.879405][T15882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 774.919212][T15882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 775.254335][T16010] syzkaller0: entered promiscuous mode [ 775.262001][T16010] syzkaller0: entered allmulticast mode [ 775.624409][T16020] loop3: detected capacity change from 0 to 512 [ 775.656657][T16020] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.14591: Unrecognised inode hash code 255 [ 775.669624][T16024] loop0: detected capacity change from 0 to 512 [ 775.680942][T16024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14593: bg 0: block 127: padding at end of block bitmap is not set [ 775.721471][T16020] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.14591: Corrupt directory, running e2fsck is recommended [ 775.736991][T16024] loop0: lost filesystem error report for type 5 error -117 [ 775.737661][T16024] EXT4-fs error (device loop0): ext4_free_inode:356: comm syz.0.14593: bit already cleared for inode 11 [ 775.745021][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 775.745038][ C1] EXT4-fs (loop0): initial error at time 1782888709: ext4_validate_block_bitmap:441 [ 775.745060][ C1] EXT4-fs (loop0): last error at time 1782888709: ext4_validate_block_bitmap:441 [ 775.781903][T16024] loop0: lost filesystem error report for type 5 error -117 [ 775.782982][T16024] EXT4-fs (loop0): 1 orphan inode deleted [ 775.803132][T16024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.818493][T16020] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 775.829452][T16020] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.14591: corrupted in-inode xattr: e_name out of bounds [ 775.844820][T16020] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 775.845632][T16020] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.14591: couldn't read orphan inode 15 (err -117) [ 775.854940][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 775.854979][ C0] EXT4-fs (loop3): initial error at time 1782888709: ext4_iget_extra_inode:5180: inode 15 [ 775.855060][ C0] EXT4-fs (loop3): last error at time 1782888709: ext4_iget_extra_inode:5180: inode 15 [ 775.890802][T16024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14593'. [ 775.903881][T16020] loop3: lost filesystem error report for type 5 error -117 [ 775.931130][ T8554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.953806][T16020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.995682][T16032] netlink: 'syz.0.14595': attribute type 10 has an invalid length. [ 776.019132][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.920635][T16047] netlink: 'syz.0.14599': attribute type 1 has an invalid length. [ 777.499424][T16044] 8021q: adding VLAN 0 to HW filter on device bond13 [ 777.543580][T16047] 8021q: adding VLAN 0 to HW filter on device bond12 [ 777.578917][T16052] bond12: (slave veth19): Enslaving as an active interface with a down link [ 777.590804][T16054] veth0_virt_wifi: entered promiscuous mode [ 777.613579][T16054] bond12: (slave veth0_virt_wifi): making interface the new active one [ 777.623908][T16054] bond12: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 777.634194][T16055] bond12: (slave veth0_virt_wifi): Releasing active interface [ 777.672577][T30524] vlan1: left promiscuous mode [ 777.700738][T30524] bond14: (slave veth27): link status definitely up, 10000 Mbps full duplex [ 777.728271][T30524] bond14: (slave veth27): making interface the new active one [ 777.774018][T30524] bond14: active interface up! [ 778.051081][T30525] net_ratelimit: 47 callbacks suppressed [ 778.051099][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.170029][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.279881][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.390067][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.499941][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.517005][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14613'. [ 778.619952][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 778.804534][T16090] loop3: detected capacity change from 0 to 512 [ 778.836627][T16090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.859623][T16090] ext4 filesystem being mounted at /1134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.873746][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 778.873759][ T28] audit: type=1400 audit(1782888712.340:5176): avc: denied { write } for pid=16086 comm="syz.3.14614" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.874090][T16090] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 778.917058][T16090] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.14614: corrupted inode contents [ 778.931179][T16090] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.14614: mark_inode_dirty error [ 778.943306][T16105] loop8: detected capacity change from 0 to 512 [ 778.953386][T16105] EXT4-fs: Ignoring removed nobh option [ 778.973413][T16090] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.14614: corrupted inode contents [ 778.993082][T16105] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.14619: invalid indirect mapped block 256 (level 2) [ 779.009901][T16090] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.14614: mark_inode_dirty error [ 779.023322][T16105] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 779.023564][T16105] EXT4-fs (loop8): Remounting filesystem read-only [ 779.032713][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 779.032736][ C1] EXT4-fs (loop8): initial error at time 1782888712: ext4_free_branches:1023: inode 11 [ 779.032761][ C1] EXT4-fs (loop8): last error at time 1782888712: ext4_free_branches:1023: inode 11 [ 779.069989][T16105] EXT4-fs (loop8): 2 truncates cleaned up [ 779.081606][T16090] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.14614: corrupted inode contents [ 779.096159][T16105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.110757][T16090] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.14614: mark_inode_dirty error [ 779.114438][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14620'. [ 779.122832][T16090] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.14614: corrupted inode contents [ 779.145582][T16090] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.14614: mark_inode_dirty error [ 779.147609][T16105] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 779.157245][T16090] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 779.165273][ T28] audit: type=1400 audit(1782888712.610:5177): avc: denied { write } for pid=16103 comm="syz.8.14619" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.234741][T16110] loop1: detected capacity change from 0 to 1024 [ 779.251959][T16110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 779.261193][T16110] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 779.272932][T16110] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 779.282543][T16110] EXT4-fs (loop1): orphan cleanup on readonly fs [ 779.289474][T16110] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.14621: Freeing blocks not in datazone - block = 0, count = 4096 [ 779.303305][T16110] loop1: lost filesystem error report for type 5 error -117 [ 779.304477][T16110] EXT4-fs (loop1): 1 orphan inode deleted [ 779.311925][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 779.311953][ C0] EXT4-fs (loop1): initial error at time 1782888712: ext4_free_blocks:6718 [ 779.312007][ C0] EXT4-fs (loop1): last error at time 1782888712: ext4_free_blocks:6718 [ 779.350704][T16110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 781.508458][ T7267] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.520042][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 781.567358][ T3734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.630123][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 781.653882][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.705955][T16131] loop3: detected capacity change from 0 to 4096 [ 781.733458][T16131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.755643][T16137] loop0: detected capacity change from 0 to 128 [ 781.763686][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 781.774779][T16137] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 781.792027][ T28] audit: type=1400 audit(1782888715.260:5178): avc: denied { write } for pid=16130 comm="syz.3.14629" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 781.817233][T16137] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 781.880011][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 781.888608][ T28] audit: type=1400 audit(1782888715.340:5179): avc: denied { module_load } for pid=16134 comm="syz.0.14631" path="/513/bus/bus" dev="loop0" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 781.895344][T16137] Invalid ELF header magic: != ELF [ 781.963396][T30524] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 781.988475][T16147] netlink: 'syz.1.14632': attribute type 1 has an invalid length. [ 781.998342][T16147] netlink: 'syz.1.14632': attribute type 4 has an invalid length. [ 782.006687][T16147] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.14632'. [ 782.111280][T16141] ================================================================== [ 782.119393][T16141] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 782.126545][T16141] [ 782.128874][T16141] write to 0xffff88813a63df74 of 4 bytes by task 16131 on cpu 1: [ 782.136592][T16141] xas_set_mark+0x12b/0x140 [ 782.141122][T16141] __folio_start_writeback+0x16a/0x350 [ 782.146600][T16141] ext4_bio_write_folio+0x5a2/0xa10 [ 782.151804][T16141] mpage_process_page_bufs+0x487/0x600 [ 782.157276][T16141] mpage_prepare_extent_to_map+0x79e/0xc00 [ 782.163095][T16141] ext4_do_writepages+0x6ec/0x2720 [ 782.168217][T16141] ext4_writepages+0x18f/0x300 [ 782.172992][T16141] do_writepages+0x1b9/0x300 [ 782.177591][T16141] file_write_and_wait_range+0x178/0x2f0 [ 782.183241][T16141] mmb_fsync_noflush+0x48/0x140 [ 782.188140][T16141] ext4_sync_file+0x1f2/0x6d0 [ 782.192833][T16141] vfs_fsync_range+0xc5/0xe0 [ 782.197431][T16141] ext4_buffered_write_iter+0x426/0x480 [ 782.202987][T16141] ext4_file_write_iter+0x38e/0xef0 [ 782.208198][T16141] iter_file_splice_write+0x6a0/0xa60 [ 782.213582][T16141] direct_splice_actor+0x156/0x280 [ 782.218703][T16141] splice_direct_to_actor+0x2f9/0x680 [ 782.224087][T16141] do_splice_direct+0x119/0x1a0 [ 782.228947][T16141] do_sendfile+0x37d/0x640 [ 782.233371][T16141] __x64_sys_sendfile64+0x105/0x150 [ 782.238574][T16141] x64_sys_call+0x2dc4/0x3020 [ 782.243261][T16141] do_syscall_64+0x136/0x3c0 [ 782.247866][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.253766][T16141] [ 782.256084][T16141] read to 0xffff88813a63df74 of 4 bytes by task 16141 on cpu 0: [ 782.263713][T16141] xas_find_marked+0x602/0x650 [ 782.268745][T16141] filemap_get_folios_tag+0xf7/0x400 [ 782.274060][T16141] mpage_prepare_extent_to_map+0x2f8/0xc00 [ 782.279882][T16141] ext4_do_writepages+0x6ec/0x2720 [ 782.285006][T16141] ext4_writepages+0x18f/0x300 [ 782.289779][T16141] do_writepages+0x1b9/0x300 [ 782.294378][T16141] file_write_and_wait_range+0x178/0x2f0 [ 782.300032][T16141] mmb_fsync_noflush+0x48/0x140 [ 782.304894][T16141] ext4_sync_file+0x1f2/0x6d0 [ 782.309573][T16141] vfs_fsync_range+0xc5/0xe0 [ 782.314166][T16141] ext4_buffered_write_iter+0x426/0x480 [ 782.319725][T16141] ext4_file_write_iter+0x38e/0xef0 [ 782.324939][T16141] iter_file_splice_write+0x6a0/0xa60 [ 782.330311][T16141] direct_splice_actor+0x156/0x280 [ 782.335430][T16141] splice_direct_to_actor+0x2f9/0x680 [ 782.340810][T16141] do_splice_direct+0x119/0x1a0 [ 782.345671][T16141] do_sendfile+0x37d/0x640 [ 782.350109][T16141] __x64_sys_sendfile64+0x105/0x150 [ 782.355312][T16141] x64_sys_call+0x2dc4/0x3020 [ 782.359996][T16141] do_syscall_64+0x136/0x3c0 [ 782.364600][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.370496][T16141] [ 782.372814][T16141] value changed: 0x0a000021 -> 0x04000021 [ 782.378521][T16141] [ 782.380836][T16141] Reported by Kernel Concurrency Sanitizer on: [ 782.386983][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.3.14629 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 782.398045][T16141] Tainted: [W]=WARN [ 782.401838][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 782.411976][T16141] ================================================================== [ 782.609101][T29126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.091096][T30524] net_ratelimit: 9 callbacks suppressed [ 783.091114][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.209880][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.319892][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.439925][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.549888][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.659878][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.769900][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.879916][T30525] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 783.989884][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 784.109977][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.130822][T30701] net_ratelimit: 35 callbacks suppressed [ 788.130838][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.249872][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.359942][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.469979][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.579923][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.699925][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.809904][T30699] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 788.919902][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 789.039902][T30701] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 789.149949][T30524] bond4: (slave ip6gretap1): failed to get link speed/duplex